last executing test programs: 2.76601679s ago: executing program 2 (id=15): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(r0, r1, 0x0) fcntl$dupfd(r3, 0x0, r2) 2.733711773s ago: executing program 2 (id=17): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@block_validity}, {}, {@nombcache}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@acl}, {@noblock_validity}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@errors_remount}, {@dioread_nolock}]}, 0x7, 0x60a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x22) fsetxattr(0xffffffffffffffff, &(0x7f0000000e80)=@known='security.selinux\x00', 0x0, 0x0, 0x0) 2.457750161s ago: executing program 2 (id=29): setresuid(0xee00, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r1) 1.201292469s ago: executing program 1 (id=49): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1}, 0xc) 805.528619ms ago: executing program 1 (id=59): capset(&(0x7f00000017c0)={0x20080522}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001840), 0x8d40, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001880)={0xa0000001}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000018c0)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000001900)=0x2) 805.280209ms ago: executing program 3 (id=60): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000380)=0xc3, 0x1) 790.44995ms ago: executing program 1 (id=62): creat(0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x0, &(0x7f00000000c0)={0x0, 0x88}, 0x1, 0x7}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x2200000, &(0x7f0000000300)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000003c0)="$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") r0 = open(&(0x7f0000006280)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) 789.20897ms ago: executing program 3 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000005a80)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005ac0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000005b00)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000005b40)='.\x00', &(0x7f0000005b80)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000005bc0)='./bus\x00', &(0x7f0000005c00), 0x40, &(0x7f0000005c40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000005c80)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000005d00)='./file0\x00', 0x200) 743.035095ms ago: executing program 3 (id=64): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42142, 0x1) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1810040, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 735.167206ms ago: executing program 3 (id=65): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) unshare(0x60000600) r0 = socket(0x2, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) 626.146147ms ago: executing program 3 (id=67): syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @multicast, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x3}}, {@mpls_mc={0x8848, {[], @ipv4=@generic={{0x5, 0x4, 0x3, 0x37, 0x14, 0x65, 0x0, 0xf9, 0x73, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 562.446433ms ago: executing program 1 (id=69): socket$inet6(0xa, 0x803, 0x6) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000002240)={@void, @val={0x1, 0x0, 0x9, 0x6, 0x16, 0xa}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x16, 0xfc0, 0x67, 0x0, 0x9, 0x6, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x4, 0xaa, 0x0, 0x6}]}}, "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"}}, 0xfca) 560.146103ms ago: executing program 3 (id=70): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x2c4d, {0x80, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x2, 0x200, 0x1, 0x8, 0x0, 0x1ffffffffffffd, 0xfffffffffffefffe, 0x100000000000404, 0xf, 0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}}, 0xa0) 542.272825ms ago: executing program 2 (id=71): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) r2 = eventfd2(0x60f, 0x801) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000340)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f00000003c0)=[{r0, 0x81}, {r0, 0x110}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 427.226057ms ago: executing program 0 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x20, &(0x7f00000004c0)={&(0x7f0000000500)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d"], 0xf4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000020000680080001"], 0x84}}, 0x0) 391.213391ms ago: executing program 4 (id=73): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r3, r1, 0x12, 0x6, 0x2000000}, 0x10) 363.470783ms ago: executing program 2 (id=74): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0xa00008, &(0x7f0000000640), 0x3, 0x7f4, &(0x7f0000000680)="$eJzs3c1rXF0ZAPDnTmby1WoiCPq6CggaeHknpsZWQbDiQkQLBV23DZNprJlkSmZSmhBpighuXCguBLspLq3WXbd+LNWN+B/oQixV02rFhUTuzJ1mksyk0yYz05f+fnCTc+49k+c89ztzDzMBvLVm0h+5iHciCmlxKpufRDYj8hEXm+2e726X0imJvb2v/yNptHm2u12KttekzmSVj0bEb74b8W7uaNza5tbKYqVSXs/qc/XVm3O1za33bqwuLpeXy2vn5xcWzl34zIXzaQea/jV+slz//Yets49/8OVP/uLif7/zkYff/20SF+Nstqw9j9MyEzPZOimkq/CAL512sCFLemrTSysGKT00R5pHebwTUzFyzDb6wkB7BgD0y52I2OtJvueWAMCbLnFVB4C3TOt9gGe726XWFM3nOTtDfWNiQJ58MSLGm/m3nm82l+Sbz+z+ON54Djr5LNl/EJk975o+hfgzEXHv0ZUH6RR9eg4J0MnO3Yi4Nj1z+PyfnuEOj1l4VZ/qoc3MobrzHwzOr9L7n88evf+LyGXHf3PQ1eH7n7EOx+7rePnxn/vbgWrhFIK2Se//Pt82tu15W/6Z6ZGs9oHGPV8huX6jUk7PbR+MiNkojKX1+WNizD7939Nuy9rv//75w2/9LI2f/m4s/Fi+kX9+7OBrlhbriydOPPPkbjPM0fyTF9s/6XL/e7nHGF/53Pd+0m1Zmn+ab2s6kP8A7N2P+ETH7b8/Dio5dnziXGN3mGvtFB388i8/nuwWv33733uURtoutf4XGIR0+092yP/bP33RZDppH69Ze/UYv78/9etuyw7mf+VBGv9g/p33/9HkG43yaDbv9mK9vj4fMZp87ej8c/uvbdVb7dP8Zz/e+fg/uP//+Ux7H9LT0LWsvPeSYY35x3//+evnn6oeH+AE0vyX0u2fZEm08t8fs3to+7964eHzlZFu8Xvb/guN0mw25+j5L3/k7/bawROtPAAAAAAAAAAAAAAAAAAAAAAAAADoUS4izkaSK74o53LFYvM7vD8ck7lKtVZ/93p1Y20pGt+VPR2FXOujLqfaPg91Pvs8/Fb93KH6pyPiQxHxo7GJRr1YqlaWhp08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGTOdPn+/9Rfx4bdOwCgb8aH3QEAYOBc/wHg7dPl+j/aefZEX/sCAAxG4/qf5IfdDQBggLL//wvD7gcAMDie/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBnly9dSqe9/+xul9L60q3NjZXqrfeWyrWV4upGqViqrt8sLlfzUSkXS9XVrn9op/mrUq3eXIi1jdtz9XKtPlfb3Lq6Wt1Yq1+9sbq4XL5aLgwsMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoXW1za2WxUimvdy/ETsTL2vShMNZ7DwdRuDOYWBMRcUybu9lKKa/XvvnViOGvln4X8v0L8affNdflG5Lp6xTGjt9bTlRoP0tMDPisBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD+8f8AAAD//zDYFQ0=") mount$incfs(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), 0x80, 0x0) syz_mount_image$fuse(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x820, &(0x7f0000001080)=ANY=[], 0x4, 0x0, 0x0) open(&(0x7f00000010c0)='./file0\x00', 0x149244, 0x10) chown(&(0x7f0000012c00)='./file1\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 362.356974ms ago: executing program 0 (id=75): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 361.246194ms ago: executing program 4 (id=76): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f00000002c0)=0x0) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r2, 0x1) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 342.182746ms ago: executing program 1 (id=77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x26, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000100)={0xdacc91bfe94952ba, 0x0, {[0xc, 0x4, 0x3, 0x5, 0x4, 0x4, 0x0, 0x6]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 251.775045ms ago: executing program 0 (id=78): syz_open_dev$evdev(0x0, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x138) 181.185962ms ago: executing program 4 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000", @ANYRES32], 0x50) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 140.454236ms ago: executing program 0 (id=80): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x4000) 122.465528ms ago: executing program 4 (id=81): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000f80)=0x1, 0x4) connect$inet(r0, &(0x7f0000000fc0)={0x2, 0x0, @empty}, 0x10) sendmmsg(r0, &(0x7f00000010c0), 0x800001d, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x17, 0xf, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0x8, &(0x7f0000001240)=""/8, 0x41100, 0x17, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000001100)=0x1f6, 0x4) recvmmsg(r0, &(0x7f0000001140), 0x291962b, 0x45833af92e4b39ff, 0x0) 104.63409ms ago: executing program 4 (id=82): mkdir(&(0x7f0000002340)='./file0\x00', 0x97) mkdir(&(0x7f0000002380)='./file1\x00', 0x13b) mkdir(&(0x7f00000023c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000002400)='./bus\x00', &(0x7f0000002440), 0x0, &(0x7f0000002480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000024c0)='./bus\x00') r0 = open(&(0x7f0000002180)='./bus\x00', 0x14957e, 0x0) readahead(r0, 0x0, 0xfffffffffffffffd) 75.932033ms ago: executing program 0 (id=83): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002a80)=0x474c, 0x4) connect$inet(r0, &(0x7f0000002ac0)={0x2, 0x2, @local}, 0x10) sendmmsg(r0, &(0x7f0000002b00), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000002b40)=0x5, 0x4) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0xfffffffffffffcd6, 0x0, 0x0, &(0x7f0000002bc0)=""/16, 0x10}, 0x5}], 0x1, 0x45833af92e4b39fd, 0x0) 59.952534ms ago: executing program 2 (id=84): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000058c0)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005900)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x578410eb) 32.874427ms ago: executing program 4 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, &(0x7f0000000200)="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"/1369, 0x559, r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700030000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 31.686397ms ago: executing program 0 (id=86): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f0000000440)={[{@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nobh}, {@nomblk_io_submit}]}, 0x1, 0x517, &(0x7f0000004800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004d40)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x90001) capset(&(0x7f0000004dc0)={0x20080522}, 0x0) setxattr$system_posix_acl(&(0x7f0000000d80)='.\x00', &(0x7f0000000dc0)='system.posix_acl_default\x00', &(0x7f0000000e00)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) 0s ago: executing program 1 (id=87): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x3d, 0x7, 0x7}]}, 0x10) sendto$inet(r0, &(0x7f00000002c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 22.325161][ T24] audit: type=1400 audit(1794388983.630:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.326139][ T271] cgroup: Unknown subsys name 'net' [ 22.348180][ T24] audit: type=1400 audit(1794388983.630:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.375534][ T24] audit: type=1400 audit(1794388983.660:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.375714][ T271] cgroup: Unknown subsys name 'devices' [ 22.483800][ T271] cgroup: Unknown subsys name 'hugetlb' [ 22.489399][ T271] cgroup: Unknown subsys name 'rlimit' [ 22.626387][ T24] audit: type=1400 audit(1794388983.930:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.649965][ T24] audit: type=1400 audit(1794388983.930:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.655424][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.683415][ T24] audit: type=1400 audit(1794388983.930:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.707291][ T24] audit: type=1400 audit(1794388983.990:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.732824][ T24] audit: type=1400 audit(1794388983.990:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.764543][ T24] audit: type=1400 audit(1794388984.070:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.790265][ T24] audit: type=1400 audit(1794388984.070:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.816656][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.344892][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.351949][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.359554][ T279] device bridge_slave_0 entered promiscuous mode [ 23.367219][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.374301][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.381678][ T279] device bridge_slave_1 entered promiscuous mode [ 23.465164][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.472240][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.479709][ T280] device bridge_slave_0 entered promiscuous mode [ 23.486775][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.493828][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.501198][ T280] device bridge_slave_1 entered promiscuous mode [ 23.534400][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.541450][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.548876][ T282] device bridge_slave_0 entered promiscuous mode [ 23.558209][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.565296][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.572695][ T282] device bridge_slave_1 entered promiscuous mode [ 23.603948][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.611006][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.624862][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.631993][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.639864][ T281] device bridge_slave_0 entered promiscuous mode [ 23.652361][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.659405][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.667209][ T281] device bridge_slave_1 entered promiscuous mode [ 23.728451][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.736393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.743963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.764439][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.771676][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.779242][ T284] device bridge_slave_0 entered promiscuous mode [ 23.790542][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.797933][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.805451][ T284] device bridge_slave_1 entered promiscuous mode [ 23.829440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.838109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.846436][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.853553][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.860917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.869158][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.876216][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.945333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.953468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.992612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.000934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.024882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.032800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.041146][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.048215][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.056481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.064681][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.071778][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.079352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.086881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.103128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.111522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.119669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.128312][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.135361][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.143096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.151262][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.158299][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.166850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.174557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.197656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.205309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.213017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.221206][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.228391][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.236892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.245260][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.252309][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.259666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.267712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.282651][ T279] device veth0_vlan entered promiscuous mode [ 24.289342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.297792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.306451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.328678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.336155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.344294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.353616][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.360918][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.368437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.377115][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.384169][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.391491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.399570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.407970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.421318][ T280] device veth0_vlan entered promiscuous mode [ 24.429185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.437212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.445308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.453305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.462756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.471204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.485100][ T281] device veth0_vlan entered promiscuous mode [ 24.496224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.505091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.513689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.521450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.529571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.537928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.546104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.553586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.564685][ T279] device veth1_macvtap entered promiscuous mode [ 24.574663][ T280] device veth1_macvtap entered promiscuous mode [ 24.582665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.590789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.599197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.608104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.616352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.624549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.632750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.641423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.649918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.657487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.667273][ T282] device veth0_vlan entered promiscuous mode [ 24.682545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.690872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.699569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.708862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.719459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.727446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.737225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.744970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.759332][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 24.770863][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.772178][ T282] device veth1_macvtap entered promiscuous mode [ 24.789303][ T284] device veth0_vlan entered promiscuous mode [ 24.797998][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.807771][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.816676][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.825328][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.833941][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.842135][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.850736][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.858973][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.867341][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.880958][ T281] device veth1_macvtap entered promiscuous mode [ 24.900351][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.909868][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.919307][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.928544][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.937197][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.956666][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.970342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.988139][ T284] device veth1_macvtap entered promiscuous mode [ 25.006947][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.021792][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.030963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.039435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.050881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.079349][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.089320][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.101871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.113784][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.143981][ T324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 25.158847][ T318] process 'syz.1.8' launched './file1' with NULL argv: empty string added [ 25.196766][ T332] FAULT_INJECTION: forcing a failure. [ 25.196766][ T332] name failslab, interval 1, probability 0, space 0, times 1 [ 25.209780][ T332] CPU: 1 PID: 332 Comm: syz.1.12 Not tainted syzkaller #0 [ 25.217000][ T332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 25.227216][ T332] Call Trace: [ 25.230513][ T332] __dump_stack+0x21/0x24 [ 25.235036][ T332] dump_stack_lvl+0x1a7/0x208 [ 25.239741][ T332] ? show_regs_print_info+0x18/0x18 [ 25.244941][ T332] dump_stack+0x15/0x1c [ 25.249095][ T332] should_fail+0x3ab/0x500 [ 25.253510][ T332] ? locks_get_lock_context+0x9b/0x2d0 [ 25.258968][ T332] __should_failslab+0xa4/0xe0 [ 25.263740][ T332] should_failslab+0x9/0x20 [ 25.268365][ T332] kmem_cache_alloc+0x3d/0x2d0 [ 25.273126][ T332] locks_get_lock_context+0x9b/0x2d0 [ 25.278405][ T332] flock_lock_inode+0xfb/0x1380 [ 25.283252][ T332] ? avc_has_perm_noaudit+0x3b0/0x3b0 [ 25.288616][ T332] ? check_conflicting_open+0x260/0x260 [ 25.294159][ T332] locks_lock_inode_wait+0xfd/0x430 [ 25.299348][ T332] ? fcntl_setlease+0x310/0x310 [ 25.304193][ T332] ? match_file+0x130/0x130 [ 25.308698][ T332] ? slab_post_alloc_hook+0x7d/0x2f0 [ 25.313977][ T332] ? selinux_file_lock+0x4d/0x60 [ 25.318909][ T332] ? security_file_lock+0x79/0xa0 [ 25.324020][ T332] __se_sys_flock+0x462/0x5b0 [ 25.328778][ T332] __x64_sys_flock+0x5b/0x70 [ 25.333364][ T332] do_syscall_64+0x31/0x40 [ 25.337776][ T332] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.343664][ T332] RIP: 0033:0x7fa10bffdf19 [ 25.348073][ T332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.367674][ T332] RSP: 002b:00007fa10aa4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 25.376102][ T332] RAX: ffffffffffffffda RBX: 00007fa10c27afa0 RCX: 00007fa10bffdf19 [ 25.384095][ T332] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000004 [ 25.392409][ T332] RBP: 00007fa10c08cf6d R08: 0000000000000000 R09: 0000000000000000 [ 25.400373][ T332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.408342][ T332] R13: 00007fa10c27b038 R14: 00007fa10c27afa0 R15: 00007ffec3252838 [ 25.447023][ T337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.536132][ T348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19'. [ 25.595402][ T345] EXT4-fs (loop2): Ignoring removed oldalloc option [ 25.602675][ T345] EXT4-fs (loop2): Ignoring removed orlov option [ 25.647305][ T345] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,max_dir_size_kb=0x0000000000000002,grpjquota=,,errors=continue [ 26.062665][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.082220][ T15] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.139127][ T381] F2FS-fs (loop4): Test dummy encryption mode enabled [ 26.147123][ T381] F2FS-fs (loop4): invalid crc value [ 26.154728][ T381] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.177705][ T381] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.424155][ T392] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 26.433313][ T392] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.442309][ T15] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 26.454108][ T15] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 26.472357][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.482288][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 26.492087][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.622340][ T15] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 26.637460][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.646262][ T15] usb 3-1: Product: syz [ 26.650445][ T15] usb 3-1: Manufacturer: syz [ 26.656154][ T15] usb 3-1: SerialNumber: syz [ 26.662257][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 26.676014][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 26.680430][ T413] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 26.684829][ T25] usb 1-1: Product: syz [ 26.698709][ T413] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.699807][ T25] usb 1-1: Manufacturer: syz [ 26.714223][ T25] usb 1-1: SerialNumber: syz [ 26.923587][ T15] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 26.934377][ T426] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 26.942895][ T426] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 26.954340][ T426] F2FS-fs (loop1): Found nat_bits in checkpoint [ 26.983880][ T426] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 26.991070][ T426] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 26.999214][ T25] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 27.152493][ T15] usb 3-1: USB disconnect, device number 2 [ 27.159036][ T15] usblp0: removed [ 27.189211][ T452] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,max_batch_time=0x0000000000000004,init_itable,,errors=continue [ 27.202952][ T452] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.241590][ T452] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 27.258497][ T452] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 27.263668][ T5] usb 1-1: USB disconnect, device number 2 [ 27.270982][ T452] EXT4-fs (loop4): This should not happen!! Data will be lost [ 27.270982][ T452] [ 27.286560][ T452] EXT4-fs (loop4): Total free blocks count 0 [ 27.287406][ T5] usblp1: removed [ 27.300416][ T452] EXT4-fs (loop4): Free/Dirty block details [ 27.306534][ T452] EXT4-fs (loop4): free_blocks=65280 [ 27.312047][ T452] EXT4-fs (loop4): dirty_blocks=1 [ 27.317370][ T452] EXT4-fs (loop4): Block reservation details [ 27.323808][ T452] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 27.354395][ T24] kauditd_printk_skb: 91 callbacks suppressed [ 27.354407][ T24] audit: type=1400 audit(1794388988.660:165): avc: denied { connect } for pid=467 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.410144][ T24] audit: type=1400 audit(1794388988.710:166): avc: denied { read } for pid=467 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.450200][ T475] ====================================================== [ 27.450200][ T475] WARNING: the mand mount option is being deprecated and [ 27.450200][ T475] will be removed in v5.15! [ 27.450200][ T475] ====================================================== [ 27.476473][ T475] overlayfs: failed to clone upperpath [ 27.507269][ T477] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.531304][ T484] ip_tables: iptables: counters copy to user failed while replacing table [ 27.536886][ T477] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,stripe=0x0000000000000003,bsdgroups,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue [ 27.541344][ T484] ip_tables: iptables: counters copy to user failed while replacing table [ 27.722847][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 27.741577][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.751436][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 27.759821][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.768933][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.777647][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.786157][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.794645][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.809071][ T24] audit: type=1400 audit(1794388989.110:167): avc: denied { write } for pid=503 comm="syz.0.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.820411][ T504] netlink: 140 bytes leftover after parsing attributes in process `syz.0.72'. [ 27.851524][ T504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72'. [ 27.888782][ T24] audit: type=1400 audit(1794388989.190:168): avc: denied { create } for pid=508 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.913670][ T24] audit: type=1400 audit(1794388989.220:169): avc: denied { connect } for pid=508 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.933666][ T24] audit: type=1400 audit(1794388989.220:170): avc: denied { shutdown } for pid=508 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.987899][ T509] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.990181][ T24] audit: type=1400 audit(1794388989.290:171): avc: denied { read } for pid=516 comm="syz.0.78" dev="nsfs" ino=4026532476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.019807][ T24] audit: type=1400 audit(1794388989.290:172): avc: denied { open } for pid=516 comm="syz.0.78" path="net:[4026532476]" dev="nsfs" ino=4026532476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.050445][ T24] audit: type=1400 audit(1794388989.290:173): avc: denied { create } for pid=516 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.053516][ T509] incfs: Unexpected inode type [ 28.071893][ T24] audit: type=1400 audit(1794388989.290:174): avc: denied { ioctl } for pid=516 comm="syz.0.78" path="socket:[15260]" dev="sockfs" ino=15260 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.168947][ T284] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 336: padding at end of block bitmap is not set [ 28.184815][ T284] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 28.195311][ T284] EXT4-fs error (device loop2): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 15 [ 28.211187][ T284] EXT4-fs error (device loop2): ext4_lookup:1834: inode #2: comm syz-executor: deleted inode referenced: 15 [ 28.250766][ T538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 28.259721][ T535] EXT4-fs (loop0): Ignoring removed nobh option [ 28.266130][ T538] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.273357][ T538] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.292628][ T301] ================================================================== [ 28.300859][ T301] BUG: KASAN: use-after-free in l2tp_tunnel_del_work+0xcd/0x3d0 [ 28.302908][ T535] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 28.308997][ T301] Read of size 8 at addr ffff888112b4f880 by task kworker/u4:3/301 [ 28.309000][ T301] [ 28.309011][ T301] CPU: 1 PID: 301 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 28.309035][ T301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 28.324413][ T527] ------------[ cut here ]------------ [ 28.324487][ T301] Workqueue: l2tp l2tp_tunnel_del_work [ 28.326935][ T527] WARNING: CPU: 0 PID: 527 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 28.334360][ T301] [ 28.334365][ T301] Call Trace: [ 28.334378][ T301] __dump_stack+0x21/0x24 [ 28.334386][ T301] dump_stack_lvl+0x1a7/0x208 [ 28.334403][ T301] ? show_regs_print_info+0x18/0x18 [ 28.344825][ T527] Modules linked in: [ 28.349937][ T301] ? thaw_kernel_threads+0x220/0x220 [ 28.355553][ T527] [ 28.365456][ T301] print_address_description+0x7f/0x2c0 [ 28.365468][ T301] ? l2tp_tunnel_del_work+0xcd/0x3d0 [ 28.365479][ T301] kasan_report+0x100/0x140 [ 28.365499][ T301] ? __switch_to_asm+0x3a/0x60 [ 28.367908][ T527] CPU: 0 PID: 527 Comm: syz.0.80 Not tainted syzkaller #0 [ 28.371133][ T301] ? l2tp_tunnel_del_work+0xcd/0x3d0 [ 28.375493][ T527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 28.380246][ T301] __asan_report_load8_noabort+0x14/0x20 [ 28.380258][ T301] l2tp_tunnel_del_work+0xcd/0x3d0 [ 28.380269][ T301] process_one_work+0x6fd/0xbc0 [ 28.380288][ T301] worker_thread+0xa8e/0x13c0 [ 28.385575][ T527] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 28.389584][ T301] ? __kthread_parkme+0xb3/0x1b0 [ 28.395067][ T527] Code: 5d c3 e8 7c b3 34 fd be 02 00 00 00 eb 0a e8 70 b3 34 fd be 01 00 00 00 4c 89 f7 e8 f3 31 0e fe e9 0f ff ff ff e8 59 b3 34 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 48 b3 34 fd 4c 89 f7 be 03 [ 28.397177][ T301] kthread+0x324/0x3b0 [ 28.397187][ T301] ? worker_clr_flags+0x190/0x190 [ 28.397196][ T301] ? kthread_blkcg+0xd0/0xd0 [ 28.397213][ T301] ret_from_fork+0x1f/0x30 [ 28.402817][ T527] RSP: 0018:ffffc90000dbfc40 EFLAGS: 00010293 [ 28.408206][ T301] [ 28.412735][ T527] [ 28.417470][ T301] Allocated by task 526: [ 28.417487][ T301] __kasan_kmalloc+0xd4/0x100 [ 28.417495][ T301] __kmalloc+0x19f/0x330 [ 28.417513][ T301] l2tp_session_create+0x39/0xb60 [ 28.424918][ T527] RAX: ffffffff843003c7 RBX: ffff888112a7b800 RCX: ffff888112368000 [ 28.430133][ T301] pppol2tp_connect+0xbf5/0x1640 [ 28.430154][ T301] __sys_connect+0x3ce/0x450 [ 28.440600][ T527] RDX: 0000000000000000 RSI: 000000001039e000 RDI: 000000000c04eb7d [ 28.446316][ T301] __x64_sys_connect+0x7a/0x90 [ 28.446327][ T301] do_syscall_64+0x31/0x40 [ 28.446337][ T301] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.446350][ T301] [ 28.451723][ T527] RBP: ffffc90000dbfc60 R08: ffff888112a7b883 R09: 1ffff1102254f710 [ 28.456485][ T301] Freed by task 526: [ 28.456502][ T301] kasan_set_track+0x4a/0x70 [ 28.456511][ T301] kasan_set_free_info+0x23/0x40 [ 28.456527][ T301] ____kasan_slab_free+0x125/0x160 [ 28.461284][ T527] R10: dffffc0000000000 R11: ffffed102254f711 R12: dffffc0000000000 [ 28.467681][ T301] __kasan_slab_free+0x11/0x20 [ 28.467690][ T301] slab_free_freelist_hook+0xc5/0x190 [ 28.467699][ T301] kfree+0xc0/0x270 [ 28.467708][ T301] l2tp_session_put+0xb2/0x1a0 [ 28.467715][ T301] pppol2tp_ioctl+0x748/0x960 [ 28.467733][ T301] pppox_ioctl+0x1e1/0x440 SYZFAIL: failed to send rpc fd=3 want=29288 sent=0 n=-1 (errno 32: Broken pipe) [ 28.472802][ T527] R13: dffffc0000000000 R14: 000000001039e000 R15: ffff888112b4f800 [ 28.492442][ T301] sock_do_ioctl+0xda/0x380 [ 28.492451][ T301] sock_ioctl+0x472/0x740 [ 28.492459][ T301] __se_sys_ioctl+0x121/0x1a0 [ 28.492474][ T301] __x64_sys_ioctl+0x7b/0x90 [ 28.496566][ T527] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 28.501568][ T301] do_syscall_64+0x31/0x40 [ 28.510046][ T527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.510762][ T301] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.516953][ T527] CR2: 0000001b2e819ff8 CR3: 000000012502d000 CR4: 00000000003506b0 [ 28.519192][ T301] [ 28.519204][ T301] The buggy address belongs to the object at ffff888112b4f800 [ 28.519204][ T301] which belongs to the cache kmalloc-512 of size 512 [ 28.519220][ T301] The buggy address is located 128 bytes inside of [ 28.519220][ T301] 512-byte region [ffff888112b4f800, ffff888112b4fa00) [ 28.521585][ T527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.525946][ T301] The buggy address belongs to the page: [ 28.525963][ T301] page:ffffea00044ad300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112b4c [ 28.525970][ T301] head:ffffea00044ad300 order:2 compound_mapcount:0 compound_pincount:0 [ 28.525985][ T301] flags: 0x4000000000010200(slab|head) [ 28.531208][ T527] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.534974][ T301] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 28.534986][ T301] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 28.534991][ T301] page dumped because: kasan: bad access detected [ 28.535002][ T301] page_owner tracks the page as allocated [ 28.541334][ T527] Call Trace: [ 28.548184][ T301] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 524, ts 28080832233, free_ts 28052503227 [ 28.548198][ T301] prep_new_page+0x176/0x190 [ 28.548214][ T301] get_page_from_freelist+0x225f/0x23f0 [ 28.554401][ T527] pppol2tp_release+0x150/0x2b0 [ 28.557728][ T301] __alloc_pages_nodemask+0x29a/0x640 [ 28.565953][ T527] sock_close+0xb8/0x200 [ 28.570540][ T301] new_slab+0x84/0x3f0 [ 28.575152][ T527] ? sock_mmap+0xa0/0xa0 [ 28.580994][ T301] ___slab_alloc+0x2f8/0x4c0 [ 28.581002][ T301] __slab_alloc+0x63/0xa0 [ 28.581017][ T301] __kmalloc+0x1f9/0x330 [ 28.583549][ T527] __fput+0x2dc/0x730 [ 28.591421][ T301] qdisc_alloc+0x79/0x720 [ 28.595463][ T527] ____fput+0x15/0x20 [ 28.599884][ T301] qdisc_create_dflt+0x6b/0x390 [ 28.605066][ T527] task_work_run+0x127/0x190 [ 28.610002][ T301] prio_tune+0x64e/0x1240 [ 28.610009][ T301] prio_init+0x6f/0x80 [ 28.610017][ T301] qdisc_create+0x84c/0x1220 [ 28.610039][ T301] tc_modify_qdisc+0x8c2/0x1470 [ 28.618339][ T527] do_exit+0xa7c/0x24e0 [ 28.623129][ T301] rtnetlink_rcv_msg+0x9e9/0xca0 [ 28.623138][ T301] netlink_rcv_skb+0x1e9/0x430 [ 28.623152][ T301] rtnetlink_rcv+0x1c/0x20 [ 28.628702][ T527] ? __kasan_check_write+0x14/0x20 [ 28.632409][ T301] page last free stack trace: [ 28.632421][ T301] __free_pages_ok+0x80b/0x830 [ 28.632429][ T301] __free_pages+0xd8/0x390 [ 28.632443][ T301] free_pages+0x82/0x90 [ 28.637842][ T527] ? switch_fpu_return+0x19c/0x330 [ 28.642272][ T301] __stack_depot_save+0x492/0x4c0 [ 28.642281][ T301] kasan_set_track+0x5b/0x70 [ 28.642290][ T301] kasan_set_free_info+0x23/0x40 [ 28.642305][ T301] ____kasan_slab_free+0x125/0x160 [ 28.647036][ T527] ? put_task_struct+0x90/0x90 [ 28.654970][ T301] __kasan_slab_free+0x11/0x20 [ 28.654980][ T301] slab_free_freelist_hook+0xc5/0x190 [ 28.654989][ T301] kfree+0xc0/0x270 [ 28.654999][ T301] incfs_free_bfc+0x62/0x70 [ 28.655009][ T301] incfs_open_data_file+0x375/0x550 [ 28.655019][ T301] make_inode_ready_for_data_ops+0x127/0x1b0 [ 28.655026][ T301] file_open+0x3d0/0x680 [ 28.655034][ T301] do_dentry_open+0x7a5/0x10a0 [ 28.655041][ T301] vfs_open+0x73/0x80 [ 28.655045][ T301] [ 28.655049][ T301] Memory state around the buggy address: [ 28.655058][ T301] ffff888112b4f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.655065][ T301] ffff888112b4f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.655073][ T301] >ffff888112b4f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.655077][ T301] ^ [ 28.655084][ T301] ffff888112b4f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.655092][ T301] ffff888112b4f980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.655096][ T301] ================================================================== [ 28.655099][ T301] Disabling lock debugging due to kernel taint [ 28.664559][ T301] ------------[ cut here ]------------ [ 28.742568][ T527] ? fpu__clear_all+0x20/0x20 [ 28.769149][ T301] refcount_t: underflow; use-after-free. [ 28.809680][ T535] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,nobh,nomblk_io_submit,,errors=continue [ 28.815093][ T301] WARNING: CPU: 1 PID: 301 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 28.832482][ T535] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.838615][ T301] Modules linked in: [ 28.872234][ T527] ? __kasan_check_read+0x11/0x20 [ 28.877140][ T301] [ 28.881348][ T527] __x64_sys_exit+0x40/0x40 [ 28.885537][ T301] CPU: 1 PID: 301 Comm: kworker/u4:3 Tainted: G B syzkaller #0 [ 28.885544][ T301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 28.885556][ T301] Workqueue: l2tp l2tp_tunnel_del_work [ 28.885575][ T301] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 28.885585][ T301] Code: 04 01 48 c7 c7 00 53 40 85 e8 5c 0e 3c 02 0f 0b eb c3 e8 63 80 26 ff c6 05 22 70 82 04 01 48 c7 c7 60 53 40 85 e8 40 0e 3c 02 <0f> 0b eb a7 e8 47 80 26 ff c6 05 03 70 82 04 01 48 c7 c7 80 52 40 [ 28.885592][ T301] RSP: 0018:ffffc90007987c58 EFLAGS: 00010246 [ 28.885602][ T301] RAX: e3a5e2180bbe6100 RBX: 0000000000000003 RCX: ffff88812750d000 [ 28.885609][ T301] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 28.885616][ T301] RBP: ffffc90007987c68 R08: ffff8881f7152fff R09: 1ffff1103ee2a5ff [ 28.885632][ T301] R10: dffffc0000000000 R11: ffffed103ee2a600 R12: ffff888112b4ec20 [ 28.916323][ T527] do_syscall_64+0x31/0x40 [ 28.920625][ T301] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 28.944159][ T527] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.949342][ T301] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.963496][ T527] RIP: 0033:0x7f4436e57f19 [ 28.967628][ T301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.993287][ T527] Code: Unable to access opcode bytes at RIP 0x7f4436e57eef. [ 28.997888][ T301] CR2: 00007f9024bfd060 CR3: 000000010d46f000 CR4: 00000000003506a0 [ 29.002865][ T527] RSP: 002b:00007f44358a5ef8 EFLAGS: 00000246 [ 29.008498][ T301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.033512][ T527] ORIG_RAX: 000000000000003c [ 29.037939][ T301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.042607][ T527] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4436e57f19 [ 29.044548][ T301] Call Trace: [ 29.051559][ T527] RDX: 00007f44358a69c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 29.059311][ T301] l2tp_session_put+0xcb/0x1a0 [ 29.074250][ T527] RBP: 00007f4436ee6f6d R08: 0000000000000000 R09: 0000000000000058 [ 29.074849][ T301] l2tp_session_delete+0x3a9/0x4a0 [ 29.079582][ T527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.087205][ T301] l2tp_tunnel_del_work+0x180/0x3d0 [ 29.106808][ T527] R13: 00007f44370d5038 R14: 00007f44370d4fa0 R15: 00007fffcf19be38 [ 29.110563][ T301] process_one_work+0x6fd/0xbc0 [ 29.117805][ T527] ---[ end trace 50357a8fe3be37a5 ]--- [ 29.120356][ T301] worker_thread+0xa8e/0x13c0 [ 29.422374][ T301] ? __kthread_parkme+0xb3/0x1b0 [ 29.427430][ T301] kthread+0x324/0x3b0 [ 29.431560][ T301] ? worker_clr_flags+0x190/0x190 [ 29.436642][ T301] ? kthread_blkcg+0xd0/0xd0 [ 29.441267][ T301] ret_from_fork+0x1f/0x30 [ 29.453352][ T301] ---[ end trace 50357a8fe3be37a6 ]--- [ 30.312901][ T112] device bridge_slave_1 left promiscuous mode [ 30.319048][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.326644][ T112] device bridge_slave_0 left promiscuous mode [ 30.333006][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.340847][ T112] device bridge_slave_1 left promiscuous mode [ 30.347070][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.354424][ T112] device bridge_slave_0 left promiscuous mode [ 30.360605][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.368484][ T112] device veth1_macvtap left promiscuous mode [ 30.374713][ T112] device veth0_vlan left promiscuous mode [ 30.380689][ T112] device veth1_macvtap left promiscuous mode [ 30.386756][ T112] device veth0_vlan left promiscuous mode [ 31.652919][ T112] device bridge_slave_1 left promiscuous mode [ 31.659140][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.666566][ T112] device bridge_slave_0 left promiscuous mode [ 31.672730][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.680541][ T112] device veth1_macvtap left promiscuous mode [ 31.686736][ T112] device veth0_vlan left promiscuous mode