last executing test programs: 8.619670766s ago: executing program 0 (id=55): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) exit(0xfffffffffffffffb) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 7.757563167s ago: executing program 0 (id=78): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x259, &(0x7f0000002440)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 7.168186122s ago: executing program 0 (id=85): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x800000000806f, 0x4, 0x2d5, 0x2, 0x8000000009], [0x2, 0x2, 0x1, 0x7, 0x8002, 0x0, 0x5, 0x401, 0x0, 0x72, 0x9, 0x100, 0x6096, 0xffbffffffffffff4, 0x7, 0x100, 0x8, 0xfa6, 0xdd, 0x5, 0x8, 0x1, 0x3, 0x0, 0x4, 0x8000, 0x4, 0x2, 0x8000000000000004, 0xb, 0x6, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0xea, 0x934, 0x101, 0x3, 0x8001, 0x8000, 0xa, 0x400000001, 0xe, 0x8, 0x8001, 0x6, 0x5, 0x8, 0x1, 0x9, 0x8000000000da, 0x4, 0x0, 0x4, 0x5, 0x4, 0x22, 0x3, 0x4, 0x40b, 0x14, 0x5bd, 0x8, 0x7fffffff, 0x4, 0x8004, 0x4, 0xbb23, 0x4, 0x9, 0x82c, 0x803, 0x7, 0xe4, 0x482e, 0x0, 0x2000000c, 0xfffffffffffffffa, 0xffffffffffffffff, 0x7, 0x3, 0x4, 0x6, 0x8, 0x5c429274, 0x6, 0xa, 0x8000000005, 0x100002101, 0x100000004, 0x6, 0xb, 0x400000000007, 0x7, 0x5, 0x1, 0x34c, 0x6, 0x68e, 0xe8, 0x6, 0x50000000000001, 0x4, 0xfffffffffffffffe, 0x1, 0x800000000000004, 0x800, 0xadd, 0x100000000000402, 0x7ff3, 0x0, 0x5, 0x0, 0x3, 0x40, 0x80000003, 0x7, 0xe, 0x1]}) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000005800)={r1, 0x79}, 0x0, &(0x7f00000008c0)="b0f5ec01e02085467da6d8b2b2a69c0000000000000001aa0eedaa25e8466819395b8df98f3c90a03be929d2802703139af648e4340010000000000000e5eae2a670b23de93f4ded4ee5fba0a399dc0261ed3873f96a1f226ee2f5565445addb60b9ebe4fbae3ba1766c6e60a1ab912f33b89ca00e15a3dfd7", 0x0) 7.083411584s ago: executing program 0 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x1214040, 0x0) setxattr$incfs_metadata(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0) 7.069758004s ago: executing program 0 (id=91): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7.008457376s ago: executing program 0 (id=95): syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x42, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 6.985723137s ago: executing program 32 (id=95): syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x42, 0x2, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 6.154763707s ago: executing program 2 (id=116): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu -pids'], 0xb) 6.092271508s ago: executing program 2 (id=119): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 5.748655077s ago: executing program 2 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x8400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') rt_sigqueueinfo(0x0, 0x3a, 0x0) sendfile(r0, r0, 0x0, 0x1) 5.24600074s ago: executing program 2 (id=137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto(r0, &(0x7f0000000540)="f6", 0xffa6, 0xd63a66976f7dfbe1, 0x0, 0x0) 5.23269533s ago: executing program 2 (id=130): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xb) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) unshare(0x22020400) copy_file_range(r1, &(0x7f0000000080), r0, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) 5.188124891s ago: executing program 2 (id=132): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) 3.244108749s ago: executing program 1 (id=146): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x800000, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x504cb}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x400}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 3.243996099s ago: executing program 1 (id=147): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000bfffffff0000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000100000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.23430737s ago: executing program 1 (id=148): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setreuid(0xffffffffffffffff, 0xee01) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 3.20066969s ago: executing program 3 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.115985432s ago: executing program 3 (id=150): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r2, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 3.072988463s ago: executing program 3 (id=151): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x40c, &(0x7f0000000300), 0x5, 0x54e, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000140)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000007c0)='./file0\x00', 0x2) 2.991072605s ago: executing program 1 (id=152): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) recvmmsg(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002121, 0x0) 2.934680107s ago: executing program 1 (id=154): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cba03f18c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efb21a34fce449053175f5f00000003a220c3a9becd8a70d3607ea8270d351", "ae07006b560f2f8a2f148719e7f1e7010500000000000000008000", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1) 2.926739447s ago: executing program 3 (id=155): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x80c40a, &(0x7f0000000140)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@sysvgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@barrier}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@errors_remount}], [], 0x2c}, 0x81, 0x475, &(0x7f0000000900)="$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") mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220a00, 0x8c) r1 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x22100, 0x22) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 2.884655798s ago: executing program 1 (id=156): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x920010, &(0x7f0000000080)={[{@noquota}, {@debug}, {@nombcache}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x342, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x81101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES32=r0], 0x0) 2.546985667s ago: executing program 3 (id=158): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) 2.308264942s ago: executing program 3 (id=162): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000080)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@grpid}]}, 0x1, 0x513, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x780440d44e0f187e, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$P9_RLCREATE(r0, &(0x7f0000000500)={0x18, 0xf, 0x2, {{0x2, 0x2, 0x1}, 0x401}}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xffe}) 2.308063953s ago: executing program 33 (id=162): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000080)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@grpid}]}, 0x1, 0x513, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x780440d44e0f187e, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$P9_RLCREATE(r0, &(0x7f0000000500)={0x18, 0xf, 0x2, {{0x2, 0x2, 0x1}, 0x401}}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xffe}) 1.913605372s ago: executing program 6 (id=163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.902228492s ago: executing program 6 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.852501154s ago: executing program 4 (id=168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, 0x0, 0x0, 0x805, 0x0, 0x0) 1.852364284s ago: executing program 4 (id=169): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.788400365s ago: executing program 6 (id=170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x100, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 223.626724ms ago: executing program 4 (id=174): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/160, 0xa0}], 0x1}, 0x7}], 0x1, 0x400000a0, 0x0) close(r1) 185.972395ms ago: executing program 5 (id=175): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') getdents64(r2, &(0x7f0000000c80)=""/233, 0xe9) 167.274615ms ago: executing program 4 (id=176): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8004745a, 0x0) 155.796306ms ago: executing program 6 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x40000000, {0x0, 0x0, 0xe403, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x200080d0) 131.991836ms ago: executing program 5 (id=178): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$inet(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f0000000440)="b0b4b0a40987", 0x6, 0x4044800, 0x0, 0x0) 123.579936ms ago: executing program 4 (id=179): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 114.600516ms ago: executing program 5 (id=180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) recvmmsg$unix(r1, &(0x7f00000021c0)=[{{&(0x7f0000001f80)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000002180)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x141, &(0x7f0000002240)={0x0, 0x989680}) 51.499058ms ago: executing program 5 (id=181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 51.196288ms ago: executing program 5 (id=182): open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0x1, {0x7, 0x29, 0x8, 0xdb0078e65cb35ffe, 0x5, 0x3, 0xb, 0x3, 0x0, 0x0, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0xffffffffffffffff, 0x4, 0x0, {0x81, 0x7ffffffffffffffc, 0x3, 0x2, 0xc, 0x7, 0xbe, 0xfffffff9, 0x406, 0x8000, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 50.838808ms ago: executing program 6 (id=183): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x1ff}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, 0x0, 0xfffffc25, 0x4c0, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @local}, 0x1c) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x2002) 389.94µs ago: executing program 4 (id=184): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) userfaultfd(0x801) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 150.68µs ago: executing program 6 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235004000000f30b9fa000000130f01d9300d76c4020a1bf7b805000000b90000c0fe0f3cae0a41d941d9000f320f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x54}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 5 (id=186): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="05030500d3fc03000000478880050910112842", 0x13, 0x4, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 20.122153][ T30] audit: type=1400 audit(1791374624.284:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.123178][ T277] cgroup: Unknown subsys name 'net' [ 20.144892][ T30] audit: type=1400 audit(1791374624.284:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.172653][ T30] audit: type=1400 audit(1791374624.314:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.172806][ T277] cgroup: Unknown subsys name 'devices' [ 20.316128][ T277] cgroup: Unknown subsys name 'hugetlb' [ 20.322042][ T277] cgroup: Unknown subsys name 'rlimit' [ 20.428996][ T30] audit: type=1400 audit(1791374624.594:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.452417][ T30] audit: type=1400 audit(1791374624.594:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.458383][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.477726][ T30] audit: type=1400 audit(1791374624.594:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.509912][ T30] audit: type=1400 audit(1791374624.654:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.535862][ T30] audit: type=1400 audit(1791374624.654:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.567997][ T30] audit: type=1400 audit(1791374624.734:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.593696][ T30] audit: type=1400 audit(1791374624.734:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.593766][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.054605][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.061686][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.069299][ T285] device bridge_slave_0 entered promiscuous mode [ 21.077259][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.084450][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.091728][ T285] device bridge_slave_1 entered promiscuous mode [ 21.165577][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.172748][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.180398][ T286] device bridge_slave_0 entered promiscuous mode [ 21.189879][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.196968][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.204613][ T286] device bridge_slave_1 entered promiscuous mode [ 21.241699][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.248902][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.256569][ T289] device bridge_slave_0 entered promiscuous mode [ 21.275456][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.282530][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.289932][ T289] device bridge_slave_1 entered promiscuous mode [ 21.346610][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.353777][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.361276][ T288] device bridge_slave_0 entered promiscuous mode [ 21.368277][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.375353][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.382864][ T288] device bridge_slave_1 entered promiscuous mode [ 21.392180][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.399352][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.406809][ T287] device bridge_slave_0 entered promiscuous mode [ 21.413723][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.420923][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.428412][ T287] device bridge_slave_1 entered promiscuous mode [ 21.500608][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.507694][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.515105][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.522137][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.597218][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.604483][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.611745][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.618880][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.631869][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.638958][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.646855][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.653899][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.662791][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.669999][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.677314][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.684462][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.718439][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.725530][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.732796][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.739844][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.753471][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.760815][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.768582][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.775775][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.783260][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.790595][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.797881][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.805300][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.812452][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.819880][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.827702][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.835283][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.858080][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.865581][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.873092][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.881397][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.888530][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.895974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.904143][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.911197][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.918779][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.927385][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.934646][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.956712][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.965085][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.973378][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.980439][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.988032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.996261][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.027096][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.035444][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.042463][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.050085][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.059096][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.066260][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.073633][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.081713][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.089813][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.098154][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.105205][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.112818][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.121156][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.128216][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.135615][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.164671][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.172367][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.180073][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.188695][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.197086][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.204253][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.212181][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.220894][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.229335][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.236436][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.244083][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.252160][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.260155][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.268695][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.276775][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.284949][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.293011][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.301148][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.309259][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.317758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.326841][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.335401][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.355676][ T289] device veth0_vlan entered promiscuous mode [ 22.366950][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.375425][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.383786][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.391905][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.400417][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.408419][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.416703][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.424147][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.431707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.439291][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.447770][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.456313][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.466874][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.474941][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.488519][ T287] device veth0_vlan entered promiscuous mode [ 22.496261][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.504715][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.512110][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.519732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.527342][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.535125][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.543827][ T285] device veth0_vlan entered promiscuous mode [ 22.551101][ T286] device veth0_vlan entered promiscuous mode [ 22.567915][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.576454][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.585750][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.595634][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.603543][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.613675][ T286] device veth1_macvtap entered promiscuous mode [ 22.622345][ T289] device veth1_macvtap entered promiscuous mode [ 22.629594][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.637438][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.645221][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.652809][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.661418][ T287] device veth1_macvtap entered promiscuous mode [ 22.669501][ T288] device veth0_vlan entered promiscuous mode [ 22.678799][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.687226][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.705156][ T285] device veth1_macvtap entered promiscuous mode [ 22.713930][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.721706][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.730014][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.739046][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.747440][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.755990][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.764199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.772825][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.781420][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.789875][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.798269][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.811414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.819902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.836830][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 22.857075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.867954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.876669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.885411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.894071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.904684][ T288] device veth1_macvtap entered promiscuous mode [ 22.943513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.946865][ T318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.957357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.995669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.010356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.027452][ T324] raw_sendmsg: syz.3.4 forgot to set AF_INET. Fix it! [ 23.204298][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.238648][ T344] loop3: detected capacity change from 0 to 1024 [ 23.275483][ T349] overlayfs: upper fs does not support tmpfile. [ 23.294630][ T344] ======================================================= [ 23.294630][ T344] WARNING: The mand mount option has been deprecated and [ 23.294630][ T344] and is ignored by this kernel. Remove the mand [ 23.294630][ T344] option from the mount to silence this warning. [ 23.294630][ T344] ======================================================= [ 23.337401][ T344] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 23.345709][ T344] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 23.366573][ T344] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,minixdf,grpjquota=,journal_ioprio=0x0000000000000000,dioread_nolock,nomblk_io_submit,noinit_itable,nogrpid,,errors=continue. Quota mode: none. [ 23.389975][ T344] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 23.413163][ T344] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: comm syz.3.16: lblock 0 mapped to illegal pblock 0 (length 1) [ 23.416553][ T358] xt_hashlimit: size too large, truncated to 1048576 [ 23.426802][ T344] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 23.446153][ T344] EXT4-fs (loop3): This should not happen!! Data will be lost [ 23.446153][ T344] [ 23.466198][ T344] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.16: bg 0: block 112: padding at end of block bitmap is not set [ 23.481587][ T344] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 23.494244][ T344] EXT4-fs (loop3): This should not happen!! Data will be lost [ 23.494244][ T344] [ 23.504415][ T344] EXT4-fs (loop3): Total free blocks count 0 [ 23.510597][ T344] EXT4-fs (loop3): Free/Dirty block details [ 23.516780][ T344] EXT4-fs (loop3): free_blocks=0 [ 23.521793][ T344] EXT4-fs (loop3): dirty_blocks=0 [ 23.527201][ T344] EXT4-fs (loop3): Block reservation details [ 23.533365][ T344] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 23.550132][ T344] syz.3.16 (344) used greatest stack depth: 22056 bytes left [ 23.564542][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 23.575931][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 23.587433][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 23.602302][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 23.615690][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.634030][ T39] usb 3-1: config 0 descriptor?? [ 23.654296][ T315] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 23.661904][ T364] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 23.728435][ T376] kvm: apic: phys broadcast and lowest prio [ 23.787157][ T379] syz.3.27 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 23.813401][ T382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 23.912053][ T394] xt_hashlimit: size too large, truncated to 1048576 [ 24.115500][ T39] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 24.129858][ T39] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 24.147594][ T39] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 24.234829][ T408] loop4: detected capacity change from 0 to 40427 [ 24.244004][ T408] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 24.254092][ T408] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 24.265841][ T408] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.290320][ T408] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 24.297436][ T408] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.344521][ T407] attempt to access beyond end of device [ 24.344521][ T407] loop4: rw=10241, want=45104, limit=40427 [ 24.371062][ T45] attempt to access beyond end of device [ 24.371062][ T45] loop4: rw=1, want=45104, limit=40427 [ 24.395314][ T20] usb 3-1: USB disconnect, device number 2 [ 24.486612][ T428] IPv6: addrconf: prefix option has invalid lifetime [ 24.649634][ T438] loop1: detected capacity change from 0 to 256 [ 24.662400][ T438] exfat: Deprecated parameter 'utf8' [ 24.688973][ T438] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 25.004009][ T461] xt_hashlimit: size too large, truncated to 1048576 [ 25.124049][ T465] loop2: detected capacity change from 0 to 1024 [ 25.160888][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 25.160904][ T30] audit: type=1400 audit(1700000003.260:172): avc: denied { write } for pid=466 comm="syz.2.61" name="ptype" dev="proc" ino=4026532647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 25.210183][ T473] loop3: detected capacity change from 0 to 512 [ 25.228842][ T30] audit: type=1400 audit(1700000003.330:173): avc: denied { mount } for pid=472 comm="syz.3.64" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 25.250949][ T30] audit: type=1400 audit(1700000003.340:174): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 25.281622][ T477] loop2: detected capacity change from 0 to 128 [ 25.306131][ T481] xt_hashlimit: size too large, truncated to 1048576 [ 25.405115][ T30] audit: type=1400 audit(1700000003.510:175): avc: denied { mounton } for pid=476 comm="syz.2.67" path="/10/file1/bus" dev="loop2" ino=1048640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 25.424220][ T477] incfs: ino conflict with backing FS 1 [ 25.443913][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.453102][ T30] audit: type=1400 audit(1700000003.540:176): avc: denied { read write } for pid=476 comm="syz.2.67" name="file1" dev="incremental-fs" ino=1048643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.468971][ T477] FAT-fs (loop2): Filesystem has been set read-only [ 25.477022][ T30] audit: type=1400 audit(1700000003.540:177): avc: denied { open } for pid=476 comm="syz.2.67" path="/10/file1/bus/file1" dev="incremental-fs" ino=1048643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.488329][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.508551][ T30] audit: type=1400 audit(1700000003.560:178): avc: denied { watch } for pid=486 comm="syz.3.70" path="/23" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 25.522565][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.547056][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.555835][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.564457][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.573094][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.581743][ T30] audit: type=1400 audit(1700000003.670:179): avc: denied { ioctl } for pid=492 comm="syz.3.72" path="socket:[16091]" dev="sockfs" ino=16091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 25.588393][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.619235][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.628576][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.640345][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.651906][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.661473][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.671048][ T502] FAULT_INJECTION: forcing a failure. [ 25.671048][ T502] name failslab, interval 1, probability 0, space 0, times 1 [ 25.671060][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.671085][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.701799][ T503] ip_tables: iptables: counters copy to user failed while replacing table [ 25.701920][ T502] CPU: 0 PID: 502 Comm: syz.4.76 Not tainted syzkaller #0 [ 25.710921][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.717470][ T502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 25.717483][ T502] Call Trace: [ 25.717489][ T502] [ 25.717495][ T502] __dump_stack+0x21/0x30 [ 25.717520][ T502] dump_stack_lvl+0x110/0x170 [ 25.717537][ T502] ? show_regs_print_info+0x20/0x20 [ 25.726889][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.736105][ T502] ? __kasan_check_write+0x14/0x20 [ 25.736132][ T502] ? _raw_spin_lock_irq+0x95/0xf0 [ 25.736151][ T502] dump_stack+0x15/0x20 [ 25.739801][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.742370][ T502] should_fail+0x3ab/0x500 [ 25.742398][ T502] __should_failslab+0xa4/0xe0 [ 25.747011][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.751386][ T502] should_failslab+0x9/0x20 [ 25.751408][ T502] slab_pre_alloc_hook+0x39/0xd0 [ 25.756944][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.765105][ T502] kmem_cache_alloc_trace+0x48/0x270 [ 25.765129][ T502] ? alloc_mnt_ns+0xb3/0x420 [ 25.765148][ T502] alloc_mnt_ns+0xb3/0x420 [ 25.765164][ T502] copy_mnt_ns+0xce/0x930 [ 25.784414][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.792680][ T502] ? create_new_namespaces+0x34/0x660 [ 25.792707][ T502] ? kmem_cache_alloc+0xf7/0x260 [ 25.797453][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.801873][ T502] create_new_namespaces+0xd0/0x660 [ 25.801897][ T502] unshare_nsproxy_namespaces+0x120/0x170 [ 25.810722][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.814820][ T502] ksys_unshare+0x4d7/0x810 [ 25.814846][ T502] ? sighand_ctor+0x60/0x60 [ 25.814865][ T502] ? __kasan_check_write+0x14/0x20 [ 25.814883][ T502] ? switch_fpu_return+0x15d/0x2c0 [ 25.814903][ T502] __x64_sys_unshare+0x38/0x40 [ 25.828283][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.828333][ T502] x64_sys_call+0x442/0x9a0 [ 25.839077][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.842618][ T502] do_syscall_64+0x4c/0xa0 [ 25.842642][ T502] ? clear_bhb_loop+0x50/0xa0 [ 25.854552][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.855458][ T502] ? clear_bhb_loop+0x50/0xa0 [ 25.863335][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.865779][ T502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.865805][ T502] RIP: 0033:0x7f5f1bb0f199 [ 25.865821][ T502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.865836][ T502] RSP: 002b:00007f5f1a568028 EFLAGS: 00000246 [ 25.874888][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.879568][ T502] ORIG_RAX: 0000000000000110 [ 25.879579][ T502] RAX: ffffffffffffffda RBX: 00007f5f1bd96fa0 RCX: 00007f5f1bb0f199 [ 25.879593][ T502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000 [ 25.885928][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.893817][ T502] RBP: 00007f5f1bba68e0 R08: 0000000000000000 R09: 0000000000000000 [ 25.893832][ T502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 25.893843][ T502] R13: 00007f5f1bd97038 R14: 00007f5f1bd96fa0 R15: 00007ffdb41bfee8 [ 25.898788][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.903047][ T502] [ 25.912264][ T507] tipc: Started in network mode [ 25.914703][ T506] loop0: detected capacity change from 0 to 128 [ 25.918639][ T507] tipc: Node identity ac1414aa, cluster identity 4711 [ 25.937957][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.945505][ T507] tipc: New replicast peer: 172.20.20.187 [ 25.952919][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.961336][ T30] audit: type=1400 audit(1700000004.070:180): avc: denied { ioctl } for pid=508 comm="syz.1.79" path="socket:[16746]" dev="sockfs" ino=16746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.962497][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 25.973451][ T30] audit: type=1400 audit(1700000004.080:181): avc: denied { bind } for pid=508 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.002818][ T507] tipc: Enabled bearer , priority 10 [ 26.007595][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 26.101464][ T512] loop3: detected capacity change from 0 to 256 [ 26.112542][ T477] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 26.119707][ T506] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.148687][ T515] loop1: detected capacity change from 0 to 128 [ 26.162947][ T506] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.265050][ T515] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 26.277610][ T515] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.292062][ T515] ext2 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.302971][ T512] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 26.323832][ T515] EXT4-fs error (device loop1): make_indexed_dir:2335: inode #2: block 33: comm syz.1.81: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=0, rec_len=5, size=1000 fake=1 [ 26.392188][ T515] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.81: dx entry: limit 0 != root limit 125 [ 26.404349][ T515] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.81: Corrupt directory, running e2fsck is recommended [ 26.514972][ T285] syz-executor (285) used greatest stack depth: 21344 bytes left [ 26.635981][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.643153][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.650864][ T557] device bridge_slave_0 entered promiscuous mode [ 26.659758][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.666901][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.674417][ T557] device bridge_slave_1 entered promiscuous mode [ 26.716767][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.723841][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.731142][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.738369][ T557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.757282][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.765412][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.772788][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.780317][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.791695][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.800041][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.807310][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.825156][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.833476][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.840801][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.849371][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.857550][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.869387][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.881017][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.889410][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.897190][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.907287][ T557] device veth0_vlan entered promiscuous mode [ 26.917722][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.927340][ T557] device veth1_macvtap entered promiscuous mode [ 26.939860][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.950039][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.024525][ T10] device bridge_slave_1 left promiscuous mode [ 27.030740][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.040522][ T10] device bridge_slave_0 left promiscuous mode [ 27.047210][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.055778][ T10] device veth1_macvtap left promiscuous mode [ 27.061835][ T10] device veth0_vlan left promiscuous mode [ 27.067683][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 27.071357][ T573] loop5: detected capacity change from 0 to 16 [ 27.130535][ T573] erofs: (device loop5): mounted with root inode @ nid 36. [ 27.138837][ T26] tipc: Node number set to 2886997162 [ 27.204060][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.219001][ T60] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 32 [ 27.229360][ T60] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 27.239466][ T60] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 27.267401][ T583] erofs: (device loop5): mounted with root inode @ nid 36. [ 27.348930][ T599] netlink: 'syz.5.114': attribute type 4 has an invalid length. [ 27.365132][ T599] netlink: 'syz.5.114': attribute type 4 has an invalid length. [ 27.424245][ T60] usb 4-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40 [ 27.433584][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.442032][ T60] usb 4-1: Product: syz [ 27.446411][ T60] usb 4-1: Manufacturer: syz [ 27.451040][ T60] usb 4-1: SerialNumber: syz [ 27.459444][ T614] Illegal XDP return value 32768, expect packet loss! [ 27.474040][ T544] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 27.481391][ T544] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 27.516476][ T622] FAULT_INJECTION: forcing a failure. [ 27.516476][ T622] name failslab, interval 1, probability 0, space 0, times 0 [ 27.529550][ T622] CPU: 0 PID: 622 Comm: syz.1.124 Not tainted syzkaller #0 [ 27.536832][ T622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 27.546890][ T622] Call Trace: [ 27.550197][ T622] [ 27.553144][ T622] __dump_stack+0x21/0x30 [ 27.557657][ T622] dump_stack_lvl+0x110/0x170 [ 27.562345][ T622] ? show_regs_print_info+0x20/0x20 [ 27.567556][ T622] dump_stack+0x15/0x20 [ 27.571710][ T622] should_fail+0x3ab/0x500 [ 27.576145][ T622] __should_failslab+0xa4/0xe0 [ 27.580910][ T622] should_failslab+0x9/0x20 [ 27.585445][ T622] slab_pre_alloc_hook+0x39/0xd0 [ 27.590399][ T622] ? vm_area_dup+0x26/0x210 [ 27.594910][ T622] kmem_cache_alloc+0x44/0x260 [ 27.599695][ T622] vm_area_dup+0x26/0x210 [ 27.604078][ T622] __split_vma+0xac/0x3e0 [ 27.608767][ T622] __do_munmap+0x43c/0x1090 [ 27.613362][ T622] mmap_region+0x6f7/0x1700 [ 27.617989][ T622] ? __kasan_check_read+0x11/0x20 [ 27.623131][ T622] ? selinux_mmap_addr+0xbe/0xe0 [ 27.628079][ T622] ? security_mmap_addr+0x72/0x90 [ 27.633329][ T622] do_mmap+0x812/0xf10 [ 27.637447][ T622] vm_mmap_pgoff+0x1d6/0x410 [ 27.642258][ T622] ? account_locked_vm+0x270/0x270 [ 27.647594][ T622] ? __x64_sys_futex+0x100/0x100 [ 27.652587][ T622] ? ksys_write+0x1fa/0x260 [ 27.657119][ T622] ksys_mmap_pgoff+0xf6/0x1d0 [ 27.661816][ T622] ? __kasan_check_write+0x14/0x20 [ 27.666931][ T622] __x64_sys_mmap+0xfa/0x110 [ 27.671537][ T622] x64_sys_call+0x83/0x9a0 [ 27.675965][ T622] do_syscall_64+0x4c/0xa0 [ 27.680416][ T622] ? clear_bhb_loop+0x50/0xa0 [ 27.685109][ T622] ? clear_bhb_loop+0x50/0xa0 [ 27.689815][ T622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.695713][ T622] RIP: 0033:0x7fb609441199 [ 27.700134][ T622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.719832][ T622] RSP: 002b:00007fb607e9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 27.728259][ T622] RAX: ffffffffffffffda RBX: 00007fb6096c8fa0 RCX: 00007fb609441199 [ 27.736236][ T622] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 27.744230][ T622] RBP: 00007fb6094d88e0 R08: ffffffffffffffff R09: 00000000ec776000 [ 27.752285][ T622] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 27.760257][ T622] R13: 00007fb6096c9038 R14: 00007fb6096c8fa0 R15: 00007ffc50d3fe08 [ 27.768236][ T622] [ 27.844123][ T306] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 27.924148][ T60] usb 4-1: MIDIStreaming interface descriptor not found [ 27.933630][ T60] usb 4-1: USB disconnect, device number 2 [ 27.942005][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.054027][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.365376][ T306] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 28.374862][ T306] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.382874][ T306] usb 6-1: Product: syz [ 28.387211][ T306] usb 6-1: Manufacturer: syz [ 28.391825][ T306] usb 6-1: SerialNumber: syz [ 28.414082][ T20] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.427177][ T20] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 28.439203][ T20] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 28.604025][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.613595][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.621823][ T20] usb 2-1: Product: syz [ 28.626158][ T20] usb 2-1: Manufacturer: syz [ 28.630856][ T20] usb 2-1: SerialNumber: syz [ 28.633935][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.674767][ T20] cdc_ncm 2-1:1.0: skipping garbage [ 28.874900][ T625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.883918][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 29.023963][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.034346][ T26] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.045411][ T26] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.055524][ T26] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 29.068447][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 29.075118][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 29.083908][ T306] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3e:1b:f6:0a:b3:1e [ 29.084289][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.097382][ T306] rtl8150 6-1:1.0: eth1: rtl8150 is detected [ 29.104598][ T26] usb 4-1: config 0 descriptor?? [ 29.524317][ T625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.596305][ T26] logitech-djreceiver 0003:046D:C53A.0002: hiddev96,hidraw0: USB HID vff.14 Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 29.635281][ T293] usb 6-1: USB disconnect, device number 2 [ 29.643889][ C1] usb 6-1: eth1: intr status -71 [ 29.646270][ T140] usb 6-1: device reset failed [ 29.753912][ T20] cdc_ncm 2-1:1.0: bind() failure [ 29.775108][ T20] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 29.794039][ T20] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 29.805605][ T20] usb 2-1: USB disconnect, device number 2 [ 29.822305][ T26] usb 4-1: USB disconnect, device number 3 [ 30.311154][ T710] set_capacity_and_notify: 1 callbacks suppressed [ 30.311170][ T710] loop1: detected capacity change from 0 to 256 [ 30.427772][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 30.427788][ T30] audit: type=1400 audit(1700000008.530:231): avc: denied { write } for pid=714 comm="syz.3.150" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.468552][ T30] audit: type=1400 audit(1700000008.570:232): avc: denied { ioctl } for pid=714 comm="syz.3.150" path="/dev/input/event0" dev="devtmpfs" ino=256 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.497937][ T717] loop3: detected capacity change from 0 to 512 [ 30.525566][ T717] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 30.551019][ T30] audit: type=1400 audit(1700000008.650:233): avc: denied { create } for pid=721 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.570780][ T717] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.590727][ T717] EXT4-fs error (device loop3): ext4_get_first_dir_block:3610: inode #12: comm syz.3.151: directory missing '.' [ 30.612385][ T30] audit: type=1400 audit(1700000008.680:234): avc: denied { read } for pid=721 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.631787][ T30] audit: type=1400 audit(1700000008.690:235): avc: denied { create } for pid=716 comm="syz.3.151" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 30.658785][ T30] audit: type=1400 audit(1700000008.690:236): avc: denied { remove_name } for pid=716 comm="syz.3.151" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.682705][ T729] loop1: detected capacity change from 0 to 512 [ 30.700721][ T30] audit: type=1400 audit(1700000008.690:237): avc: denied { rename } for pid=716 comm="syz.3.151" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.725379][ T731] loop3: detected capacity change from 0 to 512 [ 30.753843][ T30] audit: type=1400 audit(1700000008.690:238): avc: denied { rmdir } for pid=716 comm="syz.3.151" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.798805][ T30] audit: type=1400 audit(1700000008.690:239): avc: denied { rename } for pid=716 comm="syz.3.151" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.835832][ T30] audit: type=1400 audit(1700000008.690:240): avc: denied { rmdir } for pid=716 comm="syz.3.151" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.844359][ T731] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.872045][ T731] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 30.881275][ T731] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.155: invalid indirect mapped block 2683928664 (level 1) [ 30.895692][ T731] EXT4-fs (loop3): Remounting filesystem read-only [ 30.902517][ T731] EXT4-fs (loop3): 1 truncate cleaned up [ 30.908827][ T731] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,sysvgroups,inlinecrypt,usrjquota=.barrier,jqfmt=vfsold,jqfmt=vfsv0,acl,debug_want_extra_isize=0x0000000000000008,errors=remount-ro,,. Quota mode: writeback. [ 30.962195][ T731] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.155: Invalid block bitmap block 3 in block_group 0 [ 30.975955][ T731] EXT4-fs (loop3): Remounting filesystem read-only [ 30.990516][ T288] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 31.003738][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.010985][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 31.026251][ T288] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 31.039002][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 31.045747][ T288] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 31.058272][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 31.061102][ T740] tipc: Started in network mode [ 31.069739][ T740] tipc: Node identity 4, cluster identity 4711 [ 31.075977][ T740] tipc: Node number set to 4 [ 31.086730][ T740] tipc: Enabled bearer , priority 0 [ 31.135268][ T483] tipc: Disabling bearer [ 31.140638][ T483] tipc: Left network mode [ 31.260069][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.267225][ T746] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.274775][ T746] device bridge_slave_0 entered promiscuous mode [ 31.281629][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.288804][ T746] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.296268][ T746] device bridge_slave_1 entered promiscuous mode [ 31.336501][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.343766][ T746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.351093][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.358162][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.378366][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.386464][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.393878][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.404145][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.404172][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.423822][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.432094][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.439161][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.452069][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.460748][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.467851][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.479040][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.489052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.497113][ T26] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.506031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.506221][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.519929][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.522380][ T26] usb 2-1: SerialNumber: syz [ 31.531408][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.542390][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.550815][ T746] device veth0_vlan entered promiscuous mode [ 31.562955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.572007][ T746] device veth1_macvtap entered promiscuous mode [ 31.587952][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.596699][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.992782][ T769] ip_tables: iptables: counters copy to user failed while replacing table [ 33.263563][ C1] sched: RT throttling activated [ 33.285249][ T26] usb 2-1: 0:2 : does not exist [ 33.308791][ T26] usb 2-1: USB disconnect, device number 3 [ 33.320868][ T483] device bridge_slave_1 left promiscuous mode [ 33.343665][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.351827][ T483] device bridge_slave_0 left promiscuous mode [ 33.360774][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.386107][ T483] device veth1_macvtap left promiscuous mode [ 33.392397][ T483] device veth0_vlan left promiscuous mode [ 33.548483][ T785] ================================================================== [ 33.556734][ T785] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 33.564814][ T785] Read of size 4 at addr ffff8881194e1800 by task syz.4.176/785 [ 33.572442][ T785] [ 33.574764][ T785] CPU: 1 PID: 785 Comm: syz.4.176 Not tainted syzkaller #0 [ 33.582078][ T785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 33.592133][ T785] Call Trace: [ 33.595415][ T785] [ 33.598347][ T785] __dump_stack+0x21/0x30 [ 33.602677][ T785] dump_stack_lvl+0x110/0x170 [ 33.607359][ T785] ? show_regs_print_info+0x20/0x20 [ 33.612728][ T785] ? load_image+0x3f0/0x3f0 [ 33.617228][ T785] ? __local_bh_enable_ip+0x58/0x80 [ 33.622425][ T785] print_address_description+0x7f/0x2c0 [ 33.627971][ T785] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 33.633705][ T785] kasan_report+0x10f/0x150 [ 33.638298][ T785] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 33.644027][ T785] __asan_report_load4_noabort+0x14/0x20 [ 33.649655][ T785] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 33.655200][ T785] pppol2tp_release+0x150/0x2b0 [ 33.660048][ T785] sock_close+0xb8/0x200 [ 33.664287][ T785] ? sock_mmap+0xa0/0xa0 [ 33.668524][ T785] __fput+0x22b/0x900 [ 33.672505][ T785] ____fput+0x15/0x20 [ 33.676484][ T785] task_work_run+0x127/0x190 [ 33.681075][ T785] do_exit+0xb70/0x29a0 [ 33.685236][ T785] ? __se_sys_clock_nanosleep+0x30b/0x3a0 [ 33.690969][ T785] ? put_task_struct+0x90/0x90 [ 33.695733][ T785] ? __kasan_check_write+0x14/0x20 [ 33.700850][ T785] __x64_sys_exit+0x40/0x40 [ 33.705514][ T785] x64_sys_call+0x44/0x9a0 [ 33.710321][ T785] do_syscall_64+0x4c/0xa0 [ 33.714771][ T785] ? clear_bhb_loop+0x50/0xa0 [ 33.719450][ T785] ? clear_bhb_loop+0x50/0xa0 [ 33.724220][ T785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.730202][ T785] RIP: 0033:0x7f5f1bb0f199 [ 33.734611][ T785] Code: Unable to access opcode bytes at RIP 0x7f5f1bb0f16f. [ 33.741981][ T785] RSP: 002b:00007f5f1a567ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 33.750488][ T785] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5f1bb0f199 [ 33.758461][ T785] RDX: 00007f5f1a5689c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.766429][ T785] RBP: 00007f5f1bba68e0 R08: 0000000000000000 R09: 0000000000000058 [ 33.774401][ T785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.782385][ T785] R13: 00007f5f1bd97038 R14: 00007f5f1bd96fa0 R15: 00007ffdb41bfee8 [ 33.790442][ T785] [ 33.793457][ T785] [ 33.795773][ T785] Allocated by task 784: [ 33.800189][ T785] __kasan_kmalloc+0xd4/0x100 [ 33.804868][ T785] __kmalloc+0x13d/0x2c0 [ 33.809441][ T785] l2tp_session_create+0x39/0xb60 [ 33.814494][ T785] pppol2tp_connect+0xbf5/0x1640 [ 33.819434][ T785] __sys_connect+0x3cb/0x450 [ 33.824033][ T785] __x64_sys_connect+0x7a/0x90 [ 33.828799][ T785] x64_sys_call+0x7c/0x9a0 [ 33.833236][ T785] do_syscall_64+0x4c/0xa0 [ 33.837733][ T785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.843625][ T785] [ 33.845964][ T785] Freed by task 8: [ 33.849675][ T785] kasan_set_track+0x4a/0x70 [ 33.854285][ T785] kasan_set_free_info+0x23/0x40 [ 33.859579][ T785] ____kasan_slab_free+0x125/0x160 [ 33.864705][ T785] __kasan_slab_free+0x11/0x20 [ 33.869478][ T785] slab_free_freelist_hook+0xc2/0x190 [ 33.874860][ T785] kfree+0xc4/0x270 [ 33.878667][ T785] l2tp_session_put+0xaf/0x1a0 [ 33.883432][ T785] l2tp_session_delete+0x3a9/0x4a0 [ 33.888564][ T785] l2tp_tunnel_del_work+0x180/0x3d0 [ 33.893852][ T785] process_one_work+0x6c8/0xbb0 [ 33.898769][ T785] worker_thread+0xaa0/0x1250 [ 33.903463][ T785] kthread+0x3f5/0x4f0 [ 33.907629][ T785] ret_from_fork+0x1f/0x30 [ 33.912331][ T785] [ 33.914851][ T785] The buggy address belongs to the object at ffff8881194e1800 [ 33.914851][ T785] which belongs to the cache kmalloc-512 of size 512 [ 33.928997][ T785] The buggy address is located 0 bytes inside of [ 33.928997][ T785] 512-byte region [ffff8881194e1800, ffff8881194e1a00) [ 33.942106][ T785] The buggy address belongs to the page: [ 33.947735][ T785] page:ffffea0004653800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1194e0 [ 33.958233][ T785] head:ffffea0004653800 order:2 compound_mapcount:0 compound_pincount:0 [ 33.966710][ T785] flags: 0x4000000000010200(slab|head|zone=1) [ 33.972796][ T785] raw: 4000000000010200 ffffea0004620d00 0000000200000002 ffff888100042f00 [ 33.981387][ T785] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 33.990072][ T785] page dumped because: kasan: bad access detected [ 33.996479][ T785] page_owner tracks the page as allocated [ 34.002185][ T785] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 109, ts 5255355687, free_ts 0 [ 34.020327][ T785] post_alloc_hook+0x192/0x1b0 [ 34.025128][ T785] prep_new_page+0x1c/0x110 [ 34.029739][ T785] get_page_from_freelist+0x2c3a/0x2cd0 [ 34.035285][ T785] __alloc_pages+0x1a2/0x460 [ 34.039875][ T785] new_slab+0xa0/0x4d0 [ 34.044199][ T785] ___slab_alloc+0x3ac/0x840 [ 34.048795][ T785] __slab_alloc+0x49/0x90 [ 34.053154][ T785] __kmalloc_track_caller+0x169/0x2c0 [ 34.058625][ T785] __alloc_skb+0x210/0x730 [ 34.063041][ T785] alloc_skb_with_frags+0xa8/0x620 [ 34.068155][ T785] sock_alloc_send_pskb+0x87f/0x9a0 [ 34.073374][ T785] unix_dgram_sendmsg+0x6f3/0x19b0 [ 34.078495][ T785] sock_write_iter+0x2a6/0x3a0 [ 34.083257][ T785] vfs_write+0x831/0xfd0 [ 34.087780][ T785] ksys_write+0x14a/0x260 [ 34.092369][ T785] __x64_sys_write+0x7b/0x90 [ 34.096959][ T785] page_owner free stack trace missing [ 34.102504][ T785] [ 34.104833][ T785] Memory state around the buggy address: [ 34.110459][ T785] ffff8881194e1700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.118690][ T785] ffff8881194e1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 34.126831][ T785] >ffff8881194e1800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.134971][ T785] ^ [ 34.139038][ T785] ffff8881194e1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.147092][ T785] ffff8881194e1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.155241][ T785] ================================================================== [ 34.163308][ T785] Disabling lock debugging due to kernel taint [ 34.182718][ T809] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 34.184157][ T785] ------------[ cut here ]------------ [ 34.197651][ T785] WARNING: CPU: 0 PID: 785 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 34.207958][ T785] Modules linked in: [ 34.212035][ T785] CPU: 0 PID: 785 Comm: syz.4.176 Tainted: G B syzkaller #0 [ 34.221060][ T785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 34.232015][ T785] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 34.238432][ T785] Code: 5d c3 e8 3c ac 0a fd be 02 00 00 00 eb 0a e8 30 ac 0a fd be 01 00 00 00 4c 89 f7 e8 73 2e f1 fd e9 0f ff ff ff e8 19 ac 0a fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 08 ac 0a fd 4c 89 f7 be 03 [ 34.258424][ T785] RSP: 0018:ffffc90000c27bf0 EFLAGS: 00010293 [ 34.264627][ T785] RAX: ffffffff845f2f47 RBX: ffff888119d24000 RCX: ffff888119d13c00 [ 34.272606][ T785] RDX: 0000000000000000 RSI: 0000000016638a20 RDI: 000000000c04eb7d [ 34.280861][ T785] RBP: ffffc90000c27c10 R08: 0000000000000003 R09: 0000000000000004 [ 34.289137][ T785] R10: dffffc0000000000 R11: fffffbfff0e1904c R12: dffffc0000000000 [ 34.297247][ T785] R13: dffffc0000000000 R14: 0000000016638a20 R15: ffff8881194e1800 [ 34.305376][ T785] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 34.314361][ T785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.321059][ T785] CR2: 00007f5f1bd622f8 CR3: 000000011e42d000 CR4: 00000000003506b0 [ 34.329088][ T785] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.337095][ T785] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.345642][ T785] Call Trace: [ 34.349234][ T785] [ 34.352170][ T785] pppol2tp_release+0x150/0x2b0 [ 34.357089][ T785] sock_close+0xb8/0x200 [ 34.361467][ T785] ? sock_mmap+0xa0/0xa0 [ 34.366181][ T785] __fput+0x22b/0x900 [ 34.370255][ T785] ____fput+0x15/0x20 [ 34.374482][ T785] task_work_run+0x127/0x190 [ 34.379277][ T785] do_exit+0xb70/0x29a0 [ 34.383758][ T785] ? __se_sys_clock_nanosleep+0x30b/0x3a0 [ 34.389574][ T785] ? put_task_struct+0x90/0x90 [ 34.394428][ T785] ? __kasan_check_write+0x14/0x20 [ 34.399631][ T785] __x64_sys_exit+0x40/0x40 [ 34.404360][ T785] x64_sys_call+0x44/0x9a0 [ 34.408812][ T785] do_syscall_64+0x4c/0xa0 [ 34.413237][ T785] ? clear_bhb_loop+0x50/0xa0 [ 34.418011][ T785] ? clear_bhb_loop+0x50/0xa0 [ 34.422771][ T785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.429593][ T785] RIP: 0033:0x7f5f1bb0f199 [ 34.434209][ T785] Code: Unable to access opcode bytes at RIP 0x7f5f1bb0f16f. [ 34.441606][ T785] RSP: 002b:00007f5f1a567ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 34.450336][ T785] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5f1bb0f199 [ 34.458395][ T785] RDX: 00007f5f1a5689c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.466436][ T785] RBP: 00007f5f1bba68e0 R08: 0000000000000000 R09: 0000000000000058 [ 34.474622][ T785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.482690][ T785] R13: 00007f5f1bd97038 R14: 00007f5f1bd96fa0 R15: 00007ffdb41bfee8 [ 34.490790][ T785] [ 34.493861][ T785] ---[ end trace 2122273cdf748975 ]---