last executing test programs: 4m56.318514178s ago: executing program 0 (id=115): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 4m56.244457185s ago: executing program 0 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000003080)='./file0\x00', &(0x7f00000030c0), 0x80, &(0x7f0000003100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7a) write$FUSE_INIT(r0, &(0x7f000000a4c0)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f000000a540)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f000000a580)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f000000c580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000c640)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000c680)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f000000e680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x178, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r2, r3, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}, {{0x3, 0x3, 0x9, 0x6, 0x7, 0x8000000, {0x2, 0xf00c, 0x20000, 0x7fff, 0xc, 0xf758, 0x3ff, 0x8, 0x2, 0x8000, 0x4, r2, r3, 0x2, 0xa}}, {0x1, 0x9, 0x1, 0x4ad, '('}}]}, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f000000e8c0)=""/134, 0x86) 4m55.892448291s ago: executing program 0 (id=121): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xab}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000380)=0x3f7, 0x4) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/43, 0x14}}], 0x1, 0x2, 0x0) 4m54.961326025s ago: executing program 0 (id=123): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x804880, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000b00)="$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") pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fc, &(0x7f0000001e00)=0x0) io_submit(r2, 0x2, &(0x7f0000001e40)=[&(0x7f0000002300)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000002600), 0x0, 0x2a, 0x0, 0x2, r0}]) r3 = syz_mount_image$vfat(&(0x7f0000001e80), &(0x7f0000001ec0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f0000001f00)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002380)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000023c0), 0x208e24b) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000940)={{r4, &(0x7f0000000140)='\x84],-$(\xc4.\'+\x00', 0x80200, &(0x7f0000000780)={@_ha_fsid={[0xfff, 0x80000000]}, {0x7, 0x0, 0x6, 0xc83}}, 0x9683, &(0x7f00000007c0), &(0x7f0000000800)=0x6}, {[0x200, 0xffff73c0, 0x6, 0x40]}, 0x1, 0xd6, &(0x7f0000000840)=""/214}) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r7 = syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000001d40)='./file0\x00', 0x200008, &(0x7f0000001d80)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001f00)="$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") mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) statx(r7, &(0x7f00000022c0)='./file2\x00', 0x0, 0x2, &(0x7f0000002400)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002580)=@ipv6_deladdrlabel={0x2c, 0x48, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0xfffffffd}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002600), 0x2000a0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000025c0)='./file2\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x3000) r9 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@abort}, {@init_itable}]}, 0x1, 0x4ec, &(0x7f0000000240)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x242, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc\x00', 0x16f) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000a40)='proc\x00', 0x4000, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x0) read(r11, 0x0, 0xeffd) write$binfmt_elf64(r10, &(0x7f0000000780)=ANY=[], 0x178) r12 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSPGRP(r12, 0x5410, &(0x7f00000000c0)) close(r10) ftruncate(r4, 0xc2b) unlinkat(r9, &(0x7f0000000100)='./bus\x00', 0x200) ioctl$HIDIOCGPHYS(r5, 0x80404812, &(0x7f0000002640)) 4m53.719350621s ago: executing program 0 (id=134): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f0000000400)='./file0\x00', 0xa000, &(0x7f0000000440)={[{@nodelalloc}, {@nogrpid}]}, 0x0, 0x4b2, &(0x7f00000005c0)="$eJzs3M1rHOUfAPDvbDZJ35Nff/WltdpoFYsvSZNWLShUBcGDgqCHepKYpKU2baSJ0JZgo5R6EbTgXQQvon+BJ0+ingSvepdC0VxaPa1MZma7SXe3ed+8fD4w2Xl2npnn+c4zL8/M7CSATasn/ZNE7IiI3yOiKyJKtRm2ZkOa79b05NA/05NDSVQqb/6VpLPFzenJoSJrkn9uzxLldEGlK0m8WKfc8YuXzgyOjo6cz9N9E2ff7xu/eOnp02cHT42cGjk3cOzY0SP9zz078MyyxJnW6ea+D8f273317WuvD5249u7P3yUR24rptXEs0fNd1dHJ6jqZ67FlKmyt2FkznpRbWBEWpDMi0uZqn9n/u6Ltyq7qtK545eOWVg5YUZVKpTLQePJUBdjAkljMXG35sQNYv4oTfXr9Wwyr1PVYE268lF0ApXHfyodsSjm7D9KZXRvtXKHyeyLixNS/X6ZDLPg+RPsK1QoA2Mh+SPs/T9Xp/5Uj7s2y/H08Inblz4a6I+J/EbE7Iv4fEXsi4p7I8t4XEffXL6bnnQbl98xJ39n/KV1faozNpP2/F/JnW7P7f9WnYN1teWrnTPztycnToyOH83VyKNo703R/3aUnEVPp52+fNSq/tv+XDmn5RV8wr8f1cufseYYHJwaXHHjuxkcR+8r14k+ifDuK2BsR+xZZxuknvtk/+5u26tjd429iGZ4zVb6KeDxr/6mYE38haf58sm9LjI4c7iu2iojpOWX88uvVNxqVn8Vfiubxb116oA2k7b+t3vZ/vBp/d1L7vHb8jkV03K2Mq3980vCaZrHbf0fy1qzCLwxOTJzvj+hIXrvz+5ob3EX6wvC3M/nT+A8drL//787nSeN/ICLSjfjBiHgoIg7kdX84Ih6JiINN4v/p5Uffaxj/gflv/1PZx7I+XU3jH657/GvU/gsY2ZIv4cyP3zeMv2j/osHqtv/RIjFTqfkc/+Zb08WsMwAAAFhvShGxI5JSb3W8VOrtzX4vvye2lUbHxieePDn2wbnh7B2B7mgvFXe6umruh/bn94aL9ECevpynj+T3jb9o2zqT7h0aGx1udfCwyW1vsP+n/mxrde2AFVee+5papatVVQFWmfc1YfNa/P7vyAHr3V324tJq1QNYfc7isHnV2/8v1yaSyH4lD2w4zv+weVX3/8/nkbnmda+5L28C60+z87+fAsDGpv8Pm9Ki3utfSyPxdUTzPMlaqeqCRj5dyuzllapY5+1votTC9dPRkkYZaIto4SZRnu9/tYiLlctLLrTVRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDl8V8AAAD//3Y422k=") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ac0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x6a, &(0x7f0000000b00)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000b40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c40), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000c80), 0x80002c1, 0x2, 0x0) r4 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, 0x0, 0x4008084) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) getsockopt$SO_NETNS_COOKIE(r3, 0x1, 0x47, &(0x7f0000000d00), &(0x7f0000000d40)=0x8) fsopen(&(0x7f0000000d80)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x3) write(r0, &(0x7f0000000280)="1546b2000000000000008043f3526b03008ada17fbaefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d633d7cf3252ad73fed4d73b3757eb79af71d920773478453079d4d2b18fc83a4e6c560fe312dbca7aeccee65c83e1c2e856f4a621d65bc2b9da5f362880d61d4f82a365c8dd6f9f220e35efb3cf0264413b85f166abc934dff7d709d713c385734917678bed99117ca3a8b5a3eb19d6669c22c16ab8bf28d29bc043d6026af8dabeafb7b938cd8f1b5fcef2e4f6d6843c21b0aff3c0584a7e81c675d8e7cc3de99303e7cfb68e695903f9a81da63199bcaa6de32f1b2be5ef69b3b6d", 0xef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101041, 0x15) 4m52.880409476s ago: executing program 0 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00'], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x156e) syz_mount_image$exfat(&(0x7f0000002540), &(0x7f0000002580)='./file0\x00', 0x20010080, &(0x7f00000025c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r5, @ANYRESOCT=r3, @ANYBLOB="2a3a6dd2970cd8504afe4f20de34ad38f37d706dd723d0005264d35688810262efc60c0176b7ec391000265a353915c7adbee949d0a9e28152312cdc6185d6a917a33eb7fdc14880226743d00a769a113942d2699a40439c665fa78eff6f5b16f37a3b18b6d3725547ddf61a3ec9cec15208009a156abd358050ccbd8ab24b8012c189cb2c21b62490e8e251d37f4abdce7221ad5db08216e266d1c55f5783fb930f8a8c98bf16781ca9766b74c2ed693f9a91b798b0150ac2668f5d879698eb5c29a46d743ca52147b6f840fcbe53d8013f2bd8b1a7bf377f2c3f7a8b926145c58e741dee126088ddd074", @ANYRESDEC=r5, @ANYRESHEX=r4], 0x1, 0x14f2, &(0x7f0000002780)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000003c80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000005cc0)={0x0, 0x0, 0x0}, &(0x7f0000005d00)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009e80)="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", 0x2000, &(0x7f000000be80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000bf40)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4000, 0x7f, 0x8000, 0x0, 0x0, r10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000006100)=ANY=[@ANYBLOB="0090e673373158b030644ee3e5471dc03858a65d8ec20e47541e9c708e68677028dc919251553af0c078293f6677f839cef7402b94f978519834ca3525bc69c02cf4a873067112c740835d07dfa5e53aa4a1", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="040001000000000008000400", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=r9, @ANYRES32=r2, @ANYRES32, @ANYRESOCT=r7, @ANYRES32, @ANYBLOB="000000000b2b63d237c74af8f4aab730f1a1ae04b2c3edeab40d625445919ffc3d42af797cc1ebb8cc021715946cdf283ff251d8bcd490757c140fb6253ddfb6fb7edb627721f356f29e2984395b39c60143f11a82b7965c41605bba92bd3a271b7cf0128f6aa655b2f9cd9a3facc5249d07d0f3f705c32a03dd7b541f5ec6391465732378020b1c178ece1c46bd222d40f415e379d2cd1f914c30ea4ef6eb7a90a4dd3e83eaad011cef131e375f7bec88e8bf57a68679868f844c98a6b89d0d6f8514af00"/209, @ANYRES32, @ANYBLOB="10000000000000002000040000000000"], 0x6c, 0x5) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m52.818102932s ago: executing program 32 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00'], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x156e) syz_mount_image$exfat(&(0x7f0000002540), &(0x7f0000002580)='./file0\x00', 0x20010080, &(0x7f00000025c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r5, @ANYRESOCT=r3, @ANYBLOB="2a3a6dd2970cd8504afe4f20de34ad38f37d706dd723d0005264d35688810262efc60c0176b7ec391000265a353915c7adbee949d0a9e28152312cdc6185d6a917a33eb7fdc14880226743d00a769a113942d2699a40439c665fa78eff6f5b16f37a3b18b6d3725547ddf61a3ec9cec15208009a156abd358050ccbd8ab24b8012c189cb2c21b62490e8e251d37f4abdce7221ad5db08216e266d1c55f5783fb930f8a8c98bf16781ca9766b74c2ed693f9a91b798b0150ac2668f5d879698eb5c29a46d743ca52147b6f840fcbe53d8013f2bd8b1a7bf377f2c3f7a8b926145c58e741dee126088ddd074", @ANYRESDEC=r5, @ANYRESHEX=r4], 0x1, 0x14f2, &(0x7f0000002780)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000003c80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000005cc0)={0x0, 0x0, 0x0}, &(0x7f0000005d00)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009e80)="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", 0x2000, &(0x7f000000be80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000bf40)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4000, 0x7f, 0x8000, 0x0, 0x0, r10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000006100)=ANY=[@ANYBLOB="0090e673373158b030644ee3e5471dc03858a65d8ec20e47541e9c708e68677028dc919251553af0c078293f6677f839cef7402b94f978519834ca3525bc69c02cf4a873067112c740835d07dfa5e53aa4a1", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r6, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="040001000000000008000400", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=r9, @ANYRES32=r2, @ANYRES32, @ANYRESOCT=r7, @ANYRES32, @ANYBLOB="000000000b2b63d237c74af8f4aab730f1a1ae04b2c3edeab40d625445919ffc3d42af797cc1ebb8cc021715946cdf283ff251d8bcd490757c140fb6253ddfb6fb7edb627721f356f29e2984395b39c60143f11a82b7965c41605bba92bd3a271b7cf0128f6aa655b2f9cd9a3facc5249d07d0f3f705c32a03dd7b541f5ec6391465732378020b1c178ece1c46bd222d40f415e379d2cd1f914c30ea4ef6eb7a90a4dd3e83eaad011cef131e375f7bec88e8bf57a68679868f844c98a6b89d0d6f8514af00"/209, @ANYRES32, @ANYBLOB="10000000000000002000040000000000"], 0x6c, 0x5) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m37.632853792s ago: executing program 3 (id=723): syz_create_resource$futex(&(0x7f0000000000)=0x2) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'xfrm0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x7fffffff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48805}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000d00)=0x2a, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x8040000, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000001080)={@private0, 0x8000000, 0x1, 0xff, 0xa, 0x3, 0x2}, 0x20) prlimit64(0x0, 0xe, &(0x7f00000012c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001340)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000001400)='net/softnet_stat\x00') connect$unix(r6, &(0x7f0000001440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000014c0), 0x318, 0x0) recvmmsg(r6, &(0x7f0000001500), 0x10106, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0x9db, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f00000016c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000001700)='bridge_slave_1\x00', 0x10) sendmmsg(r9, &(0x7f0000001740), 0x800001d, 0x810) 2m36.427069224s ago: executing program 3 (id=729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f00000002c0)=0x6) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x7}, "b3ae8e605ca2024f", "52de9a56a17d2ff03829ae42eeee2e94", "05e7bc75", "84a5ef0eb595100c"}, 0x28) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x21081e, &(0x7f00000003c0)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0xfe, 0x506, &(0x7f0000000400)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101042, 0x15) r4 = socket$vsock_stream(0x28, 0x1, 0x0) vmsplice(r4, &(0x7f0000000b40)=[{&(0x7f0000000a80)="d1818040cab9f44757dc0568f99c6c0b309a5cfec3cde56c06b580a33af0138d7dd36bdf3fa44cc1ee51a2af14df1206e546ec80c412c4290464c9ba1c41c4", 0x3f}, {&(0x7f0000000ac0)="5a39dd18861fb3647979c6a0e3a21c8593046a313cd04683994677730a7bf4e0825763b4dc97416bf885b1bdeb6df741de31098ef5eb4adcde7e83343430401fd27f1d7ba67bf03156cccdb7b8d0e0817f3af19edc12c02368e7fc96", 0x5c}], 0x2, 0x4) pwrite64(r3, &(0x7f0000000980)='2', 0xfdef, 0xc00) r5 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x183042, 0x25) fallocate(r5, 0x20, 0x4000, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000a00)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000a40)=r7) socket$nl_route(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x8, 0x6, 0x16, 0xc}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x1, 0x24, 0x64, 0x0, 0x9, 0x1, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x4, 0xa9}]}}, "9304ba061707000000ffffff"}}, 0x2e) 2m35.697340558s ago: executing program 3 (id=731): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6020400) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x200000000004) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1f80354500002c0000000200119008000000000000000000004e200018907804000000080000000000008000000000"], 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab23bdf000fdffffff320000000800170159"], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x2000c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x2d48afcf7ca88e26) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$key(0xf, 0x3, 0x2) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m34.231581656s ago: executing program 3 (id=735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x401, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1, {0x0, 0x60537b675d52e361}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffffffffff15, 0x2, {0x3, "00010202020202020202020202020202"}}}]}, 0x48}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000e1ff0400000084080000ffffffff9500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x1000800, &(0x7f0000000000)=ANY=[], 0x2, 0x5548, &(0x7f0000005f40)="$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") ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000400)=0x80) r2 = socket(0xa, 0x3, 0xff) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000640), 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000480), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x67e880, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', 0x1c1002, 0x8a) socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, &(0x7f00000005c0)="c7", 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0xb, 0x200005, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x45, [0x0, 0x2]}}) sendfile(r5, r4, 0x0, 0x2fffe) sendfile(r5, r4, 0x0, 0x7ffff000) clock_nanosleep(0x2, 0x0, 0x0, 0x0) 2m32.314805561s ago: executing program 3 (id=743): r0 = openat$kvm(0x0, &(0x7f0000004680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000000c0)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f00", 0x17) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="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", 0x112, 0xfffffffffffffffd) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000046c0)={0x0, &(0x7f0000004700)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000001a0f00000000000000bf0900000000000026090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200000000008500000000000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2m31.712412272s ago: executing program 3 (id=746): sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x288c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x14}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x3, 0x3}, {0x1, 0x5}, {0x17, 0x2}, {0xc}], "fdf818e597c27d1a"}}]}, 0x34}}, 0x0) mmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000, 0x8, 0x4105133, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) pread64(r0, 0x0, 0x0, 0x3) mmap(&(0x7f0000c40000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x618e7000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000002c0)={0x3, 'ip6tnl0\x00', {0x7}, 0x6}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/features/extended_error\x00', 0x0, 0x0) 2m31.690982844s ago: executing program 33 (id=746): sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x400, 0x288c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x14}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x3, 0x3}, {0x1, 0x5}, {0x17, 0x2}, {0xc}], "fdf818e597c27d1a"}}]}, 0x34}}, 0x0) mmap(&(0x7f0000b1a000/0x2000)=nil, 0x2000, 0x8, 0x4105133, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) pread64(r0, 0x0, 0x0, 0x3) mmap(&(0x7f0000c40000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x618e7000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000002c0)={0x3, 'ip6tnl0\x00', {0x7}, 0x6}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/features/extended_error\x00', 0x0, 0x0) 16.695214154s ago: executing program 6 (id=1230): write(0xffffffffffffffff, &(0x7f0000000080), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000940)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000dc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e80), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001000)) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001040)={'wg0\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000001300)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f00000013c0)={0xffea, r4, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x40014) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000480)={'wg2\x00', 0x0}) 15.271120139s ago: executing program 1 (id=1232): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000740)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000840)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000880)={0x80}, 0x10) connect$bt_rfcomm(r3, &(0x7f00000008c0)={0x1f, @any, 0x6}, 0xa) close(r3) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f0000000940)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@remote, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x6e6bbb, 0x2, 0x0, 0x3, 0x1}, {{@in=@empty, 0xffffffff, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) 14.239015084s ago: executing program 6 (id=1234): sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000840)=0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$unlink(0x9, r2, r3) pipe(&(0x7f0000000040)={0xffffffffffffffff}) timer_settime(r1, 0x0, &(0x7f0000000c80)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = timerfd_create(0x1, 0x80000) timerfd_gettime(r5, &(0x7f00000003c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mkdir(0x0, 0x91) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/rtc/rtc0/wakealarm\x00', 0x1, 0x0) write$cgroup_int(r6, &(0x7f0000000340)=0x820400080004, 0x12) read$FUSE(r4, &(0x7f0000000cc0)={0x2020}, 0x2020) 14.0763695s ago: executing program 1 (id=1235): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$futex(&(0x7f0000000000)=0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r1, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'xfrm0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48805}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000d00)=0x2a, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x8040000, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000001080)={@private0, 0x8000000, 0x1, 0xff, 0xa, 0x3, 0x2}, 0x20) prlimit64(0x0, 0xe, &(0x7f00000012c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001300)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001340)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000001380)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000001400)='net/softnet_stat\x00') connect$unix(r7, &(0x7f0000001440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000014c0), 0x318, 0x0) recvmmsg(r7, &(0x7f0000001500), 0x10106, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0x9db, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r10, &(0x7f00000016c0)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000001700)='bridge_slave_1\x00', 0x10) sendmmsg(r10, &(0x7f0000001740), 0x800001d, 0x810) 11.904414981s ago: executing program 6 (id=1237): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020400) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4006}, 0x4) write$tun(0xffffffffffffffff, 0x0, 0x35) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) 10.14636824s ago: executing program 6 (id=1241): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000800)=0x3, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000840)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000880)=0x17, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x48040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/222}, 0x78) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r2, 0x1f2c51b2f586bbcf, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x20040010) socket$inet_tcp(0x2, 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a080, 0x0) 10.011472093s ago: executing program 6 (id=1244): socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80080, &(0x7f00000000c0)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f0000000640)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000b80)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000bc0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000cc0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000d40)=0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x110, r2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000115, 0x0, 0x0, 0x0) 9.163665969s ago: executing program 6 (id=1247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r4, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000380), 0x4000087, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2404c094) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r6}, 0x8) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000980)=[{0x0}], 0x1) write$cgroup_type(r7, 0x0, 0xff8a) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000000)="b9800000c00f3235000800000f30c4c2a93f0366baf80cb8d4d5e98eef66bafc0c66b8005866ef66baa10066b81fa866ef410f3765450f3266400f38f626b9e10a0000b80000c0feba000000000f30f3410fc7b15600000066b832000f00d0", 0x5f}], 0x1, 0x78, 0x0, 0x0) 8.818219864s ago: executing program 1 (id=1251): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000740), &(0x7f0000000780)=r0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) set_robust_list(0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xfff1}, {0x2, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3604c8a4}, 0x810) 8.655396171s ago: executing program 1 (id=1252): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x28, 0x0, 0x1, 0x2403}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000100)={0x1, 0x1, 0x80000000000033, 0xc1b2}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r5, &(0x7f0000000000)="c0234d631001d8fa", 0x8, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x800, &(0x7f0000000800)=ANY=[@ANYBLOB="02"], 0x1, 0x153f, &(0x7f0000000840)="$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") getsockopt(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) 8.634788013s ago: executing program 2 (id=1253): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfd, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0xdd47, 0x6f81, 0x8, 0x80, 0xfffffff8, 0x6}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4c884) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x14, &(0x7f0000000480)=[{&(0x7f00000004c0)=' ', 0xffffff1f}], 0x1}, 0x0) 6.00151864s ago: executing program 4 (id=1257): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x19a, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x800, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x6}], {0x4, 0x3}, [{}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x1}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x6}}, 0x54, 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000500), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000540)=ANY=[@ANYBLOB], 0xf) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f00000005c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x3) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000600)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) mlockall(0x7) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x2, 0x3, 0xfff6, 0x9, 0x3, 0x3}) 4.950338338s ago: executing program 1 (id=1258): r0 = socket$tipc(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, &(0x7f0000000400)) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000440)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r4, &(0x7f00000004c0), 0x40000000000017d, 0x888) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0) sched_getattr(r1, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000500)=0x0) timer_gettime(r5, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xcc811}, 0x40040) dup3(r0, r7, 0x80000) 4.856433297s ago: executing program 2 (id=1259): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000740)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000840)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000880)={0x80}, 0x10) connect$bt_rfcomm(r3, &(0x7f00000008c0)={0x1f, @any, 0x6}, 0xa) 4.4365536s ago: executing program 5 (id=1260): mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='sysfs\x00', 0x1214040, 0x0) chroot(0x0) pivot_root(&(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000d80)='./file0/../file0/../file0\x00') 4.391479414s ago: executing program 4 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000380)=0x2) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000400)={0x40000000}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./trace\x00', 0x19a) setpriority(0x1, 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4000000, 0x2000000}) r6 = dup(r4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e25, @empty}, 0x18) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r7, &(0x7f0000000680)='hist:keys=next_pid\x00', 0x12) 4.356466658s ago: executing program 5 (id=1262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0xa, [@private=0xa010101, @private=0xa010102, @broadcast]}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', 0x0, &(0x7f0000000340)={{}, {}, [], {0x2}, [], {0x2}, {0x2}}, 0x24, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x2) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x50000) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'veth0_to_team\x00', 0x800}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @empty}}}}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') pread64(r5, &(0x7f0000000980)=""/102356, 0x18fd4, 0xc2a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x24080) 3.487264086s ago: executing program 2 (id=1263): openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f00000002c0)=0x6) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x21081e, &(0x7f00000003c0)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0xfe, 0x506, &(0x7f0000000400)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101042, 0x15) r2 = socket$vsock_stream(0x28, 0x1, 0x0) vmsplice(r2, &(0x7f0000000b40)=[{&(0x7f0000000a80)="d1818040cab9f44757dc0568f99c6c0b309a5cfec3cde56c06b580a33af0138d7dd36bdf3fa44cc1ee51a2af14df1206e546ec80c412c4290464c9ba1c41c4", 0x3f}, {&(0x7f0000000ac0)="5a39dd18861fb3647979c6a0e3a21c8593046a313cd04683994677730a7bf4e0825763b4dc97416bf885b1bdeb6df741de31098ef5eb4adcde7e83343430401fd27f1d7ba67bf03156cccdb7b8d0e0817f3af19edc12c02368e7fc96", 0x5c}], 0x2, 0x4) pwrite64(r1, &(0x7f0000000980)='2', 0xfdef, 0xc00) r3 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x183042, 0x25) fallocate(r3, 0x20, 0x4000, 0x8000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000a00)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000a40)=r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001900030c00000000000000001d01000008000a00", @ANYRES32=0x0, @ANYRES32=r5], 0x68}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @val={0x3, 0x3, 0x8, 0x6, 0x16, 0xc}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x1, 0x24, 0x64, 0x0, 0x9, 0x1, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x4, 0xa9}]}}, "9304ba061707000000ffffff"}}, 0x2e) 3.423566802s ago: executing program 5 (id=1264): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0xa00, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 3.357026299s ago: executing program 5 (id=1265): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000380)=0x2) epoll_create1(0x80000) openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./trace\x00', 0x19a) setpriority(0x1, 0x0, 0x0) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4000000, 0x2000000}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e25, @empty}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='hist:keys=next_pid\x00', 0x12) 3.355955279s ago: executing program 4 (id=1266): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) r3 = socket$inet6(0xa, 0x5, 0xb0) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="1c3bf28cfbeed9e7a271f865f497ffbd70c267e05a480a759f1299e40bff1283f3a0102ab31669f359de5ad8686921797afa40dcbbc6d7f7a0ba715877d2ae929ae55e640b9a23721fdeb5e87466732bf1d4a3ebfa63406d8d9ca172b6cb5aeaf8efb3d715287e5392fe11cb060c66236972f48d3095eff2d1db925c470f6018d8ae99baf548e052dc7004f33e4b71dce34424d57d8d38f5bffc7d5f1e595d5cd932c2eacddd2f352e58601883442246c8a6cbfbeca8465aa8e136e10f16a1a2546930", 0xc3}, {&(0x7f0000000140)="a6332b9384134d61cdae4cac87e75382c7ba03ce68c6bc4b930573d32a8464136513fc2109353863aa9a58f91e432199f591c9f5b75ec38cba137dd2fc52987ffc1cfc6ca88a1b2f51dfd4d7ed9191132c528516ee4fe8c0c6824a9dea120474ba7e288fbb5a1760d84670636ab035", 0x6f}], 0x2, &(0x7f0000000200)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x21, 0xa, 0x2, 0x0, 0x0, [@remote, @loopback, @local, @remote, @private1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x29, 0x1, '\x00', [@ra={0x5, 0x2, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x7}]}}}], 0x90}}, {{&(0x7f0000000540)={0xa, 0x4e24, 0x5, @private1, 0x400}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000580)="44f517751377cd801f9536bc77dbe39b44594eaf968f05f34fe6b6de821ebbbb7fb3a8abf15ad7305d2f3da7d922d55152c256acb9d4564db4d87d4598dba74a0254511d9c7f8c642b4d39395658693a9dde12a04d9c0223d306b2e7d1aa0756ca2af6c6096b467e6ec1ef2c9bd6241bb3047211fea921b064b8dc6a9ee03be68ab50a6384b4223595d937926caacf7b741849ed1335a9758de006a1082688458b0d3e1d8a4908378e34ec00450821ddd181c1d5ef5ac01f9441b9fa11c5ce8877240007030c3467f708382e43a28a3f75e079218ec989357c86ee6b7bff668a2d64c07457333910bc191112bfc6809f038d46d8ecc05ab1", 0xf8}, {&(0x7f0000000680)="29c039dd8eff", 0x6}, {&(0x7f00000006c0)="9ea4bcd1334fb94c6598439850bcc7c608ae5d2be42b30592f97b99983b9c0c2db8763a8df4a4af64c0fba5d2d367f0395e9498a077257bbfb6b20e61c59cfbdd022464adae46e6c376ab639a74a64b235752d251f20961a8b33c86e2ddb29837c31e027f95094eadd91a785b5e8845422e29e08683c9e1e61ca2e843436489558c750edac516122c446c171c899ccac06d81d5269fb", 0x96}, {&(0x7f0000000780)="973d548fc17a169b60e1315de062cd5c0cf5f00c4759d122fd1d32bbf2485213422a2a1209e46b704853de62b6daaf8cdabb86e73ab1bb1b80df30b99088344a400f33c9900fcb0162a076c70e9a1bbd001655da162487f6a1d12423c18dcb91e7563bfa1bed1e1e5d24c4624ce49941c3569f8973f7b7368c69604b30c8d06751981dd42c8774134b9fe82c76bf8d4ec15e29c2f852833984642171e7947163522e3ca3f39f4dbd37d6277ac64038b92e91629c907ef87f6179da3d4f5266f55e63fb2ebfbf", 0xc6}, {&(0x7f0000000880)="f54c", 0x2}, {&(0x7f00000008c0)="0df56fce0cc77c8bbf1281252f0eaf2f1608994c27395e9475aefa13fb38a5e47840371c80478ae30169ae1404c52996fafe6b91c4c519b6682b923d48a0a234a03630d1da32a161c8b39e84b4380fc834786362bf1b020d623d687b8bf4ab1fe429385ddd2f851be31592f9b7973e20788fc7c0453bf19e356f3db67509f123f4de1abb834b137d2300aad82d57cdb0a3424646a1631933aed0ffd860590fc2d3d4b2c427bcbbf1dd78df7cb8051c47f55f0f4bcdc38a7afbc46af36169835f0c72f2910dfd4e4e163d9c811c6e1ae23b8db54c8b8d836ca9b7739421", 0xdd}, {&(0x7f00000009c0)="5337e4f231caeacc8c0e17e9eeb780f0007296bc900cba261d9c3b33ac29f69bb7ff38f6b4b8f685c825872eda78ebae0ca4af0852c5873e6646762a047958a67c26c3f67a5db8612a5ff8841a6e9060dfe3611d38d91647b323aff8efe83396cd64b4a5380e29ccecde58b85c6936bcc0d3ff9effb55b25def994c57d05ccfaa6c61fe918a89f573045db71e3c893ca81ae57bd9213771a74aa667fa509f861e4bf513888de079da40e8d8f207052cfe98b1b6f4b44c6291983e1dc350eba9a0caf373752e9bceb55aced319352a162d616feddd731a0276126ccbdde6edfcbd3d01a9532077545957ca39badf2f1b8aa4c82255a9d0c194f", 0xf9}], 0x7, &(0x7f0000000b40)=[@flowinfo={{0x14, 0x29, 0xb, 0x400}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}], 0x40}}], 0x2, 0x40000) write$FUSE_BMAP(r2, &(0x7f0000000380)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000003c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x14000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chroot(&(0x7f0000000c00)='./file0\x00') chdir(&(0x7f00000004c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x62c40, 0x0) 3.268310978s ago: executing program 4 (id=1267): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000800)=0x3, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000840)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000880)=0x17, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x48040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0xc3, &(0x7f00000003c0)=""/222}, 0x78) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r2, 0x1f2c51b2f586bbcf, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x20040010) socket$inet_tcp(0x2, 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x1a080, 0x0) 3.137295171s ago: executing program 2 (id=1268): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2, 0x29a, &(0x7f0000000440)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x4000087, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0), 0x1, 0x0, &(0x7f0000000b00)}) clock_getres(0xd6c79f3ee28bc1b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000061100c0000000000630a70ff0000000095000b0000000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000800), 0xffffffffffffff4d, 0x10, &(0x7f0000000840), 0xfffffe51}, 0x48) 1.87219395s ago: executing program 4 (id=1269): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={r0, 0x2000000, 0x24, 0x0, &(0x7f0000000080)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00ffffffffffffa88800f5df86dd", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 828.382606ms ago: executing program 4 (id=1270): r0 = gettid() timer_create(0x1, &(0x7f00000003c0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000400)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000480), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000004c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigprocmask(0x0, &(0x7f00000005c0)={[0xfffffffffffe]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000640)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000006c0)=0x7) r3 = gettid() rt_sigtimedwait(&(0x7f0000000700)={[0xe]}, 0x0, 0x0, 0x8) tkill(r3, 0x4) r4 = gettid() rt_sigtimedwait(&(0x7f0000000600)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r4, 0x15) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x0, 0x298, &(0x7f0000000100)="$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") r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001000100000000000214000063840c00ffffffff30da4be2b9a6a9dcc6c6c432471e3b327090c2c858d4f2ef1c184af21a324a9b925a1c6dbed4e919f546ea520e66f0b47551385beac0cb98d88c3cf2e725cecb837e5a5b03721a6c921e859cbb88f6d0e454afd453f402166b3d5e0fa247749c38ee5035d1dde4d358415837389a3a4d469bd5986978a3bbf963b495e03de210b4d1c210dba408d239ab62b58d23f2967d421b95b3db9ecb8bf6dd88916ae9e02a"], &(0x7f0000000800)='syzkaller\x00', 0x401, 0xe8, &(0x7f0000000840)=""/232, 0x41100, 0x4a, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x288c3, 0xffffffffffffffff, 0x6, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000009c0)=[{0x5, 0x4, 0xe, 0xa}, {0x2, 0x2, 0xc, 0x3}, {0x2, 0x5, 0xb, 0x5}, {0x2, 0x3, 0x9, 0xb}, {0x5, 0x2, 0xb, 0x6}, {0x1, 0x2, 0x7, 0x1}], 0x10, 0x9a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r5, 0x0, 0xdd, 0x59, &(0x7f0000000b00)="ecad79d2a6f7097575d9ce3c4ff69e78635f871bcb30429b625b9b588ae6b2e4c27841c0d802bf6eba75e07a92a81307fbadb46ca3f6375592200a78042dfebaf2e0b3c2b256abd98c7b91247b626e65047d72e5786c1b2f047fbee95ddf2e2c17ab16c5ffe0a6b6fea975d7e5d2a65420d3d581908f718ea266bb7e4ddd458112dd8122ac1a5fffb9265010d113260d3bc8346980cf499253c38a713b2b7ca820e9446b0399fb6712bf975ffd4e1ba7800dd45a1dd3525d344d8b7ba15ac7ccaa22ad019b8c091c057c2104bdde27a5aa207d39015c7f93b562f205f9", &(0x7f0000000c00)=""/89, 0x7f, 0x0, 0xfe, 0xf4, &(0x7f0000000c80)="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", &(0x7f0000000d80)="80c2e4aa35dd814d4975c7b52aa3808f761bde25f0ae8620f44a13540e39d027aa36c10085b89ee01d1a9fc0c14aa32e8a3f148dc66f448f5678735b66b558ed2197e04279a42eb9e89fa70cf714beeae2d894ad5eb3db279e24e81a768281f418876882e978fa288397002aa26d542637e41fa7c9a8fb9b26c5b64e54281fb1f2c94b0bdeaaee82f555620249bcee647958cbd55dbdd04481d0ec212ca19919b531b32cfa5744208c369c7bd6c9e0c54c76fa3f019f78befe3ce16df8e8513688774103700e57f87f0ffc55b895fbedc0cd8d7cb342ca1be405cc53c46b1af7dc1a7bcf80dbd73406fa5847a3d6ecdd3d06e849", 0x2, 0x0, 0xf}, 0x50) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x220022, 0x0, 0xfa, 0x0, &(0x7f00000005c0)) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = eventfd(0x6f) r8 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r7, r8, 0x2) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000740)={{r8}, 0x1, 0x4, 0x6}) bind$inet(r8, &(0x7f0000000780)={0x2, 0x4e24, @loopback}, 0x10) 406.264539ms ago: executing program 1 (id=1271): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401", @ANYBLOB="b2278652a7ff71e74c13aef6a1afbf1a0e1d15b3fa7b5b20ca016e419335cb550e5a21688a8ea6826e739abc1bb28be81960fd1b5e80aa246253c61dc02604976a8e61d17a047df5d5a77b4a605c6ad34300a71fb016f992e26be18a49f9dadf4db8bb7e6b6b7a60c4c79d53b0f1850941947c10f0aa6a36e03f0246786121681f6a95d35e7bc2a3ef9277bf8854b805c22c71a5c31ec15abfb6c7088af0ffb7a60cf0ffa80a53f76fa54d0f8a91bbe9", @ANYRES16=0x0], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000700)={0x40, 0x3, 0x102, {0x102, 0x4, "299fefaf597d1ae34c1d14b9ebe6e1e2fbd18a873ea293977e95e1af3432d1e6a06552dc81ddfd99d72b1ad871928c5abcb75300cac46198a4b29a46318394970b280b944c8277fb0402c671bdb41690224acd228b60002b2298c5dc5fe3461f76e137eba1af6a66bdf60f4862042f68e47ea49698c55ba3c09b7cfa288b87bc1b20d1b165c23c9cdad86bd6f25b2e1373f84d1652329cd839f06181ddc696acc72b6bfd66692e0c164773c5a6a62a23d0e98c691bb84e8f62574cce0040d54e1431ffa2313421ad01da773cf931ee766034d3025d463ddb0944b0aff7a61926ac0800ad2372cbd4fa02b1a52d341a721b559a0d0ce129a0f3011d5998f20000"}}, &(0x7f0000000840)={0x0, 0x3, 0x3, @lang_id={0x4, 0x3, 0x801}}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x55, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300120100c00109040000010202010005240010010424f801052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9e}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000400000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], &(0x7f00000002c0)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyACM0\x00', 0x2, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000640), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000680)={0x0, 0x0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat(0xffffffffffffffff, 0x0, 0x440, 0x107) r9 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000a80)=""/249, 0x6a, 0xf9, 0x6}, 0x20) syz_usb_control_io$hid(r9, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0022190000005716bd45051500160000b091"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000c00), 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c40)={0x1, &(0x7f0000000c80)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 255.589844ms ago: executing program 2 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='sysfs\x00', 0x1214040, 0x0) chroot(0x0) pivot_root(&(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000d80)='./file0/../file0/../file0\x00') 206.974549ms ago: executing program 2 (id=1273): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000006c0)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000740)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000840)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000880)={0x80}, 0x10) connect$bt_rfcomm(r3, &(0x7f00000008c0)={0x1f, @any, 0x6}, 0xa) 20.286398ms ago: executing program 5 (id=1274): socket(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x66, &(0x7f0000001040)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x0, {{0x0, 0x1, 0x7}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @loopback}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000680)={[{@shortname_win95}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8no}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@shortname_winnt}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@utf8no}, {@numtail}]}, 0xfd, 0x2a8, &(0x7f0000000780)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000005c0)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000000600)={&(0x7f0000000640), 0x10, 0x0}, 0x0) 0s ago: executing program 5 (id=1275): setns(0xc9, 0x40000000) r0 = socket(0x1f, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x105fc, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000111c0)='./file1\x00', 0x42042, 0x38) r2 = openat(0xffffffffffffff9c, &(0x7f0000011200)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000011240)='2', 0xfdef, 0xfecc) fallocate(r1, 0x10, 0x10c00, 0x8000) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, 0x0, 0x0, 0x100008) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300120100c00109040000010202010005240010010424f801052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyACM0\x00', 0x2, 0x0) syz_usb_disconnect(r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') setns(r7, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x10, &(0x7f0000000b00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x1, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): oot:sysadm_r:sysadm_t pid=1043 comm="syz.3.193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2055069b19 code=0x7ffc0000 [ 68.007255][ T24] audit: type=1326 audit(1793725333.222:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.193" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2055069b19 code=0x7ffc0000 [ 68.011924][ T1078] EXT4-fs (loop4): failed to initialize system zone (-117) [ 68.039916][ T1078] EXT4-fs (loop4): mount failed [ 68.571780][ T1088] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.205: bg 0: block 5: invalid block bitmap [ 68.599433][ T1088] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 68.608443][ T1088] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.205: invalid indirect mapped block 3 (level 2) [ 68.635264][ T1088] EXT4-fs (loop2): 1 orphan inode deleted [ 68.641035][ T1088] EXT4-fs (loop2): 1 truncate cleaned up [ 68.678162][ T1088] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 68.796407][ T1093] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 68.816724][ T1093] EXT4-fs (loop4): failed to initialize system zone (-117) [ 68.823994][ T1093] EXT4-fs (loop4): mount failed [ 69.774678][ T1109] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 69.795252][ T1109] EXT4-fs (loop4): failed to initialize system zone (-117) [ 69.802881][ T1109] EXT4-fs (loop4): mount failed [ 70.054140][ T1119] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 70.064416][ T1119] EXT4-fs (loop2): failed to initialize system zone (-117) [ 70.072130][ T1119] EXT4-fs (loop2): mount failed [ 70.674291][ T437] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.398254][ T437] usb 4-1: Using ep0 maxpacket: 16 [ 71.505530][ T1139] ip_tables: iptables: counters copy to user failed while replacing table [ 72.285059][ T1139] exfat: Unknown parameter '' [ 72.305289][ T437] usb 4-1: config 32 has an invalid interface number: 64 but max is 0 [ 72.320984][ T437] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 72.403062][ T437] usb 4-1: config 32 has no interface number 0 [ 72.409641][ T437] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 72.419085][ T437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.467621][ T437] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 72.598143][ T437] uvcvideo: No valid video chain found. [ 72.949092][ T1154] binder: 1143:1154 ioctl c018620c 200000000180 returned -22 [ 73.389318][ T1159] SELinux: policydb magic number 0x708b5000 does not match expected magic number 0xf97cff8c [ 73.408696][ T1159] SELinux: failed to load policy [ 73.468264][ T15] usb 4-1: USB disconnect, device number 3 [ 73.548104][ T1163] netlink: 204 bytes leftover after parsing attributes in process `syz.4.222'. [ 74.823815][ T1168] binder: 1164:1168 ioctl c018620c 200000000180 returned -22 [ 75.357621][ T1174] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.371553][ T1178] EXT4-fs (loop4): Unrecognized mount option "appraise" or missing value [ 75.449860][ T302] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.469468][ T1174] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.486881][ T1174] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #16: comm syz.5.224: invalid indirect mapped block 32768 (level 2) [ 75.500998][ T1174] EXT4-fs (loop5): 1 orphan inode deleted [ 75.506834][ T1174] EXT4-fs (loop5): 1 truncate cleaned up [ 75.512501][ T1174] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 76.075598][ T302] usb 3-1: Using ep0 maxpacket: 16 [ 76.098221][ T1197] SELinux: failed to load policy [ 76.238051][ T302] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 76.252439][ T302] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 76.262708][ T302] usb 3-1: config 32 has no interface number 0 [ 76.268935][ T302] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 76.278576][ T1203] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 76.282088][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.299769][ T1203] EXT4-fs (loop1): failed to initialize system zone (-117) [ 76.308768][ T1203] EXT4-fs (loop1): mount failed [ 76.515970][ T302] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 76.603927][ T302] uvcvideo: No valid video chain found. [ 76.739821][ T1215] cgroup: release_agent respecified [ 76.957725][ T1220] binder: 1217:1220 ioctl c018620c 200000000180 returned -22 [ 77.292946][ T770] usb 3-1: USB disconnect, device number 4 [ 77.639138][ T1229] ip_tables: iptables: counters copy to user failed while replacing table [ 78.587207][ T1230] binder: 1225:1230 ioctl c018620c 200000000180 returned -22 [ 78.731251][ T1229] exfat: Unknown parameter '' [ 78.818898][ T1234] SELinux: failed to load policy [ 80.384852][ T1254] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.429980][ T1254] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #16: comm syz.3.248: invalid indirect mapped block 32768 (level 2) [ 80.444103][ T1254] EXT4-fs (loop3): 1 orphan inode deleted [ 80.449985][ T1254] EXT4-fs (loop3): 1 truncate cleaned up [ 80.455650][ T1254] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 80.608853][ T1273] binder: 1266:1273 ioctl c018620c 200000000180 returned -22 [ 81.932126][ T1280] binder: 1270:1280 ioctl c018620c 200000000180 returned -22 [ 82.037063][ T1282] SELinux: failed to load policy [ 82.090570][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.117623][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 83.160951][ T302] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.561377][ T1298] exfat: Unknown parameter '' [ 84.022902][ T25] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 84.037382][ T25] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.050335][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.056970][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 84.066758][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.134685][ T25] usb 4-1: config 0 descriptor?? [ 84.148117][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 84.148130][ T24] audit: type=1400 audit(1793725348.553:314): avc: denied { append } for pid=1306 comm="syz.3.264" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.261144][ T302] usb 3-1: Using ep0 maxpacket: 16 [ 84.266458][ T25] usb 4-1: can't set config #0, error -71 [ 84.272851][ T25] usb 4-1: USB disconnect, device number 4 [ 84.358942][ T1313] binder: 1310:1313 ioctl c018620c 200000000180 returned -22 [ 84.748184][ T302] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 84.759504][ T302] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 84.772097][ T1317] SELinux: failed to load policy [ 84.780201][ T302] usb 3-1: config 32 has no interface number 0 [ 84.789612][ T302] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 84.798899][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.803667][ T1320] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 84.853779][ T302] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 84.860992][ T302] uvcvideo: No valid video chain found. [ 84.887465][ T1326] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.270: bg 0: block 5: invalid block bitmap [ 84.900038][ T1326] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 84.909101][ T1326] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #11: comm syz.5.270: invalid indirect mapped block 3 (level 2) [ 84.922596][ T1326] EXT4-fs (loop5): 1 orphan inode deleted [ 84.928404][ T1326] EXT4-fs (loop5): 1 truncate cleaned up [ 84.934214][ T1326] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 85.174250][ T15] usb 3-1: USB disconnect, device number 5 [ 86.327778][ T1357] binder: 1352:1357 ioctl c018620c 200000000180 returned -22 [ 86.585500][ T1359] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy on filesystem 'sda1' because it doesn't have stable inode numbers [ 86.896350][ T1376] binder: 1368:1376 ioctl c018620c 200000000180 returned -22 [ 87.190106][ T24] audit: type=1400 audit(1793725351.458:315): avc: denied { mount } for pid=1372 comm="syz.2.287" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 87.393699][ T1385] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 87.432651][ T1386] binder: 1379:1386 ioctl c018620c 200000000180 returned -22 [ 87.726195][ T1377] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 87.727356][ T24] audit: type=1400 audit(1793725352.197:316): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 87.762503][ T1377] EXT4-fs (loop4): failed to initialize system zone (-117) [ 87.776250][ T1377] EXT4-fs (loop4): mount failed [ 87.781868][ T1393] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 89.583315][ T1416] exfat: Unknown parameter '' [ 89.790796][ T15] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 91.345871][ T1428] binder: 1422:1428 ioctl c018620c 200000000180 returned -22 [ 91.433565][ T1426] exfat: Unknown parameter '' [ 91.453704][ T15] usb 6-1: Using ep0 maxpacket: 16 [ 91.532466][ T1436] ------------[ cut here ]------------ [ 91.538195][ T1436] WARNING: CPU: 1 PID: 1436 at mm/page_alloc.c:5368 __alloc_pages_nodemask+0x350/0x640 [ 91.547992][ T1436] Modules linked in: [ 91.551930][ T1436] CPU: 1 PID: 1436 Comm: syz.1.303 Not tainted syzkaller #0 [ 91.559344][ T1436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 91.569695][ T1436] RIP: 0010:__alloc_pages_nodemask+0x350/0x640 [ 91.575998][ T1436] Code: 48 3b 8c 24 e0 00 00 00 0f 85 a3 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 f7 c6 00 20 00 00 0f 85 ce fd ff ff <0f> 0b 31 c0 eb 94 31 c0 e9 9c fd ff ff 4c 89 ff 89 de 4c 89 e2 e8 [ 91.595700][ T1436] RSP: 0018:ffffc9000181f6a0 EFLAGS: 00010246 [ 91.601898][ T1436] RAX: ffffc9000181f730 RBX: 0000000000000000 RCX: 0000000000000000 [ 91.609945][ T1436] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc9000181f748 [ 91.618325][ T1436] RBP: ffffc9000181f7c8 R08: ffffc9000181f747 R09: ffffc9000181f730 [ 91.883829][ T1436] R10: dffffc0000000000 R11: fffff52000303ee9 R12: dffffc0000000000 [ 91.893886][ T1436] R13: 1ffff92000303edc R14: 0000000000040dc0 R15: 000000000000000f [ 91.902005][ T1436] FS: 00007f1a9d2d36c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 91.915460][ T1436] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.927589][ T1436] CR2: 00007f1a9e8c9200 CR3: 000000010b3c2000 CR4: 00000000003506b0 [ 91.948133][ T1436] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.956422][ T15] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 91.966072][ T15] usb 6-1: can't read configurations, error -61 [ 91.975577][ T1436] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.993228][ T1447] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.307: bg 0: block 5: invalid block bitmap [ 92.005687][ T1436] Call Trace: [ 92.009485][ T1436] ? security_load_policy+0x158/0xf00 [ 92.014987][ T1436] ? sel_write_load+0x37d/0x5c0 [ 92.020211][ T1436] ? vfs_write+0x344/0xd70 [ 92.025477][ T1436] ? ksys_write+0x14a/0x260 [ 92.030594][ T1436] ? __x64_sys_write+0x7b/0x90 [ 92.032023][ T1447] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 92.035384][ T1436] ? do_syscall_64+0x31/0x40 [ 92.035431][ T1436] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.045508][ T1447] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.307: invalid indirect mapped block 3 (level 2) [ 92.059422][ T1436] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 92.069975][ T1447] EXT4-fs (loop2): 1 orphan inode deleted [ 92.079966][ T1447] EXT4-fs (loop2): 1 truncate cleaned up [ 92.085681][ T1447] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 92.102404][ T1436] kmalloc_order+0x4c/0x160 [ 92.107048][ T1436] kmalloc_order_trace+0x16/0x80 [ 92.112094][ T1436] __kmalloc+0x1e6/0x330 [ 92.116396][ T1436] hashtab_init+0xad/0x120 [ 92.121006][ T1436] symtab_init+0x40/0x60 [ 92.125336][ T1436] common_read+0x23c/0x630 [ 92.129849][ T1436] ? perm_destroy+0x30/0x30 [ 92.134563][ T1436] policydb_read+0xadb/0x2b30 [ 92.139316][ T1436] security_load_policy+0x158/0xf00 [ 92.144972][ T15] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 92.152670][ T1436] ? exc_page_fault+0x67/0xc0 [ 92.178657][ T1436] ? asm_exc_page_fault+0x1e/0x30 [ 92.185462][ T1436] ? selinux_policy_commit+0x5c0/0x5c0 [ 92.191008][ T1436] ? copy_user_enhanced_fast_string+0xe/0x40 [ 92.197115][ T1436] ? _copy_from_user+0x95/0xd0 [ 92.201941][ T1436] sel_write_load+0x37d/0x5c0 [ 92.206688][ T1436] ? sel_make_dir+0x270/0x270 [ 92.211428][ T1436] ? rw_verify_area+0x1c0/0x360 [ 92.216369][ T1436] ? sel_make_dir+0x270/0x270 [ 92.221114][ T1436] vfs_write+0x344/0xd70 [ 92.225427][ T1436] ? __kasan_check_write+0x14/0x20 [ 92.230602][ T1436] ? kernel_write+0x3c0/0x3c0 [ 92.235358][ T1436] ? __kasan_check_write+0x14/0x20 [ 92.240549][ T1436] ? mutex_lock+0x92/0xf0 [ 92.244959][ T1436] ? mutex_trylock+0xb0/0xb0 [ 92.249650][ T1436] ? __fget_files+0x2e1/0x340 [ 92.255173][ T1436] ? __fdget_pos+0x2d2/0x380 [ 92.259891][ T1436] ? ksys_write+0x70/0x260 [ 92.264414][ T1436] ksys_write+0x14a/0x260 [ 92.269048][ T1436] ? __ia32_sys_read+0x90/0x90 [ 92.274210][ T1436] ? __kasan_check_read+0x11/0x20 [ 92.279298][ T1436] __x64_sys_write+0x7b/0x90 [ 92.284168][ T1436] do_syscall_64+0x31/0x40 [ 92.289122][ T1436] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.295227][ T1436] RIP: 0033:0x7f1a9e87bb19 [ 92.299741][ T1436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.319599][ T1436] RSP: 002b:00007f1a9d2d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 92.328162][ T1436] RAX: ffffffffffffffda RBX: 00007f1a9eb01fa0 RCX: 00007f1a9e87bb19 [ 92.651544][ T1436] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 92.664418][ T1436] RBP: 00007f1a9e913b70 R08: 0000000000000000 R09: 0000000000000000 [ 92.683017][ T1436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.694008][ T1436] R13: 00007f1a9eb02038 R14: 00007f1a9eb01fa0 R15: 00007ffe46112778 [ 92.702391][ T1436] ---[ end trace 9b961a32b9831fb0 ]--- [ 92.711270][ T1436] SELinux: failed to load policy [ 93.390541][ T1462] EXT4-fs (loop1): Unrecognized mount option "appraise" or missing value [ 93.823514][ T1471] binder: 1467:1471 ioctl c018620c 200000000180 returned -22 [ 94.154558][ T1477] binder: 1474:1477 ioctl c018620c 200000000180 returned -22 [ 94.596037][ T1489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.614386][ T1489] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #16: comm syz.2.319: invalid indirect mapped block 32768 (level 2) [ 94.629182][ T1489] EXT4-fs (loop2): 1 orphan inode deleted [ 94.636119][ T1489] EXT4-fs (loop2): 1 truncate cleaned up [ 95.737833][ T1489] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 95.868956][ T1495] exfat: Unknown parameter '' [ 96.462999][ T1135] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.540097][ T1509] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 96.574801][ T1509] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.667473][ T1518] SELinux: policydb magic number 0x9eadb000 does not match expected magic number 0xf97cff8c [ 96.677925][ T1518] SELinux: failed to load policy [ 96.821552][ T1135] usb 4-1: Using ep0 maxpacket: 16 [ 97.282758][ T1135] usb 4-1: config 32 has an invalid interface number: 64 but max is 0 [ 97.291481][ T1135] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 97.302221][ T1135] usb 4-1: config 32 has no interface number 0 [ 97.310662][ T1135] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 97.320006][ T1135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.375381][ T1135] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 97.382415][ T1135] uvcvideo: No valid video chain found. [ 97.840629][ T1536] binder: 1532:1536 ioctl c018620c 200000000180 returned -22 [ 98.053069][ T1540] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.334: bg 0: block 5: invalid block bitmap [ 98.065602][ T1540] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 98.074699][ T1540] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.334: invalid indirect mapped block 3 (level 2) [ 98.088090][ T1540] EXT4-fs (loop4): 1 orphan inode deleted [ 98.096402][ T1540] EXT4-fs (loop4): 1 truncate cleaned up [ 98.102197][ T1540] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 98.181464][ T1544] ip_tables: iptables: counters copy to user failed while replacing table [ 98.223879][ T15] usb 4-1: USB disconnect, device number 5 [ 98.245032][ T1544] exfat: Unknown parameter '' [ 98.343294][ T1551] EXT4-fs (loop1): Unrecognized mount option "appraise" or missing value [ 98.368232][ T1557] SELinux: policydb magic number 0x79f68000 does not match expected magic number 0xf97cff8c [ 98.385767][ T1557] SELinux: failed to load policy [ 98.497446][ T1566] binder: 1560:1566 ioctl c018620c 200000000180 returned -22 [ 99.577189][ T1578] binder: 1570:1578 ioctl c018620c 200000000180 returned -22 [ 100.549855][ T1600] ip_tables: iptables: counters copy to user failed while replacing table [ 101.169897][ T1600] exfat: Unknown parameter '' [ 101.323172][ T1582] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 101.332834][ T1582] EXT4-fs (loop4): failed to initialize system zone (-117) [ 101.340163][ T1582] EXT4-fs (loop4): mount failed [ 101.369474][ T1603] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 101.378453][ T1603] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.524842][ T1618] binder: 1614:1618 ioctl c018620c 200000000180 returned -22 [ 102.075512][ T1626] binder: 1621:1626 ioctl c018620c 200000000180 returned -22 [ 102.101457][ T1627] binder: 1620:1627 ioctl c018620c 200000000180 returned -22 [ 102.147602][ T1613] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.354: bg 0: block 5: invalid block bitmap [ 102.189685][ T1613] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 102.232762][ T1613] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.354: invalid indirect mapped block 3 (level 2) [ 102.383200][ T1613] EXT4-fs (loop1): 1 orphan inode deleted [ 102.491646][ T1613] EXT4-fs (loop1): 1 truncate cleaned up [ 102.521915][ T1613] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 102.786013][ T1639] netlink: 204 bytes leftover after parsing attributes in process `syz.2.361'. [ 103.960134][ T1659] ip_tables: iptables: counters copy to user failed while replacing table [ 104.412072][ T1659] exfat: Unknown parameter '' [ 105.750943][ T1667] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 105.905995][ T1667] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.951641][ T1672] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 106.018388][ T1683] binder: 1679:1683 ioctl c018620c 200000000180 returned -22 [ 106.079817][ T1672] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.322345][ T1687] binder: 1684:1687 ioctl c018620c 200000000180 returned -22 [ 106.360974][ T1672] cgroup: release_agent respecified [ 106.795034][ T1696] netlink: 204 bytes leftover after parsing attributes in process `syz.3.373'. [ 107.439289][ T1712] binder: 1700:1712 ioctl c018620c 200000000180 returned -22 [ 108.816904][ T1723] ip_tables: iptables: counters copy to user failed while replacing table [ 109.873096][ T1723] exfat: Unknown parameter '' [ 110.275632][ T1726] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 110.341049][ T1726] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.764758][ T1739] binder: 1733:1739 ioctl c018620c 200000000180 returned -22 [ 110.838342][ T1743] netlink: 204 bytes leftover after parsing attributes in process `syz.3.387'. [ 110.849031][ T1735] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 110.860047][ T1735] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.873400][ T1735] fuse: Bad value for 'fd' [ 110.878965][ T1735] cgroup: release_agent respecified [ 111.425268][ T770] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.443977][ T1756] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 111.454639][ T1756] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.472704][ T1756] cgroup: release_agent respecified [ 112.019445][ T1770] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 112.034529][ T1770] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.851031][ T770] usb 4-1: Using ep0 maxpacket: 16 [ 112.864794][ T1786] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.401: bg 0: block 5: invalid block bitmap [ 112.877429][ T1786] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 112.886537][ T1786] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.401: invalid indirect mapped block 3 (level 2) [ 112.900078][ T1786] EXT4-fs (loop1): 1 orphan inode deleted [ 112.905880][ T1786] EXT4-fs (loop1): 1 truncate cleaned up [ 112.911656][ T1786] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 112.959317][ T1797] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.969459][ T770] usb 4-1: config 32 has an invalid interface number: 64 but max is 0 [ 112.988404][ T1797] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm syz.4.404: invalid indirect mapped block 32768 (level 2) [ 113.003826][ T1797] EXT4-fs (loop4): 1 orphan inode deleted [ 113.009657][ T1797] EXT4-fs (loop4): 1 truncate cleaned up [ 113.015814][ T1797] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 113.033823][ T1801] binder: 1791:1801 ioctl c018620c 200000000180 returned -22 [ 113.336053][ T770] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 113.346368][ T770] usb 4-1: config 32 has no interface number 0 [ 113.352613][ T770] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 113.362103][ T770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.404905][ T770] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 113.412032][ T770] uvcvideo: No valid video chain found. [ 113.717145][ T1806] binder: 1802:1806 ioctl c018620c 200000000180 returned -22 [ 113.741690][ T1808] binder: 1804:1808 ioctl c018620c 200000000180 returned -22 [ 113.993886][ T770] usb 4-1: USB disconnect, device number 6 [ 114.095140][ T1816] binder: 1809:1816 ioctl c018620c 200000000180 returned -22 [ 115.558278][ T1838] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.416: bg 0: block 5: invalid block bitmap [ 115.571262][ T1838] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 115.591159][ T1838] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.416: invalid indirect mapped block 3 (level 2) [ 115.633727][ T1838] EXT4-fs (loop4): 1 orphan inode deleted [ 115.659449][ T1838] EXT4-fs (loop4): 1 truncate cleaned up [ 115.682895][ T1838] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 116.032704][ T24] audit: type=1400 audit(1793725380.005:317): avc: denied { setattr } for pid=1850 comm="syz.1.419" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.184330][ T1857] binder: 1853:1857 ioctl c018620c 200000000180 returned -22 [ 117.865244][ T1870] ip_tables: iptables: counters copy to user failed while replacing table [ 118.934922][ T1870] exfat: Unknown parameter '' [ 119.899352][ T1876] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 119.998271][ T1876] EXT4-fs (loop1): failed to initialize system zone (-117) [ 120.237114][ T1876] EXT4-fs (loop1): mount failed [ 120.513142][ T1893] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.428: bg 0: block 5: invalid block bitmap [ 120.525948][ T1893] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 120.535083][ T1893] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.428: invalid indirect mapped block 3 (level 2) [ 120.549307][ T1893] EXT4-fs (loop2): 1 orphan inode deleted [ 120.555124][ T1893] EXT4-fs (loop2): 1 truncate cleaned up [ 120.561129][ T1893] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 120.611891][ T1898] rtc_cmos 00:00: Alarms can be up to one day in the future [ 121.867538][ T1911] netlink: 'syz.2.431': attribute type 12 has an invalid length. [ 122.903996][ T1933] binder: 1929:1933 ioctl c018620c 200000000180 returned -22 [ 123.274313][ T1935] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.441: bg 0: block 5: invalid block bitmap [ 123.294035][ T1935] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 123.303014][ T1935] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #11: comm syz.5.441: invalid indirect mapped block 3 (level 2) [ 123.316361][ T1935] EXT4-fs (loop5): 1 orphan inode deleted [ 123.322145][ T1935] EXT4-fs (loop5): 1 truncate cleaned up [ 123.327958][ T1935] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 124.749131][ T1964] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 125.287629][ T1971] netlink: 'syz.2.448': attribute type 12 has an invalid length. [ 125.779219][ T1981] rtc_cmos 00:00: Alarms can be up to one day in the future [ 126.371039][ T1974] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 126.387264][ T1974] EXT4-fs (loop4): failed to initialize system zone (-117) [ 126.395024][ T1974] EXT4-fs (loop4): mount failed [ 126.654792][ T1995] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 126.946911][ T1995] EXT4-fs (loop1): failed to initialize system zone (-117) [ 126.954211][ T1995] EXT4-fs (loop1): mount failed [ 128.794622][ T2034] netlink: 'syz.5.464': attribute type 12 has an invalid length. [ 129.264030][ T2046] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 129.564543][ T2049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.584742][ T2049] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm syz.4.469: invalid indirect mapped block 32768 (level 2) [ 130.557490][ T2049] EXT4-fs (loop4): 1 orphan inode deleted [ 130.564348][ T2049] EXT4-fs (loop4): 1 truncate cleaned up [ 130.575243][ T2056] device-mapper: verity: blake2b-256 using implementation "blake2b-256-generic" [ 130.586199][ T2049] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 130.606870][ T2056] device-mapper: table: 253:4: verity: Invalid root digest [ 130.647653][ T2056] device-mapper: ioctl: error adding target to table [ 132.155205][ T2082] netlink: 'syz.2.477': attribute type 12 has an invalid length. [ 132.640629][ T2092] binder: 2089:2092 ioctl c018620c 200000000180 returned -22 [ 133.011741][ T2096] binder: 2093:2096 ioctl c018620c 200000000180 returned -22 [ 133.295283][ T2080] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.443322][ T2098] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 133.452357][ T2098] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.545537][ T2080] usb 3-1: Using ep0 maxpacket: 16 [ 133.742104][ T2101] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.777618][ T2110] device-mapper: verity: blake2b-256 using implementation "blake2b-256-generic" [ 133.788625][ T2101] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #16: comm syz.3.483: invalid indirect mapped block 32768 (level 2) [ 133.795655][ T2110] device-mapper: table: 253:5: verity: Invalid root digest [ 133.804431][ T2101] EXT4-fs (loop3): 1 orphan inode deleted [ 133.810136][ T2110] device-mapper: ioctl: error adding target to table [ 133.821820][ T2101] EXT4-fs (loop3): 1 truncate cleaned up [ 133.821833][ T2101] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 133.837032][ T2080] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 133.845404][ T2080] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 133.855663][ T2080] usb 3-1: config 32 has no interface number 0 [ 133.861904][ T2080] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 133.871203][ T2080] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.906358][ T2118] netlink: 'syz.1.489': attribute type 12 has an invalid length. [ 133.920093][ T2080] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 133.927462][ T2080] uvcvideo: No valid video chain found. [ 135.015244][ T25] usb 3-1: USB disconnect, device number 6 [ 135.433844][ T2141] binder: 2137:2141 ioctl c018620c 200000000180 returned -22 [ 135.514413][ T2080] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.778747][ T2080] usb 4-1: Using ep0 maxpacket: 16 [ 136.520670][ T2080] usb 4-1: config 32 has an invalid interface number: 64 but max is 0 [ 136.534645][ T24] audit: type=1400 audit(1793725400.238:318): avc: denied { create } for pid=2152 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 136.555330][ T2080] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 136.571007][ T24] audit: type=1400 audit(1793725400.238:319): avc: denied { create } for pid=2152 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 136.577903][ T2080] usb 4-1: config 32 has no interface number 0 [ 136.597966][ T2080] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 136.607586][ T2080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.621865][ T2154] virtio-fs: tag not found [ 136.660140][ T2080] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 136.667285][ T2080] uvcvideo: No valid video chain found. [ 137.076446][ T2169] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 137.828759][ T284] usb 4-1: USB disconnect, device number 7 [ 138.367840][ T2183] binder: 2179:2183 ioctl c018620c 200000000180 returned -22 [ 139.155687][ T2189] binder: 2186:2189 ioctl c018620c 200000000180 returned -22 [ 139.380355][ T2201] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.090866][ T2235] binder: 2230:2235 ioctl c018620c 200000000180 returned -22 [ 142.324446][ T2234] EXT4-fs error (device loop5): ext4_ext_check_inode:500: inode #2: comm syz.5.521: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 142.342940][ T2234] EXT4-fs (loop5): get root inode failed [ 142.348652][ T2234] EXT4-fs (loop5): mount failed [ 142.806431][ T24] audit: type=1400 audit(1793725406.081:320): avc: denied { getopt } for pid=2244 comm="syz.1.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.994827][ T2249] ip_tables: iptables: counters copy to user failed while replacing table [ 143.567839][ T2249] exfat: Unknown parameter '' [ 144.010963][ T2245] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 144.061457][ T24] audit: type=1400 audit(1793725407.239:321): avc: denied { setattr } for pid=2244 comm="syz.1.523" name="file0" dev="loop1" ino=1048716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.109699][ T2262] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 144.118794][ T2262] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.916211][ T2270] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 5) [ 145.935388][ T2270] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 146.268200][ T2294] binder: 2290:2294 ioctl c018620c 200000000180 returned -22 [ 146.284426][ T2270] F2FS-fs (loop2): invalid crc value [ 146.454539][ T2270] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.564210][ T2270] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 146.575774][ T2270] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.923944][ T2285] F2FS-fs (loop3): invalid crc value [ 146.954886][ T2285] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.245571][ T2285] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 147.272726][ T2285] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 147.683911][ T20] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.116615][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 148.128175][ T2325] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 148.137211][ T2325] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.312416][ T20] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 148.320872][ T20] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 148.331263][ T20] usb 3-1: config 32 has no interface number 0 [ 148.337628][ T20] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 148.346846][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.393986][ T20] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 148.401273][ T20] uvcvideo: No valid video chain found. [ 149.520250][ T20] usb 3-1: USB disconnect, device number 7 [ 149.685157][ T2357] binder: 2353:2357 ioctl c018620c 200000000180 returned -22 [ 149.838110][ T569] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 150.124020][ T569] usb 2-1: Using ep0 maxpacket: 16 [ 150.278109][ T569] usb 2-1: config 32 has an invalid interface number: 64 but max is 0 [ 150.286374][ T569] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 150.296621][ T569] usb 2-1: config 32 has no interface number 0 [ 150.303022][ T569] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 150.312999][ T569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.685521][ T569] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 150.693072][ T569] uvcvideo: No valid video chain found. [ 150.823288][ T2372] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 150.832331][ T2372] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.159172][ T569] usb 2-1: USB disconnect, device number 2 [ 151.230931][ T2383] FAT-fs (loop4): Directory bread(block 64) failed [ 151.237699][ T2383] FAT-fs (loop4): Directory bread(block 65) failed [ 151.244380][ T2383] FAT-fs (loop4): Directory bread(block 66) failed [ 151.251180][ T2383] FAT-fs (loop4): Directory bread(block 67) failed [ 151.258265][ T2383] FAT-fs (loop4): Directory bread(block 68) failed [ 151.265085][ T2383] FAT-fs (loop4): Directory bread(block 69) failed [ 151.271916][ T2383] FAT-fs (loop4): Directory bread(block 70) failed [ 151.281584][ T2383] FAT-fs (loop4): Directory bread(block 71) failed [ 151.289115][ T2383] FAT-fs (loop4): Directory bread(block 72) failed [ 151.305206][ T2388] binder: 2384:2388 ioctl c018620c 200000000180 returned -22 [ 151.319294][ T2383] FAT-fs (loop4): Directory bread(block 73) failed [ 152.846798][ T2410] overlayfs: unrecognized mount option "uuid=null" or missing value [ 153.756491][ T24] audit: type=1400 audit(1793725416.596:322): avc: denied { read } for pid=2409 comm="syz.1.563" path="socket:[24639]" dev="sockfs" ino=24639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.975035][ T2413] binder: 2406:2413 ioctl c018620c 200000000180 returned -22 [ 154.866160][ T2432] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.894342][ T2432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.904852][ T2432] FAT-fs (loop4): Filesystem has been set read-only [ 154.911529][ T2432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.921939][ T2432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.933492][ T2432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.943784][ T2432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.954317][ T2432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.964563][ T2432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.975103][ T2432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 154.986519][ T2432] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 155.007108][ T2431] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 155.078656][ T2436] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 155.091783][ T2436] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 155.106796][ T2422] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 155.367133][ T2438] mmap: syz.4.570 (2438) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 155.384124][ T2361] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 155.622138][ T2361] usb 3-1: Using ep0 maxpacket: 16 [ 155.736696][ T2361] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 155.747998][ T2361] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 155.768438][ T2361] usb 3-1: config 32 has no interface number 0 [ 155.781760][ T2361] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 155.800082][ T2361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.851756][ T2361] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 155.859186][ T2361] uvcvideo: No valid video chain found. [ 156.246588][ T1014] usb 3-1: USB disconnect, device number 8 [ 156.261194][ T24] audit: type=1400 audit(1793725419.065:323): avc: denied { shutdown } for pid=2462 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.305804][ T24] audit: type=1400 audit(1793725419.095:324): avc: denied { ioctl } for pid=2467 comm="syz.1.578" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 156.402890][ T2468] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 156.427303][ T2468] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.572174][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 156.587599][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.610124][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 156.630585][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.647567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.665565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.684422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.705020][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.723578][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 156.741229][ T2468] netlink: 76 bytes leftover after parsing attributes in process `syz.1.578'. [ 159.062474][ T24] audit: type=1400 audit(1793725421.952:325): avc: denied { name_bind } for pid=2505 comm="syz.4.589" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 159.089620][ T24] audit: type=1400 audit(1793725421.973:326): avc: denied { read } for pid=2505 comm="syz.4.589" name="transactions" dev="binder" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.120742][ T24] audit: type=1400 audit(1793725421.973:327): avc: denied { open } for pid=2505 comm="syz.4.589" path="/dev/binderfs/binder_logs/transactions" dev="binder" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.454169][ T24] audit: type=1400 audit(1793725421.973:328): avc: denied { ioctl } for pid=2505 comm="syz.4.589" path="/dev/binderfs/binder_logs/transactions" dev="binder" ino=1048611 ioctlcmd=0x4c07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.541736][ T2510] SELinux: failed to load policy [ 160.222803][ T2521] netlink: 'syz.1.593': attribute type 12 has an invalid length. [ 160.235944][ T2502] F2FS-fs (loop5): invalid crc value [ 160.255236][ T2502] F2FS-fs (loop5): Found nat_bits in checkpoint [ 160.296092][ T2502] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 160.313051][ T2502] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 160.478958][ T2530] F2FS-fs (loop1): invalid crc value [ 160.496654][ T2530] F2FS-fs (loop1): Found nat_bits in checkpoint [ 160.549228][ T2530] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 160.662845][ T2540] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 160.929306][ T2540] EXT4-fs (loop4): failed to initialize system zone (-117) [ 160.959541][ T2540] EXT4-fs (loop4): mount failed [ 161.005131][ T2530] attempt to access beyond end of device [ 161.005131][ T2530] loop1: rw=2049, want=45104, limit=40427 [ 161.285290][ T9] device bridge_slave_1 left promiscuous mode [ 161.292434][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.315876][ T9] device bridge_slave_0 left promiscuous mode [ 161.601960][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.637346][ T9] device veth1_macvtap left promiscuous mode [ 161.780098][ T9] device veth0_vlan left promiscuous mode [ 162.350109][ T2574] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.075094][ T2574] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 163.139615][ T2574] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 163.236347][ T24] audit: type=1400 audit(1793725426.188:329): avc: denied { write } for pid=2573 comm="syz.2.606" name="file0" dev="loop2" ino=1048730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.265000][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 163.282505][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.623420][ T24] audit: type=1400 audit(1793725426.218:330): avc: denied { add_name } for pid=2573 comm="syz.2.606" name="dev" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.650409][ T24] audit: type=1400 audit(1793725426.218:331): avc: denied { associate } for pid=2573 comm="syz.2.606" name="dev" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 164.027255][ T2592] binder: 2587:2592 ioctl c018620c 200000000180 returned -22 [ 164.267999][ T24] audit: type=1400 audit(1793725426.218:332): avc: denied { append } for pid=2573 comm="syz.2.606" path="/115/bus/file0/blkio.bfq.io_merged_recursive" dev="loop2" ino=1048733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.293980][ T24] audit: type=1400 audit(1793725426.218:333): avc: denied { write } for pid=2573 comm="syz.2.606" name="blkio.bfq.io_merged_recursive" dev="loop2" ino=1048733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.318926][ T24] audit: type=1400 audit(1793725426.228:334): avc: denied { remove_name } for pid=2573 comm="syz.2.606" name="proc" dev="loop2" ino=1048734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.349040][ T24] audit: type=1400 audit(1793725426.228:335): avc: denied { rename } for pid=2573 comm="syz.2.606" name="proc" dev="loop2" ino=1048734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.610668][ T2602] ip_tables: iptables: counters copy to user failed while replacing table [ 164.820617][ T2602] exfat: Unknown parameter '' [ 166.201376][ T24] audit: type=1400 audit(1793725429.233:336): avc: denied { setopt } for pid=2618 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.228666][ T2610] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 166.239928][ T24] audit: type=1400 audit(1793725429.262:337): avc: denied { remount } for pid=2618 comm="syz.2.620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 166.250391][ T2610] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.599912][ T24] audit: type=1400 audit(1793725429.630:338): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 166.818053][ T2601] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 166.886755][ T2601] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 166.907158][ T2601] F2FS-fs (loop1): invalid crc value [ 166.915217][ T2631] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 166.925965][ T2631] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 166.935290][ T2601] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.936057][ T24] audit: type=1400 audit(1793725429.958:339): avc: denied { read } for pid=2633 comm="syz.3.625" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.945230][ T2631] F2FS-fs (loop2): invalid crc value [ 167.032542][ T2645] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 167.097198][ T24] audit: type=1400 audit(1793725430.008:340): avc: denied { open } for pid=2633 comm="syz.3.625" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.116287][ T2631] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.174840][ T24] audit: type=1400 audit(1793725430.017:341): avc: denied { ioctl } for pid=2633 comm="syz.3.625" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.200555][ T2601] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 167.208309][ T2601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 167.226491][ T2631] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 167.234179][ T2631] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.122601][ T2672] attempt to access beyond end of device [ 168.122601][ T2672] loop4: rw=2049, want=1041, limit=128 [ 168.142656][ T2672] attempt to access beyond end of device [ 168.142656][ T2672] loop4: rw=524288, want=369, limit=128 [ 168.182766][ T2672] attempt to access beyond end of device [ 168.182766][ T2672] loop4: rw=0, want=153, limit=128 [ 168.203501][ T2672] attempt to access beyond end of device [ 168.203501][ T2672] loop4: rw=0, want=153, limit=128 [ 168.446521][ T2685] binder: 2675:2685 ioctl c018620c 200000000180 returned -22 [ 169.766879][ T2697] ip_tables: iptables: counters copy to user failed while replacing table [ 170.972272][ T2697] exfat: Unknown parameter '' [ 173.065880][ T2729] ip_tables: iptables: counters copy to user failed while replacing table [ 174.020510][ T2729] exfat: Unknown parameter '' [ 174.884183][ T2753] binder: 2733:2753 ioctl c018620c 200000000180 returned -22 [ 174.897440][ T2754] binder: 2735:2754 ioctl c018620c 200000000180 returned -22 [ 175.138432][ T2752] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 175.600389][ T2756] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 175.617785][ T2767] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 175.635177][ T2756] EXT4-fs (loop4): failed to initialize system zone (-117) [ 175.651529][ T2756] EXT4-fs (loop4): mount failed [ 175.961964][ T2764] F2FS-fs (loop2): invalid crc value [ 175.990045][ T2764] F2FS-fs (loop2): Found nat_bits in checkpoint [ 176.180935][ T2764] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 176.880430][ T2789] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 176.898785][ T2789] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.933378][ T2789] cgroup: release_agent respecified [ 177.199587][ T2806] binder: 2798:2806 ioctl c018620c 200000000180 returned -22 [ 177.549328][ T2812] EXT4-fs (loop3): Unrecognized mount option "appraise" or missing value [ 177.956193][ T2819] netlink: 'syz.4.668': attribute type 12 has an invalid length. [ 178.640667][ T2834] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 178.650622][ T2834] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.679965][ T2809] F2FS-fs (loop2): invalid crc value [ 178.687195][ T2834] cgroup: release_agent respecified [ 178.699576][ T2809] F2FS-fs (loop2): Found nat_bits in checkpoint [ 178.734073][ T2809] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 178.742435][ T2809] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 178.797413][ T2361] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.079380][ T2361] usb 4-1: Using ep0 maxpacket: 16 [ 179.210119][ T2361] usb 4-1: config 32 has an invalid interface number: 64 but max is 0 [ 179.221624][ T2361] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 179.242361][ T2361] usb 4-1: config 32 has no interface number 0 [ 179.255967][ T2361] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 179.274554][ T2361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.641613][ T2863] binder: 2856:2863 ioctl c018620c 200000000180 returned -22 [ 180.041073][ T2867] binder: 2864:2867 ioctl c018620c 200000000180 returned -22 [ 180.416702][ T2361] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 181.031935][ T2361] uvcvideo: No valid video chain found. [ 181.074282][ T2872] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 181.339138][ T2879] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 181.349424][ T2879] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.355733][ T20] usb 4-1: USB disconnect, device number 8 [ 181.379497][ T2879] cgroup: release_agent respecified [ 182.295613][ T2361] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 183.320691][ T2923] binder: 2917:2923 ioctl c018620c 200000000180 returned -22 [ 183.665957][ T2361] usb 6-1: Using ep0 maxpacket: 16 [ 184.074720][ T2361] usb 6-1: config 32 has an invalid interface number: 64 but max is 0 [ 184.085046][ T2361] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 184.096389][ T2361] usb 6-1: config 32 has no interface number 0 [ 184.102596][ T2361] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 184.111892][ T2361] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.431108][ T2361] usb 6-1: can't set config #32, error -71 [ 185.449527][ T2361] usb 6-1: USB disconnect, device number 4 [ 185.886042][ T2949] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 185.896649][ T2949] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.978526][ T2949] cgroup: release_agent respecified [ 186.090564][ T2964] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 186.104245][ T2964] EXT4-fs (loop1): failed to initialize system zone (-117) [ 186.111839][ T2964] EXT4-fs (loop1): mount failed [ 187.182873][ T2986] binder: 2975:2986 ioctl c018620c 200000000180 returned -22 [ 187.205352][ T2967] F2FS-fs (loop5): invalid crc value [ 187.285770][ T2967] F2FS-fs (loop5): Found nat_bits in checkpoint [ 187.477577][ T2967] F2FS-fs (loop5): Start checkpoint disabled! [ 187.485066][ T2967] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 187.599697][ T2998] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 187.839171][ T2998] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.867459][ T24] audit: type=1400 audit(1793725450.631:342): avc: denied { ioctl } for pid=2966 comm="syz.5.706" path="/118/file0/memory.events.local" dev="loop5" ino=10 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 188.111620][ T9] attempt to access beyond end of device [ 188.111620][ T9] loop5: rw=2049, want=40976, limit=40427 [ 189.379436][ T3033] binder: 3028:3033 ioctl c018620c 200000000180 returned -22 [ 189.395423][ T3030] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 189.608918][ T24] audit: type=1400 audit(1793725451.923:343): avc: denied { read } for pid=3013 comm="syz.1.717" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 189.638457][ T24] audit: type=1400 audit(1793725451.923:344): avc: denied { open } for pid=3013 comm="syz.1.717" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 191.008038][ T3039] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 191.354467][ T3039] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue [ 191.380233][ T3056] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 191.433510][ T3056] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.489399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 191.499628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.514656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 191.522901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.532961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.541364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.549753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.558787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.569617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 191.577225][ T2361] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 191.819683][ T2361] usb 5-1: Using ep0 maxpacket: 16 [ 191.915275][ T3078] binder: 3074:3078 ioctl c018620c 200000000180 returned -22 [ 192.729427][ T2361] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.741677][ T2361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.764416][ T2361] usb 5-1: Product: syz [ 192.773076][ T2361] usb 5-1: Manufacturer: â°Š [ 192.782163][ T2361] usb 5-1: SerialNumber: syz [ 193.070074][ T3045] udc-core: couldn't find an available UDC or it's busy [ 193.077269][ T3045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.089163][ T3088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.735'. [ 193.089681][ T3045] udc-core: couldn't find an available UDC or it's busy [ 193.110085][ T3045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.311797][ T3096] binder: 3090:3096 ioctl c018620c 200000000180 returned -22 [ 194.169720][ T3088] F2FS-fs (loop3): invalid crc value [ 194.718185][ T3088] F2FS-fs (loop3): Found nat_bits in checkpoint [ 194.822673][ T3088] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 194.890151][ T24] audit: type=1400 audit(1793725457.809:345): avc: denied { getopt } for pid=3087 comm="syz.3.735" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.918206][ T2361] usb 5-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 194.926738][ T2361] usb 5-1: found format II with max.bitrate = 13, frame size=257 [ 194.935348][ T24] audit: type=1400 audit(1793725457.851:346): avc: denied { ioctl } for pid=3087 comm="syz.3.735" path="socket:[27120]" dev="sockfs" ino=27120 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.946759][ T2361] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 194.974147][ T280] attempt to access beyond end of device [ 194.974147][ T280] loop3: rw=0, want=45072, limit=40427 [ 195.003938][ T2361] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 195.033396][ T2361] usb 5-1: USB disconnect, device number 2 [ 195.048130][ T589] udevd[589]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 195.122100][ T3122] binder: 3116:3122 ioctl c018620c 200000000180 returned -22 [ 195.456031][ T3112] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 195.474206][ T3112] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 195.508219][ T3112] F2FS-fs (loop1): invalid crc value [ 195.544531][ T3112] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.660155][ T3112] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 195.669927][ T3112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.764933][ T9] device bridge_slave_1 left promiscuous mode [ 195.773604][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.784853][ T9] device bridge_slave_0 left promiscuous mode [ 195.791860][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.802137][ T3112] attempt to access beyond end of device [ 195.802137][ T3112] loop1: rw=2049, want=45104, limit=40427 [ 196.033024][ T9] device veth0_to_bond left promiscuous mode [ 196.044068][ T9] device veth1_macvtap left promiscuous mode [ 196.050276][ T9] device veth0_vlan left promiscuous mode [ 196.106133][ T279] attempt to access beyond end of device [ 196.106133][ T279] loop1: rw=2049, want=40968, limit=40427 [ 196.600639][ T3137] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.706613][ T3137] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.726834][ T3137] device bridge_slave_0 entered promiscuous mode [ 196.853641][ T3137] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.884015][ T3137] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.343460][ T3137] device bridge_slave_1 entered promiscuous mode [ 197.812996][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.832045][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.841216][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.860346][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.894895][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.901981][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.918174][ T3172] binder: 3169:3172 ioctl c018620c 200000000180 returned -22 [ 197.954068][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.200465][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.208754][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.231504][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.238591][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.266222][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.274200][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.296518][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.311957][ T3137] device veth0_vlan entered promiscuous mode [ 198.323918][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.336273][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.352013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.371398][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.391682][ T3137] device veth1_macvtap entered promiscuous mode [ 198.412918][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.424409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.444158][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.468145][ T24] audit: type=1400 audit(1793725461.402:347): avc: denied { mounton } for pid=3137 comm="syz-executor" path="/root/syzkaller.R90VbD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 198.494949][ T15] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 198.981784][ T15] usb 3-1: Using ep0 maxpacket: 16 [ 200.314843][ T15] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 200.323070][ T15] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 200.343816][ T15] usb 3-1: config 32 has no interface number 0 [ 200.350052][ T15] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 200.360307][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.425029][ T15] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 200.432044][ T15] uvcvideo: No valid video chain found. [ 200.556837][ T3168] F2FS-fs (loop5): invalid crc value [ 200.687122][ T3168] F2FS-fs (loop5): Found nat_bits in checkpoint [ 200.762750][ T3168] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 200.815054][ T15] usb 3-1: USB disconnect, device number 9 [ 200.926917][ T3197] F2FS-fs (loop1): invalid crc value [ 200.976943][ T3197] F2FS-fs (loop1): Found nat_bits in checkpoint [ 201.185159][ T3197] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 201.256223][ T3197] attempt to access beyond end of device [ 201.256223][ T3197] loop1: rw=2049, want=45104, limit=40427 [ 201.517966][ T3225] binder: 3222:3225 ioctl c018620c 200000000180 returned -22 [ 202.622047][ T3245] netlink: 'syz.5.774': attribute type 12 has an invalid length. [ 202.896988][ T3250] netlink: 56 bytes leftover after parsing attributes in process `syz.1.775'. [ 204.182485][ T3256] exfat: Bad value for 'uid' [ 205.140489][ T3282] binder: 3278:3282 ioctl c018620c 200000000180 returned -22 [ 206.276455][ T3303] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 206.292029][ T3303] EXT4-fs (loop5): failed to initialize system zone (-117) [ 206.303925][ T3303] EXT4-fs (loop5): mount failed [ 206.925127][ T24] audit: type=1400 audit(1793725469.577:348): avc: denied { read write } for pid=3313 comm="syz.2.793" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 207.639444][ T24] audit: type=1400 audit(1793725469.577:349): avc: denied { open } for pid=3313 comm="syz.2.793" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 207.696404][ T3323] FAT-fs (loop5): Unrecognized mount option "shortna»&à*y ;" or missing value [ 208.446767][ T3298] F2FS-fs (loop1): invalid crc value [ 208.586500][ T3298] F2FS-fs (loop1): Found nat_bits in checkpoint [ 208.680551][ T3298] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 208.828708][ T3298] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 208.976723][ T3336] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002] [ 208.995835][ T3336] System zones: 0-2, 18-18, 34-35 [ 209.013212][ T3347] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.026292][ T3336] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,debug,usrquota,lazytime,,errors=continue [ 209.039483][ T3336] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.070415][ T3347] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue [ 209.329677][ T3355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 209.446664][ T3355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 209.513088][ T24] audit: type=1400 audit(1793725471.991:350): avc: denied { write } for pid=3354 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.962999][ T15] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 210.458483][ T15] usb 6-1: too many configurations: 201, using maximum allowed: 8 [ 210.480191][ T24] audit: type=1400 audit(1793725472.929:351): avc: denied { read write } for pid=3369 comm="syz.4.806" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 210.514283][ T24] audit: type=1400 audit(1793725472.929:352): avc: denied { open } for pid=3369 comm="syz.4.806" path="/160/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 210.555379][ T15] usb 6-1: config index 0 descriptor too short (expected 64575, got 68) [ 210.567128][ T15] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 210.588217][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 211.565042][ T3392] EXT4-fs (loop4): Ignoring removed oldalloc option [ 211.572067][ T3392] EXT4-fs (loop4): Ignoring removed orlov option [ 211.580021][ T15] usb 6-1: config index 1 descriptor too short (expected 64575, got 68) [ 211.588632][ T15] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 211.599029][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 211.687940][ T15] usb 6-1: config index 2 descriptor too short (expected 64575, got 68) [ 211.696333][ T15] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 211.706489][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 211.795931][ T15] usb 6-1: config index 3 descriptor too short (expected 64575, got 68) [ 211.804455][ T15] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 211.814820][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 211.867605][ T3400] device veth0_macvtap entered promiscuous mode [ 211.914769][ T15] usb 6-1: config index 4 descriptor too short (expected 64575, got 68) [ 211.932333][ T15] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 211.946471][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 212.096138][ T15] usb 6-1: config index 5 descriptor too short (expected 64575, got 68) [ 212.104797][ T15] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 212.115273][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 212.206207][ T15] usb 6-1: config index 6 descriptor too short (expected 64575, got 68) [ 212.214690][ T15] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 212.225319][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 212.324952][ T15] usb 6-1: config index 7 descriptor too short (expected 64575, got 68) [ 212.337141][ T15] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 212.349315][ T24] audit: type=1400 audit(1793725474.662:353): avc: denied { mounton } for pid=3410 comm="syz.4.818" path="/165/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 212.353645][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 212.431430][ T3408] process 3407 (syz.1.817) no longer affine to cpu1 [ 212.441557][ T3359] udc-core: couldn't find an available UDC or it's busy [ 212.449242][ T3359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 212.465462][ T3413] smpboot: CPU 1 is now offline [ 213.156619][ T15] usb 6-1: string descriptor 0 read error: -71 [ 213.170106][ T15] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 213.203932][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.237665][ T3416] x86: Booting SMP configuration: [ 213.242716][ T3416] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 213.249248][ T0] kvm-clock: cpu 1, msr 6e7b041, secondary cpu clock [ 213.250463][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 213.254097][ T15] usb 6-1: can't set config #1, error -71 [ 213.319351][ T15] usb 6-1: USB disconnect, device number 5 [ 213.525241][ T3420] F2FS-fs (loop2): invalid crc value [ 213.546720][ T3420] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 213.579953][ T3420] F2FS-fs (loop2): Start checkpoint disabled! [ 213.597045][ T3420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 213.716527][ T309] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 213.820181][ T3437] ip_tables: iptables: counters copy to user failed while replacing table [ 214.313316][ T3437] exfat: Unknown parameter '' [ 214.398743][ T7] attempt to access beyond end of device [ 214.398743][ T7] loop2: rw=2049, want=40968, limit=40427 [ 214.630813][ T309] usb 5-1: Using ep0 maxpacket: 16 [ 215.298614][ T309] usb 5-1: config 32 has an invalid interface number: 64 but max is 0 [ 215.310303][ T309] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 215.324117][ T309] usb 5-1: config 32 has no interface number 0 [ 215.333055][ T309] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 215.343111][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.376089][ T3448] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 215.395415][ T309] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 215.402803][ T309] uvcvideo: No valid video chain found. [ 215.408914][ T3448] EXT4-fs (loop1): failed to initialize system zone (-117) [ 215.416292][ T3448] EXT4-fs (loop1): mount failed [ 215.610615][ T3463] smpboot: CPU 1 is now offline [ 215.746344][ T3465] x86: Booting SMP configuration: [ 215.751410][ T3465] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 215.757924][ T0] kvm-clock: cpu 1, msr 6e7b041, secondary cpu clock [ 215.758966][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 215.790899][ T3467] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 215.807597][ T2080] usb 5-1: USB disconnect, device number 3 [ 217.393810][ T3500] netlink: 'syz.1.841': attribute type 12 has an invalid length. [ 217.402220][ T3500] raw_sendmsg: syz.1.841 forgot to set AF_INET. Fix it! [ 217.555979][ T3506] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 217.585385][ T3511] smpboot: CPU 1 is now offline [ 217.596090][ T3511] x86: Booting SMP configuration: [ 217.601154][ T3511] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 217.607790][ T0] kvm-clock: cpu 1, msr 6e7b041, secondary cpu clock [ 217.608743][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 219.434121][ T3520] erofs: (device loop4): mounted with root inode @ nid 36. [ 220.192229][ T3540] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 220.338505][ T3528] F2FS-fs (loop5): invalid crc value [ 220.429521][ T3528] F2FS-fs (loop5): Wrong journal entry on segno 83886082 [ 220.439972][ T3528] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 220.883854][ T3551] FAULT_INJECTION: forcing a failure. [ 220.883854][ T3551] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 220.896978][ T3551] CPU: 1 PID: 3551 Comm: syz.4.855 Tainted: G W syzkaller #0 [ 220.905664][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 220.915733][ T3551] Call Trace: [ 220.919041][ T3551] __dump_stack+0x21/0x24 [ 220.923390][ T3551] dump_stack_lvl+0x1a7/0x208 [ 220.928104][ T3551] ? show_regs_print_info+0x18/0x18 [ 220.933316][ T3551] ? __sched_text_start+0x8/0x8 [ 220.938189][ T3551] dump_stack+0x15/0x1c [ 220.942361][ T3551] should_fail+0x3ab/0x500 [ 220.946794][ T3551] should_fail_usercopy+0x1a/0x20 [ 220.951832][ T3551] _copy_from_user+0x20/0xd0 [ 220.956452][ T3551] __copy_msghdr_from_user+0xc9/0x630 [ 220.962034][ T3551] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 220.967351][ T3551] ___sys_sendmsg+0x19a/0x2e0 [ 220.973735][ T3551] ? __sys_sendmsg+0x280/0x280 [ 220.978541][ T3551] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 220.985247][ T3551] ? __fdget+0x1a1/0x230 [ 220.989519][ T3551] __x64_sys_sendmsg+0x201/0x2d0 [ 220.994563][ T3551] ? __kasan_check_write+0x14/0x20 [ 220.999716][ T3551] ? ___sys_sendmsg+0x2e0/0x2e0 [ 221.004586][ T3551] ? __kasan_check_read+0x11/0x20 [ 221.009646][ T3551] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 221.015302][ T3551] do_syscall_64+0x31/0x40 [ 221.019740][ T3551] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 221.025644][ T3551] RIP: 0033:0x7f2d70655b19 [ 221.030083][ T3551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.049710][ T3551] RSP: 002b:00007f2d6f06b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.058144][ T3551] RAX: ffffffffffffffda RBX: 00007f2d708dc180 RCX: 00007f2d70655b19 [ 221.066129][ T3551] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 221.074120][ T3551] RBP: 00007f2d6f06b090 R08: 0000000000000000 R09: 0000000000000000 [ 221.082119][ T3551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.090111][ T3551] R13: 00007f2d708dc218 R14: 00007f2d708dc180 R15: 00007fff284395b8 [ 221.189262][ T3557] smpboot: CPU 1 is now offline [ 221.195908][ T3557] x86: Booting SMP configuration: [ 221.201439][ T3557] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 221.208371][ T0] kvm-clock: cpu 1, msr 6e7b041, secondary cpu clock [ 221.209458][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 221.306389][ T3528] EXT4-fs (loop5): orphan cleanup on readonly fs [ 221.313426][ T3528] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 221.341912][ T3528] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 221.352559][ T3528] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.849: Failed to acquire dquot type 0 [ 221.364404][ T3528] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 221.374122][ T3528] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 221.384048][ T3528] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.849: Failed to acquire dquot type 0 [ 221.395666][ T3528] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.849: bg 0: block 64: padding at end of block bitmap is not set [ 221.410147][ T3528] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 221.602167][ T3568] binder: 3564:3568 ioctl c018620c 200000000180 returned -22 [ 221.764535][ T3528] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 221.773822][ T3528] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 221.784043][ T3528] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.849: Failed to acquire dquot type 0 [ 221.796158][ T3528] EXT4-fs (loop5): 1 orphan inode deleted [ 221.802463][ T3528] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue [ 222.453363][ T3577] EXT4-fs (loop6): Unrecognized mount option "appraise" or missing value [ 222.501586][ T3582] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 222.511561][ T3582] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 222.621212][ T3582] cgroup: release_agent respecified [ 222.639726][ T3591] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 222.648915][ T3591] EXT4-fs (loop5): failed to initialize system zone (-117) [ 222.656245][ T3591] EXT4-fs (loop5): mount failed [ 223.631874][ T3605] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 225.359782][ T3638] binder: 3632:3638 ioctl c018620c 200000000180 returned -22 [ 225.909998][ T3643] binder: 3639:3643 ioctl c018620c 200000000180 returned -22 [ 226.335861][ T3650] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 226.430779][ T24] audit: type=1400 audit(1793725487.950:354): avc: denied { setopt } for pid=3648 comm="syz.5.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.933330][ T3675] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 228.007919][ T3689] binder: 3682:3689 ioctl c018620c 200000000180 returned -22 [ 228.550785][ T3697] binder: 3691:3697 ioctl c018620c 200000000180 returned -22 [ 228.796545][ T3704] binder: 3698:3704 ioctl c018620c 200000000180 returned -22 [ 228.819371][ T3702] netlink: 'syz.4.897': attribute type 12 has an invalid length. [ 230.310681][ T3713] x_tables: duplicate underflow at hook 2 [ 230.331182][ T3717] capability: warning: `syz.4.901' uses 32-bit capabilities (legacy support in use) [ 230.439132][ T24] audit: type=1400 audit(1793725491.992:355): avc: denied { mounton } for pid=3714 comm="syz.4.901" path="/proc/581/task" dev="proc" ino=29355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 231.688323][ T3725] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 231.775842][ T24] audit: type=1400 audit(1793725493.270:356): avc: denied { associate } for pid=3714 comm="syz.4.901" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 231.821179][ T24] audit: type=1400 audit(1793725493.270:357): avc: denied { ioctl } for pid=3714 comm="syz.4.901" path="socket:[29808]" dev="sockfs" ino=29808 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 232.283294][ T3739] binder: 3729:3739 ioctl c018620c 200000000180 returned -22 [ 232.560009][ T3736] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.905: bg 0: block 104: invalid block bitmap [ 232.574231][ T3736] EXT4-fs error (device loop6) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 232.583544][ T3736] EXT4-fs error (device loop6): ext4_free_branches:1026: inode #11: comm syz.6.905: invalid indirect mapped block 1 (level 1) [ 232.597250][ T3736] EXT4-fs (loop6): 1 truncate cleaned up [ 232.603087][ T3736] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,,errors=continue [ 232.683248][ T3743] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 232.694735][ T3743] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.724367][ T3743] netlink: 76 bytes leftover after parsing attributes in process `syz.5.908'. [ 233.097925][ T3772] binder: 3760:3772 ioctl c018620c 200000000180 returned -22 [ 233.182989][ T3774] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 233.191914][ T3774] EXT4-fs (loop6): orphan cleanup on readonly fs [ 233.198755][ T3774] Quota error (device loop6): v2_read_file_info: Free block number too big (0 >= 0). [ 233.208709][ T3774] EXT4-fs warning (device loop6): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 233.223642][ T3774] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 233.230799][ T3774] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.917: bg 0: block 40: padding at end of block bitmap is not set [ 233.245442][ T3774] EXT4-fs error (device loop6) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 233.254854][ T3774] EXT4-fs (loop6): 1 truncate cleaned up [ 233.260712][ T3774] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 233.269928][ T3768] F2FS-fs (loop2): invalid crc value [ 233.286440][ T3768] F2FS-fs (loop2): Found nat_bits in checkpoint [ 233.316976][ C1] process 3751 (syz.1.910) no longer affine to cpu1 [ 233.328816][ T3782] smpboot: CPU 1 is now offline [ 233.344719][ T3782] x86: Booting SMP configuration: [ 233.349830][ T3782] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 233.356266][ T0] kvm-clock: cpu 1, msr 6e7b041, secondary cpu clock [ 233.357246][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 233.388606][ T3768] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 233.505702][ T24] audit: type=1400 audit(1793725494.911:358): avc: denied { watch watch_reads } for pid=3767 comm="syz.2.915" path="/182/file0/file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.776474][ T282] attempt to access beyond end of device [ 233.776474][ T282] loop2: rw=2049, want=45104, limit=40427 [ 233.879689][ T3794] binder: 3791:3794 ioctl c018620c 200000000180 returned -22 [ 233.923592][ T3795] binder: 3789:3795 ioctl c018620c 200000000180 returned -22 [ 234.467984][ T3812] binder: 3803:3812 ioctl c018620c 200000000180 returned -22 [ 234.756344][ T3815] smpboot: CPU 1 is now offline [ 234.766904][ T3809] netlink: 'syz.5.927': attribute type 4 has an invalid length. [ 234.780656][ T3809] netlink: 'syz.5.927': attribute type 4 has an invalid length. [ 234.838262][ T770] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 234.941489][ T3817] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 234.968458][ T3817] F2FS-fs (loop1): Unrecognized mount option "discad_unit=block" or missing value [ 235.105426][ T770] usb 5-1: Using ep0 maxpacket: 16 [ 235.251599][ T770] usb 5-1: config 32 has an invalid interface number: 64 but max is 0 [ 235.276781][ T770] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 235.304683][ T770] usb 5-1: config 32 has no interface number 0 [ 235.322248][ T770] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 235.348707][ T770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.371668][ T3827] exfat: Bad value for 'uid' [ 235.415842][ T770] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 235.444305][ T770] uvcvideo: No valid video chain found. [ 235.558294][ T3836] device-mapper: table: 253:6: snapshot: Cannot get origin device [ 235.615816][ T3836] device-mapper: ioctl: error adding target to table [ 235.762534][ T309] usb 5-1: USB disconnect, device number 4 [ 235.780408][ T3841] device-mapper: table: 253:6: crypt: Device lookup failed [ 235.813479][ T3841] device-mapper: ioctl: error adding target to table [ 235.915148][ T3848] rtc_cmos 00:00: Alarms can be up to one day in the future [ 236.410526][ T3851] binder: 3849:3851 ioctl c018620c 200000000180 returned -22 [ 236.687429][ T3834] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 236.717190][ T3834] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 236.736893][ T3834] F2FS-fs (loop2): Unrecognized mount option "00000000000000000000006" or missing value [ 236.838103][ T3858] EXT4-fs warning (device sda1): __ext4_ioctl:896: Setting inode version is not supported with metadata_csum enabled. [ 239.147957][ T3879] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 239.169442][ T3877] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 239.217870][ T3877] EXT4-fs (loop1): failed to initialize system zone (-117) [ 239.298653][ T3877] EXT4-fs (loop1): mount failed [ 239.634107][ T24] audit: type=1400 audit(1793725500.630:359): avc: denied { connect } for pid=3888 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 239.675527][ T3889] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 257 (only 8 groups) [ 239.981614][ T24] audit: type=1400 audit(1793725500.945:360): avc: denied { create } for pid=3896 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.082017][ T24] audit: type=1400 audit(1793725500.982:361): avc: denied { create } for pid=3896 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.111006][ T3901] x_tables: duplicate underflow at hook 1 [ 240.205499][ T24] audit: type=1400 audit(1793725500.982:362): avc: denied { setopt } for pid=3896 comm="syz.1.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.023578][ T3867] F2FS-fs (loop4): invalid crc value [ 241.054238][ T2361] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 241.064635][ T3867] F2FS-fs (loop4): Found nat_bits in checkpoint [ 241.814017][ T3867] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 242.001911][ T3923] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 242.033981][ T3928] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.056205][ T3923] EXT4-fs error (device loop2): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 242.097925][ T3931] EXT4-fs (loop5): Ignoring removed bh option [ 242.110933][ T3931] EXT4-fs warning (device loop5): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 242.122672][ T2361] usb 2-1: unable to get BOS descriptor or descriptor too short [ 242.130764][ T3923] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4255 with max blocks 1 with error 28 [ 242.143641][ T3928] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 242.165032][ T3931] EXT4-fs warning (device loop5): dx_probe:848: Enable large directory feature to access it [ 242.263306][ T3931] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.962: Corrupt directory, running e2fsck is recommended [ 242.296545][ T2361] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.306854][ T3923] EXT4-fs (loop2): This should not happen!! Data will be lost [ 242.306854][ T3923] [ 242.957972][ T3931] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 242.972885][ T3931] EXT4-fs error (device loop5): ext4_iget_extra_inode:4692: inode #15: comm syz.5.962: corrupted in-inode xattr [ 242.992496][ T3923] EXT4-fs (loop2): Total free blocks count 0 [ 243.010328][ T3931] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.962: couldn't read orphan inode 15 (err -117) [ 243.027618][ T3923] EXT4-fs (loop2): Free/Dirty block details [ 243.125335][ T2361] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 243.139995][ T3931] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,nombcache,jqfmt=vfsold,nolazytime,grpjquota=.dax=always,resuid=0x0000000000000000,bh,minixdf,,,errors=continue [ 244.986015][ T2361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 245.000253][ T3923] EXT4-fs (loop2): free_blocks=2415919504 [ 245.014341][ T2361] usb 2-1: Product: syz [ 245.021058][ T2361] usb 2-1: Manufacturer: syz [ 245.025878][ T3923] EXT4-fs (loop2): dirty_blocks=32 [ 245.052863][ T3923] EXT4-fs (loop2): Block reservation details [ 245.059056][ T2361] usb 2-1: can't set config #1, error -71 [ 245.078933][ T2361] usb 2-1: USB disconnect, device number 3 [ 245.084979][ T3923] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 245.925898][ T24] audit: type=1400 audit(1793725506.448:363): avc: denied { create } for pid=3951 comm="syz.6.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 246.062422][ T3954] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 246.095823][ T3954] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.126916][ T7] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 247.156434][ T7] EXT4-fs (loop2): This should not happen!! Data will be lost [ 247.156434][ T7] [ 247.182138][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 247.211897][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.241197][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.267617][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.261954][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.297917][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.323648][ T3954] netlink: 76 bytes leftover after parsing attributes in process `syz.4.967'. [ 249.150452][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 249.209691][ T3968] rtc_cmos 00:00: Alarms can be up to one day in the future [ 249.938792][ T24] audit: type=1326 audit(1793725510.162:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.6.974" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe110e19b19 code=0x0 [ 249.973188][ T3974] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 249.996866][ T3974] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.023041][ T24] audit: type=1400 audit(1793725510.208:365): avc: denied { watch } for pid=3981 comm="syz.2.975" path="/191" dev="tmpfs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 250.072625][ T3974] netlink: 76 bytes leftover after parsing attributes in process `syz.4.972'. [ 250.132279][ T3986] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 250.279208][ T3992] mmap: syz.1.979 (3992): VmData 29466624 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 250.293805][ T3982] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 250.309328][ T3982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 250.326353][ T3982] F2FS-fs (loop2): invalid crc value [ 250.346724][ T3982] F2FS-fs (loop2): Found nat_bits in checkpoint [ 250.373278][ T4002] xt_hashlimit: size too large, truncated to 1048576 [ 250.434371][ T3982] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 250.454796][ T3982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 254.279395][ T4032] binder: 4025:4032 ioctl c018620c 200000000180 returned -22 [ 254.287673][ T24] audit: type=1326 audit(1793725514.398:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.5.986" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6b841b19 code=0x7ffc0000 [ 254.328675][ T4028] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 254.367613][ T4028] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.386654][ T24] audit: type=1326 audit(1793725514.398:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.5.986" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6b841b19 code=0x7ffc0000 [ 254.507111][ T24] audit: type=1326 audit(1793725514.398:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.5.986" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6b841b19 code=0x7ffc0000 [ 254.533215][ T4028] netlink: 76 bytes leftover after parsing attributes in process `syz.1.988'. [ 254.625129][ T24] audit: type=1326 audit(1793725514.398:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.5.986" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6b841b19 code=0x7ffc0000 [ 254.703112][ T4040] netlink: 'syz.1.990': attribute type 12 has an invalid length. [ 254.723281][ T24] audit: type=1326 audit(1793725514.398:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.5.986" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b6b841b19 code=0x7ffc0000 [ 254.869662][ T24] audit: type=1326 audit(1793725514.398:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.5.986" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6b841b19 code=0x7ffc0000 [ 256.599643][ T24] audit: type=1326 audit(1793725514.398:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.5.986" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6b841b19 code=0x7ffc0000 [ 257.498456][ T24] audit: type=1326 audit(1793725514.398:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.5.986" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6b841b19 code=0x7ffc0000 [ 257.610503][ T4051] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 257.645919][ T4051] System zones: 1-12 [ 257.651001][ T4056] netlink: 'syz.6.995': attribute type 12 has an invalid length. [ 257.674671][ T4051] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.994: missing EA_INODE flag [ 257.698008][ T24] audit: type=1326 audit(1793725514.398:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.5.986" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6b841b19 code=0x7ffc0000 [ 257.754838][ T4051] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.994: error while reading EA inode 12 err=-117 [ 257.819494][ T4051] EXT4-fs (loop1): 1 orphan inode deleted [ 257.826487][ T24] audit: type=1326 audit(1793725514.398:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.5.986" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7b6b841b19 code=0x7ffc0000 [ 257.859985][ T4051] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue [ 258.849757][ T4070] binder: 4065:4070 ioctl c018620c 200000000180 returned -22 [ 258.864494][ T4068] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 258.922182][ T4068] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.997065][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 259.010636][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.025044][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 259.039229][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.060356][ T4081] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 259.079317][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.093790][ T4081] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003e01c, mo2=0002] [ 259.111285][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.123967][ T4081] System zones: 1-12 [ 259.807233][ T4081] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #11: comm syz.5.1001: invalid indirect mapped block 8 (level 2) [ 259.830122][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.896401][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.908928][ T4081] EXT4-fs (loop5): 1 truncate cleaned up [ 259.928754][ T4068] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1000'. [ 259.937776][ T4081] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,nojournal_checksum,nomblk_io_submit,data_err=ignore,max_batch_time=0x0000000000000001,nodelalloc,noauto_da_alloc,,errors=continue [ 261.809079][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 262.517162][ T4100] xt_l2tp: v2 doesn't support IP mode [ 265.458501][ T4113] binder: 4111:4113 ioctl c018620c 200000000180 returned -22 [ 265.615874][ T4127] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 266.306576][ T4127] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.429457][ T4127] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1017'. [ 267.359827][ T284] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 269.414642][ T4160] ip_tables: iptables: counters copy to user failed while replacing table [ 269.468336][ T284] usb 7-1: Using ep0 maxpacket: 16 [ 270.433214][ T4160] exfat: Unknown parameter '' [ 270.496245][ T284] usb 7-1: device descriptor read/all, error -71 [ 270.881001][ T4164] binder: 4162:4164 ioctl c018620c 200000000180 returned -22 [ 270.944691][ T24] kauditd_printk_skb: 57 callbacks suppressed [ 270.944701][ T24] audit: type=1400 audit(1793725530.049:433): avc: denied { map } for pid=4169 comm="syz.2.1031" path="socket:[32144]" dev="sockfs" ino=32144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 272.533072][ T24] audit: type=1400 audit(1793725530.141:434): avc: denied { read accept } for pid=4169 comm="syz.2.1031" path="socket:[32144]" dev="sockfs" ino=32144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 274.329661][ T24] audit: type=1400 audit(1793725533.180:435): avc: denied { search } for pid=4208 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.429319][ T24] audit: type=1400 audit(1793725533.208:436): avc: denied { read } for pid=4210 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.539509][ T24] audit: type=1400 audit(1793725533.208:437): avc: denied { open } for pid=4210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.650911][ T24] audit: type=1400 audit(1793725533.208:438): avc: denied { getattr } for pid=4210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.375120][ T24] audit: type=1400 audit(1793725533.208:439): avc: denied { getattr } for pid=4210 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 275.402485][ T4228] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,nogrpid,quota,,errors=continue [ 275.467486][ T4228] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.581255][ T4237] binder: 4235:4237 ioctl c018620c 200000000180 returned -22 [ 275.602512][ T24] audit: type=1400 audit(1793725533.236:440): avc: denied { read } for pid=4212 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 276.935346][ T24] audit: type=1400 audit(1793725533.236:441): avc: denied { open } for pid=4212 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.003137][ T24] audit: type=1400 audit(1793725533.347:442): avc: denied { write } for pid=4208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.051509][ T24] audit: type=1400 audit(1793725533.347:443): avc: denied { add_name } for pid=4208 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.192315][ T4246] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 277.472309][ T4253] netlink: 'syz.1.1048': attribute type 12 has an invalid length. [ 277.540482][ T24] audit: type=1400 audit(1793725533.347:444): avc: denied { create } for pid=4208 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 277.675483][ T24] audit: type=1400 audit(1793725533.347:445): avc: denied { write } for pid=4208 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=3699 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 278.328907][ T4266] ip_tables: iptables: counters copy to user failed while replacing table [ 279.171816][ T4275] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 279.192895][ T24] audit: type=1400 audit(1793725533.347:446): avc: denied { append } for pid=4208 comm="dhcpcd-run-hook" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=3699 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 279.296690][ T4275] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.990057][ T4275] fuse: Invalid rootmode [ 280.012033][ T24] audit: type=1400 audit(1793725533.411:447): avc: denied { remove_name } for pid=4220 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=3699 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.039604][ T4275] cgroup: release_agent respecified [ 280.146664][ T24] audit: type=1400 audit(1793725533.411:448): avc: denied { unlink } for pid=4220 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=3699 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 280.287319][ T4285] binder: 4283:4285 ioctl c018620c 200000000180 returned -22 [ 280.390102][ T24] audit: type=1400 audit(1793725534.344:449): avc: denied { search } for pid=4235 comm="syz.4.1044" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 280.514665][ T24] audit: type=1400 audit(1793725535.074:450): avc: denied { write } for pid=4227 comm="syz.6.1042" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 280.876166][ T4306] exfat: Bad value for 'gid' [ 280.908691][ T4305] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.928366][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 280.952827][ T4305] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 281.010375][ T4305] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 281.068832][ T4305] exFAT-fs (loop2): error, failed to bmap (inode : ffff888133a1ddb0 iblock : 0, err : -5) [ 281.103685][ T4305] exFAT-fs (loop2): Filesystem has been set read-only [ 281.254187][ T4324] netlink: 'syz.1.1062': attribute type 12 has an invalid length. [ 282.403077][ T4340] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 282.444609][ T4340] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.485608][ T4340] fuse: Invalid rootmode [ 282.507720][ T4340] cgroup: release_agent respecified [ 282.621602][ T4344] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.677899][ T4344] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue [ 282.742676][ T4351] binder: 4345:4351 ioctl c018620c 200000000180 returned -22 [ 282.993027][ T4353] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 283.042050][ T4353] EXT4-fs (loop2): failed to initialize system zone (-117) [ 283.076917][ T4353] EXT4-fs (loop2): mount failed [ 283.255821][ T4362] x86: Booting SMP configuration: [ 283.261011][ T4362] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 283.267629][ T0] kvm-clock: cpu 1, msr 6e7b041, secondary cpu clock [ 283.268874][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 283.345468][ T4365] binder: 4359:4365 ioctl c018620c 200000000180 returned -22 [ 283.511457][ T4369] netlink: 'syz.6.1073': attribute type 12 has an invalid length. [ 283.913038][ T4374] EXT4-fs (loop5): Unrecognized mount option "appraise" or missing value [ 284.383862][ T4385] ip_tables: iptables: counters copy to user failed while replacing table [ 284.694973][ T4388] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 284.706316][ T4388] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.957566][ T4401] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1078'. [ 285.954561][ T4406] rtc_cmos 00:00: Alarms can be up to one day in the future [ 286.118322][ T4412] netlink: 'syz.6.1084': attribute type 12 has an invalid length. [ 287.305469][ T4439] binder: 4433:4439 ioctl c018620c 200000000180 returned -22 [ 288.491149][ T4446] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 288.518821][ T4446] EXT4-fs (loop1): failed to initialize system zone (-117) [ 288.531552][ T4446] EXT4-fs (loop1): mount failed [ 289.409651][ T4456] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 289.428634][ T4456] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.903507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.914343][ T4467] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1094'. [ 290.730598][ T4478] ip_tables: iptables: counters copy to user failed while replacing table [ 291.095082][ T4490] netlink: 'syz.1.1103': attribute type 12 has an invalid length. [ 291.316409][ T4188] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 291.575182][ T4188] usb 6-1: Using ep0 maxpacket: 16 [ 291.635765][ T4504] rtc_cmos 00:00: Alarms can be up to one day in the future [ 292.493459][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 292.493471][ T24] audit: type=1400 audit(1793725551.126:457): avc: denied { unmount } for pid=4506 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 292.658087][ T4188] usb 6-1: config 32 has an invalid interface number: 64 but max is 0 [ 292.666340][ T4188] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 292.676540][ T4188] usb 6-1: config 32 has no interface number 0 [ 292.682745][ T4188] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 292.691800][ T4188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.738919][ T4188] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 292.745901][ T4188] uvcvideo: No valid video chain found. [ 292.884167][ T4519] netlink: 'syz.6.1114': attribute type 12 has an invalid length. [ 293.058578][ T4188] usb 6-1: USB disconnect, device number 6 [ 293.667912][ T4534] binder: 4533:4534 ioctl c018620c 200000000180 returned -22 [ 293.738086][ T4540] ip_tables: iptables: counters copy to user failed while replacing table [ 293.811529][ T4540] exfat: Unknown parameter '' [ 301.616112][ T4616] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 301.656070][ T4616] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue [ 302.581962][ T4644] ip_tables: iptables: counters copy to user failed while replacing table [ 302.860159][ T4650] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 302.894364][ T4650] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 303.039084][ T4650] fuse: Unknown parameter 'user_i00000000000000000000' [ 303.239410][ T24] audit: type=1326 audit(1793725561.803:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1150" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79d08b19 code=0x7ffc0000 [ 303.371333][ T4650] cgroup: release_agent respecified [ 303.553843][ T24] audit: type=1326 audit(1793725561.803:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1150" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79d08b19 code=0x7ffc0000 [ 303.772962][ T24] audit: type=1326 audit(1793725561.861:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1150" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79d08b19 code=0x7ffc0000 [ 303.962422][ T24] audit: type=1326 audit(1793725561.861:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1150" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79d08b19 code=0x7ffc0000 [ 304.013990][ T24] audit: type=1326 audit(1793725561.861:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1150" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc79d08b19 code=0x7ffc0000 [ 304.045790][ T24] audit: type=1326 audit(1793725561.871:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1150" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79d08b19 code=0x7ffc0000 [ 304.153187][ T24] audit: type=1326 audit(1793725561.871:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1150" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79d08b19 code=0x7ffc0000 [ 304.362431][ T24] audit: type=1326 audit(1793725561.871:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1150" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79d08b19 code=0x7ffc0000 [ 304.401296][ T24] audit: type=1326 audit(1793725561.871:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1150" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc79d08b19 code=0x7ffc0000 [ 304.457942][ T24] audit: type=1326 audit(1793725561.871:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4653 comm="syz.2.1150" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7efc79d08b19 code=0x7ffc0000 [ 305.710939][ T4683] smpboot: CPU 1 is now offline [ 306.727648][ T4696] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 306.831755][ T4696] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue [ 307.020194][ T4706] netlink: 'syz.4.1163': attribute type 12 has an invalid length. [ 311.314460][ T4736] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 311.421626][ T4736] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue [ 311.544685][ T284] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 315.317162][ T284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.652525][ T284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 315.696944][ T284] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.721302][ T4774] binder: 4769:4774 ioctl c018620c 200000000180 returned -22 [ 315.787458][ T284] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 315.835617][ T284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.896067][ T284] usb 5-1: can't set config #1, error -71 [ 315.926403][ T284] usb 5-1: USB disconnect, device number 5 [ 316.887454][ T4796] rtc_cmos 00:00: Alarms can be up to one day in the future [ 320.676085][ T4821] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 320.767927][ T4821] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue [ 323.826025][ T4187] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 324.606865][ T4187] usb 6-1: Using ep0 maxpacket: 16 [ 325.390216][ T4187] usb 6-1: config 32 has an invalid interface number: 64 but max is 0 [ 325.452365][ T4187] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 325.492893][ T4187] usb 6-1: config 32 has no interface number 0 [ 325.517464][ T4187] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 325.555963][ T4187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.620270][ T4187] uvcvideo: Found UVC 0.00 device (0bd3:0569) [ 325.647258][ T4187] uvcvideo: No valid video chain found. [ 326.362180][ T4187] usb 6-1: USB disconnect, device number 7 [ 327.171086][ T24] kauditd_printk_skb: 63 callbacks suppressed [ 327.171096][ T24] audit: type=1400 audit(1793725585.440:531): avc: denied { ioctl } for pid=4872 comm="syz.6.1214" path="socket:[35397]" dev="sockfs" ino=35397 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 327.362809][ T24] audit: type=1400 audit(1793725585.628:532): avc: denied { mounton } for pid=4878 comm="syz.4.1216" path="/234/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 327.467701][ T4882] FAT-fs (loop6): IO charset macturname=winnt not found [ 327.499793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 327.508309][ T4884] erofs: (device loop4): mounted with root inode @ nid 36. [ 327.518807][ T4887] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1218'. [ 329.761115][ T4904] binder: 4901:4904 ioctl c018620c 200000000180 returned -22 [ 329.823104][ T4910] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1227'. [ 330.582176][ T4189] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 331.310800][ T4913] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 331.322650][ T4923] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.330487][ T4923] IPv6: Can't replace route, no match found [ 331.336533][ T4913] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.032444][ T4913] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1229'. [ 332.100437][ T4930] FAULT_INJECTION: forcing a failure. [ 332.100437][ T4930] name failslab, interval 1, probability 0, space 0, times 0 [ 332.113087][ T4930] CPU: 0 PID: 4930 Comm: syz.5.1231 Tainted: G W syzkaller #0 [ 332.121829][ T4930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 332.131870][ T4930] Call Trace: [ 332.135150][ T4930] __dump_stack+0x21/0x24 [ 332.139475][ T4930] dump_stack_lvl+0x1a7/0x208 [ 332.144139][ T4930] ? show_regs_print_info+0x18/0x18 [ 332.149326][ T4930] ? handle_pte_fault+0x153b/0x3910 [ 332.154509][ T4930] ? kvm_sched_clock_read+0x18/0x40 [ 332.159691][ T4930] dump_stack+0x15/0x1c [ 332.163832][ T4930] should_fail+0x3ab/0x500 [ 332.168240][ T4930] ? avc_alloc_node+0x83/0x340 [ 332.172990][ T4930] __should_failslab+0xa4/0xe0 [ 332.177743][ T4930] should_failslab+0x9/0x20 [ 332.182332][ T4930] kmem_cache_alloc+0x3d/0x2d0 [ 332.187080][ T4930] ? prep_new_page+0x176/0x190 [ 332.191833][ T4930] avc_alloc_node+0x83/0x340 [ 332.196415][ T4930] ? avc_xperms_free+0x270/0x270 [ 332.201339][ T4930] ? debug_smp_processor_id+0x17/0x20 [ 332.206708][ T4930] avc_update_node+0x50/0x750 [ 332.211369][ T4930] ? stack_trace_save+0xa6/0xf0 [ 332.216204][ T4930] ? stack_trace_snprint+0xe0/0xe0 [ 332.221390][ T4930] avc_denied+0x133/0x1b0 [ 332.225720][ T4930] avc_has_perm+0x363/0x3d0 [ 332.230244][ T4930] ? rotate_reclaimable_page+0x4b0/0x4b0 [ 332.235900][ T4930] ? avc_has_perm_noaudit+0x3b0/0x3b0 [ 332.241273][ T4930] ? lru_cache_add+0x15f/0x380 [ 332.246038][ T4930] selinux_socket_sendmsg+0x22f/0x340 [ 332.251411][ T4930] ? selinux_socket_accept+0x570/0x570 [ 332.256874][ T4930] ? put_vma+0x82/0xa0 [ 332.260950][ T4930] ? __fget_files+0x2e1/0x340 [ 332.265630][ T4930] ? check_stack_object+0x10f/0x150 [ 332.270833][ T4930] security_socket_sendmsg+0x72/0xa0 [ 332.276121][ T4930] __sys_sendto+0x401/0x620 [ 332.280617][ T4930] ? __ia32_sys_getpeername+0x90/0x90 [ 332.286007][ T4930] ? mutex_lock+0x92/0xf0 [ 332.290347][ T4930] ? do_user_addr_fault+0x775/0xe20 [ 332.295535][ T4930] ? debug_smp_processor_id+0x17/0x20 [ 332.300895][ T4930] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 332.306948][ T4930] __x64_sys_sendto+0xe5/0x100 [ 332.311700][ T4930] do_syscall_64+0x31/0x40 [ 332.316133][ T4930] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 332.322027][ T4930] RIP: 0033:0x7f7b6b80234e [ 332.326447][ T4930] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.346066][ T4930] RSP: 002b:00007f7b6a255e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 332.354489][ T4930] RAX: ffffffffffffffda RBX: 00007f7b6a2576c0 RCX: 00007f7b6b80234e [ 332.362456][ T4930] RDX: 0000000000000020 RSI: 00007f7b6a256000 RDI: 0000000000000009 [ 332.370440][ T4930] RBP: 0000000000000000 R08: 00007f7b6a255f04 R09: 000000000000000c [ 332.378407][ T4930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 332.386376][ T4930] R13: 00007f7b6a255f58 R14: 00007f7b6a256000 R15: 0000000000000000 [ 332.394799][ T4189] usb 5-1: Using ep0 maxpacket: 16 [ 333.027855][ T4930] xt_l2tp: wrong L2TP version: 0 [ 333.034554][ T24] audit: type=1400 audit(1793725591.292:533): avc: denied { write } for pid=4921 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 333.165160][ T4189] usb 5-1: device descriptor read/all, error -71 [ 333.398293][ T4937] rtc_cmos 00:00: Alarms can be up to one day in the future [ 337.168886][ T4953] netlink: 'syz.2.1239': attribute type 12 has an invalid length. [ 337.190904][ T4957] netlink: 'syz.6.1241': attribute type 12 has an invalid length. [ 337.211573][ T24] audit: type=1400 audit(1793725595.488:534): avc: denied { getopt } for pid=4960 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 337.255257][ T4964] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.262440][ T4964] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.303583][ T4966] binder: 4958:4966 ioctl c018620c 200000000180 returned -22 [ 337.994362][ T24] audit: type=1400 audit(1793725595.508:535): avc: denied { read } for pid=4960 comm="syz.5.1242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.064488][ T4975] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 338.081859][ T24] audit: type=1400 audit(1793725596.267:536): avc: denied { connect } for pid=4967 comm="syz.6.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 338.132174][ T4975] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.283822][ T24] audit: type=1400 audit(1793725596.267:537): avc: denied { map } for pid=4967 comm="syz.6.1244" path="socket:[35773]" dev="sockfs" ino=35773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 338.336514][ T4975] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.343567][ T4975] bridge0: port 2(bridge_slave_1) entered listening state [ 338.350762][ T4975] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.357797][ T4975] bridge0: port 1(bridge_slave_0) entered listening state [ 338.444242][ T24] audit: type=1400 audit(1793725596.267:538): avc: denied { accept } for pid=4967 comm="syz.6.1244" path="socket:[35773]" dev="sockfs" ino=35773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 338.524580][ T4994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'. [ 338.572387][ T4995] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1246'. [ 340.364908][ T5003] netlink: 'syz.4.1254': attribute type 12 has an invalid length. [ 341.229983][ T5000] ip_tables: iptables: counters copy to user failed while replacing table [ 342.794871][ T5017] syz.1.1258 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 343.795144][ T5025] binder: 5020:5025 ioctl c018620c 200000000180 returned -22 [ 343.896909][ T5029] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 343.952603][ T5029] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.072985][ T5029] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1263'. [ 344.209497][ T5044] netlink: 'syz.4.1267': attribute type 12 has an invalid length. [ 347.238848][ T5063] ip_tables: iptables: counters copy to user failed while replacing table [ 347.258036][ T5063] ip_tables: iptables: counters copy to user failed while replacing table [ 347.349519][ T5053] FAT-fs (loop4): Unrecognized mount option "ÿ" or missing value [ 348.294646][ T5053] ================================================================== [ 348.302734][ T5053] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0 [ 348.310869][ T5053] Read of size 4 at addr ffff888118a31470 by task syz.4.1270/5053 [ 348.318651][ T5053] [ 348.320974][ T5053] CPU: 0 PID: 5053 Comm: syz.4.1270 Tainted: G W syzkaller #0 [ 348.329721][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 348.339781][ T5053] Call Trace: [ 348.343064][ T5053] __dump_stack+0x21/0x24 [ 348.347381][ T5053] dump_stack_lvl+0x1a7/0x208 [ 348.352341][ T5053] ? show_regs_print_info+0x18/0x18 [ 348.357545][ T5053] ? thaw_kernel_threads+0x220/0x220 [ 348.362829][ T5053] print_address_description+0x7f/0x2c0 [ 348.368383][ T5053] ? unaccount_page_cache_page+0x9dc/0xac0 [ 348.374194][ T5053] kasan_report+0x100/0x140 [ 348.378697][ T5053] ? xas_store+0xd0c/0x18d0 [ 348.383200][ T5053] ? unaccount_page_cache_page+0x9dc/0xac0 [ 348.388996][ T5053] __asan_report_load4_noabort+0x14/0x20 [ 348.394638][ T5053] unaccount_page_cache_page+0x9dc/0xac0 [ 348.400265][ T5053] __delete_from_page_cache+0xc3/0x470 [ 348.405715][ T5053] ? memset+0x35/0x40 [ 348.409692][ T5053] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 348.416718][ T5053] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 348.422305][ T5053] ? __kasan_check_read+0x11/0x20 [ 348.427340][ T5053] ? workingset_eviction+0x3dc/0x940 [ 348.432619][ T5053] __remove_mapping+0x581/0x6b0 [ 348.437463][ T5053] shrink_page_list+0x21ee/0x4160 [ 348.442487][ T5053] ? reclaim_clean_pages_from_list+0x740/0x740 [ 348.448643][ T5053] ? shrink_inactive_list+0xef0/0xef0 [ 348.454004][ T5053] ? __count_memcg_events+0x89/0x210 [ 348.459302][ T5053] shrink_inactive_list+0x90c/0xef0 [ 348.464505][ T5053] ? __this_cpu_preempt_check+0x13/0x20 [ 348.470049][ T5053] ? shrink_active_list+0xe00/0xe00 [ 348.475244][ T5053] ? blk_flush_plug_list+0x40b/0x450 [ 348.480535][ T5053] ? __kasan_check_read+0x11/0x20 [ 348.485545][ T5053] ? __kasan_check_read+0x11/0x20 [ 348.490556][ T5053] ? lruvec_lru_size+0x230/0x250 [ 348.495533][ T5053] ? blk_start_plug+0x5a/0x170 [ 348.500313][ T5053] shrink_lruvec+0x281a/0x2ef0 [ 348.505068][ T5053] ? exc_page_fault+0x67/0xc0 [ 348.509732][ T5053] ? asm_exc_page_fault+0x1e/0x30 [ 348.514748][ T5053] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 348.520562][ T5053] ? __kasan_check_write+0x14/0x20 [ 348.525691][ T5053] ? down_read_trylock+0x106/0x160 [ 348.530793][ T5053] ? __init_rwsem+0x1c0/0x1c0 [ 348.535486][ T5053] ? mem_cgroup_shrink_node+0x4c0/0x4c0 [ 348.541040][ T5053] ? wake_up_process+0x10/0x20 [ 348.545796][ T5053] ? __kasan_check_write+0x14/0x20 [ 348.550915][ T5053] ? up_read+0x12/0x50 [ 348.554971][ T5053] ? shrink_slab+0x671/0x830 [ 348.559764][ T5053] ? __kasan_check_write+0x14/0x20 [ 348.564873][ T5053] ? __kasan_check_read+0x11/0x20 [ 348.569888][ T5053] ? inactive_is_low+0x17a/0x2f0 [ 348.574820][ T5053] ? __kasan_check_write+0x14/0x20 [ 348.579933][ T5053] shrink_node+0xee0/0x2690 [ 348.584470][ T5053] do_try_to_free_pages+0x602/0x1590 [ 348.589760][ T5053] ? try_to_free_pages+0xc20/0xc20 [ 348.594871][ T5053] ? __alloc_pages_nodemask+0x29a/0x640 [ 348.600415][ T5053] try_to_free_mem_cgroup_pages+0x261/0x610 [ 348.606301][ T5053] ? shrink_lruvec+0x2ef0/0x2ef0 [ 348.611247][ T5053] ? _raw_spin_unlock_irq+0x4e/0x70 [ 348.616435][ T5053] ? psi_memstall_enter+0xe6/0x150 [ 348.621808][ T5053] try_charge+0x426/0x1580 [ 348.626234][ T5053] ? __memcg_kmem_charge+0x150/0x150 [ 348.631542][ T5053] ? __kasan_check_read+0x11/0x20 [ 348.636564][ T5053] ? __vm_enough_memory+0x11a/0x2d0 [ 348.641762][ T5053] ? __kasan_check_write+0x14/0x20 [ 348.646869][ T5053] ? shmem_alloc_and_acct_page+0x5f2/0x840 [ 348.652686][ T5053] ? get_mem_cgroup_from_mm+0x194/0x1b0 [ 348.658241][ T5053] __mem_cgroup_charge+0x148/0x6d0 [ 348.663365][ T5053] shmem_add_to_page_cache+0x569/0xe10 [ 348.668824][ T5053] ? xas_create+0x12ae/0x1430 [ 348.673493][ T5053] ? shmem_alloc_page+0x380/0x380 [ 348.678535][ T5053] ? find_lock_entry+0x4b/0x200 [ 348.683384][ T5053] shmem_getpage_gfp+0x907/0x20f0 [ 348.688430][ T5053] shmem_fault+0x2b5/0x650 [ 348.692848][ T5053] ? shmem_write_end+0x600/0x600 [ 348.697778][ T5053] ? shmem_getpage_gfp+0x1ecd/0x20f0 [ 348.703058][ T5053] ? vma_data_pages+0xfc/0x130 [ 348.707816][ T5053] handle_pte_fault+0x2466/0x3910 [ 348.712836][ T5053] handle_mm_fault+0xf86/0x1720 [ 348.717678][ T5053] ? can_reuse_spf_vma+0xe0/0xe0 [ 348.722610][ T5053] ? follow_page_mask+0x7ac/0x1150 [ 348.727715][ T5053] __get_user_pages+0xbf8/0x1400 [ 348.732648][ T5053] ? populate_vma_page_range+0xf0/0xf0 [ 348.738114][ T5053] ? __kasan_check_write+0x14/0x20 [ 348.743226][ T5053] get_dump_page+0x153/0x5c0 [ 348.747806][ T5053] ? __mm_populate+0x420/0x420 [ 348.752562][ T5053] ? wait_for_dump_helpers+0x380/0x380 [ 348.758015][ T5053] dump_user_range+0x3c/0x1a0 [ 348.762683][ T5053] elf_core_dump+0x27af/0x2c20 [ 348.767446][ T5053] ? load_elf_binary+0x2910/0x2910 [ 348.772565][ T5053] ? __fsnotify_parent+0x6db/0x7c0 [ 348.777676][ T5053] ? do_truncate+0x1c6/0x240 [ 348.782255][ T5053] ? putname+0xfe/0x150 [ 348.786396][ T5053] ? __kasan_check_read+0x11/0x20 [ 348.791411][ T5053] ? __ia32_sys_unshare+0x40/0x40 [ 348.796429][ T5053] do_coredump+0x1be6/0x2910 [ 348.801014][ T5053] ? simple_acl_create+0x1c0/0x1c0 [ 348.806118][ T5053] ? debug_smp_processor_id+0x17/0x20 [ 348.811481][ T5053] ? kmem_cache_free+0x100/0x2d0 [ 348.816405][ T5053] ? ____kasan_slab_free+0x130/0x160 [ 348.821683][ T5053] ? get_signal+0xbdb/0x1300 [ 348.826267][ T5053] ? kmem_cache_free+0x100/0x2d0 [ 348.831200][ T5053] get_signal+0xf4c/0x1300 [ 348.835621][ T5053] arch_do_signal_or_restart+0xe7/0x11b0 [ 348.841243][ T5053] ? __bad_area_nosemaphore+0x2ca/0x410 [ 348.846780][ T5053] ? __ia32_sys_rt_sigreturn+0x730/0x730 [ 348.852405][ T5053] ? bad_area+0x6a/0x80 [ 348.856553][ T5053] exit_to_user_mode_loop+0xa2/0xe0 [ 348.861741][ T5053] exit_to_user_mode_prepare+0x76/0xa0 [ 348.867214][ T5053] irqentry_exit_to_user_mode+0x9/0x10 [ 348.872753][ T5053] irqentry_exit+0x12/0x60 [ 348.877164][ T5053] exc_page_fault+0x67/0xc0 [ 348.881663][ T5053] ? asm_exc_page_fault+0x8/0x30 [ 348.886589][ T5053] asm_exc_page_fault+0x1e/0x30 [ 348.891431][ T5053] RIP: 0033:0x7f2d706348b9 [ 348.895843][ T5053] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 348.915439][ T5053] RSP: 002b:00007f2d6f0ace58 EFLAGS: 00010283 [ 348.921504][ T5053] RAX: 0000000000000000 RBX: 00007f2d6f0acee0 RCX: 0000000000000000 [ 348.929471][ T5053] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000000 [ 348.937441][ T5053] RBP: 00002000000007c0 R08: 00002000000005c0 R09: 0000000000000000 [ 348.945408][ T5053] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000200000000540 [ 348.953376][ T5053] R13: 00007f2d6f0acea0 R14: 0000000000000000 R15: 0000000000000000 [ 348.961352][ T5053] [ 348.963679][ T5053] Allocated by task 4850: [ 348.968004][ T5053] __kasan_kmalloc+0xd4/0x100 [ 348.972673][ T5053] __kmalloc+0x19f/0x330 [ 348.976916][ T5053] __register_sysctl_table+0xeb/0x1240 [ 348.982366][ T5053] register_net_sysctl+0x2c/0x40 [ 348.987312][ T5053] __devinet_sysctl_register+0x2bd/0x390 [ 348.992933][ T5053] devinet_sysctl_register+0x169/0x1e0 [ 348.998380][ T5053] inetdev_init+0x26c/0x490 [ 349.002876][ T5053] inetdev_event+0x1f4/0x1010 [ 349.007568][ T5053] raw_notifier_call_chain+0x90/0x100 [ 349.012933][ T5053] call_netdevice_notifiers+0x119/0x190 [ 349.018470][ T5053] register_netdevice+0x100a/0x13a0 [ 349.023664][ T5053] __ip_tunnel_create+0x2c7/0x390 [ 349.028680][ T5053] ip_tunnel_init_net+0x2be/0x730 [ 349.033696][ T5053] ipgre_tap_init_net+0x29/0x30 [ 349.038542][ T5053] ops_init+0x2c0/0x470 [ 349.042693][ T5053] setup_net+0x34f/0xae0 [ 349.046927][ T5053] copy_net_ns+0x314/0x520 [ 349.051338][ T5053] create_new_namespaces+0x3a8/0x650 [ 349.056614][ T5053] copy_namespaces+0x1cc/0x220 [ 349.061368][ T5053] copy_process+0x13b7/0x3320 [ 349.066030][ T5053] kernel_clone+0x233/0x950 [ 349.070522][ T5053] __x64_sys_clone+0x198/0x210 [ 349.075275][ T5053] do_syscall_64+0x31/0x40 [ 349.079685][ T5053] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 349.085562][ T5053] [ 349.087900][ T5053] Freed by task 1912: [ 349.091874][ T5053] kasan_set_track+0x4a/0x70 [ 349.096477][ T5053] kasan_set_free_info+0x23/0x40 [ 349.101410][ T5053] ____kasan_slab_free+0x125/0x160 [ 349.106517][ T5053] __kasan_slab_free+0x11/0x20 [ 349.111268][ T5053] slab_free_freelist_hook+0xc5/0x190 [ 349.116634][ T5053] kmem_cache_free_bulk+0x4b3/0x6d0 [ 349.121828][ T5053] kfree_rcu_work+0x16f/0x890 [ 349.126495][ T5053] process_one_work+0x6fd/0xbc0 [ 349.131352][ T5053] worker_thread+0xa8e/0x13c0 [ 349.136042][ T5053] kthread+0x324/0x3b0 [ 349.140107][ T5053] ret_from_fork+0x1f/0x30 [ 349.144510][ T5053] [ 349.146832][ T5053] Last potentially related work creation: [ 349.152545][ T5053] kasan_save_stack+0x3a/0x60 [ 349.157215][ T5053] __kasan_record_aux_stack+0xd2/0x100 [ 349.162673][ T5053] kasan_record_aux_stack_noalloc+0xb/0x10 [ 349.168469][ T5053] kvfree_call_rcu+0x117/0x670 [ 349.173224][ T5053] drop_sysctl_table+0x2f5/0x430 [ 349.178154][ T5053] unregister_sysctl_table+0x75/0x120 [ 349.183522][ T5053] unregister_net_sysctl_table+0x15/0x20 [ 349.189154][ T5053] inetdev_event+0x788/0x1010 [ 349.193834][ T5053] raw_notifier_call_chain+0x90/0x100 [ 349.199197][ T5053] unregister_netdevice_many+0x100e/0x19f0 [ 349.204995][ T5053] ip_tunnel_delete_nets+0x343/0x390 [ 349.210270][ T5053] ipgre_tap_exit_batch_net+0x22/0x30 [ 349.215632][ T5053] cleanup_net+0x5fe/0xb80 [ 349.220125][ T5053] process_one_work+0x6fd/0xbc0 [ 349.224966][ T5053] worker_thread+0xa8e/0x13c0 [ 349.229634][ T5053] kthread+0x324/0x3b0 [ 349.233695][ T5053] ret_from_fork+0x1f/0x30 [ 349.238112][ T5053] [ 349.240445][ T5053] Second to last potentially related work creation: [ 349.247025][ T5053] kasan_save_stack+0x3a/0x60 [ 349.251692][ T5053] __kasan_record_aux_stack+0xd2/0x100 [ 349.257156][ T5053] kasan_record_aux_stack_noalloc+0xb/0x10 [ 349.262957][ T5053] insert_work+0x51/0x320 [ 349.267281][ T5053] __queue_work+0x91f/0xca0 [ 349.271771][ T5053] queue_work_on+0xe6/0x140 [ 349.276262][ T5053] destroy_super_rcu+0xd1/0xe0 [ 349.281013][ T5053] rcu_do_batch+0x488/0xaf0 [ 349.285499][ T5053] rcu_core+0x50a/0xca0 [ 349.289643][ T5053] rcu_core_si+0x9/0x10 [ 349.293789][ T5053] __do_softirq+0x255/0x563 [ 349.298276][ T5053] [ 349.300599][ T5053] The buggy address belongs to the object at ffff888118a31000 [ 349.300599][ T5053] which belongs to the cache kmalloc-2k of size 2048 [ 349.314640][ T5053] The buggy address is located 1136 bytes inside of [ 349.314640][ T5053] 2048-byte region [ffff888118a31000, ffff888118a31800) [ 349.328070][ T5053] The buggy address belongs to the page: [ 349.333724][ T5053] page:ffffea0004628c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118a30 [ 349.343943][ T5053] head:ffffea0004628c00 order:3 compound_mapcount:0 compound_pincount:0 [ 349.352254][ T5053] flags: 0x4000000000010200(slab|head) [ 349.357708][ T5053] raw: 4000000000010200 0000000000000000 0000000600000001 ffff888100042d80 [ 349.366294][ T5053] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 349.374962][ T5053] page dumped because: kasan: bad access detected [ 349.381359][ T5053] page_owner tracks the page as allocated [ 349.387130][ T5053] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2999, ts 188174126598, free_ts 187852549420 [ 349.407180][ T5053] prep_new_page+0x176/0x190 [ 349.411769][ T5053] get_page_from_freelist+0x225f/0x23f0 [ 349.417302][ T5053] __alloc_pages_nodemask+0x29a/0x640 [ 349.422679][ T5053] new_slab+0x84/0x3f0 [ 349.426751][ T5053] ___slab_alloc+0x2f8/0x4c0 [ 349.431327][ T5053] __slab_alloc+0x63/0xa0 [ 349.435658][ T5053] __kmalloc_track_caller+0x1e4/0x310 [ 349.441013][ T5053] __alloc_skb+0xdc/0x520 [ 349.445325][ T5053] alloc_skb_with_frags+0xa3/0x560 [ 349.450421][ T5053] sock_alloc_send_pskb+0x87f/0x9a0 [ 349.455605][ T5053] sock_alloc_send_skb+0x32/0x40 [ 349.460634][ T5053] mld_newpack+0x1a3/0x9c0 [ 349.465036][ T5053] add_grec+0xedf/0x1330 [ 349.469263][ T5053] mld_ifc_timer_expire+0x797/0xc60 [ 349.474445][ T5053] call_timer_fn+0x38/0x290 [ 349.478938][ T5053] __run_timers+0x637/0x9a0 [ 349.483419][ T5053] page last free stack trace: [ 349.488078][ T5053] __free_pages_ok+0x80b/0x830 [ 349.492832][ T5053] __free_pages+0xd8/0x390 [ 349.497234][ T5053] __free_slab+0xcf/0x190 [ 349.501546][ T5053] unfreeze_partials+0x150/0x180 [ 349.506475][ T5053] put_cpu_partial+0xc1/0x180 [ 349.511139][ T5053] __slab_free+0x2c9/0x3a0 [ 349.515542][ T5053] ___cache_free+0x10e/0x130 [ 349.520119][ T5053] qlink_free+0x50/0x90 [ 349.524270][ T5053] qlist_free_all+0x5f/0xb0 [ 349.528754][ T5053] kasan_quarantine_reduce+0x14a/0x160 [ 349.534195][ T5053] __kasan_slab_alloc+0x2f/0xe0 [ 349.539030][ T5053] slab_post_alloc_hook+0x5d/0x2f0 [ 349.544131][ T5053] kmem_cache_alloc+0x15a/0x2d0 [ 349.548966][ T5053] __kernfs_new_node+0xe1/0x670 [ 349.553812][ T5053] kernfs_new_node+0x150/0x260 [ 349.558561][ T5053] __kernfs_create_file+0x4e/0x270 [ 349.563664][ T5053] [ 349.565974][ T5053] Memory state around the buggy address: [ 349.571591][ T5053] ffff888118a31300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.579637][ T5053] ffff888118a31380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.587680][ T5053] >ffff888118a31400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.595720][ T5053] ^ [ 349.603516][ T5053] ffff888118a31480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.611580][ T5053] ffff888118a31500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 349.619652][ T5053] ================================================================== [ 349.627696][ T5053] Disabling lock debugging due to kernel taint [ 349.768397][ T24] audit: type=1400 audit(1793725608.089:539): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 349.958111][ T5069] binder: 5067:5069 ioctl c018620c 200000000180 returned -22 [ 349.969274][ T24] audit: type=1400 audit(1793725608.119:540): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.038029][ T24] audit: type=1400 audit(1793725608.119:541): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.104406][ T24] audit: type=1400 audit(1793725608.119:542): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.168085][ T24] audit: type=1400 audit(1793725608.119:543): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 350.230639][ T24] audit: type=1400 audit(1793725608.119:544): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 350.301148][ T24] audit: type=1400 audit(1793725608.119:545): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 353.820024][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 353.827404][ C0] bridge0: port 2(bridge_slave_1) entered learning state