last executing test programs: 1m33.155720328s ago: executing program 0 (id=1): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 'id1\x00'}) syz_io_uring_setup(0x51db, &(0x7f0000000100)={0x0, 0xb92c, 0x2, 0x2, 0x275, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000380)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00008fb000/0x3000)=nil, &(0x7f0000ca6000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000804000/0x1000)=nil, &(0x7f000013a000/0x3000)=nil, &(0x7f0000729000/0x1000)=nil, &(0x7f00004f0000/0x3000)=nil, &(0x7f0000fb6000/0x1000)=nil, &(0x7f0000346000/0x2000)=nil, &(0x7f0000c4f000/0x4000)=nil, &(0x7f0000ad7000/0x4000)=nil, &(0x7f0000000200)="ab77b4425961d185b7202ad752dca98729775560b286a4e37f1baefb3be2b44d1b744020c772933acc90c4efd2f0cf26518a9a48ffff40fb2700ea2fc3948ac3c0b5cdf4bc3529cc03c6e53c6e9e56c0fcd3297de793c801f79ba62eb2d3f5dfc9a7728a9d14cdb974f000f07e7d09e8793b2f8b67cb3feff31a8a730da393b488b863bdaa854fc1c6d6b8d5734184364c4572b0b063c29e8f2286700d031f1aa8e876eb8b4bebb300c55f4b4cc9b38d6203564fecbfcdfbac876efa7cd34f0feb8e8f5e27634a6121cd349c1fe188ab776ae21f0a42c50f6b6a7995acab94d5f0537a871c10adaa3fce4cbb16ed4d52308a3ace564e3e2a4755bbb5c7858949a432d5d214daf1e4d22c42a0d62fafe4f8b3f95f14c82d318d8dbcc6141aa0b82feaba4ad815eccd2a15248af1cce815371a565800"/322, 0x142, r1}, 0x68) 1m32.695160223s ago: executing program 0 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000004c0)) r2 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x3, 0x8b39, 0x3a, 0x3d}, {0x8, 0x3, 0x9}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0x10c, 0x8, 0x8}, {0x4, 0x5, 0x3b4, 0x3}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="dfffffaa7000fedbdf213b"], 0xef}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r6, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x56, 0x3b}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x513}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 1m32.639475475s ago: executing program 0 (id=12): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m32.538945898s ago: executing program 0 (id=13): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x50008000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r4 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) ftruncate(r4, 0x800799c) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendfile(r5, r4, 0x0, 0xfeff) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000001c00), 0x12) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x4c, 0x0, 0x0) sendmsg$inet6(r9, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80001, @mcast2, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000cf000000000c463646f530c0db5fe8368511818b02ace8b831b0e841713ba010981000991b87311db841a51aef2540f1125666418dc542d64eb2da745811052880b1bd777d5aeac4b270eadc32ac26c5df89be6df6b9c8762c1bfa062f09082020000000000000072075bb47733911d"], 0x18}, 0xc4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 1m31.718960894s ago: executing program 0 (id=19): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) clock_adjtime(0x0, &(0x7f0000000880)={0x2, 0x2, 0x2fb3, 0x2, 0x5, 0x6, 0x4, 0x2, 0x3ff, 0x400, 0x5, 0x101, 0x1, 0x90a1, 0x6d08, 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x9, 0x9, 0x9, 0x4, 0x4, 0xc3, 0xfffffffffffffffe}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) r0 = epoll_create1(0x0) fcntl$setownex(r0, 0xf, 0x0) (async, rerun: 64) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async, rerun: 64) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r2, 0x2000, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x7}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) (rerun: 64) capget(&(0x7f00000003c0)={0x20080522}, 0xfffffffffffffffe) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) (async) mremap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000019200)) (async) pread64(r3, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) (async) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) (async) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r4, &(0x7f0000000040)={0xfc, {"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", 0x1000}}, 0x1006) 1m31.640350897s ago: executing program 32 (id=19): syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) clock_adjtime(0x0, &(0x7f0000000880)={0x2, 0x2, 0x2fb3, 0x2, 0x5, 0x6, 0x4, 0x2, 0x3ff, 0x400, 0x5, 0x101, 0x1, 0x90a1, 0x6d08, 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x9, 0x9, 0x9, 0x4, 0x4, 0xc3, 0xfffffffffffffffe}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) r0 = epoll_create1(0x0) fcntl$setownex(r0, 0xf, 0x0) (async, rerun: 64) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async, rerun: 64) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040014}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r2, 0x2000, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x7}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) (rerun: 64) capget(&(0x7f00000003c0)={0x20080522}, 0xfffffffffffffffe) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) (async) mremap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000019200)) (async) pread64(r3, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) (async) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) (async) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r4, &(0x7f0000000040)={0xfc, {"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", 0x1000}}, 0x1006) 23.447504307s ago: executing program 1 (id=377): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x8d, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000040)={[{@delalloc}, {@prjquota}]}, 0xfe, 0x480, &(0x7f0000000180)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23.414809438s ago: executing program 1 (id=378): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x8d, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000040)={[{@delalloc}, {@prjquota}]}, 0xfe, 0x480, &(0x7f0000000180)="$eJzs3M9vFFUcAPDvzLag/CoiovJDqmhs/NHSgsrBi0aPJiZywItJbQtBFmpoSYQQrcbg0ZB4N56M0b/Ak16MejLxqndDQpSYgB50zezMLt3SXdiy2y3u55NsebPzdt77zps382YeuwH0reHsTxKxKSJ+iYihfLExw3D+z7Ur56f+unJ+KolK5bXfk2q+q1fOTx0+W6mqfW5jsc2RNCL9MCkKaTR39tyJyXJ55nSxPDZ/8u2xubPnnj5+cvLYzLGZUxOHDh08MP7csxPPdCTOLK6rO9+d3Z0MvH7xlakjF9/84auBiNixJ1+fxdGRgtKN9eRwFvgf+b5Zmu2xjhS2dmxelE4GelgR2lKKiKy5Bqv9fyhKcb3xhuLlD3paOaCrsmvT+uarFyrA/1gSva4B0Bu1C312/1t7rdLQY024/EJ+A5TFfa145WsGIi3yDHax/Aci4sjC359mryja4Z9NXSwQAOh732Tjn6eWG/+lsWNRvi3FHMrWiLgnIrZFxL0RsT0i7ouo5r2/GM+0I58aKtWXbxx/ppdWHNwtyMZ/zxdzW43jv3z0V6lU/i0VS5ur8Q8mR4+XZ/YX+2QkBtdny+Mtyvj2pZ8/brZueNH4L3tl5dfGgkU9Lg0seUA3PTk/2alB6eX3I3YOLBd/Up8JSCLiwYjY2d6mt9QSx5/4YnezTDePv4UOzDNVPot4PG//hVgSf03Sen5y7K4oz+wfqx0VN/rxpwuvNiv/tuLvgKz9NzQe/0tyDP2ZLJ6vnWu/jAu/ftT0nnKlx/+65HB1znpd8d47k/Pzp8evt1nD+xPXP1tbzvPn8Y/sW77/bys+k211V0RkB/GeiHgoIvYWdX84Ih6JiH0t4v/+xUffWnn83ZXFP73s+a++L7c2tn/7idKJ775uVv6ttf/BamqkeKd6/ruJ5tWJ8kx2Wl/x0QwAAAB3njQiNkWSjtbTaTo6mv8f/u2xIS3Pzs0/eXT2zKnp/DsCW2MwrT3pGiqeh2Z32+PJQrHF/PnoRPGsuPa89EDx3PiT0t3V5dGp2fJ0j2OHfrexSf/P/Fbqde2ArvN9LehfS/t/2qN6AKvP9R/6l/4P/Uv/h/61qP9/eebCrmriverfvfUVy84FtPjlEODO4PoP/Uv/h/6l/0P/0v+hL93O9/rXdmLd2qhG+4nPB9dENVokShFxLtJWed6IVa9Y9Hq3dCWRtPwxiy4men1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA//9RqPWi") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23.317025861s ago: executing program 1 (id=379): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120e000000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1, 0x3, 0xdddd1000, 0x1000, &(0x7f0000fea000/0x1000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) getsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000240), &(0x7f0000000280)=0x10) bind$802154_dgram(r0, &(0x7f0000000300)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000200)={&(0x7f0000000180)=[{0x9, 0x2, 0x0, {0x54, 0x3}}, {0x0, 0x2, 0x0, {0x7, 0x2, 0x2}}, {0x7, 0x1, 0x0, {0x1, 0x400, 0x1}}], 0x3, 0x20, 0x3fb, 0x80000001}) 23.121188978s ago: executing program 1 (id=383): bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1000010, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d66326673002c6d6f64653d61616170746976652c680400000000000000636f766572792c6673796e635f6d6f64653d706f7369782cf97365725f78617474722c64697361626c655f726f6c6c5f663272776172642c000000"], 0x1, 0x105f8, &(0x7f0000020c00)="$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") chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r0, 0xc2e, 0x2000000000005, 0x7a30003868d68291) open(0x0, 0x14b27e, 0x6) openat(0xffffffffffffff9c, 0x0, 0x84042, 0x1fb) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000000)='./bus\x00', 0x322020, &(0x7f0000000580)=ANY=[], 0x3, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_usb_connect$midi(0x5, 0xf1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002280), 0x68c01, 0x0) unshare(0x60000600) socket$inet(0x2, 0x4000000000000001, 0x0) write$binfmt_format(r2, &(0x7f0000000000)='-1\x00', 0x3) syz_usb_connect$cdc_ecm(0x4, 0xb0, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x1, 0x1, 0x5, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7f, 0x9, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @acm={0x4, 0x24, 0x2, 0x7}, @country_functional={0x10, 0x24, 0x7, 0xfb, 0xff, [0x101, 0x8, 0x6, 0x2, 0x8]}, @mdlm_detail={0x4a, 0x24, 0x13, 0x7, "89d7db2c3e6da7ed4d8300613ad82383fc4983b39630d466bd15e83ba38b6dc439c6ea8fc5e8876c67e164338d22f9bbb39dc16771b68c92bdec1f30044f6b44b39bbf22e79a"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x3, 0xf0}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x5, 0x5}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0xdd, 0x3, 0x4, 0x8, 0x6}, 0x5, &(0x7f0000000340)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x426}}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x7fff}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)}, 0x10) 21.8005468s ago: executing program 1 (id=402): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000680)=""/151}, 0x20) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r2 = socket$inet(0x2, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000014c0)={0x20, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) listen(r0, 0x4) 21.208716858s ago: executing program 1 (id=407): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x13, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000600)='\x00\x00\x100\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4*<.\x88\xda\xcf3=\x97\xdd\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\x00\x01\x00\x00\x00\x00\x00\x00\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00I\x1b[\xeb\xd8\x06\xfd\xe5J\x1eJ\xb6\xce!]%UR\xbb\xa7\x96') syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20.928720897s ago: executing program 33 (id=407): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000003c0)) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x13, r4, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000600)='\x00\x00\x100\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4*<.\x88\xda\xcf3=\x97\xdd\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\x00\x01\x00\x00\x00\x00\x00\x00\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00I\x1b[\xeb\xd8\x06\xfd\xe5J\x1eJ\xb6\xce!]%UR\xbb\xa7\x96') syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.169458529s ago: executing program 5 (id=448): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a1042, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x4000002) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x26f9, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000003180), 0x3a6ac68b, 0x2000) ioctl$EVIOCSABS0(r6, 0x401845c0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)) syz_usb_connect$uac3(0x0, 0xd0, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xccd, 0x80, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x1, 0x50, 0x8, {0x8, 0xb, 0x0, 0x0, 0x1, 0x21, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x50, 0x5}, [@extension_unit={0x9, 0x24, 0xa, 0x6, 0x2, [0x2]}, @output_terminal={0x13, 0x24, 0x3, 0x5, 0x403, 0x6, 0x2, 0x6, 0x6, 0xf800, 0xfff, 0x1000}, @source_unit={0xc, 0x24, 0xb, 0x4, 0x1, 0x7fffffff, 0xe6, 0xa000}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x405, 0x1, 0x4, 0x9, 0x10000, 0x7fff, 0xfff4, 0x5}, @multiply_unit={0xb, 0x24, 0xd, 0x3, 0xfc, 0x1cf, 0x8a}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x250, 0x8, 0x3, 0x2, {0xa, 0x25, 0x25, 0xfffffff7, 0x7f, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xd, 0x10, 0x8, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0xf5, 0x2, {0xa, 0x25, 0x25, 0x3, 0x40}}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x250, 0x0, 0x8, 0x3, 0x1ee, 0x7}, 0x5d, &(0x7f0000000800)={0x5, 0xf, 0x5d, 0x6, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xfc, 0x17, 0x1, 0x8}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x3, 0x6, 0x9, 0xd}, @wireless={0xb, 0x10, 0x1, 0xa, 0x4, 0x4, 0xe, 0x6, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x400, 0xf00, 0x5, [0xfe9c5f6f346d37bc, 0xf, 0xff00f0, 0xff00c0, 0xffff3f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf2, "d410895d5b2f893c539405f8cc1e16fa"}]}, 0x6, [{0x83, &(0x7f0000000980)=@string={0x83, 0x3, "dbe052c8238e83d35603104b5b7388cc9831a34d0dcd43ea2bd9ad0848bf64735ac83c7d7b64e8596961209767c6e1c30314b528149c62b8bbced1281c22e312526c654804cb57d654831d91dc4dbf54d1715af00897b551ea377ccdfe91a1486be9bad55c0632d4bcd68294e63f27324490b9320aa46f997176e4b3e7d78d0bb8"}}, {0x69, &(0x7f0000000a40)=ANY=[@ANYBLOB="6903105143f8166e8394b5bb070cf2943858bb1c0d4ab9d2156198e2f9369d5073193cd21eef9a531b2439cd2e6c62abea27da5ee07fce009a9d505efdf54eff99858640662430f00b39695577ea8f3d41537ba0ba461b8ec1f9ed8ba23ecc31a7050000003c6ba904"]}, {0xc9, &(0x7f0000000d40)=ANY=[@ANYBLOB="c903ac4daa4a1b3a6109e576039b24a0fff3726515bba0b43666d5b2679c0459955bf39c299644c81fa5b28dd99a99bcb4f95cd48a8b49ca8433fd4f39c052f2c7e9784d611fec3de40a9d526d5fab71f4bc5b1dccca1f38a907d6577bd0f50b87b17bdab3c57ed7b31f36bd932006c790c55e94d8bab74db67779214818878daecbf9350d056ffbafd80a6ccee359fe775a1c6e5b1364ac4b447a1585fe871e9506ba60e80dfb0bb96c9ffd38bee49ab1f86f2cb505744e32980452debe8b1bb083af5224f09eea95e9e927809b03b878b91a26b0c88e35ae4850611698e936333968dbb441e85ab705e7594c16f35ccb8110b90860864f7e5ac486ef8c02b2665cd341f47178cac3ec5685d0b63dc35f97f283343dd768c1016c8eb1e8b742ec662fd783cb204e781eb4a4c89094381ece8a4c79755a45bf8d890de9941076522d51ade4c5380ad44f6c8e2fe13a147b643c8d44869ad0fb5b3582a3cc3d1063902c6cd74967294ad366d0bbbcc1e8a24a37ddbffd17dfacea5d996633ccc7315e03b515efabe7280c88"]}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xc04}}, {0x58, &(0x7f0000000c00)=@string={0x58, 0x3, "edab7984ffbc5c702f866b5d39ab70a5aa33c85a2b485cd79ff7c9600e78afb9e7a431a0b456c8eef16f37318f2546bb00239368b22cb305c472d3c3a51b23fcd473d0f356ad8efe0ff3c971809be37fc3b17ab2bde6"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1004}}]}) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x5) r8 = fsmount(r5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex, 0x1d, 0x1, 0x3800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TIOCSRS485(r8, 0x542f, &(0x7f0000000080)={0x4, 0x7ff, 0x6}) 9.1683975s ago: executing program 4 (id=451): symlink(0x0, &(0x7f0000000340)='./file0\x00') pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1e, 0xc, 0x715, 0x3, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(n', @ANYBLOB="020025bd"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.513181502s ago: executing program 5 (id=453): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002380)={'gre0\x00', &(0x7f0000002280)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x1, 0x20300, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x64, 0x0, 0x9, 0x2d, 0x0, @empty, @multicast2, {[@rr={0x7, 0x7, 0x46, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @timestamp={0x44, 0x18, 0xed, 0x0, 0xb, [0x0, 0x77, 0x5, 0x1, 0x95]}, @generic={0x88, 0x12, "5bf79e17df750cd9086d001fb1428550"}, @timestamp_addr={0x44, 0x14, 0xc3, 0x1, 0xd, [{@local, 0xd}, {@broadcast, 0xfd}]}, @lsrr={0x83, 0x1b, 0x55, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0x6e, 0x3, 0x8, [{@remote, 0xe5}, {@multicast1, 0x13bb553}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xc}, {@loopback, 0x8}, {@local, 0xfffffffd}, {@loopback, 0x7}]}, @noop, @rr={0x7, 0x17, 0xb6, [@broadcast, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}]}}}}}) bind$packet(r0, &(0x7f00000023c0)={0x11, 0x6, r1, 0x1, 0x8, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') syz_fuse_handle_req(r5, &(0x7f0000000280)="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", 0x2000, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)={0x20, 0x0, 0x81, {0x9, 0x4, 0x608f, 0xc}}, 0x0}) 7.512686272s ago: executing program 2 (id=454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@nojournal_checksum}, {@acl}, {@nogrpid}, {@errors_remount}, {@dioread_lock}]}, 0xff, 0x578, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="12000000350000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r8, 0x0, &(0x7f0000000180)) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, 0x0) 7.512390362s ago: executing program 3 (id=455): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) capset(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r2, 0xffffffffffff8001, 0x3) socket$unix(0x1, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005540)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x9) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x8, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008080) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x4080) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$batadv(0x0, r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80201000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="13e40000", @ANYRES16=r7, @ANYBLOB="000427bd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x240080d0}, 0x40000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x3c, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3a4b}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000891}, 0x4000004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r3, 0x2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000080)={0x1, 0x3, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.511906772s ago: executing program 4 (id=456): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800714, &(0x7f0000000140), 0xf7, 0x491, &(0x7f0000001500)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xe67) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x2) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x240, 0x460, 0x460, 0x240, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0xd8000000, {0x9402}, [@common=@hl={{0x28}, {0x0, 0x9b}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 5.791399186s ago: executing program 5 (id=457): symlink(&(0x7f0000000300)='./file0\x00', 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1e, 0xc, 0x715, 0x3, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20101, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000020008"], 0xe) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, 0x52, 0x1, 0x10000000, 0x4, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001000)=@nat={'nat\x00', 0x62, 0x5, 0x548, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x1a8, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {}, {}, 0x0, 0x0, 0x11}, 0x0, 0xb8, 0xf0, 0x0, {0x22e}, [@common=@unspec=@limit={{0x48}, {0xea6a, 0x9, 0x100000001, 0x6, 0x7fffffff, 0x5, 0x8001}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv6=@mcast1, @ipv4=@multicast2, @icmp_id=0x65, @gre_key=0x1}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[], 0x0, 0x2}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x1a0, 0x1d8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@recent1={{0x108}, {0x4, 0x80000000, 0x1, 0x0, 'syz1\x00', 0x86, [0xff000000, 0xffffff00, 0xffffff00, 0xff]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.790843006s ago: executing program 2 (id=458): mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000e00)={{r0}, 0x0, 0x4, @unused=[0x6d7, 0x4, 0x7464, 0xfff], @devid}) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000000000000000000000000000000000000000000000000200004e2301000a00100000000000afcf76477510bdf9d2f582f811b852776907225f755dbad41744f1448b385ecca2693c2091e2234448bd81f517a484582910f2fb3e040754d89de028f53516e2201a95819a95b5a53eaabcfba101c98479db66af5c50e9d67c1dc7da480a56d7f45f57bd0ce0ab", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010400000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0900000000000000000000001000000000000000000000200200000000000000ffffffffffffffff03000000000000010000000200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x2004c004}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffff9789725dff00000000000000000000000000000000000000000000000200"/112], 0xb8}}, 0x2c000010) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) 5.790597756s ago: executing program 3 (id=459): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0x5, 0xfffc, 0x0, &(0x7f0000000200)=0xffffffff, 0x4ffeffe) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000006300), 0x4000) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 5.790359387s ago: executing program 4 (id=460): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) socket(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x21f7, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x100, 0x1000000, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x0, 0x146, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5576, 0x8000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x3, 0xfffffffd, 0x0, r5}}], 0x1, &(0x7f0000001000)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r6, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0) 3.973499494s ago: executing program 5 (id=461): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="387a06002b9205003c0012800b000100697036746e6c00002c0002801400020000000000000000000000ffff6401010214000300ff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000003c0)="cdada8546464a74f00d54a68a65b830a3b7b29015e7d8da98af33aa05e6c799a94fc88ca766d142ef0577b745ad8e3830d4f42245c5ddb8d52152d374f6f19ac5da30297b2a84641b1488b9cb451e3cf0ecf53659ae79ef630362a1624d727bc7d09775234b9e03a491dc864aea2e6b0f8063331734c27545a8ed60afdf41f2854a3a030bfaf9c86efad35d8b584b5ed6425c31cb1236ec5970b86d715edd32a") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x50) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7f, 0xd4, 0x7, 0x2, 0x4, r2}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.973334394s ago: executing program 2 (id=462): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="387a06002b9205003c0012800b000100697036746e6c00002c0002801400020000000000000000000000ffff6401010214000300ff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000003c0)="cdada8546464a74f00d54a68a65b830a3b7b29015e7d8da98af33aa05e6c799a94fc88ca766d142ef0577b745ad8e3830d4f42245c5ddb8d52152d374f6f19ac5da30297b2a84641b1488b9cb451e3cf0ecf53659ae79ef630362a1624d727bc7d09775234b9e03a491dc864aea2e6b0f8063331734c27545a8ed60afdf41f2854a3a030bfaf9c86efad35d8b584b5ed6425c31cb1236ec5970b86d715edd32a") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x50) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7f, 0xd4, 0x7, 0x2, 0x4, r2}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.973099564s ago: executing program 3 (id=463): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="387a06002b9205003c0012800b000100697036746e6c00002c0002801400020000000000000000000000ffff6401010214000300ff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$PIO_SCRNMAP(r0, 0x4b41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x50) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7f, 0xd4, 0x7, 0x2, 0x4, r2}) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x13, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000600)='\x00\x00\x100\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4*<.\x88\xda\xcf3=\x97\xdd\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\x00\x01\x00\x00\x00\x00\x00\x00\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00I\x1b[\xeb\xd8\x06\xfd\xe5J\x1eJ\xb6\xce!]%UR\xbb\xa7\x96') syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.972884304s ago: executing program 4 (id=464): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) write(r0, &(0x7f0000000100)="df85c1f3886b234b110bf4f55f9652d4ab038e2dfc521298e711853475c28d701e92af49eed1f928f05e45f9485116bcc4a0bbfc661cd6e1c08ea088992e503b0ebc03b3a5283d511f987060c6e029b70a778ab96e21ebc50989695d6f0db817156d2cba23c14c3974eddf0dfb19d068266f324c642a273ff428337d6c91d966c129272ea91b24c4e22846915ff45d7771b576189a0f9213879261461d079e2f0e2621b47912aeceb8f6b39530c747f7fa22f4f8d2", 0xb5) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000000)=0x1002, 0x4) 2.033058086s ago: executing program 5 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5707}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000010000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x3a63ade8439deb60}, 0x50) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 2.031762006s ago: executing program 2 (id=466): symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="020025bd7000fb"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x40, 0x7, 0x6, 0x8, {{0x37, 0x4, 0x2, 0x1a, 0xdc, 0x65, 0x0, 0x2, 0x0, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0xb, 0xa1, [@rand_addr=0x64010100, @remote]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x1a, [@multicast2, @multicast2, @empty, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x61, 0x3, 0x3, [{@empty, 0x7fff}, {@multicast2, 0xe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@private=0xa010101, 0x8}, {@multicast1}, {@local}]}, @timestamp_prespec={0x44, 0x24, 0xd5, 0x3, 0x3, [{@empty, 0x9}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xa1ce}, {@rand_addr=0x64010100, 0xac2}]}, @timestamp_prespec={0x44, 0x14, 0x83, 0x3, 0x4, [{@private=0xa010100, 0x3}, {@rand_addr=0x64010102, 0x3fa4}]}, @rr={0x7, 0x17, 0xfa, [@dev={0xac, 0x14, 0x14, 0x24}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp={0x44, 0x20, 0xb9, 0x0, 0xb, [0xfff00000, 0x1, 0xf, 0x9, 0x8, 0x7, 0x6d]}]}}}}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8, '\x00', 0x0, r3, 0x3, 0x2, 0x4}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r3, 0x3, '\x00', 0x0, r3, 0x3, 0x5, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="6a0ac4ffcd23e287711079000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="02000000040000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x9b2, 0x4c, &(0x7f0000000600)=""/76, 0x40f00, 0xc, '\x00', r4, 0x25, r3, 0x8, &(0x7f00000007c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x6, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r5, r6, r3, r3, r3, r3, r3, r7, r3, r3], &(0x7f0000000a00), 0x10, 0x5}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.031208666s ago: executing program 3 (id=467): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000300), &(0x7f0000000280)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x16, 0x7c, 0x0, @rand_addr=0x64010101}}}}}, 0x0) 2.031048716s ago: executing program 4 (id=468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@nojournal_checksum}, {@acl}, {@nogrpid}, {@errors_remount}, {@dioread_lock}]}, 0xff, 0x578, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="12000000350000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), 0x0}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000280)={0x81, 0x0, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r8, 0x0, &(0x7f0000000180)) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, 0x0) 2.007138176s ago: executing program 2 (id=469): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x16, 0x0, @void}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 2.006611036s ago: executing program 3 (id=470): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000000)='./bus\x00', 0x152) (fail_nth: 2) 551.79µs ago: executing program 5 (id=471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 339.84µs ago: executing program 2 (id=472): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002380)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000023c0)={0x11, 0x6, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)=0x5, 0x4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_fuse_handle_req(r3, &(0x7f0000000280)="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", 0x2000, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)={0x20, 0x0, 0x81, {0x9, 0x4, 0x608f, 0xc}}, 0x0}) 184.5µs ago: executing program 3 (id=473): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) sendto$inet6(r0, &(0x7f00000004c0)="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", 0x1000, 0x24040001, &(0x7f00000014c0)={0xa, 0x4e24, 0x7fff, @empty, 0x8}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@void, @val={0x1, 0x4, 0x7, 0x2, 0x275f, 0x8}, @eth={@broadcast, @remote, @void, {@canfd={0xd, {{0x1, 0x1, 0x1}, 0x35, 0x2e90514a2b6cceba, 0x0, 0x0, "11b2c1e367fb243c41f9dace5a21925c1e8df6dc836bd15c8d38e07db8b85216df87eaf9f624622f9aeb9afb19c9c7df39d305b38a0ccf6aa49bb827a920d902"}}}}}, 0x60) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10, 0x2010, 0xffffffffffffffff, 0x10000000) io_uring_setup(0x659b, &(0x7f0000000000)={0x0, 0xffbb, 0x8, 0x1, 0x14}) getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0) 0s ago: executing program 4 (id=474): socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="d1c900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) mkdir(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0xaa0d9a51e63453c5, 0x0, 0x0, 0x0, 0x0) unshare(0x400) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 23.627594][ T28] audit: type=1400 audit(1778798711.696:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.628685][ T278] cgroup: Unknown subsys name 'net' [ 23.650419][ T28] audit: type=1400 audit(1778798711.696:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.677945][ T28] audit: type=1400 audit(1778798711.726:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.678103][ T278] cgroup: Unknown subsys name 'devices' [ 23.821784][ T278] cgroup: Unknown subsys name 'hugetlb' [ 23.827430][ T278] cgroup: Unknown subsys name 'rlimit' [ 23.930284][ T28] audit: type=1400 audit(1778798712.006:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.953599][ T28] audit: type=1400 audit(1778798712.006:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.978732][ T28] audit: type=1400 audit(1778798712.006:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.982169][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.010994][ T28] audit: type=1400 audit(1778798712.086:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.036511][ T28] audit: type=1400 audit(1778798712.086:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.049196][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.062498][ T28] audit: type=1400 audit(1778798712.106:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.096616][ T28] audit: type=1400 audit(1778798712.106:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.911171][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.918417][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.926141][ T288] device bridge_slave_0 entered promiscuous mode [ 24.933462][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.940637][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.948187][ T288] device bridge_slave_1 entered promiscuous mode [ 25.024586][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.031785][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.039255][ T289] device bridge_slave_0 entered promiscuous mode [ 25.049170][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.056352][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.063773][ T289] device bridge_slave_1 entered promiscuous mode [ 25.084512][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.091665][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.099151][ T290] device bridge_slave_0 entered promiscuous mode [ 25.105957][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.113214][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.120683][ T287] device bridge_slave_0 entered promiscuous mode [ 25.132924][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.140199][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.147645][ T290] device bridge_slave_1 entered promiscuous mode [ 25.158424][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.165497][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.172936][ T287] device bridge_slave_1 entered promiscuous mode [ 25.214790][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.221911][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.229356][ T286] device bridge_slave_0 entered promiscuous mode [ 25.236808][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.243887][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.251429][ T286] device bridge_slave_1 entered promiscuous mode [ 25.357102][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.364195][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.371506][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.378549][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.434161][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.441345][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.448790][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.456025][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.480468][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.487542][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.494939][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.501985][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.523713][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.530792][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.538063][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.545115][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.570790][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.577939][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.585267][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.592309][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.608512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.616923][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.624214][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.631676][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.639017][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.646510][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.653859][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.661146][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.668670][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.676094][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.684199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.691793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.715420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.741147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.748986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.757197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.765793][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.773009][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.781114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.789459][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.796585][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.804073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.812600][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.819629][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.842586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.851479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.859618][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.866678][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.874808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.883431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.891637][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.898683][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.906219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.926431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.934905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.943356][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.950531][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.958317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.965912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.973513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.982048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.990377][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.997399][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.004985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.013474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.021658][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.028856][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.036275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.044813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.053152][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.060206][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.067649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.076203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.111083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.119732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.128103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.137540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.145893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.154678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.162753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.170884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.178858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.186905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.194997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.202926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.211069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.218923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.227297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.240914][ T288] device veth0_vlan entered promiscuous mode [ 26.249791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.257892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.266236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.274822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.283235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.290952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.300685][ T287] device veth0_vlan entered promiscuous mode [ 26.316284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.325130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.333225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.341495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.349000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.361853][ T290] device veth0_vlan entered promiscuous mode [ 26.368383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.376692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.393044][ T288] device veth1_macvtap entered promiscuous mode [ 26.400699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.408180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.415810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.424308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.432838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.440663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.448913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.461318][ T289] device veth0_vlan entered promiscuous mode [ 26.472173][ T286] device veth0_vlan entered promiscuous mode [ 26.480632][ T287] device veth1_macvtap entered promiscuous mode [ 26.490671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.498805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.507200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.515798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.524734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.532904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.541379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.549600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.558241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.566591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.575217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.582791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.590373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.597924][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.607291][ T290] device veth1_macvtap entered promiscuous mode [ 26.622691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.630554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.638929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.647918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.656960][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.680594][ T286] device veth1_macvtap entered promiscuous mode [ 26.690984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.699152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.708155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.716637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.724768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.733071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.741453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.766058][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 26.769475][ T289] device veth1_macvtap entered promiscuous mode [ 26.788821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.796602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.804929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.813413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.822543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.861900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.879161][ T316] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 26.884868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.897100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.908970][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.976847][ T321] loop1: detected capacity change from 0 to 128 [ 26.993607][ T323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 27.015293][ T321] FAT-fs (loop1): bogus number of reserved sectors [ 27.030739][ T321] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 27.058079][ T321] FAT-fs (loop1): Can't find a valid FAT filesystem [ 27.166439][ T331] overlayfs: missing 'lowerdir' [ 27.374589][ T345] loop0: detected capacity change from 0 to 1024 [ 27.386925][ T345] EXT4-fs: Ignoring removed bh option [ 27.421633][ T345] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 27.460968][ T287] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 27.502279][ T287] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 27.580434][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.597264][ T352] loop4: detected capacity change from 0 to 512 [ 27.611603][ T287] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 27.670070][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.692992][ T287] EXT4-fs error (device loop0): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 27.745433][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.752215][ T287] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 27.767181][ T287] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 27.806271][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.824523][ T287] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 27.848227][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.849829][ T357] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.855637][ T287] EXT4-fs error (device loop0): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 27.892610][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.899236][ T287] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 27.914254][ T287] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 27.937054][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.944305][ T287] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 27.972960][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.980092][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.988105][ T287] EXT4-fs error (device loop0): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 28.009162][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 28.016213][ T287] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.041580][ T287] EXT4-fs error (device loop0): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.064478][ T287] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.079807][ T287] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.096217][ T287] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.113779][ T287] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.132311][ T287] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.157598][ T287] EXT4-fs warning (device loop0): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.201605][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.212042][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.230927][ T19] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 28.252846][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 28.261489][ T19] usb 5-1: SerialNumber: syz [ 28.301795][ T361] process 'syz.2.17' launched '/dev/fd/-1' with NULL argv: empty string added [ 28.449998][ T308] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.632926][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.649843][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.665283][ T370] device bridge_slave_0 entered promiscuous mode [ 28.710422][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.728358][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.752483][ T370] device bridge_slave_1 entered promiscuous mode [ 28.892576][ T317] device bridge_slave_1 left promiscuous mode [ 28.898954][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.916788][ T317] device bridge_slave_0 left promiscuous mode [ 28.932070][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.951311][ T317] device veth1_macvtap left promiscuous mode [ 28.964029][ T317] device veth0_vlan left promiscuous mode [ 29.059228][ T329] loop3: detected capacity change from 0 to 262144 [ 29.074457][ T329] F2FS-fs (loop3): Mismatch start address, segment0(134218752) cp_blkaddr(0) [ 29.095099][ T329] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 29.130559][ T329] F2FS-fs (loop3): fault_injection options not supported [ 29.147797][ T329] F2FS-fs (loop3): Image doesn't support compression [ 29.166108][ T329] F2FS-fs (loop3): invalid crc value [ 29.189424][ T329] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.255988][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.263202][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.270549][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.277690][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.286640][ T329] F2FS-fs (loop3): Start checkpoint disabled! [ 29.300565][ T329] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 29.321245][ T329] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 29.337650][ T329] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.354692][ T28] kauditd_printk_skb: 219 callbacks suppressed [ 29.354738][ T28] audit: type=1400 audit(1778798717.426:293): avc: denied { write } for pid=376 comm="syz.4.22" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.400860][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.420144][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.455068][ T377] kvm [376]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 29.482848][ T377] kvm [376]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 29.483351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.505647][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.535557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.554770][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.582559][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.589742][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.629781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.654870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.676249][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.683367][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.705511][ T369] loop1: detected capacity change from 0 to 131072 [ 29.720579][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.728800][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.752164][ T369] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.760102][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.770628][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.806052][ T369] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 29.808844][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.860035][ T28] audit: type=1400 audit(1778798717.936:294): avc: denied { add_name } for pid=368 comm="syz.1.21" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.881524][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.914787][ T370] device veth0_vlan entered promiscuous mode [ 29.921523][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.929537][ T28] audit: type=1400 audit(1778798717.936:295): avc: denied { create } for pid=368 comm="syz.1.21" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.950594][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.980320][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.988221][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.995839][ T28] audit: type=1400 audit(1778798717.946:296): avc: denied { read write } for pid=368 comm="syz.1.21" name="file2" dev="loop1" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.019876][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.032278][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.052742][ T370] device veth1_macvtap entered promiscuous mode [ 30.060373][ T28] audit: type=1400 audit(1778798717.946:297): avc: denied { open } for pid=368 comm="syz.1.21" path="/3/file1/file2" dev="loop1" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.091243][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.099393][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.121088][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.142879][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.160795][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.219463][ T28] audit: type=1400 audit(1778798718.286:298): avc: denied { create } for pid=390 comm="syz.5.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.233072][ T376] syz.4.22 (376) used greatest stack depth: 21536 bytes left [ 30.373080][ T396] loop5: detected capacity change from 0 to 512 [ 30.386541][ T396] ======================================================= [ 30.386541][ T396] WARNING: The mand mount option has been deprecated and [ 30.386541][ T396] and is ignored by this kernel. Remove the mand [ 30.386541][ T396] option from the mount to silence this warning. [ 30.386541][ T396] ======================================================= [ 30.401493][ T19] usb 5-1: 0:2 : does not exist [ 30.460266][ T28] audit: type=1400 audit(1778798718.506:299): avc: denied { map } for pid=392 comm="syz.3.23" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.506999][ T19] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 30.516140][ T28] audit: type=1400 audit(1778798718.506:300): avc: denied { execute } for pid=392 comm="syz.3.23" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.571587][ T19] usb 5-1: USB disconnect, device number 2 [ 30.612516][ T28] audit: type=1400 audit(1778798718.616:301): avc: denied { mount } for pid=395 comm="syz.5.25" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.615238][ T400] loop1: detected capacity change from 0 to 512 [ 30.680790][ T400] EXT4-fs: Ignoring removed orlov option [ 30.874781][ T400] EXT4-fs: Ignoring removed i_version option [ 30.905367][ T400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.517863][ T294] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 32.530265][ T28] audit: type=1400 audit(1778798720.606:302): avc: denied { create } for pid=410 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.620465][ T400] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 32.642821][ T400] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 32.672531][ T400] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.712344][ T400] EXT4-fs warning (device loop1): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 32.731063][ T294] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 4 [ 32.767103][ T294] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 32.807897][ T400] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 32.820610][ T400] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.24: bg 0: block 40: padding at end of block bitmap is not set [ 32.821093][ T294] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 32.844655][ T400] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 32.860440][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.895026][ T400] EXT4-fs (loop1): 1 truncate cleaned up [ 32.900781][ T400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.930797][ T286] EXT4-fs (loop1): unmounting filesystem. [ 32.932853][ T419] loop4: detected capacity change from 0 to 2048 [ 32.954194][ T294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.979943][ T294] usb 6-1: Product: syz [ 32.990070][ T294] usb 6-1: Manufacturer: syz [ 33.000064][ T294] usb 6-1: SerialNumber: syz [ 33.010706][ T419] loop4: p1 < > p4 [ 33.020965][ T419] loop4: p4 size 722688 extends beyond EOD, truncated [ 33.044900][ T411] loop3: detected capacity change from 0 to 40427 [ 33.065189][ T411] F2FS-fs (loop3): invalid crc value [ 33.082519][ T411] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.137853][ T411] F2FS-fs (loop3): Start checkpoint disabled! [ 33.150929][ T411] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 33.180019][ T411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 33.194677][ T423] loop2: detected capacity change from 0 to 40427 [ 33.206305][ T423] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 33.235611][ T411] syz.3.27: attempt to access beyond end of device [ 33.235611][ T411] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 33.239013][ T294] usb 6-1: Can't get UAC3 power state for id 10 [ 33.266186][ T294] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 33.273824][ T354] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.290051][ T308] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.301446][ T294] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 33.383121][ T294] usb 6-1: USB disconnect, device number 2 [ 33.470008][ T308] usb 2-1: Using ep0 maxpacket: 16 [ 33.481016][ T308] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.40 [ 33.490405][ T308] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.498426][ T308] usb 2-1: Product: 䶬䪪㨛ॡ盥鬃ꀤ敲묕뒠昶닕鱧处宕鳳阩졄ꔟ趲髙벙領표變쩉㎄俽쀹䵸ὡ㷬૤劝彭熫보ᵛ쫌㠟ީ埖큻௵놇얳흾ᾳ봶ₓ윆얐鑞뫘䶷瞶ⅹᡈ趇쮮㗹ԍﭯ氊﹙婷渜፛걤䑋ᕺﺅẇڕ悺෨௻油ﶟ븸髤Ɐֵ乴頲刄뻞ᮋ莰劯 [ 33.527900][ T308] usb 2-1: Manufacturer: 儐渖钃뮵ఇ铲堸᲻䨍특愕㛹傝ᥳ툼厚␛촹氮ꭢ⟪廚翠Î鶚幐n薙䂆⑦㤋啩㶏十ꁻ䚺踛療语㺢㇌֧ [ 33.529462][ T411] F2FS-fs (loop3): f2fs_enable_checkpoint() starts, meta: 0, node: 5, data: 0 [ 33.545593][ T308] usb 2-1: SerialNumber: ఄ [ 33.620617][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.637760][ T411] F2FS-fs (loop3): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 33.648620][ T411] F2FS-fs (loop3): f2fs_enable_checkpoint() finishes, writeback:68, sync:0 [ 33.785358][ T421] can0: slcan on ttyS3. [ 33.802231][ T443] loop5: detected capacity change from 0 to 2048 [ 33.869708][ T443] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 33.910430][ T420] can0 (unregistered): slcan off ttyS3. [ 33.961540][ T308] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 33.981540][ T308] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 33.995125][ T308] usb 2-1: USB disconnect, device number 2 [ 34.012714][ T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.352443][ T464] loop4: detected capacity change from 0 to 2048 [ 34.360255][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 34.360270][ T28] audit: type=1400 audit(1778798722.436:337): avc: denied { unlink } for pid=463 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=903 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.531745][ T464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.763448][ T423] loop2: detected capacity change from 0 to 131072 [ 34.774016][ T480] loop1: detected capacity change from 0 to 1024 [ 34.783925][ T423] F2FS-fs (loop2): invalid crc value [ 34.832198][ T423] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.880862][ T480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 34.919409][ T423] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 34.962747][ T286] EXT4-fs (loop1): unmounting filesystem. [ 35.029628][ T28] audit: type=1400 audit(1778798723.096:338): avc: denied { write } for pid=501 comm="syz.1.46" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.068941][ T509] loop1: detected capacity change from 0 to 128 [ 35.075520][ T28] audit: type=1400 audit(1778798723.116:339): avc: denied { map } for pid=422 comm="syz.2.32" path="socket:[16711]" dev="sockfs" ino=16711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 35.107245][ T28] audit: type=1400 audit(1778798723.176:340): avc: denied { ioctl } for pid=422 comm="syz.2.32" path="socket:[17619]" dev="sockfs" ino=17619 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.126232][ T370] EXT4-fs (loop5): unmounting filesystem. [ 35.154494][ T509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.290157][ T509] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.327824][ T509] FAULT_INJECTION: forcing a failure. [ 35.327824][ T509] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.341173][ T28] audit: type=1400 audit(1778798723.396:341): avc: denied { ioctl } for pid=508 comm="syz.1.47" path="/11/bus/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.368154][ T509] CPU: 0 PID: 509 Comm: syz.1.47 Not tainted syzkaller #0 [ 35.375315][ T509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 35.385396][ T509] Call Trace: [ 35.388686][ T509] [ 35.391637][ T509] __dump_stack+0x21/0x24 [ 35.395996][ T509] dump_stack_lvl+0x110/0x170 [ 35.400689][ T509] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.405729][ T509] dump_stack+0x15/0x24 [ 35.409895][ T509] should_fail_ex+0x3d4/0x520 [ 35.414679][ T509] should_fail+0xb/0x10 [ 35.418881][ T509] should_fail_usercopy+0x1a/0x20 [ 35.424149][ T509] _copy_to_user+0x1e/0x90 [ 35.428588][ T509] simple_read_from_buffer+0xe9/0x160 [ 35.433984][ T509] proc_fail_nth_read+0x1a6/0x220 [ 35.439028][ T509] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 35.444588][ T509] ? security_file_permission+0x94/0xb0 [ 35.450161][ T509] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 35.455814][ T509] vfs_read+0x27a/0x910 [ 35.459991][ T509] ? __cfi_vfs_read+0x10/0x10 [ 35.464766][ T509] ? __kasan_check_write+0x14/0x20 [ 35.469891][ T509] ? mutex_lock+0x93/0x1b0 [ 35.474412][ T509] ? __cfi_mutex_lock+0x10/0x10 [ 35.479554][ T509] ? __fdget_pos+0x2cd/0x380 [ 35.484157][ T509] ? ksys_read+0x71/0x250 [ 35.488633][ T509] ksys_read+0x149/0x250 [ 35.492891][ T509] ? __cfi_ksys_read+0x10/0x10 [ 35.497752][ T509] ? fput+0x154/0x1a0 [ 35.501754][ T509] ? debug_smp_processor_id+0x17/0x20 [ 35.507142][ T509] __x64_sys_read+0x7b/0x90 [ 35.511662][ T509] x64_sys_call+0x2f/0x9a0 [ 35.516098][ T509] do_syscall_64+0x4c/0xa0 [ 35.520529][ T509] ? clear_bhb_loop+0x30/0x80 [ 35.525224][ T509] ? clear_bhb_loop+0x30/0x80 [ 35.530012][ T509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.535923][ T509] RIP: 0033:0x7fa39235d68e [ 35.540349][ T509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 35.560054][ T509] RSP: 002b:00007fa393264fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.568494][ T509] RAX: ffffffffffffffda RBX: 00007fa3932656c0 RCX: 00007fa39235d68e [ 35.576570][ T509] RDX: 000000000000000f RSI: 00007fa3932650a0 RDI: 0000000000000005 [ 35.584557][ T509] RBP: 00007fa393265090 R08: 0000000000000000 R09: 0000000000000000 [ 35.592539][ T509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.600520][ T509] R13: 00007fa392616038 R14: 00007fa392615fa0 R15: 00007ffeecc0b0e8 [ 35.608524][ T509] [ 35.636539][ T517] loop5: detected capacity change from 0 to 512 [ 35.643332][ T517] EXT4-fs: Ignoring removed i_version option [ 35.736701][ T517] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 35.746619][ T517] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.863794][ T288] EXT4-fs (loop4): unmounting filesystem. [ 35.987592][ T286] EXT4-fs (loop1): unmounting filesystem. [ 36.048799][ T370] EXT4-fs (loop5): unmounting filesystem. [ 36.093042][ T28] audit: type=1400 audit(1778798724.166:342): avc: denied { write } for pid=529 comm="syz.3.53" name="fib_trie" dev="proc" ino=4026532481 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 36.126376][ T28] audit: type=1400 audit(1778798724.196:343): avc: denied { create } for pid=529 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 36.147547][ T28] audit: type=1400 audit(1778798724.196:344): avc: denied { write } for pid=529 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 36.170940][ T28] audit: type=1400 audit(1778798724.196:345): avc: denied { read } for pid=529 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.287768][ T540] loop5: detected capacity change from 0 to 512 [ 36.294472][ T540] EXT4-fs: Ignoring removed orlov option [ 36.305259][ T540] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 36.315182][ T540] EXT4-fs error (device loop5): ext4_iget_extra_inode:4754: inode #15: comm syz.5.55: corrupted in-inode xattr [ 36.327452][ T540] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.55: couldn't read orphan inode 15 (err -117) [ 36.339800][ T540] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 36.350309][ T28] audit: type=1400 audit(1778798724.426:346): avc: denied { create } for pid=539 comm="syz.5.55" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.371817][ T540] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 36.380629][ T540] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 36.412322][ T370] EXT4-fs (loop5): unmounting filesystem. [ 36.445102][ T546] capability: warning: `syz.5.56' uses deprecated v2 capabilities in a way that may be insecure [ 36.460514][ T295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 36.504212][ T549] FAULT_INJECTION: forcing a failure. [ 36.504212][ T549] name failslab, interval 1, probability 0, space 0, times 0 [ 36.517862][ T549] CPU: 1 PID: 549 Comm: syz.2.57 Not tainted syzkaller #0 [ 36.522745][ T546] netlink: 72 bytes leftover after parsing attributes in process `syz.5.56'. [ 36.524999][ T549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 36.544085][ T549] Call Trace: [ 36.547470][ T549] [ 36.550519][ T549] __dump_stack+0x21/0x24 [ 36.554854][ T549] dump_stack_lvl+0x110/0x170 [ 36.559536][ T549] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.564563][ T549] dump_stack+0x15/0x24 [ 36.568807][ T549] should_fail_ex+0x3d4/0x520 [ 36.573486][ T549] __should_failslab+0xac/0xf0 [ 36.578256][ T549] ? kvmalloc_node+0x28a/0x460 [ 36.583281][ T549] should_failslab+0x9/0x20 [ 36.587870][ T549] __kmem_cache_alloc_node+0x3d/0x2c0 [ 36.593250][ T549] ? kvmalloc_node+0x28a/0x460 [ 36.598534][ T549] __kmalloc_node+0xa1/0x1e0 [ 36.603208][ T549] kvmalloc_node+0x28a/0x460 [ 36.607799][ T549] ? __fget_files+0x2d5/0x330 [ 36.612494][ T549] ? __cfi_kvmalloc_node+0x10/0x10 [ 36.617690][ T549] ? __fdget+0x19c/0x220 [ 36.622035][ T549] map_get_next_key+0x27c/0x4d0 [ 36.626896][ T549] __sys_bpf+0x429/0x850 [ 36.631340][ T549] ? bpf_link_show_fdinfo+0x330/0x330 [ 36.636732][ T549] ? preempt_schedule_irq+0xca/0x120 [ 36.642032][ T549] ? irqentry_exit+0x37/0x40 [ 36.646714][ T549] ? sysvec_reschedule_ipi+0x78/0x80 [ 36.652004][ T549] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 36.657641][ T549] __x64_sys_bpf+0x7c/0x90 [ 36.662057][ T549] x64_sys_call+0x488/0x9a0 [ 36.666570][ T549] do_syscall_64+0x4c/0xa0 [ 36.670995][ T549] ? clear_bhb_loop+0x30/0x80 [ 36.675772][ T549] ? clear_bhb_loop+0x30/0x80 [ 36.680476][ T549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.686370][ T549] RIP: 0033:0x7f045b79ce59 [ 36.690879][ T549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.710583][ T549] RSP: 002b:00007f045c6e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.718995][ T549] RAX: ffffffffffffffda RBX: 00007f045ba15fa0 RCX: 00007f045b79ce59 [ 36.726966][ T549] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000004 [ 36.734936][ T549] RBP: 00007f045c6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 36.742912][ T549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.750967][ T549] R13: 00007f045ba16038 R14: 00007f045ba15fa0 R15: 00007fffbfbee2f8 [ 36.758942][ T549] [ 36.764586][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.859006][ T554] netlink: 'syz.5.58': attribute type 4 has an invalid length. [ 36.871224][ T295] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.890070][ T554] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.58'. [ 36.900338][ T295] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.919528][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.928084][ T295] usb 4-1: Product: syz [ 36.932474][ T552] netlink: 'syz.5.58': attribute type 21 has an invalid length. [ 37.211229][ T295] usb 4-1: Manufacturer: syz [ 37.218006][ T295] usb 4-1: SerialNumber: syz [ 37.239954][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 37.246321][ T19] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 37.269928][ T19] usb 5-1: config 0 has no interface number 0 [ 37.276340][ T19] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 37.286560][ T19] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 37.311383][ T19] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 37.329930][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.338090][ T19] usb 5-1: Product: syz [ 37.342334][ T19] usb 5-1: Manufacturer: syz [ 37.346984][ T19] usb 5-1: SerialNumber: syz [ 37.352837][ T19] usb 5-1: config 0 descriptor?? [ 37.358126][ T524] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 37.371269][ T524] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 37.394065][ T19] plusb 5-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, e6:53:c8:ea:2a:cd [ 37.417013][ T552] F2FS-fs (loop5): Wrong segment_count / block_count (64 > 16384) [ 37.441062][ T552] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 37.464810][ T552] F2FS-fs (loop5): Found nat_bits in checkpoint [ 37.517185][ T552] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 37.524482][ T552] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 37.527264][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.632291][ T559] usb 5-1: USB disconnect, device number 3 [ 37.641682][ T559] plusb 5-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.4-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 37.724656][ T574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=574 comm=syz.1.61 [ 37.739256][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 37.798555][ T39] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.40 [ 37.899102][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.941120][ T39] usb 3-1: Product: 䶬䪪㨛ॡ盥鬃ꀤ敲묕뒠昶닕鱧处宕鳳阩졄ꔟ趲髙벙領표變쩉㎄俽쀹䵸ὡ㷬૤劝彭熫보ᵛ쫌㠟ީ埖큻௵놇얳흾ᾳ봶ₓ윆얐鑞뫘䶷瞶ⅹᡈ趇쮮㗹ԍﭯ氊﹙婷渜፛걤䑋ᕺﺅẇڕ悺෨௻油ﶟ븸髤Ɐֵ乴頲刄뻞ᮋ莰劯 [ 37.988677][ T39] usb 3-1: Manufacturer: 儐渖钃뮵ఇ铲堸᲻䨍특愕㛹傝ᥳ툼厚␛촹氮ꭢ⟪廚翠Î鶚幐n薙䂆⑦㤋啩㶏十ꁻ䚺踛療语㺢㇌֧ [ 38.207124][ T39] usb 3-1: SerialNumber: ఄ [ 38.367920][ T574] syz.1.61 (574) used greatest stack depth: 20952 bytes left [ 38.639875][ T561] can0: slcan on ttyS3. [ 38.662192][ T589] set_capacity_and_notify: 2 callbacks suppressed [ 38.662211][ T589] loop5: detected capacity change from 0 to 1024 [ 38.720314][ T560] can0 (unregistered): slcan off ttyS3. [ 38.726660][ T295] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 38.735893][ T295] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 38.741050][ T39] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 38.743751][ T295] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 38.779286][ T589] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 38.832505][ T39] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 38.850867][ T589] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.64: deleted inode referenced: 12 [ 38.882724][ T39] usb 3-1: USB disconnect, device number 3 [ 38.890048][ T353] udevd[353]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.906342][ T589] EXT4-fs (loop5): Remounting filesystem read-only [ 38.919184][ T607] loop1: detected capacity change from 0 to 512 [ 38.927298][ T530] netlink: 'syz.3.53': attribute type 10 has an invalid length. [ 38.947778][ T295] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 38.955618][ T295] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 38.960880][ T607] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.991423][ T295] usb 4-1: USB disconnect, device number 2 [ 38.997708][ T295] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 39.038221][ T607] EXT4-fs (loop1): 1 truncate cleaned up [ 39.046929][ T607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.131385][ T286] EXT4-fs (loop1): unmounting filesystem. [ 39.157201][ T370] EXT4-fs (loop5): unmounting filesystem. [ 39.171135][ T622] loop1: detected capacity change from 0 to 512 [ 39.215550][ T626] loop5: detected capacity change from 0 to 1024 [ 39.239621][ T622] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.255184][ T622] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.264705][ T626] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 39.307286][ T626] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.69: deleted inode referenced: 12 [ 39.330173][ T626] EXT4-fs (loop5): Remounting filesystem read-only [ 39.333531][ T286] EXT4-fs (loop1): unmounting filesystem. [ 39.372772][ T635] loop1: detected capacity change from 0 to 1024 [ 39.383359][ T637] loop2: detected capacity change from 0 to 512 [ 39.406528][ T637] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 39.407525][ T635] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.435713][ T635] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.70: deleted inode referenced: 12 [ 39.442678][ T637] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.72: iget: bad i_size value: 360287970189639680 [ 39.447868][ T635] EXT4-fs (loop1): Remounting filesystem read-only [ 39.460499][ T637] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.72: couldn't read orphan inode 15 (err -117) [ 39.479198][ T637] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 39.498803][ T637] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 13: comm syz.2.72: path /13/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 39.527599][ T637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12137 sclass=netlink_route_socket pid=637 comm=syz.2.72 [ 39.558607][ T290] EXT4-fs (loop2): unmounting filesystem. [ 39.566017][ T370] EXT4-fs (loop5): unmounting filesystem. [ 39.624234][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 39.624249][ T28] audit: type=1326 audit(1778798727.696:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.5.76" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 39.657007][ T28] audit: type=1326 audit(1778798727.696:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.5.76" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 39.682156][ T286] EXT4-fs (loop1): unmounting filesystem. [ 39.685967][ T28] audit: type=1326 audit(1778798727.726:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.5.76" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 39.713369][ T28] audit: type=1326 audit(1778798727.726:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.5.76" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 39.742678][ T28] audit: type=1326 audit(1778798727.726:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.5.76" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 39.767361][ T28] audit: type=1326 audit(1778798727.726:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.5.76" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 39.793530][ T28] audit: type=1326 audit(1778798727.726:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.5.76" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 39.818677][ T28] audit: type=1326 audit(1778798727.726:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.5.76" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 39.843627][ T28] audit: type=1326 audit(1778798727.726:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.5.76" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 39.858034][ T665] loop3: detected capacity change from 0 to 1024 [ 39.870357][ T28] audit: type=1326 audit(1778798727.726:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=656 comm="syz.5.76" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 39.911106][ T665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.923048][ T665] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.79: deleted inode referenced: 12 [ 39.941313][ T665] EXT4-fs (loop3): Remounting filesystem read-only [ 39.959991][ T19] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 39.995317][ T671] loop2: detected capacity change from 0 to 512 [ 40.011278][ T671] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.020013][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.021878][ T671] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.047988][ T290] EXT4-fs (loop2): unmounting filesystem. [ 40.071123][ T289] EXT4-fs (loop3): unmounting filesystem. [ 40.139950][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 40.146834][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 40.209928][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 40.345216][ T39] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.40 [ 40.381557][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.390449][ T39] usb 2-1: Product: 䶬䪪㨛ॡ盥鬃ꀤ敲묕뒠昶닕鱧处宕鳳阩졄ꔟ趲髙벙領표變쩉㎄俽쀹䵸ὡ㷬૤劝彭熫보ᵛ쫌㠟ީ埖큻௵놇얳흾ᾳ봶ₓ윆얐鑞뫘䶷瞶ⅹᡈ趇쮮㗹ԍﭯ氊﹙婷渜፛걤䑋ᕺﺅẇڕ悺෨௻油ﶟ븸髤Ɐֵ乴頲刄뻞ᮋ莰劯 [ 40.421510][ T39] usb 2-1: Manufacturer: 儐渖钃뮵ఇ铲堸᲻䨍특愕㛹傝ᥳ툼厚␛촹氮ꭢ⟪廚翠Î鶚幐n薙䂆⑦㤋啩㶏十ꁻ䚺踛療语㺢㇌֧ [ 40.455977][ T39] usb 2-1: SerialNumber: ఄ [ 40.621120][ T19] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 40.630248][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.638314][ T19] usb 6-1: Product: syz [ 40.642552][ T19] usb 6-1: Manufacturer: syz [ 40.647176][ T19] usb 6-1: SerialNumber: syz [ 40.672902][ T19] usb 6-1: config 0 descriptor?? [ 40.763674][ T660] can0: slcan on ttyS3. [ 40.771904][ T687] loop4: detected capacity change from 0 to 2048 [ 40.801336][ T687] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.829504][ T659] can0 (unregistered): slcan off ttyS3. [ 40.891350][ T39] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 40.893192][ T19] usb 6-1: USB disconnect, device number 3 [ 40.992512][ T39] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 41.002834][ T39] usb 2-1: USB disconnect, device number 3 [ 41.012153][ T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.012951][ T691] loop2: detected capacity change from 0 to 512 [ 41.049296][ T691] EXT4-fs error (device loop2): ext4_find_extent:909: inode #4: comm syz.2.85: inode has invalid extent depth: 7 [ 41.090762][ T691] EXT4-fs warning (device loop2): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 41.120469][ T691] EXT4-fs (loop2): mount failed [ 41.167727][ T691] Zero length message leads to an empty skb [ 41.239266][ T698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 41.756692][ T288] EXT4-fs (loop4): unmounting filesystem. [ 41.792754][ T714] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.802359][ T714] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.823809][ T746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.874876][ T746] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.92: deleted inode referenced: 12 [ 41.888090][ T746] EXT4-fs (loop4): Remounting filesystem read-only [ 41.896152][ T286] EXT4-fs (loop1): unmounting filesystem. [ 41.957801][ T753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'. [ 42.021956][ T760] FAULT_INJECTION: forcing a failure. [ 42.021956][ T760] name failslab, interval 1, probability 0, space 0, times 0 [ 42.036081][ T760] CPU: 1 PID: 760 Comm: syz.3.96 Not tainted syzkaller #0 [ 42.043235][ T760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 42.053320][ T760] Call Trace: [ 42.056640][ T760] [ 42.059604][ T760] __dump_stack+0x21/0x24 [ 42.064050][ T760] dump_stack_lvl+0x110/0x170 [ 42.068757][ T760] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.073817][ T760] ? syscall_exit_to_user_mode+0x1a/0x30 [ 42.079578][ T760] ? _parse_integer_limit+0x18a/0x1d0 [ 42.084980][ T760] dump_stack+0x15/0x24 [ 42.089247][ T760] should_fail_ex+0x3d4/0x520 [ 42.094033][ T760] __should_failslab+0xac/0xf0 [ 42.098910][ T760] ? kvmalloc_node+0x28a/0x460 [ 42.103689][ T760] should_failslab+0x9/0x20 [ 42.108209][ T760] __kmem_cache_alloc_node+0x3d/0x2c0 [ 42.113603][ T760] ? kstrtouint_from_user+0x113/0x170 [ 42.119003][ T760] ? kvmalloc_node+0x28a/0x460 [ 42.123794][ T760] __kmalloc_node+0xa1/0x1e0 [ 42.128405][ T760] kvmalloc_node+0x28a/0x460 [ 42.133008][ T760] ? __cfi_kvmalloc_node+0x10/0x10 [ 42.138137][ T760] ? __check_object_size+0x86/0x600 [ 42.143355][ T760] vmemdup_user+0x26/0xe0 [ 42.147792][ T760] setxattr+0x271/0x360 [ 42.151965][ T760] ? path_setxattr+0x290/0x290 [ 42.156750][ T760] ? __mnt_want_write+0x1e6/0x260 [ 42.161803][ T760] ? mnt_want_write_file+0x269/0x470 [ 42.167110][ T760] __se_sys_fsetxattr+0x168/0x1e0 [ 42.172289][ T760] __x64_sys_fsetxattr+0xbf/0xd0 [ 42.177269][ T760] x64_sys_call+0x1c5/0x9a0 [ 42.181886][ T760] do_syscall_64+0x4c/0xa0 [ 42.186528][ T760] ? clear_bhb_loop+0x30/0x80 [ 42.191236][ T760] ? clear_bhb_loop+0x30/0x80 [ 42.195943][ T760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.201877][ T760] RIP: 0033:0x7ff51f99ce59 [ 42.206319][ T760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.226127][ T760] RSP: 002b:00007ff5208fe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 42.234597][ T760] RAX: ffffffffffffffda RBX: 00007ff51fc15fa0 RCX: 00007ff51f99ce59 [ 42.242699][ T760] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000003 [ 42.250875][ T760] RBP: 00007ff5208fe090 R08: 0000000000000002 R09: 0000000000000000 [ 42.258970][ T760] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 42.266968][ T760] R13: 00007ff51fc16038 R14: 00007ff51fc15fa0 R15: 00007fff3e83aea8 [ 42.274971][ T760] [ 42.357101][ T288] EXT4-fs (loop4): unmounting filesystem. [ 42.897505][ T774] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.933003][ T774] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.029018][ T290] EXT4-fs (loop2): unmounting filesystem. [ 43.104697][ T783] EXT4-fs: Ignoring removed orlov option [ 43.160301][ T783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.361401][ T788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.384060][ T788] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.416019][ T289] EXT4-fs (loop3): unmounting filesystem. [ 43.492407][ T290] EXT4-fs (loop2): unmounting filesystem. [ 43.659340][ T767] F2FS-fs (loop4): Test dummy encryption mode enabled [ 43.975184][ T767] F2FS-fs (loop4): invalid crc value [ 43.990809][ T805] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.999039][ T815] IPv4: Oversized IP packet from 127.202.26.0 [ 44.003918][ T805] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.108: deleted inode referenced: 12 [ 44.017859][ T767] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.024499][ T815] netlink: 37 bytes leftover after parsing attributes in process `syz.5.109'. [ 44.033985][ T805] EXT4-fs (loop2): Remounting filesystem read-only [ 44.049268][ T815] set_capacity_and_notify: 8 callbacks suppressed [ 44.049286][ T815] loop5: detected capacity change from 0 to 512 [ 44.099456][ T767] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.147039][ T823] loop5: detected capacity change from 0 to 512 [ 44.155019][ T767] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 44.173950][ T823] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 44.193432][ T823] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.230807][ T290] EXT4-fs (loop2): unmounting filesystem. [ 44.251913][ T828] loop1: detected capacity change from 0 to 512 [ 44.384831][ T828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.394566][ T828] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.498126][ T286] EXT4-fs (loop1): unmounting filesystem. [ 44.500246][ T837] loop3: detected capacity change from 0 to 512 [ 44.513656][ T836] loop4: detected capacity change from 0 to 512 [ 44.544404][ T837] EXT4-fs: Ignoring removed bh option [ 44.560763][ T836] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.588944][ T836] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.708547][ T288] EXT4-fs (loop4): unmounting filesystem. [ 44.708863][ T837] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.116: bad orphan inode 14 [ 44.738770][ T847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 45.151451][ T850] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=850 comm=syz.1.115 [ 45.311753][ T837] ext4_test_bit(bit=13, block=18) = 1 [ 45.382257][ T837] is_bad_inode(inode)=0 [ 45.830277][ T837] NEXT_ORPHAN(inode)=0 [ 45.834404][ T837] max_ino=32 [ 45.837606][ T837] i_nlink=1 [ 45.976519][ T837] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.996725][ T837] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.512698][ T837] FAULT_INJECTION: forcing a failure. [ 46.512698][ T837] name failslab, interval 1, probability 0, space 0, times 0 [ 46.659893][ C0] sched: RT throttling activated [ 46.665085][ T837] CPU: 0 PID: 837 Comm: syz.3.116 Not tainted syzkaller #0 [ 46.677561][ T837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 46.684008][ T859] loop1: detected capacity change from 0 to 1024 [ 46.687639][ T837] Call Trace: [ 46.687652][ T837] [ 46.687659][ T837] __dump_stack+0x21/0x24 [ 46.687687][ T837] dump_stack_lvl+0x110/0x170 [ 46.687707][ T837] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.718115][ T837] ? finish_task_switch+0x16b/0x7b0 [ 46.723358][ T837] ? __switch_to_asm+0x3a/0x60 [ 46.728170][ T837] dump_stack+0x15/0x24 [ 46.732371][ T837] should_fail_ex+0x3d4/0x520 [ 46.737180][ T837] ? getname_flags+0xb9/0x500 [ 46.741990][ T837] __should_failslab+0xac/0xf0 [ 46.746895][ T837] should_failslab+0x9/0x20 [ 46.751430][ T837] kmem_cache_alloc+0x3b/0x330 [ 46.756321][ T837] getname_flags+0xb9/0x500 [ 46.760853][ T837] __x64_sys_rmdir+0x3c/0x50 [ 46.765469][ T837] x64_sys_call+0x68e/0x9a0 [ 46.769991][ T837] do_syscall_64+0x4c/0xa0 [ 46.774428][ T837] ? clear_bhb_loop+0x30/0x80 [ 46.779137][ T837] ? clear_bhb_loop+0x30/0x80 [ 46.783926][ T837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.789934][ T837] RIP: 0033:0x7ff51f99ce59 [ 46.794365][ T837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.813995][ T837] RSP: 002b:00007ff5208fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 46.822468][ T837] RAX: ffffffffffffffda RBX: 00007ff51fc15fa0 RCX: 00007ff51f99ce59 [ 46.830449][ T837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 46.838447][ T837] RBP: 00007ff5208fe090 R08: 0000000000000000 R09: 0000000000000000 [ 46.846431][ T837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.854576][ T837] R13: 00007ff51fc16038 R14: 00007ff51fc15fa0 R15: 00007fff3e83aea8 [ 46.862549][ T837] [ 46.876028][ T289] EXT4-fs (loop3): unmounting filesystem. [ 47.099111][ T859] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.153711][ T286] EXT4-fs (loop1): unmounting filesystem. [ 47.335423][ T864] loop4: detected capacity change from 0 to 1024 [ 47.415326][ T869] loop3: detected capacity change from 0 to 1024 [ 47.465415][ T864] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.480888][ T869] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.520532][ T864] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.124: deleted inode referenced: 12 [ 47.540681][ T869] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.123: deleted inode referenced: 12 [ 47.544870][ T866] loop1: detected capacity change from 0 to 40427 [ 47.580275][ T866] F2FS-fs (loop1): invalid crc value [ 47.585707][ T864] EXT4-fs (loop4): Remounting filesystem read-only [ 47.592709][ T869] EXT4-fs (loop3): Remounting filesystem read-only [ 47.601904][ T866] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.669381][ T866] F2FS-fs (loop1): Start checkpoint disabled! [ 47.679850][ T866] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 47.697315][ T866] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 47.719040][ T866] syz.1.121: attempt to access beyond end of device [ 47.719040][ T866] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.827686][ T289] EXT4-fs (loop3): unmounting filesystem. [ 47.842833][ T866] F2FS-fs (loop1): f2fs_enable_checkpoint() starts, meta: 0, node: 5, data: 0 [ 47.859205][ T288] EXT4-fs (loop4): unmounting filesystem. [ 47.956595][ T866] F2FS-fs (loop1): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 47.970215][ T866] F2FS-fs (loop1): f2fs_enable_checkpoint() finishes, writeback:104, sync:0 [ 48.017454][ T890] loop4: detected capacity change from 0 to 512 [ 48.146769][ T890] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.178834][ T890] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.181070][ T370] EXT4-fs (loop5): unmounting filesystem. [ 49.525383][ T288] EXT4-fs (loop4): unmounting filesystem. [ 49.785520][ T906] loop5: detected capacity change from 0 to 1024 [ 49.877723][ T906] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 49.913754][ T370] EXT4-fs (loop5): unmounting filesystem. [ 50.068077][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 50.068092][ T28] audit: type=1400 audit(1778798994.131:451): avc: denied { wake_alarm } for pid=919 comm="syz.1.135" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.206320][ T925] loop2: detected capacity change from 0 to 1024 [ 50.229922][ T926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.135'. [ 50.272168][ T925] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.319342][ T925] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.136: deleted inode referenced: 12 [ 50.351671][ T925] EXT4-fs (loop2): Remounting filesystem read-only [ 50.530058][ T290] EXT4-fs (loop2): unmounting filesystem. [ 50.683197][ T28] audit: type=1400 audit(1778798994.751:452): avc: denied { create } for pid=936 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.777908][ T28] audit: type=1400 audit(1778798994.841:453): avc: denied { ioctl } for pid=933 comm="syz.2.137" path="socket:[20445]" dev="sockfs" ino=20445 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.010135][ T28] audit: type=1400 audit(1778798994.881:454): avc: denied { bind } for pid=936 comm="syz.4.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.074159][ T28] audit: type=1400 audit(1778798994.941:455): avc: denied { ioctl } for pid=936 comm="syz.4.138" path="socket:[20679]" dev="sockfs" ino=20679 ioctlcmd=0x6e8d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.151159][ T902] loop3: detected capacity change from 0 to 131072 [ 51.188330][ T902] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.237170][ T950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.141'. [ 51.320656][ T902] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.633478][ T956] loop5: detected capacity change from 0 to 128 [ 51.825610][ T956] FAT-fs (loop5): bogus number of reserved sectors [ 51.939820][ T956] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 52.011958][ T956] FAT-fs (loop5): Can't find a valid FAT filesystem [ 52.209998][ T963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 52.229947][ T963] netlink: 'syz.1.146': attribute type 8 has an invalid length. [ 52.296766][ T959] loop2: detected capacity change from 0 to 40427 [ 52.309340][ T959] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 52.337279][ T966] loop3: detected capacity change from 0 to 1024 [ 52.368012][ T966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.386091][ T971] loop5: detected capacity change from 0 to 1024 [ 52.420355][ T289] EXT4-fs (loop3): unmounting filesystem. [ 52.456713][ T971] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.147: deleted inode referenced: 12 [ 52.478464][ T971] EXT4-fs (loop5): Remounting filesystem read-only [ 52.599939][ T899] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 52.638472][ T943] loop4: detected capacity change from 0 to 131072 [ 52.681128][ T943] F2FS-fs (loop4): Found nat_bits in checkpoint [ 52.729967][ T384] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 52.765624][ T989] loop5: detected capacity change from 0 to 128 [ 52.769997][ T943] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 52.792659][ T899] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.805698][ T28] audit: type=1326 audit(1778798996.871:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=942 comm="syz.4.139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 52.813254][ T899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.869398][ T28] audit: type=1326 audit(1778798996.901:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=942 comm="syz.4.139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 52.872212][ T899] usb 2-1: Product: syz [ 52.919933][ T28] audit: type=1326 audit(1778798996.901:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=942 comm="syz.4.139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 52.944800][ T384] usb 4-1: Using ep0 maxpacket: 16 [ 52.952730][ T899] usb 2-1: Manufacturer: syz [ 52.957383][ T899] usb 2-1: SerialNumber: syz [ 52.980461][ T384] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.40 [ 52.989558][ T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.009946][ T384] usb 4-1: Product: 䶬䪪㨛ॡ盥鬃ꀤ敲묕뒠昶닕鱧处宕鳳阩졄ꔟ趲髙벙領표變쩉㎄俽쀹䵸ὡ㷬૤劝彭熫보ᵛ쫌㠟ީ埖큻௵놇얳흾ᾳ봶ₓ윆얐鑞뫘䶷瞶ⅹᡈ趇쮮㗹ԍﭯ氊﹙婷渜፛걤䑋ᕺﺅẇڕ悺෨௻油ﶟ븸髤Ɐֵ乴頲刄뻞ᮋ莰劯 [ 53.013298][ T28] audit: type=1326 audit(1778798996.901:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=942 comm="syz.4.139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 53.109971][ T384] usb 4-1: Manufacturer: 儐渖钃뮵ఇ铲堸᲻䨍특愕㛹傝ᥳ툼厚␛촹氮ꭢ⟪廚翠Î鶚幐n薙䂆⑦㤋啩㶏十ꁻ䚺踛療语㺢㇌֧ [ 53.124947][ T28] audit: type=1326 audit(1778798996.901:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=942 comm="syz.4.139" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 53.157294][ T384] usb 4-1: SerialNumber: ఄ [ 53.171914][ T899] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 53.179722][ T899] usb 2-1: 1:1 : invalid channels 0 [ 53.198220][ T899] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 53.232636][ T899] usb 2-1: USB disconnect, device number 4 [ 53.335379][ T995] loop4: detected capacity change from 0 to 1024 [ 53.391581][ T976] can0: slcan on ttyS3. [ 53.399138][ T995] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.152: deleted inode referenced: 12 [ 53.420648][ T995] EXT4-fs (loop4): Remounting filesystem read-only [ 53.470614][ T973] can0 (unregistered): slcan off ttyS3. [ 53.479453][ T384] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 53.502136][ T384] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 53.520859][ T384] usb 4-1: USB disconnect, device number 3 [ 53.525305][ T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.658236][ T959] F2FS-fs (loop2): invalid crc value [ 53.727553][ T959] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.781864][ T1014] netlink: 60 bytes leftover after parsing attributes in process `syz.4.155'. [ 53.874007][ T959] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.887076][ T1024] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.481040][ T1024] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 54.711510][ T1050] EXT4-fs: Ignoring removed orlov option [ 54.722076][ T1036] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.834669][ T1051] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 54.876110][ T1051] System zones: 0-1, 3-8 [ 54.900903][ T1051] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.976917][ T1051] EXT4-fs (loop4): shut down requested (0) [ 55.038590][ T1070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 55.054602][ T731] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm kworker/u4:28: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.080019][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 55.080037][ T28] audit: type=1400 audit(1778798999.121:469): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 55.135988][ T731] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 55.174777][ T731] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.174777][ T731] [ 55.191182][ T28] audit: type=1400 audit(1778798999.121:470): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.234387][ T731] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:28: lblock 8 mapped to illegal pblock 8 (length 4) [ 55.285947][ T28] audit: type=1400 audit(1778798999.121:471): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.308443][ T731] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 55.324548][ T1077] set_capacity_and_notify: 6 callbacks suppressed [ 55.324575][ T1077] loop2: detected capacity change from 0 to 512 [ 55.337660][ T731] EXT4-fs (loop4): This should not happen!! Data will be lost [ 55.337660][ T731] [ 55.363803][ T28] audit: type=1400 audit(1778798999.121:472): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.393231][ T1077] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.426197][ T28] audit: type=1400 audit(1778798999.121:473): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.461336][ T28] audit: type=1400 audit(1778798999.121:474): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.486024][ T28] audit: type=1400 audit(1778798999.121:475): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.508979][ T28] audit: type=1400 audit(1778798999.171:476): avc: denied { ioctl } for pid=1049 comm="syz.4.164" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.534921][ T28] audit: type=1400 audit(1778798999.171:477): avc: denied { set_context_mgr } for pid=1049 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.670540][ T384] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 55.788673][ T28] audit: type=1326 audit(1778798999.851:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1083 comm="syz.5.167" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d0419ce59 code=0x0 [ 55.828394][ T1093] loop1: detected capacity change from 0 to 512 [ 55.835168][ T1093] EXT4-fs: Ignoring removed i_version option [ 55.841247][ T1093] EXT4-fs: Ignoring removed bh option [ 55.887948][ T1093] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.413796][ T1099] netlink: 60 bytes leftover after parsing attributes in process `syz.1.172'. [ 56.570277][ T1106] loop4: detected capacity change from 0 to 1024 [ 57.264202][ T1086] loop2: detected capacity change from 0 to 40427 [ 57.293694][ T1118] loop4: detected capacity change from 0 to 512 [ 57.304354][ T1086] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 57.353380][ T1118] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.553717][ T1130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.579951][ T295] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 57.789928][ T295] usb 2-1: Using ep0 maxpacket: 32 [ 57.802057][ T295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 57.847560][ T295] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 57.879041][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.924366][ T295] usb 2-1: Product: syz [ 57.939040][ T295] usb 2-1: Manufacturer: syz [ 57.956006][ T295] usb 2-1: SerialNumber: syz [ 57.977973][ T295] usb 2-1: config 0 descriptor?? [ 58.203397][ T308] usb 2-1: USB disconnect, device number 5 [ 58.730379][ T1135] loop1: detected capacity change from 0 to 128 [ 58.738308][ T1135] FAT-fs (loop1): bogus number of reserved sectors [ 58.746155][ T1135] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 58.760223][ T1135] FAT-fs (loop1): Can't find a valid FAT filesystem [ 58.841217][ T1141] loop2: detected capacity change from 0 to 128 [ 58.868122][ T1141] FAT-fs (loop2): bogus number of reserved sectors [ 58.890098][ T1141] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 58.899439][ T1141] FAT-fs (loop2): Can't find a valid FAT filesystem [ 59.426309][ T1147] loop5: detected capacity change from 0 to 512 [ 59.436783][ T1147] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.465667][ T1147] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 59.515367][ T1150] loop5: detected capacity change from 0 to 512 [ 59.546759][ T1150] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.585991][ T1158] loop1: detected capacity change from 0 to 1024 [ 59.696826][ T1164] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.749179][ T1173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.045146][ T1176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.119973][ T404] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 61.137106][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 61.137148][ T28] audit: type=1326 audit(1778799005.201:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.1.193" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39239caeb code=0x7ffc0000 [ 61.194183][ T28] audit: type=1326 audit(1778799005.201:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.1.193" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39239caeb code=0x7ffc0000 [ 61.366256][ T1185] set_capacity_and_notify: 1 callbacks suppressed [ 61.366275][ T1185] loop5: detected capacity change from 0 to 16 [ 61.430408][ T1185] erofs: (device loop5): mounted with root inode @ nid 36. [ 61.461921][ T1185] syz.5.197: attempt to access beyond end of device [ 61.461921][ T1185] loop5: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 61.499993][ T1185] syz.5.197: attempt to access beyond end of device [ 61.499993][ T1185] loop5: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 61.542903][ T1185] syz.5.197: attempt to access beyond end of device [ 61.542903][ T1185] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 61.702364][ T1193] loop3: detected capacity change from 0 to 512 [ 61.723623][ T1194] loop2: detected capacity change from 0 to 512 [ 61.752172][ T1193] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.769923][ T404] usb 2-1: Using ep0 maxpacket: 32 [ 61.775543][ T28] audit: type=1326 audit(1778799005.841:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.1.193" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39239caeb code=0x7ffc0000 [ 61.776556][ T404] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 61.818733][ T1194] EXT4-fs: Ignoring removed i_version option [ 61.821676][ T404] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 61.839926][ T404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.847959][ T404] usb 2-1: Product: syz [ 61.854047][ T1193] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 61.862659][ T404] usb 2-1: Manufacturer: syz [ 61.867016][ T28] audit: type=1326 audit(1778799005.841:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.1.193" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39239caeb code=0x7ffc0000 [ 61.867357][ T404] usb 2-1: SerialNumber: syz [ 61.897194][ T404] usb 2-1: config 0 descriptor?? [ 61.927935][ T1198] loop3: detected capacity change from 0 to 128 [ 61.939942][ T28] audit: type=1326 audit(1778799005.841:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.1.193" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39239caeb code=0x7ffc0000 [ 61.971093][ T1198] FAT-fs (loop3): bogus number of reserved sectors [ 61.977646][ T1198] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 61.991702][ T28] audit: type=1326 audit(1778799005.841:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.1.193" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39239caeb code=0x7ffc0000 [ 61.999948][ T1198] FAT-fs (loop3): Can't find a valid FAT filesystem [ 62.024794][ T1194] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.039923][ T28] audit: type=1326 audit(1778799005.841:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.1.193" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39239caeb code=0x7ffc0000 [ 62.089948][ T28] audit: type=1326 audit(1778799005.841:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.1.193" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39239caeb code=0x7ffc0000 [ 62.115317][ T28] audit: type=1326 audit(1778799005.891:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.1.193" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39239caeb code=0x7ffc0000 [ 62.125141][ T1177] usb 2-1: USB disconnect, device number 6 [ 62.140114][ T28] audit: type=1326 audit(1778799005.891:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.1.193" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39239caeb code=0x7ffc0000 [ 62.279262][ T1160] loop4: detected capacity change from 0 to 131072 [ 62.301998][ T1160] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.350374][ T1160] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.537160][ T1211] loop5: detected capacity change from 0 to 1024 [ 62.692096][ T1217] loop1: detected capacity change from 0 to 256 [ 62.721381][ T1219] FAULT_INJECTION: forcing a failure. [ 62.721381][ T1219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.741460][ T1219] CPU: 0 PID: 1219 Comm: syz.4.201 Not tainted syzkaller #0 [ 62.748806][ T1219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.758972][ T1219] Call Trace: [ 62.762273][ T1219] [ 62.765217][ T1219] __dump_stack+0x21/0x24 [ 62.769570][ T1219] dump_stack_lvl+0x110/0x170 [ 62.774262][ T1219] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.779302][ T1219] dump_stack+0x15/0x24 [ 62.783476][ T1219] should_fail_ex+0x3d4/0x520 [ 62.788279][ T1219] should_fail+0xb/0x10 [ 62.792471][ T1219] should_fail_usercopy+0x1a/0x20 [ 62.797533][ T1219] _copy_to_user+0x1e/0x90 [ 62.801980][ T1219] simple_read_from_buffer+0xe9/0x160 [ 62.807382][ T1219] proc_fail_nth_read+0x1a6/0x220 [ 62.812440][ T1219] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 62.818032][ T1219] ? security_file_permission+0x94/0xb0 [ 62.823621][ T1219] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 62.829190][ T1219] vfs_read+0x27a/0x910 [ 62.833453][ T1219] ? __cfi_vfs_read+0x10/0x10 [ 62.838132][ T1219] ? __kasan_check_write+0x14/0x20 [ 62.843232][ T1219] ? mutex_lock+0x93/0x1b0 [ 62.847641][ T1219] ? __cfi_mutex_lock+0x10/0x10 [ 62.852490][ T1219] ? __fdget_pos+0x2cd/0x380 [ 62.857113][ T1219] ? ksys_read+0x71/0x250 [ 62.861471][ T1219] ksys_read+0x149/0x250 [ 62.865742][ T1219] ? __cfi_ksys_read+0x10/0x10 [ 62.870613][ T1219] ? fput+0x154/0x1a0 [ 62.874633][ T1219] ? debug_smp_processor_id+0x17/0x20 [ 62.880003][ T1219] __x64_sys_read+0x7b/0x90 [ 62.884504][ T1219] x64_sys_call+0x2f/0x9a0 [ 62.888915][ T1219] do_syscall_64+0x4c/0xa0 [ 62.893336][ T1219] ? clear_bhb_loop+0x30/0x80 [ 62.898044][ T1219] ? clear_bhb_loop+0x30/0x80 [ 62.902728][ T1219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.908636][ T1219] RIP: 0033:0x7f6b6615d68e [ 62.913067][ T1219] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.932668][ T1219] RSP: 002b:00007f6b670cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.941087][ T1219] RAX: ffffffffffffffda RBX: 00007f6b670d06c0 RCX: 00007f6b6615d68e [ 62.949049][ T1219] RDX: 000000000000000f RSI: 00007f6b670d00a0 RDI: 0000000000000007 [ 62.957018][ T1219] RBP: 00007f6b670d0090 R08: 0000000000000000 R09: 0000000000000000 [ 62.964991][ T1219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.973036][ T1219] R13: 00007f6b66416038 R14: 00007f6b66415fa0 R15: 00007ffe22f38248 [ 62.981009][ T1219] [ 63.037865][ T1226] loop3: detected capacity change from 0 to 512 [ 63.083582][ T1226] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.149943][ T404] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 63.329928][ T404] usb 6-1: Using ep0 maxpacket: 16 [ 63.339100][ T404] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.40 [ 63.365890][ T404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.394034][ T404] usb 6-1: Product: 䶬䪪㨛ॡ盥鬃ꀤ敲묕뒠昶닕鱧处宕鳳阩졄ꔟ趲髙벙領표變쩉㎄俽쀹䵸ὡ㷬૤劝彭熫보ᵛ쫌㠟ީ埖큻௵놇얳흾ᾳ봶ₓ윆얐鑞뫘䶷瞶ⅹᡈ趇쮮㗹ԍﭯ氊﹙婷渜፛걤䑋ᕺﺅẇڕ悺෨௻油ﶟ븸髤Ɐֵ乴頲刄뻞ᮋ莰劯 [ 63.479906][ T404] usb 6-1: Manufacturer: 儐渖钃뮵ఇ铲堸᲻䨍특愕㛹傝ᥳ툼厚␛촹氮ꭢ⟪廚翠Î鶚幐n薙䂆⑦㤋啩㶏十ꁻ䚺踛療语㺢㇌֧ [ 63.527116][ T404] usb 6-1: SerialNumber: ఄ [ 63.815800][ T1215] can0: slcan on ttyS3. [ 63.929980][ T1214] can0 (unregistered): slcan off ttyS3. [ 64.052234][ T1246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=1246 comm=syz.1.213 [ 64.126574][ T1247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.211'. [ 65.352165][ T1249] loop3: detected capacity change from 0 to 1024 [ 65.442525][ T1249] EXT4-fs mount: 32 callbacks suppressed [ 65.442545][ T1249] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.490544][ T289] EXT4-fs (loop3): unmounting filesystem. [ 65.633431][ T1236] loop4: detected capacity change from 0 to 131072 [ 65.647971][ T1236] F2FS-fs (loop4): Test dummy encryption mode enabled [ 65.665684][ T1236] F2FS-fs (loop4): invalid crc value [ 65.678755][ T1236] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.716171][ T1236] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.771714][ T1236] fscrypt: AES-256-XTS using blk-crypto-fallback [ 65.871995][ T404] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 65.882028][ T404] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 65.899406][ T1266] netlink: 36 bytes leftover after parsing attributes in process `syz.5.217'. [ 65.908071][ T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.925050][ T404] usb 6-1: USB disconnect, device number 4 [ 65.945456][ T1266] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.952719][ T1266] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.008784][ T1269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.064577][ T1269] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.184955][ T1274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 66.239632][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 66.239801][ T28] audit: type=1400 audit(1778799010.301:588): avc: denied { create } for pid=1268 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.260179][ T1277] netlink: 60 bytes leftover after parsing attributes in process `syz.5.220'. [ 66.274509][ T28] audit: type=1400 audit(1778799010.301:589): avc: denied { sys_admin } for pid=1268 comm="syz.3.215" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 67.209853][ T1271] set_capacity_and_notify: 1 callbacks suppressed [ 67.239963][ T1271] loop1: detected capacity change from 0 to 40427 [ 67.309309][ T1271] F2FS-fs (loop1): invalid crc value [ 67.328469][ T1271] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.408568][ T1289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 67.417862][ T1289] netlink: 'syz.2.221': attribute type 8 has an invalid length. [ 67.434792][ T1271] F2FS-fs (loop1): Start checkpoint disabled! [ 67.443137][ T1271] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 67.453390][ T1271] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 67.461513][ T28] audit: type=1400 audit(1778799011.531:590): avc: denied { write } for pid=1286 comm="syz.5.224" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.517673][ T28] audit: type=1400 audit(1778799011.561:591): avc: denied { map } for pid=1286 comm="syz.5.224" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.528293][ T1271] syz.1.219: attempt to access beyond end of device [ 67.528293][ T1271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.563189][ T28] audit: type=1400 audit(1778799011.561:592): avc: denied { call } for pid=1286 comm="syz.5.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.565912][ T1294] loop5: detected capacity change from 0 to 1024 [ 67.582228][ T28] audit: type=1400 audit(1778799011.561:593): avc: denied { transfer } for pid=1286 comm="syz.5.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.607641][ T1271] F2FS-fs (loop1): f2fs_enable_checkpoint() starts, meta: 0, node: 5, data: 0 [ 67.629827][ T1294] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 67.658445][ T370] EXT4-fs (loop5): unmounting filesystem. [ 67.679907][ T1271] F2FS-fs (loop1): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 67.692764][ T1271] F2FS-fs (loop1): f2fs_enable_checkpoint() finishes, writeback:72, sync:0 [ 67.749948][ T404] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 67.816341][ T28] audit: type=1400 audit(1778799011.881:594): avc: denied { create } for pid=1302 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.844092][ T28] audit: type=1400 audit(1778799011.901:595): avc: denied { ioctl } for pid=1302 comm="syz.4.225" path="socket:[23571]" dev="sockfs" ino=23571 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.988472][ T28] audit: type=1400 audit(1778799011.901:596): avc: denied { setopt } for pid=1302 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.183197][ T1310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 68.185825][ T1308] loop1: detected capacity change from 0 to 2048 [ 68.192301][ T1310] netlink: 'syz.4.230': attribute type 8 has an invalid length. [ 68.217922][ T1308] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.253355][ T404] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.262691][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.271434][ T404] usb 3-1: Product: syz [ 68.276687][ T404] usb 3-1: Manufacturer: syz [ 68.281643][ T404] usb 3-1: SerialNumber: syz [ 68.491796][ T404] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 68.497918][ T404] usb 3-1: 1:1 : invalid channels 0 [ 68.503434][ T404] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 68.512712][ T404] usb 3-1: USB disconnect, device number 4 [ 68.549975][ T405] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.742738][ T405] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.752389][ T405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.760664][ T405] usb 5-1: Product: syz [ 68.765001][ T405] usb 5-1: Manufacturer: syz [ 68.769652][ T405] usb 5-1: SerialNumber: syz [ 68.868530][ T286] EXT4-fs (loop1): unmounting filesystem. [ 68.907369][ T1323] loop1: detected capacity change from 0 to 512 [ 68.941695][ T1323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 68.950909][ T1323] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.967582][ T289] EXT4-fs (loop3): unmounting filesystem. [ 68.983915][ T405] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 68.991927][ T405] usb 5-1: 1:1 : invalid channels 0 [ 68.998633][ T286] EXT4-fs (loop1): unmounting filesystem. [ 69.004813][ T405] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 69.016755][ T405] usb 5-1: USB disconnect, device number 4 [ 69.040745][ T28] audit: type=1326 audit(1778799013.111:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1326 comm="syz.1.234" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39239ce59 code=0x7ffc0000 [ 69.423774][ T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.342846][ T1338] loop1: detected capacity change from 0 to 1024 [ 70.410124][ T1341] xt_connbytes: Forcing CT accounting to be enabled [ 70.438951][ T1338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.502820][ T286] EXT4-fs (loop1): unmounting filesystem. [ 70.755483][ T1354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.241'. [ 70.798968][ T1346] loop3: detected capacity change from 0 to 40427 [ 70.807240][ T1346] F2FS-fs (loop3): invalid crc value [ 70.858015][ T1346] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.904217][ T1346] F2FS-fs (loop3): Start checkpoint disabled! [ 71.346687][ T1346] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 71.416719][ T1346] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 71.571161][ T1346] syz.3.238: attempt to access beyond end of device [ 71.571161][ T1346] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.669734][ T1363] F2FS-fs (loop3): f2fs_enable_checkpoint() starts, meta: 0, node: 5, data: 0 [ 71.692762][ T1371] loop5: detected capacity change from 0 to 512 [ 71.716049][ T1371] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.243: inode has both inline data and extents flags [ 71.735052][ T1363] F2FS-fs (loop3): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 71.765711][ T1371] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.243: couldn't read orphan inode 15 (err -117) [ 71.777957][ T1363] F2FS-fs (loop3): f2fs_enable_checkpoint() finishes, writeback:85, sync:0 [ 71.795902][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 71.795920][ T28] audit: type=1400 audit(1778799015.861:604): avc: denied { append } for pid=1375 comm="syz.1.246" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.861312][ T1371] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 71.875351][ T1371] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.243: Directory hole found for htree leaf block 0 [ 71.891514][ T1369] rtc_cmos 00:00: Alarms can be up to one day in the future [ 71.917019][ T370] EXT4-fs (loop5): unmounting filesystem. [ 73.207200][ T1384] loop1: detected capacity change from 0 to 1024 [ 73.210767][ T404] rtc_cmos 00:00: Alarms can be up to one day in the future [ 73.231224][ T28] audit: type=1326 audit(1778799017.301:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1385 comm="syz.5.248" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 73.232302][ T404] rtc_cmos 00:00: Alarms can be up to one day in the future [ 73.276009][ T404] rtc_cmos 00:00: Alarms can be up to one day in the future [ 73.290527][ T404] rtc_cmos 00:00: Alarms can be up to one day in the future [ 73.298653][ T404] rtc rtc0: __rtc_set_alarm: err=-22 [ 73.305064][ T1384] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 73.326188][ T28] audit: type=1326 audit(1778799017.331:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1385 comm="syz.5.248" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 73.383702][ T28] audit: type=1326 audit(1778799017.331:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1385 comm="syz.5.248" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0419ce59 code=0x7ffc0000 [ 73.409622][ T286] EXT4-fs (loop1): unmounting filesystem. [ 73.621122][ T28] audit: type=1326 audit(1778799017.691:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1394 comm="syz.1.250" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39239ce59 code=0x7ffc0000 [ 73.664328][ T28] audit: type=1326 audit(1778799017.691:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1394 comm="syz.1.250" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39239ce59 code=0x7ffc0000 [ 73.730505][ T28] audit: type=1326 audit(1778799017.721:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1394 comm="syz.1.250" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39239ce59 code=0x7ffc0000 [ 73.786085][ T28] audit: type=1326 audit(1778799017.721:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1394 comm="syz.1.250" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39239ce59 code=0x7ffc0000 [ 73.838025][ T28] audit: type=1326 audit(1778799017.721:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1394 comm="syz.1.250" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39239ce59 code=0x7ffc0000 [ 73.888794][ T28] audit: type=1326 audit(1778799017.761:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1394 comm="syz.1.250" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa39239ce59 code=0x7ffc0000 [ 74.106932][ T1414] loop5: detected capacity change from 0 to 1024 [ 74.136261][ T1414] EXT4-fs: Ignoring removed orlov option [ 74.218712][ T1414] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 74.253565][ T1418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.256'. [ 74.285372][ T1420] loop4: detected capacity change from 0 to 512 [ 74.389929][ T683] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 74.408801][ T1424] loop4: detected capacity change from 0 to 1024 [ 74.481469][ T1424] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.504317][ T1424] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.259: deleted inode referenced: 12 [ 74.542009][ T370] EXT4-fs (loop5): unmounting filesystem. [ 74.548142][ T1424] EXT4-fs (loop4): Remounting filesystem read-only [ 74.594964][ T1429] loop5: detected capacity change from 0 to 1024 [ 74.668669][ T1429] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 74.702092][ T370] EXT4-fs (loop5): unmounting filesystem. [ 74.755416][ T1436] x_tables: duplicate underflow at hook 1 [ 74.771745][ T288] EXT4-fs (loop4): unmounting filesystem. [ 74.804820][ T1422] loop1: detected capacity change from 0 to 40427 [ 74.823807][ T1422] F2FS-fs (loop1): invalid crc value [ 74.866416][ T1422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 74.873255][ T1441] loop5: detected capacity change from 0 to 512 [ 74.909679][ T1441] ext2: Unknown parameter 'nouser_xattr' [ 74.945104][ T1422] F2FS-fs (loop1): Start checkpoint disabled! [ 74.952575][ T1422] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 74.960290][ T1422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 74.986168][ T1422] syz.1.258: attempt to access beyond end of device [ 74.986168][ T1422] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.001433][ T1422] F2FS-fs (loop1): f2fs_enable_checkpoint() starts, meta: 0, node: 5, data: 0 [ 75.060032][ T1422] F2FS-fs (loop1): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 75.076363][ T1422] F2FS-fs (loop1): f2fs_enable_checkpoint() finishes, writeback:64, sync:0 [ 75.333700][ T1454] loop3: detected capacity change from 0 to 1024 [ 75.348564][ T1454] EXT4-fs: Ignoring removed orlov option [ 75.362240][ T1454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.542899][ T289] EXT4-fs (loop3): unmounting filesystem. [ 75.559710][ T1441] loop5: detected capacity change from 0 to 131072 [ 75.578696][ T1441] F2FS-fs (loop5): Invalid segment count (67043359) [ 75.585555][ T1441] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 75.596699][ T1441] F2FS-fs (loop5): Found nat_bits in checkpoint [ 75.659254][ T1441] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 75.669617][ T1441] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 75.875774][ T1469] loop3: detected capacity change from 0 to 512 [ 75.885638][ T1469] EXT4-fs: Ignoring removed i_version option [ 76.221386][ T1469] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 76.709340][ T1482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.721704][ T1469] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.858696][ T286] EXT4-fs (loop1): unmounting filesystem. [ 76.953061][ T28] kauditd_printk_skb: 366 callbacks suppressed [ 76.953116][ T28] audit: type=1326 audit(1778799021.021:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.2.274" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f045b79ce59 code=0x0 [ 77.384929][ T1502] EXT4-fs: Ignoring removed orlov option [ 77.452534][ T1502] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 77.841823][ T1512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.892558][ T1512] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.922378][ T28] audit: type=1400 audit(1778799021.991:981): avc: denied { write } for pid=1511 comm="syz.2.279" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.922915][ T1512] fuse: Unknown parameter 'lfd ' [ 77.972484][ T286] EXT4-fs (loop1): unmounting filesystem. [ 77.985384][ T290] EXT4-fs (loop2): unmounting filesystem. [ 78.144139][ T1522] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.153741][ T1499] F2FS-fs (loop4): invalid crc value [ 78.182921][ T1522] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.196790][ T1499] F2FS-fs (loop4): Found nat_bits in checkpoint [ 78.229602][ T1522] fuse: Unknown parameter 'lfd ' [ 78.255241][ T290] EXT4-fs (loop2): unmounting filesystem. [ 78.283929][ T1499] F2FS-fs (loop4): Start checkpoint disabled! [ 78.290752][ T28] audit: type=1326 audit(1778799022.361:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.2.283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b79ce59 code=0x7ffc0000 [ 78.300789][ T1499] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 78.336014][ T28] audit: type=1326 audit(1778799022.361:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.2.283" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045b79ce59 code=0x7ffc0000 [ 78.365405][ T1499] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 78.423098][ T1499] F2FS-fs (loop4): f2fs_enable_checkpoint() starts, meta: 0, node: 5, data: 0 [ 78.440061][ T1318] kworker/u4:42: attempt to access beyond end of device [ 78.440061][ T1318] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.519913][ T1499] F2FS-fs (loop4): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 78.534030][ T1499] F2FS-fs (loop4): f2fs_enable_checkpoint() finishes, writeback:94, sync:0 [ 78.892208][ T1536] set_capacity_and_notify: 7 callbacks suppressed [ 78.892230][ T1536] loop1: detected capacity change from 0 to 1024 [ 78.896513][ T289] EXT4-fs (loop3): unmounting filesystem. [ 78.932765][ T1536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.970002][ T1479] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.987385][ T28] audit: type=1400 audit(1778799023.051:984): avc: denied { create } for pid=1542 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.020868][ T286] EXT4-fs (loop1): unmounting filesystem. [ 79.031169][ T1543] Invalid ELF header len 1 [ 79.040431][ T28] audit: type=1400 audit(1778799023.101:985): avc: denied { watch } for pid=1542 comm="syz.3.287" path="/47" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.062405][ T28] audit: type=1400 audit(1778799023.101:986): avc: denied { sys_module } for pid=1542 comm="syz.3.287" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.083993][ T28] audit: type=1400 audit(1778799023.101:987): avc: denied { module_load } for pid=1542 comm="syz.3.287" path="/47/file0" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 79.120806][ T28] audit: type=1400 audit(1778799023.101:988): avc: denied { connect } for pid=1542 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.144475][ T1545] FAULT_INJECTION: forcing a failure. [ 79.144475][ T1545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.155086][ T1547] loop2: detected capacity change from 0 to 1024 [ 79.157882][ T1545] CPU: 0 PID: 1545 Comm: syz.1.289 Not tainted syzkaller #0 [ 79.171471][ T1545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 79.181648][ T1545] Call Trace: [ 79.184949][ T1545] [ 79.187899][ T1545] __dump_stack+0x21/0x24 [ 79.192343][ T1545] dump_stack_lvl+0x110/0x170 [ 79.197039][ T1545] ? __cfi_dump_stack_lvl+0x8/0x8 [ 79.202083][ T1545] dump_stack+0x15/0x24 [ 79.206275][ T1545] should_fail_ex+0x3d4/0x520 [ 79.211099][ T1545] should_fail+0xb/0x10 [ 79.215273][ T1545] should_fail_usercopy+0x1a/0x20 [ 79.220311][ T1545] _copy_from_user+0x1e/0xc0 [ 79.224946][ T1545] iovec_from_user+0x1aa/0x2e0 [ 79.229719][ T1545] __import_iovec+0x71/0x470 [ 79.234312][ T1545] ? kstrtoull+0x137/0x1d0 [ 79.238732][ T1545] import_iovec+0x7c/0xb0 [ 79.243063][ T1545] ___sys_sendmsg+0x252/0x360 [ 79.247745][ T1545] ? __sys_sendmsg+0x290/0x290 [ 79.252600][ T1545] ? __kasan_check_write+0x14/0x20 [ 79.257716][ T1545] ? proc_fail_nth_write+0x180/0x200 [ 79.263178][ T1545] ? vfs_write+0xa2c/0xce0 [ 79.267696][ T1545] ? __fdget+0x19c/0x220 [ 79.271949][ T1545] __x64_sys_sendmsg+0x205/0x2d0 [ 79.276889][ T1545] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 79.282440][ T1545] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 79.288602][ T1545] x64_sys_call+0x171/0x9a0 [ 79.293108][ T1545] do_syscall_64+0x4c/0xa0 [ 79.297616][ T1545] ? clear_bhb_loop+0x30/0x80 [ 79.302446][ T1545] ? clear_bhb_loop+0x30/0x80 [ 79.307130][ T1545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.313117][ T1545] RIP: 0033:0x7fa39239ce59 [ 79.317544][ T1545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.337148][ T1545] RSP: 002b:00007fa393265028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.345571][ T1545] RAX: ffffffffffffffda RBX: 00007fa392615fa0 RCX: 00007fa39239ce59 [ 79.353551][ T1545] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 79.361519][ T1545] RBP: 00007fa393265090 R08: 0000000000000000 R09: 0000000000000000 [ 79.369587][ T1545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.377554][ T1545] R13: 00007fa392616038 R14: 00007fa392615fa0 R15: 00007ffeecc0b0e8 [ 79.385530][ T1545] [ 79.399944][ T28] audit: type=1400 audit(1778799023.101:989): avc: denied { shutdown } for pid=1542 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.438680][ T1547] EXT4-fs: Ignoring removed orlov option [ 79.509550][ T1547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.796915][ T290] EXT4-fs (loop2): unmounting filesystem. [ 80.779916][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 80.792988][ T1572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 80.809945][ T1572] netlink: 'syz.4.296': attribute type 8 has an invalid length. [ 80.979908][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 80.988311][ T6] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.40 [ 81.009919][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.018043][ T6] usb 2-1: Product: 䶬䪪㨛ॡ盥鬃ꀤ敲묕뒠昶닕鱧处宕鳳阩졄ꔟ趲髙벙領표變쩉㎄俽쀹䵸ὡ㷬૤劝彭熫보ᵛ쫌㠟ީ埖큻௵놇얳흾ᾳ봶ₓ윆얐鑞뫘䶷瞶ⅹᡈ趇쮮㗹ԍﭯ氊﹙婷渜፛걤䑋ᕺﺅẇڕ悺෨௻油ﶟ븸髤Ɐֵ乴頲刄뻞ᮋ莰劯 [ 81.079932][ T6] usb 2-1: Manufacturer: 儐渖钃뮵ఇ铲堸᲻䨍특愕㛹傝ᥳ툼厚␛촹氮ꭢ⟪廚翠Î鶚幐n薙䂆⑦㤋啩㶏十ꁻ䚺踛療语㺢㇌֧ [ 81.083074][ T1575] loop2: detected capacity change from 0 to 512 [ 81.119942][ T6] usb 2-1: SerialNumber: ఄ [ 81.138358][ T1575] EXT4-fs: Ignoring removed i_version option [ 81.185848][ T1575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 81.194880][ T1575] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.334771][ T6] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 81.350018][ T1479] usb 5-1: device descriptor read/64, error -71 [ 81.351798][ T6] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 81.378637][ T6] usb 2-1: USB disconnect, device number 7 [ 81.390908][ T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.662435][ T1479] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.683467][ T1479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.697278][ T1479] usb 5-1: Product: syz [ 81.704598][ T1479] usb 5-1: Manufacturer: syz [ 81.709226][ T1479] usb 5-1: SerialNumber: syz [ 81.869996][ T294] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.933225][ T1479] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 81.940992][ T1479] usb 5-1: 1:1 : invalid channels 0 [ 81.956559][ T1479] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 81.996462][ T1479] usb 5-1: USB disconnect, device number 5 [ 82.069952][ T294] usb 6-1: Using ep0 maxpacket: 32 [ 82.076615][ T294] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.090623][ T294] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.112401][ T294] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 82.131817][ T294] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0003, bcdDevice= 0.00 [ 82.149917][ T294] usb 6-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 82.168139][ T294] usb 6-1: Product: syz [ 82.172498][ T294] usb 6-1: Manufacturer: syz [ 82.177107][ T294] usb 6-1: SerialNumber: syz [ 82.396666][ T294] usb 6-1: unit 3 not found! [ 82.401361][ T294] usb 6-1: unit 5 not found! [ 82.418496][ T294] usb 6-1: USB disconnect, device number 5 [ 82.472885][ T290] EXT4-fs (loop2): unmounting filesystem. [ 82.499274][ T1597] loop2: detected capacity change from 0 to 1024 [ 82.525444][ T1597] EXT4-fs error (device loop2): __ext4_get_inode_loc:4511: comm syz.2.301: Invalid inode table block 0 in block_group 0 [ 82.539706][ T1597] EXT4-fs (loop2): Remounting filesystem read-only [ 82.546514][ T1597] EXT4-fs (loop2): get root inode failed [ 82.554207][ T1597] EXT4-fs (loop2): mount failed [ 82.744510][ T1603] netlink: 60 bytes leftover after parsing attributes in process `syz.1.302'. [ 84.078915][ T1628] FAULT_INJECTION: forcing a failure. [ 84.078915][ T1628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.093043][ T1628] CPU: 1 PID: 1628 Comm: syz.4.308 Not tainted syzkaller #0 [ 84.100354][ T1628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.110416][ T1628] Call Trace: [ 84.113707][ T1628] [ 84.116644][ T1628] __dump_stack+0x21/0x24 [ 84.120993][ T1628] dump_stack_lvl+0x110/0x170 [ 84.125683][ T1628] ? __cfi_dump_stack_lvl+0x8/0x8 [ 84.130718][ T1628] dump_stack+0x15/0x24 [ 84.134884][ T1628] should_fail_ex+0x3d4/0x520 [ 84.139569][ T1628] should_fail+0xb/0x10 [ 84.143730][ T1628] should_fail_usercopy+0x1a/0x20 [ 84.148760][ T1628] _copy_from_user+0x1e/0xc0 [ 84.153369][ T1628] kstrtouint_from_user+0xda/0x170 [ 84.158492][ T1628] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 84.164220][ T1628] ? __kasan_check_read+0x11/0x20 [ 84.169259][ T1628] proc_fail_nth_write+0x8b/0x200 [ 84.174293][ T1628] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 84.179935][ T1628] ? security_file_permission+0x8a/0xb0 [ 84.185504][ T1628] ? security_file_permission+0x94/0xb0 [ 84.191062][ T1628] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 84.196794][ T1628] vfs_write+0x40e/0xce0 [ 84.201137][ T1628] ? __cfi_vfs_write+0x10/0x10 [ 84.205954][ T1628] ? __kasan_check_write+0x14/0x20 [ 84.211077][ T1628] ? mutex_lock+0x93/0x1b0 [ 84.215514][ T1628] ? __cfi_mutex_lock+0x10/0x10 [ 84.220378][ T1628] ? __fdget_pos+0x2cd/0x380 [ 84.224998][ T1628] ? ksys_write+0x71/0x250 [ 84.229426][ T1628] ksys_write+0x149/0x250 [ 84.233765][ T1628] ? __cfi_ksys_write+0x10/0x10 [ 84.238623][ T1628] ? fpregs_restore_userregs+0x128/0x260 [ 84.244268][ T1628] __x64_sys_write+0x7b/0x90 [ 84.248872][ T1628] x64_sys_call+0x27b/0x9a0 [ 84.253389][ T1628] do_syscall_64+0x4c/0xa0 [ 84.257819][ T1628] ? clear_bhb_loop+0x30/0x80 [ 84.262525][ T1628] ? clear_bhb_loop+0x30/0x80 [ 84.267223][ T1628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.273134][ T1628] RIP: 0033:0x7f6b6615d68e [ 84.277573][ T1628] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.297289][ T1628] RSP: 002b:00007f6b670aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.305792][ T1628] RAX: ffffffffffffffda RBX: 00007f6b670af6c0 RCX: 00007f6b6615d68e [ 84.313778][ T1628] RDX: 0000000000000001 RSI: 00007f6b670af0a0 RDI: 0000000000000006 [ 84.321761][ T1628] RBP: 00007f6b670af090 R08: 0000000000000000 R09: 0000000000000000 [ 84.329751][ T1628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.337820][ T1628] R13: 00007f6b66416128 R14: 00007f6b66416090 R15: 00007ffe22f38248 [ 84.345813][ T1628] [ 84.503541][ T1635] FAULT_INJECTION: forcing a failure. [ 84.503541][ T1635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.522013][ T1635] CPU: 0 PID: 1635 Comm: syz.2.311 Not tainted syzkaller #0 [ 84.523644][ T1637] loop4: detected capacity change from 0 to 128 [ 84.529373][ T1635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.539019][ T1637] FAT-fs (loop4): bogus number of reserved sectors [ 84.545671][ T1635] Call Trace: [ 84.545681][ T1635] [ 84.545688][ T1635] __dump_stack+0x21/0x24 [ 84.545714][ T1635] dump_stack_lvl+0x110/0x170 [ 84.558854][ T1637] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 84.562777][ T1635] ? __cfi_dump_stack_lvl+0x8/0x8 [ 84.562809][ T1635] dump_stack+0x15/0x24 [ 84.562828][ T1635] should_fail_ex+0x3d4/0x520 [ 84.567853][ T1637] FAT-fs (loop4): Can't find a valid FAT filesystem [ 84.576780][ T1635] should_fail+0xb/0x10 [ 84.576804][ T1635] should_fail_usercopy+0x1a/0x20 [ 84.576822][ T1635] _copy_from_user+0x1e/0xc0 [ 84.610963][ T1635] iovec_from_user+0x1aa/0x2e0 [ 84.615730][ T1635] __import_iovec+0x71/0x470 [ 84.620316][ T1635] ? kstrtoull+0x137/0x1d0 [ 84.624730][ T1635] import_iovec+0x7c/0xb0 [ 84.629053][ T1635] ___sys_sendmsg+0x252/0x360 [ 84.633734][ T1635] ? __sys_sendmsg+0x290/0x290 [ 84.638496][ T1635] ? __kasan_check_write+0x14/0x20 [ 84.643601][ T1635] ? proc_fail_nth_write+0x180/0x200 [ 84.648886][ T1635] ? vfs_write+0xa2c/0xce0 [ 84.653300][ T1635] ? __fdget+0x19c/0x220 [ 84.657541][ T1635] __x64_sys_sendmsg+0x205/0x2d0 [ 84.662480][ T1635] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 84.667941][ T1635] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 84.674007][ T1635] x64_sys_call+0x171/0x9a0 [ 84.678514][ T1635] do_syscall_64+0x4c/0xa0 [ 84.682931][ T1635] ? clear_bhb_loop+0x30/0x80 [ 84.687614][ T1635] ? clear_bhb_loop+0x30/0x80 [ 84.692294][ T1635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.698188][ T1635] RIP: 0033:0x7f045b79ce59 [ 84.702608][ T1635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.722246][ T1635] RSP: 002b:00007f045c6e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.730663][ T1635] RAX: ffffffffffffffda RBX: 00007f045ba15fa0 RCX: 00007f045b79ce59 [ 84.738641][ T1635] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 84.746627][ T1635] RBP: 00007f045c6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 84.754603][ T1635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.762580][ T1635] R13: 00007f045ba16038 R14: 00007f045ba15fa0 R15: 00007fffbfbee2f8 [ 84.770563][ T1635] [ 84.811861][ T1638] xt_connbytes: Forcing CT accounting to be enabled [ 84.813961][ T1643] loop2: detected capacity change from 0 to 512 [ 84.830323][ T1641] loop1: detected capacity change from 0 to 1024 [ 84.854330][ T1641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.854877][ T1650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 84.869969][ T1643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.871735][ T1650] netlink: 'syz.3.315': attribute type 8 has an invalid length. [ 84.881803][ T1641] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.313: deleted inode referenced: 12 [ 84.900346][ T1641] EXT4-fs (loop1): Remounting filesystem read-only [ 84.905867][ T1643] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.159669][ T286] EXT4-fs (loop1): unmounting filesystem. [ 85.171162][ T1656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.240278][ T1479] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.275658][ T1660] loop1: detected capacity change from 0 to 128 [ 85.299428][ T1660] FAT-fs (loop1): bogus number of reserved sectors [ 85.306128][ T1660] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 85.315533][ T1660] FAT-fs (loop1): Can't find a valid FAT filesystem [ 85.432473][ T1479] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.513563][ T1479] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.525026][ T1479] usb 4-1: Product: syz [ 85.529241][ T1479] usb 4-1: Manufacturer: syz [ 85.534093][ T1479] usb 4-1: SerialNumber: syz [ 85.754600][ T1479] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 85.786976][ T1479] usb 4-1: 1:1 : invalid channels 0 [ 85.841696][ T1479] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 85.979785][ T1479] usb 4-1: USB disconnect, device number 5 [ 86.390390][ T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.627104][ T1685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 86.638079][ T1685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.324'. [ 86.647764][ T1685] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 86.865102][ T290] EXT4-fs (loop2): unmounting filesystem. [ 86.882250][ T1692] loop2: detected capacity change from 0 to 1024 [ 86.899662][ T1692] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.909310][ T1692] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.326: deleted inode referenced: 12 [ 86.921171][ T6] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 86.929019][ T1692] EXT4-fs (loop2): Remounting filesystem read-only [ 87.035471][ T290] EXT4-fs (loop2): unmounting filesystem. [ 87.243009][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 87.243025][ T28] audit: type=1400 audit(1778799031.311:991): avc: denied { connect } for pid=1702 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.320547][ T28] audit: type=1400 audit(1778799031.391:992): avc: denied { write } for pid=1702 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.342141][ T1704] loop3: detected capacity change from 0 to 512 [ 87.362173][ T1704] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.371997][ T1704] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.499970][ T1479] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 87.643561][ T1712] loop4: detected capacity change from 0 to 512 [ 87.658965][ T1712] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.679953][ T1479] usb 2-1: Using ep0 maxpacket: 32 [ 87.686346][ T1479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.697727][ T1479] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.697906][ T1712] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 87.707719][ T1479] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 87.725790][ T1479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.739939][ T1479] usb 2-1: config 0 descriptor?? [ 87.752321][ T1479] hub 2-1:0.0: USB hub found [ 88.507304][ T1701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.694849][ T1719] loop2: detected capacity change from 0 to 512 [ 88.706071][ T1701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.732882][ T1719] ext4: Unknown parameter 'func' [ 88.753799][ T1721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 88.779416][ T1721] netlink: 'syz.4.334': attribute type 8 has an invalid length. [ 88.788216][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 88.798090][ T1701] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.799173][ T289] EXT4-fs (loop3): unmounting filesystem. [ 88.813916][ T1701] device bridge_slave_1 left promiscuous mode [ 88.821960][ T1701] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.855431][ T28] audit: type=1326 audit(1778799032.921:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1700 comm="syz.1.329" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa39239ce59 code=0x0 [ 88.917020][ T1723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.336'. [ 89.990745][ T1479] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 89.999370][ T1727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.336'. [ 90.011906][ T1479] usbhid 2-1:0.0: can't add hid device: -71 [ 90.017871][ T1479] usbhid: probe of 2-1:0.0 failed with error -71 [ 90.106717][ T1727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.336'. [ 90.128177][ T1734] loop2: detected capacity change from 0 to 1024 [ 90.176770][ T1734] EXT4-fs: Ignoring removed orlov option [ 90.344916][ T1734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.402687][ T1479] usb 2-1: USB disconnect, device number 8 [ 90.628508][ T1735] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 90.637903][ T1735] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 90.689975][ T1491] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.713429][ T1750] xt_l2tp: unknown flags: 17 [ 90.716835][ T290] EXT4-fs (loop2): unmounting filesystem. [ 90.728115][ T1752] loop5: detected capacity change from 0 to 512 [ 90.729721][ T1752] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.765635][ T1752] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 90.851709][ T1763] loop5: detected capacity change from 0 to 512 [ 90.883260][ T1491] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.895374][ T1491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.904071][ T1491] usb 5-1: Product: syz [ 90.908343][ T1491] usb 5-1: Manufacturer: syz [ 90.913594][ T1491] usb 5-1: SerialNumber: syz [ 90.923028][ T1763] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 91.128225][ T1763] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.518251][ T1491] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 91.524942][ T370] EXT4-fs (loop5): unmounting filesystem. [ 91.529055][ T1491] usb 5-1: 1:1 : invalid channels 0 [ 91.536857][ T1491] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 91.560523][ T1491] usb 5-1: USB disconnect, device number 6 [ 91.688069][ T1774] loop5: detected capacity change from 0 to 40427 [ 91.698700][ T1774] F2FS-fs (loop5): invalid crc value [ 91.711672][ T1774] F2FS-fs (loop5): Found nat_bits in checkpoint [ 91.780239][ T1774] F2FS-fs (loop5): Start checkpoint disabled! [ 91.791018][ T1774] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 91.799915][ T404] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 91.830273][ T28] audit: type=1400 audit(1778799035.901:994): avc: denied { create } for pid=1775 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 91.856168][ T1774] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 91.881232][ T1776] loop3: detected capacity change from 0 to 512 [ 91.897209][ T28] audit: type=1400 audit(1778799035.921:995): avc: denied { ioctl } for pid=1775 comm="syz.3.348" path="cgroup:[4026532457]" dev="nsfs" ino=4026532457 ioctlcmd=0x5883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 91.926904][ T1776] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.142132][ T1776] Quota error (device loop3): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 92.192011][ T1776] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 92.223536][ T1774] F2FS-fs (loop5): f2fs_enable_checkpoint() starts, meta: 0, node: 0, data: 0 [ 92.251329][ T1776] EXT4-fs error (device loop3): ext4_acquire_dquot:6822: comm syz.3.348: Failed to acquire dquot type 1 [ 92.279934][ T1774] F2FS-fs (loop5): sync_inode_sb done, dirty_data: 0, 0, skipped write: 0, 0, retry: 3 [ 92.315427][ T1776] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #16: comm syz.3.348: corrupted inode contents [ 92.330597][ T1774] F2FS-fs (loop5): f2fs_enable_checkpoint() finishes, writeback:55, sync:26 [ 92.396457][ T1776] EXT4-fs error (device loop3): ext4_dirty_inode:6135: inode #16: comm syz.3.348: mark_inode_dirty error [ 92.480351][ T1776] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #16: comm syz.3.348: corrupted inode contents [ 92.623567][ T1776] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.348: mark_inode_dirty error [ 92.715853][ T1776] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #16: comm syz.3.348: corrupted inode contents [ 92.754822][ T1776] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 92.765000][ T1786] loop2: detected capacity change from 0 to 40427 [ 92.788935][ T1776] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #16: comm syz.3.348: corrupted inode contents [ 92.802033][ T1786] F2FS-fs (loop2): invalid crc value [ 92.831374][ T1786] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.841467][ T1795] loop5: detected capacity change from 0 to 512 [ 92.848004][ T1776] EXT4-fs error (device loop3): ext4_truncate:4316: inode #16: comm syz.3.348: mark_inode_dirty error [ 92.894056][ T1776] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 92.932957][ T1776] EXT4-fs (loop3): 1 truncate cleaned up [ 92.950053][ T1797] loop5: detected capacity change from 0 to 1024 [ 92.957162][ T1776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.971586][ T1786] F2FS-fs (loop2): Start checkpoint disabled! [ 92.985761][ T1797] EXT4-fs: Ignoring removed orlov option [ 92.992854][ T1776] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.004101][ T1786] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 93.022932][ T1786] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 93.031757][ T1797] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 93.151205][ T289] EXT4-fs (loop3): unmounting filesystem. [ 93.196411][ T1806] loop2: detected capacity change from 0 to 512 [ 93.203779][ T1806] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.228667][ T1806] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 93.228892][ T1810] loop3: detected capacity change from 0 to 128 [ 93.245884][ T370] EXT4-fs (loop5): unmounting filesystem. [ 93.275852][ T1810] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.294473][ T1810] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.422488][ T1810] fscrypt (loop3, inode 12): Unsupported encryption modes (contents 4, filenames 0) [ 93.443067][ T289] EXT4-fs (loop3): unmounting filesystem. [ 94.247274][ T1839] netlink: 20 bytes leftover after parsing attributes in process `syz.5.361'. [ 95.029067][ T28] audit: type=1400 audit(1778799039.091:996): avc: denied { mount } for pid=1853 comm="syz.5.367" name="/" dev="ramfs" ino=27238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 95.297031][ T1858] set_capacity_and_notify: 1 callbacks suppressed [ 95.297077][ T1858] loop1: detected capacity change from 0 to 1024 [ 95.409344][ T1858] EXT4-fs: Ignoring removed orlov option [ 95.562496][ T1858] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.799652][ T1866] loop2: detected capacity change from 0 to 512 [ 95.806635][ T1866] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.843413][ T1868] loop2: detected capacity change from 0 to 512 [ 95.867344][ T1868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.881659][ T1868] EXT4-fs (loop2): 1 truncate cleaned up [ 95.887340][ T1868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.898663][ T286] EXT4-fs (loop1): unmounting filesystem. [ 95.928849][ T1873] loop1: detected capacity change from 0 to 512 [ 96.259728][ T1875] binder: BINDER_SET_CONTEXT_MGR already set [ 96.265809][ T1875] binder: 1869:1875 ioctl 4018620d 200000004a80 returned -16 [ 96.385865][ T1873] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.400051][ T1873] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.420430][ T290] EXT4-fs (loop2): unmounting filesystem. [ 96.451055][ T286] EXT4-fs (loop1): unmounting filesystem. [ 96.469339][ T1888] loop1: detected capacity change from 0 to 512 [ 96.513688][ T1891] loop1: detected capacity change from 0 to 512 [ 96.523304][ T1891] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.377: inode has both inline data and extents flags [ 96.536786][ T1891] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.377: couldn't read orphan inode 15 (err -117) [ 96.549905][ T1891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.563557][ T1891] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.377: Directory hole found for htree leaf block 0 [ 96.581962][ T286] EXT4-fs (loop1): unmounting filesystem. [ 96.598192][ T1894] loop1: detected capacity change from 0 to 512 [ 96.610002][ T6] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 96.617902][ T1894] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.378: inode has both inline data and extents flags [ 96.631745][ T1894] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.378: couldn't read orphan inode 15 (err -117) [ 96.643802][ T1894] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.659486][ T1894] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.378: Directory hole found for htree leaf block 0 [ 96.679515][ T286] EXT4-fs (loop1): unmounting filesystem. [ 96.728047][ T1491] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.753769][ T1901] loop4: detected capacity change from 0 to 512 [ 96.773163][ T1901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.782344][ T1901] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.801479][ T288] EXT4-fs (loop4): unmounting filesystem. [ 96.826916][ T1905] loop4: detected capacity change from 0 to 512 [ 96.833883][ T1905] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 96.845328][ T6] usb 6-1: Using ep0 maxpacket: 16 [ 96.858587][ T6] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.40 [ 96.875512][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.884737][ T28] audit: type=1326 audit(1778799040.961:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.4.382" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 96.890087][ T6] usb 6-1: Product: 䶬䪪㨛ॡ盥鬃ꀤ敲묕뒠昶닕鱧处宕鳳阩졄ꔟ趲髙벙領표變쩉㎄俽쀹䵸ὡ㷬૤劝彭熫보ᵛ쫌㠟ީ埖큻௵놇얳흾ᾳ봶ₓ윆얐鑞뫘䶷瞶ⅹᡈ趇쮮㗹ԍﭯ氊﹙婷渜፛걤䑋ᕺﺅẇڕ悺෨௻油ﶟ븸髤Ɐֵ乴頲刄뻞ᮋ莰劯 [ 96.917704][ T1907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.382'. [ 96.952054][ T6] usb 6-1: Manufacturer: 儐渖钃뮵ఇ铲堸᲻䨍특愕㛹傝ᥳ툼厚␛촹氮ꭢ⟪廚翠Î鶚幐n薙䂆⑦㤋啩㶏十ꁻ䚺踛療语㺢㇌֧ [ 96.963986][ T28] audit: type=1326 audit(1778799040.981:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.4.382" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 96.969013][ T6] usb 6-1: SerialNumber: ఄ [ 97.004657][ T28] audit: type=1326 audit(1778799040.981:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.4.382" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 97.029568][ T28] audit: type=1326 audit(1778799040.981:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.4.382" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 97.059918][ T28] audit: type=1326 audit(1778799040.981:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.4.382" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 97.085846][ T28] audit: type=1326 audit(1778799040.981:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.4.382" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 97.116788][ T28] audit: type=1326 audit(1778799040.981:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.4.382" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 97.145628][ T28] audit: type=1326 audit(1778799040.981:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.4.382" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 97.171059][ T28] audit: type=1326 audit(1778799040.981:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1906 comm="syz.4.382" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b6619ce59 code=0x7ffc0000 [ 97.210652][ T6] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 97.239430][ T6] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 97.273101][ T6] usb 6-1: USB disconnect, device number 8 [ 97.388109][ T1918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 97.480387][ T428] udevd[428]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.541391][ T1909] loop1: detected capacity change from 0 to 131072 [ 97.548943][ T1909] F2FS-fs (loop1): invalid crc value [ 97.557244][ T1909] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.599953][ T1909] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 97.643997][ T1909] overlayfs: './file0' not a directory [ 97.818563][ T1929] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 97.860865][ T1934] netlink: 24 bytes leftover after parsing attributes in process `syz.5.390'. [ 98.283463][ T1965] FAULT_INJECTION: forcing a failure. [ 98.283463][ T1965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.309904][ T1965] CPU: 0 PID: 1965 Comm: syz.3.405 Not tainted syzkaller #0 [ 98.317240][ T1965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.327315][ T1965] Call Trace: [ 98.330611][ T1965] [ 98.333556][ T1965] __dump_stack+0x21/0x24 [ 98.337912][ T1965] dump_stack_lvl+0x110/0x170 [ 98.342612][ T1965] ? __cfi_dump_stack_lvl+0x8/0x8 [ 98.347659][ T1965] dump_stack+0x15/0x24 [ 98.351835][ T1965] should_fail_ex+0x3d4/0x520 [ 98.356530][ T1965] should_fail+0xb/0x10 [ 98.360697][ T1965] should_fail_usercopy+0x1a/0x20 [ 98.365724][ T1965] _copy_to_user+0x1e/0x90 [ 98.370153][ T1965] simple_read_from_buffer+0xe9/0x160 [ 98.375529][ T1965] proc_fail_nth_read+0x1a6/0x220 [ 98.380560][ T1965] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 98.386109][ T1965] ? security_file_permission+0x94/0xb0 [ 98.391659][ T1965] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 98.397204][ T1965] vfs_read+0x27a/0x910 [ 98.401448][ T1965] ? __cfi_vfs_read+0x10/0x10 [ 98.406123][ T1965] ? __kasan_check_write+0x14/0x20 [ 98.411233][ T1965] ? mutex_lock+0x93/0x1b0 [ 98.415653][ T1965] ? __cfi_mutex_lock+0x10/0x10 [ 98.420506][ T1965] ? __fdget_pos+0x2cd/0x380 [ 98.425098][ T1965] ? ksys_read+0x71/0x250 [ 98.429426][ T1965] ksys_read+0x149/0x250 [ 98.433663][ T1965] ? __cfi_ksys_read+0x10/0x10 [ 98.438422][ T1965] ? debug_smp_processor_id+0x17/0x20 [ 98.443788][ T1965] __x64_sys_read+0x7b/0x90 [ 98.448288][ T1965] x64_sys_call+0x2f/0x9a0 [ 98.452792][ T1965] do_syscall_64+0x4c/0xa0 [ 98.457206][ T1965] ? clear_bhb_loop+0x30/0x80 [ 98.461888][ T1965] ? clear_bhb_loop+0x30/0x80 [ 98.466570][ T1965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.472465][ T1965] RIP: 0033:0x7ff51f95d68e [ 98.476884][ T1965] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.496485][ T1965] RSP: 002b:00007ff5208fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.504897][ T1965] RAX: ffffffffffffffda RBX: 00007ff5208fe6c0 RCX: 00007ff51f95d68e [ 98.512960][ T1965] RDX: 000000000000000f RSI: 00007ff5208fe0a0 RDI: 0000000000000003 [ 98.520934][ T1965] RBP: 00007ff5208fe090 R08: 0000000000000000 R09: 0000000000000000 [ 98.528911][ T1965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.536877][ T1965] R13: 00007ff51fc16038 R14: 00007ff51fc15fa0 R15: 00007fff3e83aea8 [ 98.544851][ T1965] [ 98.695042][ T1969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1969 comm=syz.5.397 [ 98.722585][ T1970] FAULT_INJECTION: forcing a failure. [ 98.722585][ T1970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.751838][ T1970] CPU: 1 PID: 1970 Comm: syz.3.406 Not tainted syzkaller #0 [ 98.759171][ T1970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.769250][ T1970] Call Trace: [ 98.772551][ T1970] [ 98.775496][ T1970] __dump_stack+0x21/0x24 [ 98.779931][ T1970] dump_stack_lvl+0x110/0x170 [ 98.784626][ T1970] ? __cfi_dump_stack_lvl+0x8/0x8 [ 98.789674][ T1970] ? format_decode+0x1bb/0x1520 [ 98.794548][ T1970] dump_stack+0x15/0x24 [ 98.798723][ T1970] should_fail_ex+0x3d4/0x520 [ 98.803414][ T1970] should_fail+0xb/0x10 [ 98.807586][ T1970] should_fail_usercopy+0x1a/0x20 [ 98.812627][ T1970] _copy_from_user+0x1e/0xc0 [ 98.817270][ T1970] kstrtouint_from_user+0xda/0x170 [ 98.822405][ T1970] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 98.828129][ T1970] ? __kasan_check_read+0x11/0x20 [ 98.833167][ T1970] ? _copy_to_user+0x72/0x90 [ 98.837773][ T1970] ? simple_read_from_buffer+0x10f/0x160 [ 98.843412][ T1970] proc_fail_nth_write+0x8b/0x200 [ 98.848442][ T1970] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 98.854078][ T1970] ? security_file_permission+0x8a/0xb0 [ 98.859635][ T1970] ? security_file_permission+0x94/0xb0 [ 98.865188][ T1970] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 98.870825][ T1970] vfs_write+0x40e/0xce0 [ 98.875067][ T1970] ? __kasan_check_read+0x11/0x20 [ 98.880095][ T1970] ? __cfi_vfs_write+0x10/0x10 [ 98.884859][ T1970] ? __kasan_check_write+0x14/0x20 [ 98.889967][ T1970] ? mutex_lock+0x93/0x1b0 [ 98.894475][ T1970] ? __cfi_mutex_lock+0x10/0x10 [ 98.899414][ T1970] ? __fdget_pos+0x2cd/0x380 [ 98.904007][ T1970] ? ksys_write+0x71/0x250 [ 98.908424][ T1970] ksys_write+0x149/0x250 [ 98.912759][ T1970] ? __cfi_ksys_write+0x10/0x10 [ 98.917698][ T1970] ? debug_smp_processor_id+0x17/0x20 [ 98.923075][ T1970] __x64_sys_write+0x7b/0x90 [ 98.927665][ T1970] x64_sys_call+0x27b/0x9a0 [ 98.932175][ T1970] do_syscall_64+0x4c/0xa0 [ 98.936590][ T1970] ? clear_bhb_loop+0x30/0x80 [ 98.941275][ T1970] ? clear_bhb_loop+0x30/0x80 [ 98.945959][ T1970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.951864][ T1970] RIP: 0033:0x7ff51f95d68e [ 98.956369][ T1970] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.975978][ T1970] RSP: 002b:00007ff5208dcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 98.984564][ T1970] RAX: ffffffffffffffda RBX: 00007ff5208dd6c0 RCX: 00007ff51f95d68e [ 98.992534][ T1970] RDX: 0000000000000001 RSI: 00007ff5208dd0a0 RDI: 0000000000000003 [ 99.000503][ T1970] RBP: 00007ff5208dd090 R08: 0000000000000000 R09: 0000000000000000 [ 99.008481][ T1970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.016475][ T1970] R13: 00007ff51fc16128 R14: 00007ff51fc16090 R15: 00007fff3e83aea8 [ 99.024462][ T1970] [ 99.910634][ T723] device bridge_slave_0 left promiscuous mode [ 99.918036][ T723] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.935306][ T723] device veth1_macvtap left promiscuous mode [ 99.947922][ T723] device veth0_vlan left promiscuous mode [ 100.047439][ T28] kauditd_printk_skb: 201 callbacks suppressed [ 100.047457][ T28] audit: type=1400 audit(1778799044.111:1207): avc: denied { read write } for pid=288 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.108239][ T28] audit: type=1400 audit(1778799044.171:1208): avc: denied { bpf } for pid=1988 comm="syz.4.414" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 100.147052][ T1995] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 100.152466][ T28] audit: type=1400 audit(1778799044.171:1209): avc: denied { read } for pid=1989 comm="syz.2.412" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 100.171647][ T1995] audit: out of memory in audit_log_start [ 100.198214][ T28] audit: type=1400 audit(1778799044.181:1210): avc: denied { create } for pid=1990 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 100.218088][ T28] audit: type=1400 audit(1778799044.191:1211): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.242668][ T28] audit: type=1400 audit(1778799044.201:1212): avc: denied { create } for pid=1990 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 100.262180][ T28] audit: type=1400 audit(1778799044.201:1213): avc: denied { bpf } for pid=1990 comm="syz.3.413" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 100.282872][ T28] audit: type=1400 audit(1778799044.201:1214): avc: denied { prog_load } for pid=1990 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.404505][ T2035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2035 comm=syz.5.425 [ 104.244659][ T2041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 104.263870][ T2041] netlink: 'syz.2.430': attribute type 8 has an invalid length. [ 105.349145][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 105.349160][ T28] audit: type=1400 audit(1778799049.411:1345): avc: denied { execmem } for pid=2047 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 105.368689][ T2055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 105.379406][ T28] audit: type=1400 audit(1778799049.421:1346): avc: denied { create } for pid=2048 comm="syz.5.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 105.405726][ T28] audit: type=1400 audit(1778799049.431:1347): avc: denied { create } for pid=2054 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 105.426455][ T28] audit: type=1400 audit(1778799049.431:1348): avc: denied { bpf } for pid=2054 comm="syz.4.436" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 105.447141][ T28] audit: type=1400 audit(1778799049.431:1349): avc: denied { map_create } for pid=2054 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.466667][ T28] audit: type=1400 audit(1778799049.431:1350): avc: denied { create } for pid=2054 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 105.486755][ T28] audit: type=1400 audit(1778799049.431:1351): avc: denied { read } for pid=2054 comm="syz.4.436" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 105.509131][ T28] audit: type=1400 audit(1778799049.431:1352): avc: denied { read write } for pid=2048 comm="syz.5.433" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 105.532884][ T28] audit: type=1400 audit(1778799049.431:1353): avc: denied { create } for pid=2048 comm="syz.5.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 105.556678][ T28] audit: type=1400 audit(1778799049.431:1354): avc: denied { create } for pid=2048 comm="syz.5.433" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 105.598744][ T2056] FAULT_INJECTION: forcing a failure. [ 105.598744][ T2056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.612001][ T2056] CPU: 0 PID: 2056 Comm: syz.3.435 Not tainted syzkaller #0 [ 105.619298][ T2056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.629341][ T2056] Call Trace: [ 105.632643][ T2056] [ 105.635570][ T2056] __dump_stack+0x21/0x24 [ 105.639895][ T2056] dump_stack_lvl+0x110/0x170 [ 105.644582][ T2056] ? __cfi_dump_stack_lvl+0x8/0x8 [ 105.649617][ T2056] dump_stack+0x15/0x24 [ 105.653768][ T2056] should_fail_ex+0x3d4/0x520 [ 105.658437][ T2056] should_fail+0xb/0x10 [ 105.662599][ T2056] should_fail_usercopy+0x1a/0x20 [ 105.667628][ T2056] _copy_to_user+0x1e/0x90 [ 105.672060][ T2056] simple_read_from_buffer+0xe9/0x160 [ 105.677424][ T2056] proc_fail_nth_read+0x1a6/0x220 [ 105.682442][ T2056] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 105.687981][ T2056] ? security_file_permission+0x94/0xb0 [ 105.693531][ T2056] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 105.699075][ T2056] vfs_read+0x27a/0x910 [ 105.703226][ T2056] ? __cfi_vfs_read+0x10/0x10 [ 105.707890][ T2056] ? __kasan_check_write+0x14/0x20 [ 105.713001][ T2056] ? mutex_lock+0x93/0x1b0 [ 105.717446][ T2056] ? __cfi_mutex_lock+0x10/0x10 [ 105.722299][ T2056] ? __fdget_pos+0x2cd/0x380 [ 105.726981][ T2056] ? ksys_read+0x71/0x250 [ 105.731320][ T2056] ksys_read+0x149/0x250 [ 105.735556][ T2056] ? __cfi_ksys_read+0x10/0x10 [ 105.740312][ T2056] ? fput+0x154/0x1a0 [ 105.744292][ T2056] ? debug_smp_processor_id+0x17/0x20 [ 105.749672][ T2056] __x64_sys_read+0x7b/0x90 [ 105.754170][ T2056] x64_sys_call+0x2f/0x9a0 [ 105.758597][ T2056] do_syscall_64+0x4c/0xa0 [ 105.763004][ T2056] ? clear_bhb_loop+0x30/0x80 [ 105.767690][ T2056] ? clear_bhb_loop+0x30/0x80 [ 105.772526][ T2056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.778425][ T2056] RIP: 0033:0x7ff51f95d68e [ 105.782831][ T2056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 105.802435][ T2056] RSP: 002b:00007ff5208fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.810875][ T2056] RAX: ffffffffffffffda RBX: 00007ff5208fe6c0 RCX: 00007ff51f95d68e [ 105.819010][ T2056] RDX: 000000000000000f RSI: 00007ff5208fe0a0 RDI: 0000000000000004 [ 105.826977][ T2056] RBP: 00007ff5208fe090 R08: 0000000000000000 R09: 0000000000000000 [ 105.834952][ T2056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.842914][ T2056] R13: 00007ff51fc16038 R14: 00007ff51fc15fa0 R15: 00007fff3e83aea8 [ 105.850886][ T2056] [ 106.590868][ T2064] FAULT_INJECTION: forcing a failure. [ 106.590868][ T2064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.604421][ T2064] CPU: 0 PID: 2064 Comm: syz.4.440 Not tainted syzkaller #0 [ 106.611739][ T2064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.621823][ T2064] Call Trace: [ 106.625123][ T2064] [ 106.628066][ T2064] __dump_stack+0x21/0x24 [ 106.632499][ T2064] dump_stack_lvl+0x110/0x170 [ 106.637193][ T2064] ? __cfi_dump_stack_lvl+0x8/0x8 [ 106.642231][ T2064] dump_stack+0x15/0x24 [ 106.646399][ T2064] should_fail_ex+0x3d4/0x520 [ 106.651085][ T2064] should_fail+0xb/0x10 [ 106.655253][ T2064] should_fail_usercopy+0x1a/0x20 [ 106.660305][ T2064] _copy_to_user+0x1e/0x90 [ 106.664754][ T2064] simple_read_from_buffer+0xe9/0x160 [ 106.670155][ T2064] proc_fail_nth_read+0x1a6/0x220 [ 106.675199][ T2064] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 106.680758][ T2064] ? security_file_permission+0x94/0xb0 [ 106.686340][ T2064] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 106.692001][ T2064] vfs_read+0x27a/0x910 [ 106.696272][ T2064] ? __cfi_vfs_read+0x10/0x10 [ 106.700963][ T2064] ? __kasan_check_write+0x14/0x20 [ 106.706098][ T2064] ? mutex_lock+0x93/0x1b0 [ 106.710534][ T2064] ? __cfi_mutex_lock+0x10/0x10 [ 106.715441][ T2064] ? __fdget_pos+0x2cd/0x380 [ 106.720061][ T2064] ? ksys_read+0x71/0x250 [ 106.724405][ T2064] ksys_read+0x149/0x250 [ 106.728663][ T2064] ? __cfi_ksys_read+0x10/0x10 [ 106.733444][ T2064] ? debug_smp_processor_id+0x17/0x20 [ 106.738828][ T2064] __x64_sys_read+0x7b/0x90 [ 106.743341][ T2064] x64_sys_call+0x2f/0x9a0 [ 106.747776][ T2064] do_syscall_64+0x4c/0xa0 [ 106.752202][ T2064] ? clear_bhb_loop+0x30/0x80 [ 106.756897][ T2064] ? clear_bhb_loop+0x30/0x80 [ 106.761598][ T2064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.767602][ T2064] RIP: 0033:0x7f6b6615d68e [ 106.772041][ T2064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.791841][ T2064] RSP: 002b:00007f6b670cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.800278][ T2064] RAX: ffffffffffffffda RBX: 00007f6b670d06c0 RCX: 00007f6b6615d68e [ 106.808271][ T2064] RDX: 000000000000000f RSI: 00007f6b670d00a0 RDI: 0000000000000003 [ 106.816259][ T2064] RBP: 00007f6b670d0090 R08: 0000000000000000 R09: 0000000000000000 [ 106.824245][ T2064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.832226][ T2064] R13: 00007f6b66416038 R14: 00007f6b66415fa0 R15: 00007ffe22f38248 [ 106.840221][ T2064] [ 106.964509][ T2072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2072 comm=syz.2.438 [ 107.910972][ T2077] FAULT_INJECTION: forcing a failure. [ 107.910972][ T2077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.924153][ T2077] CPU: 1 PID: 2077 Comm: syz.2.442 Not tainted syzkaller #0 [ 107.931454][ T2077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.941504][ T2077] Call Trace: [ 107.944779][ T2077] [ 107.947703][ T2077] __dump_stack+0x21/0x24 [ 107.952037][ T2077] dump_stack_lvl+0x110/0x170 [ 107.956703][ T2077] ? __cfi_dump_stack_lvl+0x8/0x8 [ 107.961893][ T2077] dump_stack+0x15/0x24 [ 107.966133][ T2077] should_fail_ex+0x3d4/0x520 [ 107.970822][ T2077] should_fail+0xb/0x10 [ 107.974989][ T2077] should_fail_usercopy+0x1a/0x20 [ 107.980038][ T2077] _copy_to_user+0x1e/0x90 [ 107.984479][ T2077] simple_read_from_buffer+0xe9/0x160 [ 107.989851][ T2077] proc_fail_nth_read+0x1a6/0x220 [ 107.994894][ T2077] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 108.000432][ T2077] ? security_file_permission+0x94/0xb0 [ 108.005978][ T2077] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 108.011528][ T2077] vfs_read+0x27a/0x910 [ 108.015685][ T2077] ? __cfi_vfs_read+0x10/0x10 [ 108.020359][ T2077] ? __kasan_check_write+0x14/0x20 [ 108.025471][ T2077] ? mutex_lock+0x93/0x1b0 [ 108.029886][ T2077] ? __cfi_mutex_lock+0x10/0x10 [ 108.034839][ T2077] ? __fdget_pos+0x2cd/0x380 [ 108.039454][ T2077] ? ksys_read+0x71/0x250 [ 108.043777][ T2077] ksys_read+0x149/0x250 [ 108.048010][ T2077] ? __cfi_ksys_read+0x10/0x10 [ 108.052763][ T2077] ? debug_smp_processor_id+0x17/0x20 [ 108.058133][ T2077] __x64_sys_read+0x7b/0x90 [ 108.062639][ T2077] x64_sys_call+0x2f/0x9a0 [ 108.067051][ T2077] do_syscall_64+0x4c/0xa0 [ 108.071470][ T2077] ? clear_bhb_loop+0x30/0x80 [ 108.076153][ T2077] ? clear_bhb_loop+0x30/0x80 [ 108.080821][ T2077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.086707][ T2077] RIP: 0033:0x7f045b75d68e [ 108.091113][ T2077] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.110809][ T2077] RSP: 002b:00007f045c6e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.119214][ T2077] RAX: ffffffffffffffda RBX: 00007f045c6e66c0 RCX: 00007f045b75d68e [ 108.127174][ T2077] RDX: 000000000000000f RSI: 00007f045c6e60a0 RDI: 0000000000000003 [ 108.135137][ T2077] RBP: 00007f045c6e6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.143125][ T2077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.151091][ T2077] R13: 00007f045ba16038 R14: 00007f045ba15fa0 R15: 00007fffbfbee2f8 [ 108.159078][ T2077] [ 110.833348][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 110.833364][ T28] audit: type=1400 audit(1778799054.901:1436): avc: denied { execmem } for pid=2091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 110.860220][ T28] audit: type=1400 audit(1778799054.901:1437): avc: denied { create } for pid=2096 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 110.881451][ T28] audit: type=1400 audit(1778799054.901:1438): avc: denied { create } for pid=2096 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 110.904845][ T28] audit: type=1400 audit(1778799054.911:1439): avc: denied { read write } for pid=2096 comm="syz.3.450" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.929012][ T28] audit: type=1400 audit(1778799054.911:1440): avc: denied { create } for pid=2096 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 110.948891][ T28] audit: type=1400 audit(1778799054.911:1441): avc: denied { read write } for pid=2096 comm="syz.3.450" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 110.972277][ T28] audit: type=1400 audit(1778799054.911:1442): avc: denied { mounton } for pid=2096 comm="syz.3.450" path="/79/file0" dev="tmpfs" ino=459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 110.994662][ T28] audit: type=1400 audit(1778799054.921:1443): avc: denied { read write } for pid=289 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.018874][ T28] audit: type=1400 audit(1778799054.921:1444): avc: denied { bpf } for pid=2092 comm="syz.5.448" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 111.039336][ T28] audit: type=1400 audit(1778799054.921:1445): avc: denied { prog_load } for pid=2092 comm="syz.5.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 112.497747][ T2111] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2111 comm=syz.3.455 [ 112.520353][ T2113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.029259][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 116.029284][ T28] audit: type=1400 audit(1778799060.091:1533): avc: denied { execmem } for pid=2126 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 116.060256][ T28] audit: type=1400 audit(1778799060.111:1534): avc: denied { execmem } for pid=2127 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 116.081012][ T28] audit: type=1400 audit(1778799060.111:1535): avc: denied { execmem } for pid=2132 comm="syz.5.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 116.100817][ T28] audit: type=1400 audit(1778799060.111:1536): avc: denied { bpf } for pid=2132 comm="syz.5.461" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 116.121682][ T28] audit: type=1400 audit(1778799060.111:1537): avc: denied { map_create } for pid=2132 comm="syz.5.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.140932][ T28] audit: type=1400 audit(1778799060.111:1538): avc: denied { read write } for pid=2132 comm="syz.5.461" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 116.164204][ T28] audit: type=1400 audit(1778799060.121:1539): avc: denied { bpf } for pid=2127 comm="syz.2.462" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 116.184716][ T28] audit: type=1400 audit(1778799060.121:1540): avc: denied { map_create } for pid=2127 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 116.203803][ T28] audit: type=1400 audit(1778799060.121:1541): avc: denied { read write } for pid=2127 comm="syz.2.462" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 116.226849][ T28] audit: type=1400 audit(1778799060.121:1542): avc: denied { bpf } for pid=2129 comm="syz.4.464" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 118.009109][ T2149] FAULT_INJECTION: forcing a failure. [ 118.009109][ T2149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.023133][ T2149] CPU: 0 PID: 2149 Comm: syz.3.470 Not tainted syzkaller #0 [ 118.030454][ T2149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.040533][ T2149] Call Trace: [ 118.043827][ T2149] [ 118.046770][ T2149] __dump_stack+0x21/0x24 [ 118.051127][ T2149] dump_stack_lvl+0x110/0x170 [ 118.055824][ T2149] ? __cfi_dump_stack_lvl+0x8/0x8 [ 118.060871][ T2149] dump_stack+0x15/0x24 [ 118.065042][ T2149] should_fail_ex+0x3d4/0x520 [ 118.069732][ T2149] should_fail+0xb/0x10 [ 118.073907][ T2149] should_fail_usercopy+0x1a/0x20 [ 118.078959][ T2149] strncpy_from_user+0x24/0x2d0 [ 118.083817][ T2149] ? getname_flags+0xb9/0x500 [ 118.088508][ T2149] getname_flags+0xf4/0x500 [ 118.093010][ T2149] ? __cfi_vfs_write+0x10/0x10 [ 118.097795][ T2149] getname+0x19/0x20 [ 118.101692][ T2149] do_sys_openat2+0xeb/0x810 [ 118.106294][ T2149] ? __kasan_check_write+0x14/0x20 [ 118.111405][ T2149] ? do_sys_open+0xe0/0xe0 [ 118.115823][ T2149] ? ksys_write+0x1f4/0x250 [ 118.120327][ T2149] ? __cfi_ksys_write+0x10/0x10 [ 118.125191][ T2149] __x64_sys_creat+0x8e/0xb0 [ 118.129784][ T2149] x64_sys_call+0x116/0x9a0 [ 118.134296][ T2149] do_syscall_64+0x4c/0xa0 [ 118.138710][ T2149] ? clear_bhb_loop+0x30/0x80 [ 118.143390][ T2149] ? clear_bhb_loop+0x30/0x80 [ 118.148071][ T2149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.153965][ T2149] RIP: 0033:0x7ff51f99ce59 [ 118.158381][ T2149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.178077][ T2149] RSP: 002b:00007ff5208fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 118.186626][ T2149] RAX: ffffffffffffffda RBX: 00007ff51fc15fa0 RCX: 00007ff51f99ce59 [ 118.194595][ T2149] RDX: 0000000000000000 RSI: 0000000000000152 RDI: 0000200000000000 [ 118.202571][ T2149] RBP: 00007ff5208fe090 R08: 0000000000000000 R09: 0000000000000000 [ 118.210541][ T2149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.218605][ T2149] R13: 00007ff51fc16038 R14: 00007ff51fc15fa0 R15: 00007fff3e83aea8 [ 118.226583][ T2149] [ 120.760379][ T1321] device bridge_slave_1 left promiscuous mode [ 120.766506][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.773982][ T1321] device bridge_slave_0 left promiscuous mode [ 120.780188][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.787910][ T1321] device veth1_macvtap left promiscuous mode [ 120.794003][ T1321] device veth0_vlan left promiscuous mode [ 121.620855][ T1321] device bridge_slave_1 left promiscuous mode [ 121.626975][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.634405][ T1321] device bridge_slave_0 left promiscuous mode [ 121.640719][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.648345][ T1321] device bridge_slave_1 left promiscuous mode [ 121.654515][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.661939][ T1321] device bridge_slave_0 left promiscuous mode [ 121.668024][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.675951][ T1321] device bridge_slave_1 left promiscuous mode [ 121.682117][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.689500][ T1321] device bridge_slave_0 left promiscuous mode [ 121.695708][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.703814][ T1321] device veth1_macvtap left promiscuous mode [ 121.709989][ T1321] device veth0_vlan left promiscuous mode [ 121.715982][ T1321] device veth0_vlan left promiscuous mode [ 121.722132][ T1321] device veth1_macvtap left promiscuous mode [ 121.728140][ T1321] device veth0_vlan left promiscuous mode