last executing test programs: 19.916776397s ago: executing program 4 (id=207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 19.916384547s ago: executing program 4 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)={0x38, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}, @nested={0x20, 0x11a, 0x0, 0x1, [@nested={0x1c, 0xdb, 0x0, 0x1, [@nested={0x18, 0xac, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0xae3e}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xb00) 18.480251389s ago: executing program 4 (id=218): r0 = socket(0x11, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x6717, 0x4) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f0000000000)=@phonet={0x23, 0x40, 0x6, 0x7}, 0x80, 0x0}}], 0x1, 0x24040001) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=""/111, 0x6f}, 0xefc3}], 0x1, 0x2020, 0x0) 18.296877154s ago: executing program 4 (id=223): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x12040cc, &(0x7f0000000340)={[{@shortname_winnt}, {@numtail}, {@numtail}, {}, {@fat=@errors_remount}, {@shortname_mixed}, {@fat=@discard}, {@fat=@nfs_nostale_ro}, {@rodir}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x11480, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 18.175025876s ago: executing program 4 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x48) 17.489667542s ago: executing program 4 (id=232): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000800000000000000810000008520000096490100"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x8003, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x63, 0x11, 0x3e}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) 17.452718172s ago: executing program 32 (id=232): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000800000000000000810000008520000096490100"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xff, 0x5, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x8003, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x63, 0x11, 0x3e}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) 2.130751113s ago: executing program 2 (id=645): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r0, r1, 0x0) 2.050654105s ago: executing program 5 (id=651): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, 0x0, 0x2400c841) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@acl}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x40000, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) gettid() sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.050588265s ago: executing program 2 (id=652): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) 1.943569277s ago: executing program 2 (id=658): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.846865259s ago: executing program 3 (id=663): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.83721001s ago: executing program 3 (id=664): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.581586875s ago: executing program 3 (id=668): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000d40)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x30, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7fff, {0x9, 0x6, "c7bdf9", 0x1, 0x3a, 0x1, @rand_addr=' \x01\x00', @local}}}}}}}, 0x0) 862.270601ms ago: executing program 5 (id=669): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000480)) 559.026548ms ago: executing program 0 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 558.870668ms ago: executing program 1 (id=671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="2e1221b23bb601c476d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="89cca9ad7f624c06000085087509000000000800", 0x14}, {&(0x7f0000000400)="be5802a8515d2d2a5b685944e632663bee4aa26db1db", 0x16}], 0x3) 557.278278ms ago: executing program 3 (id=672): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB='O\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1111020031880000140012800b0001006d6163736563000004"], 0x34}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000801) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014000c"], 0x34}}, 0x8080) 495.832749ms ago: executing program 0 (id=673): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) 424.203021ms ago: executing program 2 (id=674): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 420.398411ms ago: executing program 1 (id=675): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@bridge_dellink={0x20, 0x11, 0x5, 0x1000000, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x18050}}, 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 354.997423ms ago: executing program 1 (id=676): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 354.850012ms ago: executing program 3 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="1400000010000100000000000000001c0000000a20000000000a03000000000000000000070000000900010073ec10670300000088000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f44001280200001800a00010071756f7461000000100002800c0001400000000000000009200001800e000100636f6e6e6c696d69740000000c00028008000140000007ff0800034000000106340000000c0a01040000000000000000070000010c0003800800008004000180090001"], 0x104}}, 0x20050800) 354.771612ms ago: executing program 2 (id=678): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x22020600) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 347.927822ms ago: executing program 5 (id=679): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100, 0x0, 0x0, 0x2, 0x5d7, 0x4}, 0x933bed6f19735007) 334.661733ms ago: executing program 1 (id=680): setresuid(0x0, 0xee01, 0xee00) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090c100000000100224e0000", 0x8d}], 0x1) 301.375973ms ago: executing program 0 (id=681): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r3, @ANYBLOB="070000000000000018003480140035000770365f76746930"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 250.936525ms ago: executing program 1 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 250.682915ms ago: executing program 3 (id=683): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) 250.603645ms ago: executing program 5 (id=684): unshare(0x400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) getdents(r0, 0x0, 0x0) 250.548815ms ago: executing program 0 (id=685): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c2200001500010000000000fbdbdf250a78"], 0x225c}, 0x1, 0x0, 0x0, 0x20040845}, 0x8000) 190.629526ms ago: executing program 2 (id=686): memfd_create(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) close(0x3) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x1}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_fuse_handle_req(r0, &(0x7f00000063c0)="0ef43b53c4cf398dd7394bbf6f2b1bf9bc8ee1ea9bde1d856b20ac63d8eed3db72128d6c0ee281ba35230204116fc60a5cf844094c68373c9a983628fa8d973ef55c527d0f9cfc0bfec5acea64b9529c700ad885871b20058eb83fb819d3573e1720fad4e16f0eeb855194c900f8ad306c423028fffc48eb653c64f6939f1eb5c7d961b312142eda3351e235104abcc62463235c907246794b6640b2d0ac712b7bd7c3d2216929c67e56dc298c176df8727981cfcfec57430cff8c74793d1b3634e55001f8c3bd8ad5bc8def530d8c8ff7ea49451969854fe916c94dab3877f3a391dda84f90cece6623386be1fc651ebb1c1fcbd77d2f0ee4e87cd1ce0e4dd27268b07b73c5e5de129c2d32145d4e42de419d1da50c416af2bc0cc1024521781b704361eba92ffaed8e5f55cdbfe9ea0bc544037e08e546a507f0cdcaa2582d662ab4512eac86bfab269fabe76f4aed1f5a41a814efbefd6ab84dbc59788cd82c40b2c56c3eba6eda0e14d9f5ab0a4c5076c6e08000c9e3eccecaebe9d020911f0dae1023b4f963e1e774bca6b495026e4a15f0b3bbd42c0540415aca44925fd861b46fed8533481e541ca7d0c1ededbe8a010a49c0693ffb9b4f737cc593e78ff10af25ce1c17068f86d6b401ef2fd36ed319aad406a32581ce4fd510125718e29edc1db1ce52a663c88631c63b7241477f93b45c494f7e5ea7343aa70eff7fa7d83439fa158e6d82d55688fd16ebb574dc1167857c860020a34996746dcc500289f7f6f26d419df45fc528e54782d2b3993ea8d4b2c4b5165b1386af264f59537eb4c9e870b02925da076a6af803c1ece2c3cc276ab68417a2bfa40309359e25bae05774d7d9637b578bde8757248660e2a4ea489c3268f8671edc8c9877d5edde2d4c202baff06efd3db5aafda7d8a6317fa785bf193fb17106e493ef28b5ec0c7248db0c6d3f2b12aa6141ce00269b1e63b8a0e8ac2005e0c367a28ff050eb85ee37a58abee908f64506b2af5ff29c01909efa5cd27adccef000a5fd3b9d797a143aedb1a9d833a52f4480ec74ad4b1857e3322963191a6ef590f8e8f32fcd8491aa56f8a134ec213005b176962707c4c522ff7e565e564a1cfa6aa07a2a1a74fbad936e19e1c90fa87a7f4d5d4af4a6db8e8f476be30a993a78b06481cbf09e1e27a5b1a926e89d09335cf111f12b402c3cacd95efea0f2f6e85f482f3a4ce4aa001a755bd056eac40578f72719a80785312b9b86f5244767a0209ee8db9a96f16f7d383b1b4efdc3eacb1b49242a3e161dda7485f06f7bc9d7eb3dc41a83eb445a7ff1a9cba9bc3f7dd942b12e5a069dc134cad318c3f6d841fa0f40c421c775279457d65d0153802e18575507bd599dfe3443b98bd5b7b4e208bbc140dd8d03cbee808ae0e218895b49f614104ec8855ff83081fdec5951c38da6da0ab88207303666ab585ae4dc01afd7c4dbdfde392db0eae86ae9e3590c5eefff9537b6fa934f1674e5e52cfe1ed99a83d90d241fcfa44683aba008e4c88cd6563fd9d0c48d5ce1fdcfab80caf0b422a5d93b84526a70e53007de2cd7b0324c70b9d95f8a26423b36d1d4077be3ff3afd94166e4c3f8c90757c7390814863454739a3900e87ae7d298b54f9605cf7b3619c74c94fd61241ed5166627463110a749c92ef07fe9e8aadabda76e634cffeffb10d47a77bc52675c17e696032871ed0e6d94a6e02990e2e5e604fc55f991e85b1b6d6b1bdc3d6c0ceb410201cb6802d42d5eaa5be19e4342879137d5fdfb09467824d34998af7c04c61e90d2d4a62ac002cc101605c656fad0096ca93918ddd75291c4ab828e296b1491e4c8e81a028a061be15dea87fd3f1513eea1babbed29b96c845e4e0218151a4d53d941c1527fd53115f0d815e1ec740cf5d65a50173914831b3f6b6bffb083ea111c3e9a752635dcd3ea963121a1c290e228926d873888e9e828994a8899d2be0f1e69479550819020bef9da6724e8c1c1b0085b0804be07f2e9ddf1a5034149f7220b1897f522a82f0e587bb78d5fe7f95c164230b9fecbf1ba4c7ed894eaec15f357cef294c95b757b1e11106dcac426ee929ae3888ee6e7b89ae20035295d7eff5fe71ea2058a8363ef5fee20fbc880aeb37ffa45770fbf87022afe4a39442eb589da3db1842d6a7b48b34c379f89166e66ffb910606ba82462b3f7e3393e8d8b492e251ff4c9e43df1fff3f9804c93c54d5e6a7e5f9ffbc4a22620bb9a91610f2d76d0fb018aa9434756b02636a3e20879a203576b5e861474e034c0b209292db1c7f1c2c235f71fa6d521845ed0aa2c19bae83224186faff844b7d03ff821a8169266dab3f7931d190098e6eca2a0fdb712852623c38c1b0262142124760e4a7e6ebf06a1ca50c7b7fccea0bb4df9026436752aae67cfd61dac7b346f2c63fd81dd4ecd4ff66d56deffecf5d562ab55e707a733faae1e6e452569d8a6d3d9ac22e70e7dc28ece619f6d7ab685c0634e7a9501e5ef9987e4870d340586230eb2bf5ac9c473678ea96fac05bbf1a7a87bb479d54d86fea427ceb00f641d358c3edf540e26a4064cd2b54598dde73694871c3289408c5fe5c07a5e0cdf3b834d5f2e503297dc09fadc63e568a74cd1665f0a36bc4820d5d342f3c35b7744c775b6afa36205237c748cdacbda05c91eb362468f9f435486e179aecf403516429993461c44ee4e06765a36f684cde32e9adb6404bb20473855e11f3116b3333f7be2be0a915b5739b36530e44e882e194d689b96a8d48abd0abb33b6ac518acd6a379cda5dab07825265083f4d3ec55255f56a0815d6b7381e06a06699bfb4e580159c7d5829c41b6c1848ad49519a6884e2082bebcd85b577ac534570bcff7ce26f66128b248e1ea7e0603f9a93ed808024f4ef14c78f6422da284841efa8079b004aa70d9fa8fb7ac238de1dda2843241ed9c3dd9c0d8cbfe6b4b57ac13b6636f36e3bd48ecb10c2d420697e08a8bc3201df2895a9a69c90fd076130a1ec7a87f03a47e740758b501cf53ffafa005a35dbb668b4c371cca0d63fd2ae144357a9fc916cae940d39c4d378a2c9c182aa08e7f1b09aa48e49ca188056b11e5e453dc75235ffbdaaf17b9d38d0584c561647f584c161fdb9dd4e274565a400925747ff308c596a0981dcb191543b0b2235f983f1850c82c476314baac00f8d37e6fb6c88d0e3c8ce4a553807394d856155e2372722a37bec51376f7a5ccf6ec7a8b30250c7328d97d67c2fa821e62c09f87e46a6dc3c3a8c5ef5c48ddb730ac0507d010243bc63bdfdbb00da143e1751545c8207f2db084dc76ac0e7a1b7c4ae01f04606e740a02bdcee5f532f6cff829eb4b0896f21c32853f44ae2546f052bb76ef15ba8ec0911354500aa0c1d214894f63c6910956d3f19b21ecc04a318308d991530c48f58c9be9e561cd8af954bd7dec52e1bac3bf4f3fa3f3184810444d00a3637234876ad89262dfee8fefdf0c5a547fe0e7d20937e336e6093479d14cbcdf698e7c785792d6929f2206a6e1e45ba8d8ecfd0aef1ebfb8a81d18a514ebbc8409f36735b883ad068412e8ef3bbd1c2607043f02a01242c75691dec81c5dd37a142b97dfbb59fb66753c8e5fd8814104e98f89bbc4aa291b0e5547270f9742f1b20038843bcdec3fd03da1a395c1546e70a181a739bdc045c6773d4f3fcd169f900601b9f23badfb26d31f2512d32e3f872f1b4c655a38841a4c4eb6b7c640d1bc21493afe2d03454897de85d85abdc63e070707c6e340f6d49ecfbc528e49440e377af3d69badceafdeadfcc5b54ac72d80d619ce489a5530c979aebfb81cb4c0003aa774bb6c81ba9b08c2ac076d1e95fcdcdef133e872e8f2e8aeb7877b6df8fe54ff3abe39a28ae5b8e48f749a7845f4dab39511a04a9fba035aec5c8424cfa3c64dee7b6be732c4a930cfc56a2b9f03ada02a5535250bef34ded39f899149570009b1b7cc16446c26a43980dd2bc63a3b636d803c7fcccf8c97855cf1440dbf263a53d27532305206095a5f3f721a02d864cbaee296ebd136852205881ceb8ede0e8bdf1140b95b4f93548df09911ba3dc07f15b2a590f3c9fbaf9e03534c0a47f4c9cd2d230628af0f564faabb4f7ff4e200dd794c130fd87a8ae03addea69cd32e792934ea8287044d1985669c32bf7ffd04d37ac48bb4ae8dcd4b9bb25a19ad8d78d2e8f98378971c89b03254bc22c7d2cb4001aa6f18b5b8e12f672c924cd6de24583f323aac4fd37f6eb41fef24538f0d5d02672d5173bed6915ed749eea575f7ef702181aa368086a38d7167a67858d2e2f5f0f8ae4ed7dc068ddadd38b0888ccc815139bdf03db3de409723129193194feb21f88d5f7f0e65046ba32a293064422cba1c3766e7bd105da210aca0559039b1d5f48f72ae506e33975714880f868a566b9c4c062323e2b8f212a918e10ce9667e298235be1380804b4a999e91a7a7c27d22f53a28ce0a2fce2c5b60caef2e82b885d4fbea699316cbb77f430bfed1d4989c4b37e4bdf4ebb8f6c10f6f0a7d859c5d567a001e837f67fd4e5fa3b8e386e8f57e06dcbfb1440da40fdf023000148dbd6ee4138097cbf46850d1a9a2ff958b2858763b64bd92479c02c8451334c5881f357178b714af98979f62bd4ae94700510c1dcf13820336e4aa8a8afe9d437cb81c96320251f08e74111ec30e9afd9ea085d80f4eadefeda8aa27c3c713fa107fc3a868b569bdd07d72063c77b477997d86d657c8b5ea63b84e647a4a69ec275b52e52bb0ff5c57df748a870b4fadde1f889c6e05f32824d132172e62d9db145ee9393f1cbdf64d631344345ecd4eac4094c5cecce53ce3ef00cf77946ea38f76eb6d90f8e34b0ac090019ef1435188d9e569a1dd61b5b6f93eccfdf9283f92ac049d573c3fc3a3a5d7a9cd601f891a50578cc3df28149b0bd95550fee23d9625953800bcf4e504b1245b7cd403317618ad64480e2b4bc3f4b770df8037c0c589af00243f129c39e47030426e481e481023838bfe1eb1e257179d6691c4add3b50099eb1bae345d509138035de796c6f54f381fe234a5adb03ce3e90310456db7563eb93eb6da82397f894c1c064634bccf9627d76989adf4d00213997a1ba5ebf145ace8278d33515ec35c6abb8a6ed291d26bcf3d70c4fe57cc5d6a003fa58c6e60787592ce055c82bba3fae32a14d24f27ec1e5d541a60f4a65e8349ef463aa013d333d051e00e183033bac128c0c7dcd32ba055855bb760e592d7a31846184b94ba1011f90dca824d52884f93dcdfb328c139f531d54dbeb9b6b7c79db39c86169f4360745f34aa6bfcf8c1605f8b5fbd070aebc3126012ee4baa57bbb64b1397cedc24f7034337c26fb055d05d11c093be192aca92faf4e03bc0f3e47c9e8b23a10e7d85ae30b6bb564a17ada351bbdc599d5fbcd96c2f94680471745335d962b8b7ae290efd82e586e9989b6dc52d92a277d1fe778402c49c80e18f656a2e474d3c8601204d568d4cfde17a6db109c0592fec5e72dedce9c2f9ad38428a68c3d5bcbfcce5d51c1bdbf7689fdf2b647eae26648076b0844682b7f5f4a9d87ab7dd55db2dd18d66301e13fbe26dcd11f8dc891d33092f72937b9da6e88312ac07832afdad65d041e8f0e1848138ceb4ba99ae3836cb3fe1b0b02c6464f1c618f3447e304395e991f217830674de486154e285804464600322ff6b9c51d64bf8f0b5ea55f683a261b1e08efce0959cb5b5753091daf1420f35bb97efe87c61af18d0feddce706aa4c2415a4a0e35d32b4e03ca231890878607b93988add23889bb994e83636efdc8ac696c35e88c009a2270e403721dc56e6166bdaa5e241dc651d1b5130be2e8b54432e49e2a9f88edba466bed685937eabd1e11abb42f6e4bf4db076449ae0416df47a98f742d91c288a609626d7d21b9061eec3dd55635691ebc6400e7b9f53ad06289fd29b1786ea28f46df8921a28f7ac9982fa0cd5e12bee00317518568f3cefd362714ba15e517d7c19bc1acbd9d9f52f1202a0ea62e2d2f2c7c3e934efa85ab9456793640ed0511a2d34aa3898ff07661734caf7f5c3588b2d660527c9037dcc0935c18b21e23900b70b1ade488f38884a742f8e0306fc5872a9ea5738f62be0b2acbc730897051c62fb31b2e235a7908f8feabbbe9ca92643e824d3af283ff7b99e73932f691c5851195c480ec1356c128ec33a09868fe95dc06b65588dd11bb8e076fe5b1856bfb7fa605d7c8f10526c91ac82bac8fc9c3f09c9810f3410736be4e06eb4aa4923bc43db6de987ee3b91de2a907f47b3f5532706a000740efb788ab9b84c70c968e63786bbbb9d75144186394dfc0bcde1548ffd6782fdc77ab139c52d71f6bedcc62892f6251b5c8ab6f699f23d9bad4968e8197c9d87997ba9100557324dd5394acf3ee17947d3ca0880051b1f8ca5bedcfa5d70abaae047144e01ac17738bfa6e6e08fc5100cd483a9176fc4baa24e8eb9d582efcc79d50d06df11ac9bca1efdbdf5de87243f8e23701c91e023ceef8209c59cad213bde7f7dd7460d10cc5012a8a2e2515cf2ee9bcc70333122ac7b1b7c95382631cca252a1bd88e8550d999070cd48c68b447401a40b681ffd818348caef10a999094c5034feeef479af59ecdc81231f17ac7a8fe4918790a6e4f3169e323a7e8a01eb19a1aae34329655f42c84f36d8616dfd9915adc861d599c1aa9945602100ecbcef6eb8eb81990627cc7ea137c1354eed225f430a9eccfa735116108d4542985f571f9cfb61ab7fc336030ba350cff765d490e835bf92e142547c66e829e8f6063aca3979c05387113a76f147678483473312123e2d7f573cd6f76c4883940e43fc98642c55dc9163ea506592208e1f6af537148540dacbf79a3c5043d80cd0d3e59ca75c7fe53471c3cdac4e2b9d979d51cc2d56a242997f2672fb1f738839b382f8e5235255b3b8eccd2979c019ba514995999eb9581b94c32f1640d8284a509ecd6c3bf28f4f48b3fbe51e34041312444ee0b9d8bf0b14986f29bb16a2172813771dc37e216c6904ac63b32692e0c21305d44a7bac28fa3c497ea5bfb673298ca085927ae6409540519e1d28130612850a37e3971163ca186816b12a023d85ac71652e55435e35388eccee25c426527c3ac9a4efdcead5f6a76e0caa91bfaeed802b6cfdcc286fa5cce721a200393b1e9d5e193a7c319d59394d6a7743fc2e5ad065e95d996c249e5f26cf9a395cb9b2653787050fb128f16ce72e6a9925dafcf58d87aa1d2d60a38d2b68d85549705ce6ee58554a40224068a5b708daa208e131e6eecddb013f650602c030805dbc5c9a68aadef4a44171c150194639efc75728a6463984761952b80d9d6518b76dc0ba5f4c5ec17fd2517897923f70e292901c95edcaa40f1ebc3b527b180991b3f584aa4fe62a9c88e599e489e5f3353364d08ebda08945b86a09914431032a75ce9709a58ffb69895f306248b6325f564783f92b5c476b4fa7998c35c9d77ccd6a3df9f5d53a3674d46ac94b7827af3ff3271e0ccd553c2d9d46de476d188e59c49a498d42968dd308eb2d09228ebc29a9d788e0b340a4fe1bfb710e9fc6301f8e9edb03b5580cbe3baeec6c113398b4d94f61993285d3e82cfd0f38fe62fefa6be42b4d198b5f81dc09765451cf5c833a965faeabdd5c7a9832b00d3c8c21d51bf470136d2517d737d24f85553ec35955c1c6bd866f588f91d65470a865a4e4ff6baee620057b1155a3fce6aa35ec9d0a6717df31933242a0fec6c330d60d335fbd72382f63243590b75bc50351bd13acdaa7fda599e289560f13a5a39f457ec9fd6e4816bb1e08e8804a6a6d7b53c9433ad2fc34df441c84444f964dc944a4a5273dd1ea685c03bfd055a3d8e00090448701771641a33a20381ef0de59eac244c8729ab9f65078761beb9dfde1421bfa4a2dc373832bce24a708561d29a14134e0ba20f1160bbc6732ad9b11dd4bdd91f4cd3046148e454d089d1230378515efa2f351751d5bc98f9b09bac9bd10ec7a9650281942fb044ec42b19548b0a7a2099b0992bdd7ab6b4e69c275038bb7ca580ddceacda4ab5375ea1e9beb1f875bf8c48cccc38984afb7905bf09ce40a1da8df359044d651e9f800bd43cf4a64883f8c06c2972b573ab45b5cf9dd2dfef6546ac401331a38a3c93788b46610e1aad148585f149db544aa62959df92679ca76f43a8cc8cd470c0f51eaf8224e81484a28631bdb4b195941bd78e072f5cd5c03a140776f986183f114b6dad6993f514efd7e7a1b3ca89d405c103e3138d4e93d3851223feafbb8208601ca0285710b204efbcbfdd0c8aff86f0be887c7fe8c42d0c17685c66b256f36876738daab51a8ae9a26b7d8963b01653153ae076783c0dafc1a6b24bf80f6ee277d35817d586c42393bfa71504ef7cce4ea810b4b451a97964dacfdb96b125f43ced8158491b80849326b999856423cab21c5666d2c421257a52a020c5480bb1032108c8ab8505db0ce563cf422815d45da39877e1dfe3a76b4985ec4ea55b52f25bbfa8fae3d55919652b09da5c8c19cdca09bb63db74d10cf54ad96d2a9f16d1bf84776708565664ad479d2a13bddbc9e56ec1f37c9b82b8c5eff751945bde07651563bc923272446b9a2f17d09ad74fbf6a7d3fd0bbed7d81843c2099e8ab64a32892564c011b9cce4106973ccc73cd98f4f19a4a8400249c03fa90cf4e1d3d88cd20241002fef780c4602583ab974056731def3d1b0100e40eb7aa9bce06326f24a3bb40aea768b7f62bc114fb0be0591573111fb3879716ea753aabf7d2eb774951e8950cca6b7be58c43c85ec10519395ee93ee8b1cba7b5ffe68d0135fbeaa26c5574b8729b98ad69b06051c67ac131f44341d62ef54fe0681e06542f28e8ae13987a8f7dd248c43ba0344182a32b173c4d7bc1a306f4afe04038fe75d77fc27f7bef23409e448e94d4e6305e209fff2551f5fbaf5ab113663daa1f9118bd8bb745eb3c08ab2a7b63a2974a2a7cda4504c8023e7286750e246cab48261db1cd842a535541dec75dd887c6c3418af60ac53ac690aae828a3b2c78c5a7cf5f28008753dd0b6bdd94d998eaca7dd246de5a2e15e240a75f107dda037ce1944aae96832df1503a3b4af988caf5cd2ea46fc73368fc6c1cb6666b2adca7418ac08b02625150f704674227574c09bb65a67f7321615a12332c8e198e23730d43493c3ee7873278b1c483018affce11770db611aa8632479194ee3a5791e43c999d3d8077b076569ed9c64e4589ad4a3d7399d626441f4f357a2245aedc6297e7024836157ce0055cac08d34456403b1922ee595449c159e923e6453dce098337f2868aaaa57d00895be81558f527e7c35b0346c962893a7523117c908feea3c863b8240e89e5c58d8b17fe981f8c416f1276c315f9f25613729a0ca0326dd94000e6d71cd901cf4582fc6cdc68468236263b3748411bf887badd09f2dea8aaf433ad0a13514d169750f201ead3b0e1ed9ae272939eecc928427f1cf32745bc17512d952c038aa628f0d6dfdee7a3d42b0a0fa4a70aa15330d496fb345c3ded93f28881b42191498a3f729071b8ece712ba7b1b32c947528702b00dab47e031386947f1c5b570b8d301079a5ba75292322af46ea262f8efd80d8129e90506cbf1a208a85f7700b606e3d2e67234c872f97a9836d9f3f80cbfc7fbf73c1469afe9b349a3b09fc0eb13640a815b42ea613f5b11dacec8185c6577526a05ce381a765e4c3cde725a566f0166db8fe4a818d679e77d0bbaa42624c8792bf217f6e9c95b4a7e82182e0c3a5c5bd74b13384fe340033bf67c94076a66b960377e61680e1ed1bf85fc0196bb3f610733777150789883f98a3738757df84348dc9f6622cd0a732527c8e2fab59e1007996f5b6e5b87fd8131950e2928b32c0348a48f7333431a96f884160d30d5be2fe5feca0024624ca6a7a67238989aad5c93eeaa8131b1410e392419718dd1fc48d8a1050ed5a8308b5ab2218d7f497c227702e8dd62cd3d66b0036a0d572a34e875f2c06c7271253a19b99943e2850d5119e5420bbc25b98fce1c7cb9c132d976e70a35e0adafc4f439f2e7627ff1ae52233f7f740e6cdb899b352ea7362bc5a7e3a308759e00246280edc19fd0915715b7e28c8f1b2ebffcf9fbbff0c23dabcd724253101ca7b49eb84362173020a1899544a6704279dabde1638d1d53528c12556f6634c30165ab121f3686b9dcac0187121b39c430cc82837ffcc5f085e6db5868d0c53533dd892f1a2f066d4f9ac039f748ab7f426f1a5a435443ac252ff86b9f36c5997e8a52d8047c9db80ddfa10e8ea9be33d16c5ff7e4cd19999aac982044c0881c1423e49d15ed31c40ceeff602e5d2c50033d6c8ed5685a7e46194b0a1ae713d76261e4616156aad1fe156944a3d0546efb02e96bab03237355158f1a06dc54c62730ec59056ef3bc814084bed73b6e59f5919ab9aaabba63779c09f975d1b1af02cb8dfc8424f6b4c745beacea7f0a17a6b883e991a3c883b387d94a70557609b35589f0f1f87fc8be24e7e1ebe23cc3565b653e893e858b3ab20cdc8fb5d5cb54449985f9cfe294b5bc81d09d89dc830f4e342d7c65959820a82be63f2ae1b3abbdd83d2796219e79b1e8f35f529a207fa25f915d265962b916d5e372472bfb728e5586fe5aceaa65955776dd0734d47b2e105ee9ab27cd290503187fef2256c7caf697305a4b01ece3892796679d929f494bbd800092cfe414786ebb8cb8a44d847ef19d0e911daa4961ff898e1a56e1f96a68876e9770802dfb680eb404c6aba1aa8fdde3abce20a1b96db4880e0607356a006286fcc5b8ca1925c3d601168a70fc5cdb281af3dfaa030ce243347eec698b8156918c10e9afbbb17d56f18b3cd0c24d82d5865d910491ce8c8c119bb34313966dabc9a292351be217cc8fec985a955815ebae77299cd54c4c03b432a6eddfdea4a1060e6a6da034e90317ecb771cf11ef1c3626ef36600e62be461063a8a7c3fd28685f3a47242b466f6f41d50e6a930364568a1442bc2a89e299a5c6306fc9040bbe112677fac6dd01ca464a16302f856064f4792a9c1533b9a353134a4e7693f65ac0f8b84bf2085bacc160187865dc867dd26aa44e7fa7570c0b1367eec245d0aac63da2b501265f2788d144d17ed525269540312c8a11ccf7d6330ba98f5ce77d466ab8d20e3e4ca42239fbd28ffda45af9b4b82a3782f0260443e70fd1c535a6611d2aa42df3f62aa6e0c0daece7f1637a3652e46f91d1c5fc8e163c7d40a658eb73101ea89ae14248dc9f9c290561684af316f3e31d8616858e33043003d05f260333964b2e0db2b70e34da6403ab55cd54290a9aa3f32abe953b6b50c5a79fe9aeb880d063e8c7f975ed9999bc6ce126841229001d8332b5ad4a3cf3c188ef913c111f3bd05fbdedea6fb66998e6a073ddb8589850b994d9847e43ac852af885ac9510cb40256d4f00fb87760cb594c472d1bbab44a27c1c73bfb9c58c35f936f94087c0c6d3528e8968fedd2", 0x2000, &(0x7f000000cf00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 187.166986ms ago: executing program 5 (id=687): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff2000}]}) syz_open_dev$loop(&(0x7f00000001c0), 0xb9ee, 0x181080) close_range(r0, 0xffffffffffffffff, 0x0) 114.956958ms ago: executing program 1 (id=688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 114.812928ms ago: executing program 0 (id=689): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") open(0x0, 0x14927e, 0x20) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 10.6028ms ago: executing program 5 (id=690): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x2, 0x3, 0x1, 0x1000004}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) 0s ago: executing program 0 (id=691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): rocess permissive=1 [ 14.395154][ T24] audit: type=1400 audit(1784040586.860:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 21.362818][ T24] audit: type=1400 audit(1784040593.860:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.363948][ T271] cgroup: Unknown subsys name 'net' [ 21.388253][ T24] audit: type=1400 audit(1784040593.860:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.418572][ T24] audit: type=1400 audit(1784040593.900:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.418759][ T271] cgroup: Unknown subsys name 'devices' [ 21.530005][ T271] cgroup: Unknown subsys name 'hugetlb' [ 21.535671][ T271] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.643228][ T24] audit: type=1400 audit(1784040594.140:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.655743][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.667330][ T24] audit: type=1400 audit(1784040594.140:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.701296][ T24] audit: type=1400 audit(1784040594.140:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.701354][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.724851][ T24] audit: type=1400 audit(1784040594.180:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.759939][ T24] audit: type=1400 audit(1784040594.180:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.785844][ T24] audit: type=1400 audit(1784040594.180:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.815473][ T24] audit: type=1400 audit(1784040594.180:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.287702][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.295553][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.303802][ T279] device bridge_slave_0 entered promiscuous mode [ 22.311075][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.318302][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.325846][ T279] device bridge_slave_1 entered promiscuous mode [ 22.412843][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.420100][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.427519][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.434727][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.457889][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.465102][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.472522][ T280] device bridge_slave_0 entered promiscuous mode [ 22.479616][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.486646][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.494388][ T280] device bridge_slave_1 entered promiscuous mode [ 22.544431][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.551887][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.559450][ T281] device bridge_slave_0 entered promiscuous mode [ 22.567540][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.574834][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.582343][ T281] device bridge_slave_1 entered promiscuous mode [ 22.609166][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.616218][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.623724][ T285] device bridge_slave_0 entered promiscuous mode [ 22.633173][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.640405][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.647748][ T285] device bridge_slave_1 entered promiscuous mode [ 22.695859][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.703141][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.710565][ T286] device bridge_slave_0 entered promiscuous mode [ 22.730712][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.737768][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.745195][ T286] device bridge_slave_1 entered promiscuous mode [ 22.786394][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.793767][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.801073][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.808100][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.829004][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.836401][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.844119][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.851809][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.859965][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.867463][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.906536][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.914835][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.921884][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.929690][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.937996][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.945067][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.976346][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.993285][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.011784][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.023454][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.034986][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.052608][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.060686][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.069258][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.076388][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.085148][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.093393][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.100577][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.108883][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.117214][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.125896][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.133123][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.140560][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.150695][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.159045][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.166169][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.183123][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.191699][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.199904][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.207281][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.215211][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.223512][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.235016][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.245751][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.257106][ T279] device veth0_vlan entered promiscuous mode [ 23.264176][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.272459][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.280322][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.290566][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.299000][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.307238][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.314366][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.326267][ T280] device veth0_vlan entered promiscuous mode [ 23.336805][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.344324][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.352003][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.360402][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.368688][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.376226][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.384458][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.393025][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.401354][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.408409][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.416768][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.431806][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.440674][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.449102][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.457183][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.469332][ T280] device veth1_macvtap entered promiscuous mode [ 23.479095][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.486778][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.495827][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.504345][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.513418][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.521773][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.530501][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.538752][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.545915][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.553547][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.561828][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.570290][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.578224][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.586246][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.594046][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.604178][ T279] device veth1_macvtap entered promiscuous mode [ 23.611274][ T281] device veth0_vlan entered promiscuous mode [ 23.621594][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.629326][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.637321][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.653616][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.662537][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.671140][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.679685][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.687722][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.696095][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.707079][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.715487][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.727191][ T281] device veth1_macvtap entered promiscuous mode [ 23.735819][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.744349][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.752575][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.760933][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.769302][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.782893][ T285] device veth0_vlan entered promiscuous mode [ 23.791802][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.799973][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.809835][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.817279][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.824844][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.833838][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.843143][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.851669][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.862798][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.871259][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.883832][ T286] device veth0_vlan entered promiscuous mode [ 23.894152][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.902818][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.911140][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.919502][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.936458][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 23.947578][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.947661][ T285] device veth1_macvtap entered promiscuous mode [ 23.970121][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.978110][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.985910][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.994301][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.002984][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.020929][ T286] device veth1_macvtap entered promiscuous mode [ 24.038902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.047327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.056017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.066941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.075525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.084912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.093688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.128267][ T314] ====================================================== [ 24.128267][ T314] WARNING: the mand mount option is being deprecated and [ 24.128267][ T314] will be removed in v5.15! [ 24.128267][ T314] ====================================================== [ 24.143436][ T318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.174086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.186951][ T314] erofs: (device loop1): mounted with root inode @ nid 36. [ 24.201690][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.218313][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.227480][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.250249][ T321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 24.332899][ T332] FAT-fs (loop4): bogus number of FAT structure [ 24.342863][ T332] FAT-fs (loop4): Can't find a valid FAT filesystem [ 24.712703][ T373] bridge_slave_0: FDB only supports static addresses [ 24.743722][ T378] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2944 (5888 ns) > initial count (34 ns). Using initial count to start timer. [ 24.964034][ T397] APIC base relocation is unsupported by KVM [ 24.992353][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 25.007552][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.018170][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 25.027721][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.036135][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.044639][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.053138][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.061586][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.110051][ T412] process 'syz.3.40' launched './file2' with NULL argv: empty string added [ 25.565900][ T437] erofs: (device loop3): mounted with root inode @ nid 36. [ 25.595687][ T437] attempt to access beyond end of device [ 25.595687][ T437] loop3: rw=524288, want=1348712416, limit=16 [ 25.608930][ T437] attempt to access beyond end of device [ 25.608930][ T437] loop3: rw=0, want=1348712296, limit=16 [ 25.647676][ T437] attempt to access beyond end of device [ 25.647676][ T437] loop3: rw=0, want=1348712296, limit=16 [ 25.659250][ T437] attempt to access beyond end of device [ 25.659250][ T437] loop3: rw=0, want=1348712296, limit=16 [ 25.783352][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.791430][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.056240][ T487] FAT-fs (loop2): Directory bread(block 64) failed [ 26.064319][ T487] FAT-fs (loop2): Directory bread(block 65) failed [ 26.070756][ T495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 26.071211][ T487] FAT-fs (loop2): Directory bread(block 66) failed [ 26.080303][ T495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'. [ 26.086562][ T487] FAT-fs (loop2): Directory bread(block 67) failed [ 26.102125][ T487] FAT-fs (loop2): Directory bread(block 68) failed [ 26.108725][ T487] FAT-fs (loop2): Directory bread(block 69) failed [ 26.115717][ T487] FAT-fs (loop2): Directory bread(block 70) failed [ 26.123706][ T487] FAT-fs (loop2): Directory bread(block 71) failed [ 26.131123][ T487] FAT-fs (loop2): Directory bread(block 72) failed [ 26.137728][ T487] FAT-fs (loop2): Directory bread(block 73) failed [ 26.169916][ T487] attempt to access beyond end of device [ 26.169916][ T487] loop2: rw=0, want=1164, limit=256 [ 26.182205][ T503] tpacket_rcv: packet too big, clamped from 64993 to 4294967272. macoff=96 [ 26.275540][ T509] fuse: Bad value for 'rootmode' [ 26.400501][ T24] kauditd_printk_skb: 85 callbacks suppressed [ 26.400589][ T24] audit: type=1400 audit(1784040598.900:159): avc: denied { write } for pid=522 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.437209][ T24] audit: type=1400 audit(1784040598.930:160): avc: denied { create } for pid=527 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.456548][ T24] audit: type=1400 audit(1784040598.930:161): avc: denied { read } for pid=527 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.489732][ T24] audit: type=1400 audit(1784040598.990:162): avc: denied { write } for pid=527 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.897527][ T24] audit: type=1400 audit(1784040599.390:163): avc: denied { write } for pid=535 comm="syz.0.86" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 26.898274][ T538] hub 8-0:1.0: USB hub found [ 26.925135][ T538] hub 8-0:1.0: 1 port detected [ 27.397715][ T545] loop1: p1 < > p4 [ 27.410350][ T24] audit: type=1400 audit(1784040599.910:164): avc: denied { unlink } for pid=286 comm="syz-executor" name="file0" dev="tmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 27.419482][ T545] loop1: p4 size 722688 extends beyond EOD, truncated [ 27.572377][ T24] audit: type=1400 audit(1784040600.070:165): avc: denied { read write } for pid=544 comm="syz.1.89" name="loop1p4" dev="devtmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.599566][ T24] audit: type=1400 audit(1784040600.100:166): avc: denied { open } for pid=544 comm="syz.1.89" path="/dev/loop1p4" dev="devtmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 27.724241][ T516] udevd[516]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 27.745569][ T320] udevd[320]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 27.764587][ T516] udevd[516]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 27.852339][ T578] kvm [577]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 27.863304][ T578] kvm [577]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 28.013502][ T589] hub 8-0:1.0: USB hub found [ 28.018797][ T589] hub 8-0:1.0: 1 port detected [ 28.749752][ T606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 28.800641][ T24] audit: type=1400 audit(1784040601.300:167): avc: denied { wake_alarm } for pid=610 comm="syz.4.113" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.809916][ T613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=613 comm=syz.4.116 [ 28.828188][ T615] cgroup: syz.0.114 (615) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 28.840338][ T616] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 28.874411][ T24] audit: type=1400 audit(1784040601.340:168): avc: denied { mount } for pid=614 comm="syz.1.115" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 28.882975][ T615] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 28.916786][ T623] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 29.008967][ T629] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 29.014604][ T629] loop0: partition table partially beyond EOD, truncated [ 29.022238][ T629] loop0: p1 size 393216 extends beyond EOD, truncated [ 29.030449][ T629] loop0: p3 start 4225 is beyond EOD, truncated [ 29.037471][ T629] loop0: p5 size 393216 extends beyond EOD, truncated [ 29.132430][ T320] udevd[320]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 29.133804][ T302] udevd[302]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 29.143205][ T515] udevd[515]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 29.162710][ T516] udevd[516]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 29.175628][ T631] udevd[631]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 29.326351][ T647] hub 8-0:1.0: USB hub found [ 29.332155][ T647] hub 8-0:1.0: 1 port detected [ 29.658449][ T54] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.833875][ T678] fuse: root generation should be zero [ 29.882344][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.893394][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 29.901466][ C0] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.901473][ T54] usb 3-1: Using ep0 maxpacket: 32 [ 29.901489][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 29.925414][ T688] loop3: unable to read partition table [ 29.931659][ T688] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 29.938521][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.955084][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 29.963222][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.974107][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 29.982413][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.993297][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 30.001510][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.012890][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 30.020941][ C1] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.031808][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 30.088552][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.101509][ T54] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 30.112310][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.121282][ T54] usb 3-1: config 0 descriptor?? [ 30.665496][ T734] hub 8-0:1.0: USB hub found [ 30.694770][ T734] hub 8-0:1.0: 1 port detected [ 30.908458][ T54] usbhid 3-1:0.0: can't add hid device: -71 [ 30.918102][ T54] usbhid: probe of 3-1:0.0 failed with error -71 [ 30.925672][ T54] usb 3-1: USB disconnect, device number 2 [ 31.152421][ T758] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 31.161023][ T758] FAT-fs (loop4): Filesystem has been set read-only [ 31.168043][ T758] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 31.663696][ T794] capability: warning: `syz.2.190' uses deprecated v2 capabilities in a way that may be insecure [ 31.881628][ T814] loop3: p1 < > p4 [ 31.886339][ T814] loop3: p4 size 8388608 extends beyond EOD, truncated [ 32.137536][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 32.137567][ T24] audit: type=1400 audit(1784040604.630:198): avc: denied { write } for pid=818 comm="syz.0.199" name="tcp6" dev="proc" ino=4026532677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 33.162447][ T24] audit: type=1400 audit(1784040605.660:199): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.642109][ T848] FAT-fs (loop2): Unrecognized mount option "ldS [ 34.642109][ T848] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ p4 [ 37.468457][ T999] loop2: p4 size 8388608 extends beyond EOD, truncated [ 37.580099][ T287] usb 4-1: Using ep0 maxpacket: 32 [ 38.198470][ T287] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 38.206786][ T287] usb 4-1: config 0 has no interface number 0 [ 38.240890][ T1014] loop2: [ 38.319138][ T631] udevd[631]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 38.336263][ T516] udevd[516]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 38.418544][ T287] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 38.431262][ T287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.446568][ T287] usb 4-1: Product: syz [ 38.453929][ T287] usb 4-1: Manufacturer: syz [ 38.472622][ T287] usb 4-1: SerialNumber: syz [ 38.478830][ T287] usb 4-1: config 0 descriptor?? [ 38.528197][ T287] smsc95xx v2.0.0 [ 38.537842][ T1043] device syzkaller0 entered promiscuous mode [ 38.568859][ T1036] loop0: p1 < > p4 [ 38.573338][ T1036] loop0: p4 size 8388608 extends beyond EOD, truncated [ 38.616098][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 38.616107][ T24] audit: type=1400 audit(1784040611.110:217): avc: denied { bind } for pid=1048 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.642363][ T24] audit: type=1400 audit(1784040611.130:218): avc: denied { listen } for pid=1048 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.662586][ T24] audit: type=1400 audit(1784040611.130:219): avc: denied { write } for pid=1048 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.699636][ T24] audit: type=1400 audit(1784040611.200:220): avc: denied { ioctl } for pid=1052 comm="syz.5.290" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.761852][ T281] cgroup: fork rejected by pids controller in /syz2 [ 38.847838][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.855752][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.863354][ T1064] device bridge_slave_0 entered promiscuous mode [ 38.872738][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.879852][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.887269][ T1064] device bridge_slave_1 entered promiscuous mode [ 38.922712][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.929892][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.937327][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.944469][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.963551][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.971301][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.978916][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.987932][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.996451][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.003679][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.014225][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.022687][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.029761][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.042569][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.053742][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.067867][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.080247][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.089005][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.096697][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.106415][ T1064] device veth0_vlan entered promiscuous mode [ 39.117142][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.126995][ T1064] device veth1_macvtap entered promiscuous mode [ 39.138254][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.148603][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.189012][ T322] device bridge_slave_1 left promiscuous mode [ 39.195411][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.202933][ T322] device bridge_slave_0 left promiscuous mode [ 39.209568][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.217432][ T322] device veth1_macvtap left promiscuous mode [ 39.228380][ T322] device veth0_vlan left promiscuous mode [ 39.321302][ T24] audit: type=1400 audit(1784040611.820:221): avc: denied { create } for pid=1078 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.515625][ T1104] netlink: 'syz.1.311': attribute type 32 has an invalid length. [ 39.592021][ T24] audit: type=1400 audit(1784040612.090:222): avc: denied { create } for pid=1113 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.615762][ T1121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.318'. [ 39.630452][ T24] audit: type=1400 audit(1784040612.110:223): avc: denied { write } for pid=1113 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.652950][ T1121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.318'. [ 39.662723][ T1121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.318'. [ 39.672809][ T24] audit: type=1400 audit(1784040612.110:224): avc: denied { nlmsg_write } for pid=1113 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.752098][ T287] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 39.767090][ T287] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 39.841041][ T1135] EXT4-fs (loop2): Ignoring removed orlov option [ 39.853459][ T24] audit: type=1400 audit(1784040612.350:225): avc: denied { setopt } for pid=1140 comm="syz.5.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.879690][ T1135] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 39.910283][ T1134] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 39.920760][ T24] audit: type=1400 audit(1784040612.420:226): avc: denied { setattr } for pid=1133 comm="syz.2.325" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.930632][ T1151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.331'. [ 39.961058][ T287] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 39.981258][ T287] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 39.989706][ T287] usb 4-1: USB disconnect, device number 2 [ 40.181403][ T1187] capability: warning: `syz.5.349' uses 32-bit capabilities (legacy support in use) [ 40.309673][ T1190] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 40.319101][ T1190] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.332702][ T1190] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: block 3: comm syz.2.350: lblock 3 mapped to illegal pblock 3 (length 3) [ 40.337568][ T1197] Zero length message leads to an empty skb [ 40.347601][ T1190] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 40.366874][ T1190] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.366874][ T1190] [ 40.383427][ T322] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 5) [ 40.398665][ T322] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 40.410977][ T322] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.410977][ T322] [ 40.421109][ T322] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 112: padding at end of block bitmap is not set [ 40.435859][ T322] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 40.448847][ T322] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.448847][ T322] [ 40.458638][ T322] EXT4-fs (loop2): Total free blocks count 0 [ 40.465162][ T322] EXT4-fs (loop2): Free/Dirty block details [ 40.471302][ T322] EXT4-fs (loop2): free_blocks=0 [ 40.476327][ T322] EXT4-fs (loop2): dirty_blocks=64 [ 40.549790][ T1210] overlayfs: failed to resolve './bus': -2 [ 40.915196][ T1240] overlayfs: failed to resolve './bus': -2 [ 40.947820][ T1239] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,grpquota,grpid,nombcache,,errors=continue [ 40.961602][ T1239] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.961635][ T1247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'. [ 40.961651][ T1247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 40.981385][ T1239] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.372: bg 0: block 112: padding at end of block bitmap is not set [ 41.017216][ T1239] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 41.034154][ T1239] EXT4-fs (loop5): This should not happen!! Data will be lost [ 41.034154][ T1239] [ 41.044211][ T1239] EXT4-fs (loop5): Total free blocks count 0 [ 41.050776][ T1239] EXT4-fs (loop5): Free/Dirty block details [ 41.056692][ T1239] EXT4-fs (loop5): free_blocks=0 [ 41.062170][ T1239] EXT4-fs (loop5): dirty_blocks=64 [ 41.067295][ T1239] EXT4-fs (loop5): Block reservation details [ 41.073670][ T1239] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 41.098468][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 41.398426][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 41.413677][ T1272] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 41.423082][ T1272] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.518512][ T20] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 41.527318][ T20] usb 3-1: config 0 has no interface number 0 [ 41.688507][ T20] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 41.697819][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.705980][ T20] usb 3-1: Product: syz [ 41.710643][ T20] usb 3-1: Manufacturer: syz [ 41.715226][ T20] usb 3-1: SerialNumber: syz [ 41.721069][ T20] usb 3-1: config 0 descriptor?? [ 41.758834][ T20] smsc95xx v2.0.0 [ 41.938661][ T1278] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.084752][ T1288] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 42.120182][ T1288] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 42.128052][ T1288] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.140780][ T1285] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 42.146737][ T1288] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 42.151127][ T1285] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.158842][ T1288] System zones: 0-1, 3-36 [ 42.176335][ T1288] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noquota,,errors=continue [ 42.210482][ T1293] EXT4-fs (loop0): Ignoring removed orlov option [ 42.279653][ T1293] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue [ 43.078614][ T1337] EXT4-fs (loop0): 1 truncate cleaned up [ 43.084532][ T1337] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue [ 43.106259][ T1337] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.406: bg 0: block 465: padding at end of block bitmap is not set [ 43.122295][ T1337] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 8 with max blocks 4 with error 28 [ 43.135166][ T1337] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.135166][ T1337] [ 43.153285][ T1337] EXT4-fs (loop0): Total free blocks count 0 [ 43.161505][ T1337] EXT4-fs (loop0): Free/Dirty block details [ 43.167505][ T1337] EXT4-fs (loop0): free_blocks=0 [ 43.173368][ T1337] EXT4-fs (loop0): dirty_blocks=4 [ 43.179975][ T20] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 43.197220][ T1337] EXT4-fs (loop0): Block reservation details [ 43.209578][ T20] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 43.220137][ T1337] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 43.365058][ T1349] loop_set_status: loop0 () has still dirty pages (nrpages=2) [ 43.400750][ T20] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 43.413010][ T20] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 43.421173][ T20] usb 3-1: USB disconnect, device number 3 [ 43.434016][ T1359] EXT4-fs (loop1): Ignoring removed bh option [ 43.483275][ T1359] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,lazytime,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue [ 43.541055][ T1375] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1375 comm=syz.0.419 [ 43.641345][ T24] kauditd_printk_skb: 272 callbacks suppressed [ 43.641355][ T24] audit: type=1400 audit(1784040616.140:499): avc: denied { create } for pid=1381 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.673302][ T24] audit: type=1400 audit(1784040616.140:500): avc: denied { ioctl } for pid=1381 comm="syz.0.425" path="socket:[20068]" dev="sockfs" ino=20068 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.698968][ T24] audit: type=1400 audit(1784040616.140:501): avc: denied { read write } for pid=1381 comm="syz.0.425" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.722673][ T24] audit: type=1400 audit(1784040616.140:502): avc: denied { open } for pid=1381 comm="syz.0.425" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.748172][ T24] audit: type=1400 audit(1784040616.140:503): avc: denied { ioctl } for pid=1381 comm="syz.0.425" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.773355][ T24] audit: type=1400 audit(1784040616.170:504): avc: denied { write } for pid=1357 comm="syz.1.415" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.795562][ T24] audit: type=1400 audit(1784040616.170:505): avc: denied { add_name } for pid=1357 comm="syz.1.415" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.818305][ T24] audit: type=1400 audit(1784040616.170:506): avc: denied { create } for pid=1357 comm="syz.1.415" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.840126][ T24] audit: type=1400 audit(1784040616.170:507): avc: denied { read open } for pid=1357 comm="syz.1.415" path="/101/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.863656][ T24] audit: type=1400 audit(1784040616.170:508): avc: denied { read write } for pid=1357 comm="syz.1.415" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.948438][ T287] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 44.318109][ T1435] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.347249][ T1435] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.361202][ T1435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.378515][ T287] usb 1-1: config 0 interface 0 altsetting 207 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 44.390815][ T287] usb 1-1: config 0 interface 0 has no altsetting 0 [ 44.397521][ T287] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 44.409165][ T1435] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.437374][ T287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.447905][ T1435] EXT4-fs (loop2): 1 truncate cleaned up [ 44.457846][ T1435] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue [ 44.498266][ T287] usb 1-1: config 0 descriptor?? [ 44.553550][ T1447] xt_hashlimit: size too large, truncated to 1048576 [ 44.878468][ T287] usbhid 1-1:0.0: can't add hid device: -71 [ 44.888806][ T287] usbhid: probe of 1-1:0.0 failed with error -71 [ 44.923022][ T287] usb 1-1: USB disconnect, device number 2 [ 45.466781][ T1487] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.472: inode has both inline data and extents flags [ 45.486129][ T1487] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.472: couldn't read orphan inode 15 (err -117) [ 45.498961][ T1487] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 46.200301][ T1556] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 46.213164][ T1556] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.246002][ T1556] EXT4-fs error (device loop2): mb_free_blocks:1540: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 46.320339][ T1556] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 46.354148][ T1556] EXT4-fs error (device loop2): ext4_dirty_inode:6181: inode #16: comm syz.2.503: mark_inode_dirty error [ 46.388535][ T1556] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 46.415792][ T1556] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #16: comm syz.2.503: mark_inode_dirty error [ 46.442642][ T1556] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 46.461125][ T1556] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #16: comm syz.2.503: mark_inode_dirty error [ 46.484790][ T1556] EXT4-fs error (device loop2) in ext4_do_update_inode:5362: error 27 [ 46.502299][ T1556] EXT4-fs error (device loop2): ext4_truncate:4403: inode #16: comm syz.2.503: mark_inode_dirty error [ 46.524917][ T1556] EXT4-fs error (device loop2) in ext4_setattr:5745: error 27 [ 46.817961][ T1594] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 46.831282][ T1594] device syzkaller0 entered promiscuous mode [ 46.847486][ T1583] loop2: p1 p2 < > p3 p4 < p5 > [ 46.865061][ T1583] loop2: p1 size 134220172 extends beyond EOD, truncated [ 46.891845][ T1583] loop2: p3 start 100859904 is beyond EOD, truncated [ 46.900830][ T1583] loop2: p5 size 134220172 extends beyond EOD, truncated [ 46.936919][ T1596] SELinux: failed to load policy [ 47.085106][ T516] udevd[516]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 47.096467][ T631] udevd[631]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 47.112868][ T320] udevd[320]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 47.122621][ T515] udevd[515]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 47.169075][ T1616] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,grpquota,grpid,nombcache,,errors=continue [ 47.189980][ T1616] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.206465][ T1616] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.531: bg 0: block 112: padding at end of block bitmap is not set [ 47.222348][ T1616] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 47.235982][ T1616] EXT4-fs (loop0): This should not happen!! Data will be lost [ 47.235982][ T1616] [ 47.246857][ T1616] EXT4-fs (loop0): Total free blocks count 0 [ 47.253613][ T1616] EXT4-fs (loop0): Free/Dirty block details [ 47.260687][ T1616] EXT4-fs (loop0): free_blocks=0 [ 47.267933][ T1616] EXT4-fs (loop0): dirty_blocks=64 [ 47.274009][ T1616] EXT4-fs (loop0): Block reservation details [ 47.280495][ T1616] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 47.458566][ T1640] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.540: iget: bad i_size value: 38620345925642 [ 47.473223][ T1640] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.540: couldn't read orphan inode 15 (err -117) [ 47.486540][ T1640] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 47.582496][ T1655] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.599182][ T1663] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.540: bg 0: block 5: invalid block bitmap [ 47.608073][ T1656] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 47.612197][ T1663] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 47.635042][ T1663] EXT4-fs (loop5): This should not happen!! Data will be lost [ 47.635042][ T1663] [ 47.649990][ T1663] EXT4-fs (loop5): Total free blocks count 0 [ 47.656473][ T1663] EXT4-fs (loop5): Free/Dirty block details [ 47.663230][ T1663] EXT4-fs (loop5): free_blocks=0 [ 47.668241][ T1663] EXT4-fs (loop5): dirty_blocks=2412 [ 47.673905][ T1663] EXT4-fs (loop5): Block reservation details [ 47.680625][ T1663] EXT4-fs (loop5): i_reserved_data_blocks=2412 [ 47.696899][ T1655] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.706252][ T653] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 360 with error 28 [ 47.774595][ T653] EXT4-fs (loop5): This should not happen!! Data will be lost [ 47.774595][ T653] [ 47.912131][ T1681] device syzkaller0 entered promiscuous mode [ 47.965699][ T1689] FAT-fs (loop5): Unrecognized mount option "ldS [ 47.965699][ T1689] ] 0HY& ^·$*oIeϦՏL5 4coOeuRθZBE2V-х3cҕ 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.425077][ T2004] RSP: 002b:00007fff837695f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 53.433973][ T2004] RAX: 0000000000000000 RBX: 00007fff837696e0 RCX: 00007fdf5a947e59 [ 53.442200][ T2004] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 53.450410][ T2004] RBP: 000000000000cfc5 R08: 0000000000000001 R09: 0000000000000000 [ 53.458359][ T2004] R10: 0000001b2c920000 R11: 0000000000000246 R12: 00007fff83769720 [ 53.466319][ T2004] R13: 00007fdf5abcffac R14: 000000000000cff9 R15: 00007fdf5abcffa0 [ 53.474443][ T2004] [ 53.476748][ T2004] Allocated by task 2005: [ 53.481056][ T2004] __kasan_kmalloc+0xd4/0x100 [ 53.485712][ T2004] __kmalloc+0x19f/0x330 [ 53.489935][ T2004] l2tp_session_create+0x39/0xb60 [ 53.494935][ T2004] pppol2tp_connect+0xbf5/0x1640 [ 53.500280][ T2004] __sys_connect+0x3ce/0x450 [ 53.504945][ T2004] __x64_sys_connect+0x7a/0x90 [ 53.509686][ T2004] do_syscall_64+0x31/0x40 [ 53.514083][ T2004] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.520034][ T2004] [ 53.522359][ T2004] Freed by task 306: [ 53.526232][ T2004] kasan_set_track+0x4a/0x70 [ 53.530990][ T2004] kasan_set_free_info+0x23/0x40 [ 53.535918][ T2004] ____kasan_slab_free+0x125/0x160 [ 53.541099][ T2004] __kasan_slab_free+0x11/0x20 [ 53.545934][ T2004] slab_free_freelist_hook+0xc5/0x190 [ 53.551285][ T2004] kfree+0xc0/0x270 [ 53.555071][ T2004] l2tp_session_put+0xb2/0x1a0 [ 53.559829][ T2004] l2tp_session_delete+0x3a9/0x4a0 [ 53.564918][ T2004] l2tp_tunnel_del_work+0x180/0x3d0 [ 53.570098][ T2004] process_one_work+0x6fd/0xbc0 [ 53.574923][ T2004] worker_thread+0xa8e/0x13c0 [ 53.579576][ T2004] kthread+0x324/0x3b0 [ 53.583637][ T2004] ret_from_fork+0x1f/0x30 [ 53.588112][ T2004] [ 53.590417][ T2004] Last potentially related work creation: [ 53.596150][ T2004] kasan_save_stack+0x3a/0x60 [ 53.600806][ T2004] __kasan_record_aux_stack+0xd2/0x100 [ 53.606265][ T2004] kasan_record_aux_stack_noalloc+0xb/0x10 [ 53.612069][ T2004] call_rcu+0x11a/0x1090 [ 53.616308][ T2004] pppol2tp_release+0x1e3/0x2b0 [ 53.621135][ T2004] sock_close+0xb8/0x200 [ 53.625368][ T2004] __fput+0x2dc/0x730 [ 53.629327][ T2004] ____fput+0x15/0x20 [ 53.633314][ T2004] task_work_run+0x127/0x190 [ 53.637878][ T2004] exit_to_user_mode_loop+0xcb/0xe0 [ 53.643052][ T2004] exit_to_user_mode_prepare+0x76/0xa0 [ 53.648488][ T2004] syscall_exit_to_user_mode+0x1d/0x40 [ 53.653929][ T2004] do_syscall_64+0x3d/0x40 [ 53.658417][ T2004] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.664458][ T2004] [ 53.666766][ T2004] The buggy address belongs to the object at ffff8881009e6400 [ 53.666766][ T2004] which belongs to the cache kmalloc-512 of size 512 [ 53.680802][ T2004] The buggy address is located 400 bytes inside of [ 53.680802][ T2004] 512-byte region [ffff8881009e6400, ffff8881009e6600) [ 53.694223][ T2004] The buggy address belongs to the page: [ 53.699852][ T2004] page:ffffea0004027900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1009e4 [ 53.710158][ T2004] head:ffffea0004027900 order:2 compound_mapcount:0 compound_pincount:0 [ 53.718561][ T2004] flags: 0x4000000000010200(slab|head) [ 53.724096][ T2004] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 53.732852][ T2004] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 53.741428][ T2004] page dumped because: kasan: bad access detected [ 53.747869][ T2004] page_owner tracks the page as allocated [ 53.753586][ T2004] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 279, ts 22660232245, free_ts 22631965210 [ 53.772762][ T2004] prep_new_page+0x176/0x190 [ 53.777332][ T2004] get_page_from_freelist+0x225f/0x23f0 [ 53.782854][ T2004] __alloc_pages_nodemask+0x29a/0x640 [ 53.788212][ T2004] new_slab+0x84/0x3f0 [ 53.792259][ T2004] ___slab_alloc+0x2f8/0x4c0 [ 53.796826][ T2004] __slab_alloc+0x63/0xa0 [ 53.801129][ T2004] __kmalloc_track_caller+0x1e4/0x310 [ 53.806490][ T2004] __alloc_skb+0xdc/0x520 [ 53.810794][ T2004] netlink_ack+0x35c/0xb30 [ 53.815183][ T2004] netlink_rcv_skb+0x267/0x430 [ 53.819922][ T2004] rtnetlink_rcv+0x1c/0x20 [ 53.824326][ T2004] netlink_unicast+0x86c/0xa30 [ 53.829332][ T2004] netlink_sendmsg+0x949/0xb70 [ 53.834170][ T2004] __sys_sendto+0x467/0x620 [ 53.838647][ T2004] __x64_sys_sendto+0xe5/0x100 [ 53.843392][ T2004] do_syscall_64+0x31/0x40 [ 53.847783][ T2004] page last free stack trace: [ 53.852535][ T2004] __free_pages_ok+0x80b/0x830 [ 53.857361][ T2004] __free_pages+0xd8/0x390 [ 53.861755][ T2004] __free_slab+0xcf/0x190 [ 53.866060][ T2004] unfreeze_partials+0x150/0x180 [ 53.871055][ T2004] put_cpu_partial+0xc1/0x180 [ 53.875706][ T2004] __slab_free+0x2c9/0x3a0 [ 53.880094][ T2004] ___cache_free+0x10e/0x130 [ 53.884843][ T2004] qlink_free+0x50/0x90 [ 53.889350][ T2004] qlist_free_all+0x5f/0xb0 [ 53.893830][ T2004] kasan_quarantine_reduce+0x14a/0x160 [ 53.899441][ T2004] __kasan_slab_alloc+0x2f/0xe0 [ 53.904267][ T2004] slab_post_alloc_hook+0x5d/0x2f0 [ 53.909524][ T2004] kmem_cache_alloc_trace+0x155/0x2e0 [ 53.914896][ T2004] register_netdevice+0x209/0x13a0 [ 53.919990][ T2004] veth_newlink+0x854/0xb60 [ 53.924486][ T2004] rtnl_newlink+0x1307/0x1830 [ 53.929316][ T2004] [ 53.931646][ T2004] Memory state around the buggy address: [ 53.937428][ T2004] ffff8881009e6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.945466][ T2004] ffff8881009e6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.953624][ T2004] >ffff8881009e6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.961665][ T2004] ^ [ 53.966244][ T2004] ffff8881009e6600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.974292][ T2004] ffff8881009e6680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.982333][ T2004] ================================================================== [ 53.990378][ T2004] Disabling lock debugging due to kernel taint [ 54.011878][ T24] kauditd_printk_skb: 626 callbacks suppressed [ 54.011888][ T24] audit: type=1400 audit(1784040626.510:1833): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 54.081799][ T24] audit: type=1400 audit(1784040626.530:1834): avc: denied { read write } for pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.108126][ T24] audit: type=1400 audit(1784040626.530:1835): avc: denied { read write open } for pid=285 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.133983][ T24] audit: type=1400 audit(1784040626.530:1836): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.161755][ T24] audit: type=1400 audit(1784040626.540:1837): avc: denied { unmount } for pid=1064 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 54.182073][ T24] audit: type=1400 audit(1784040626.550:1838): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.203704][ T24] audit: type=1400 audit(1784040626.550:1839): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.225853][ T24] audit: type=1400 audit(1784040626.550:1840): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.249022][ T24] audit: type=1400 audit(1784040626.550:1841): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.272325][ T24] audit: type=1400 audit(1784040626.550:1842): avc: denied { prog_load } for pid=2006 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1