last executing test programs: 9.060265648s ago: executing program 3 (id=49): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) close(0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 8.811477711s ago: executing program 3 (id=54): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000880)=ANY=[@ANYBLOB="00631dda01aef2b0bad477a11d13ec0c19456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d24c60c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e9000001001d0149e6d308cbe315789f4baffe39bbced9b1d4db174c6121d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac10222664bbc980b4e99027c53ae2c6cc05d3be246e5837cbf286225d43e8c1d2e3fda86b86906b79fdedae7f3bbe362e8ad7f2b370442013de1788be93a3d553c2e1f5b559393d964df51bf393f52ecbe6f832b222231fbb9fee9e0343c2d3d567f7cff6d0b25303bcbcc99c879d3bc622b336c622a91291a63f9644964e5a679ea1b5005b9d987d6094ed4e1af157499d5fb2850161224a441240ea52dda516bc06ff3ade3c08c653108720c3e34727b0ae3db5da52511edb4325a2dd02b05f06a9e39764a8fbe0eb4eee5b51895703128cade291bc5c1acfae9ec5d34e71f75d8b5046aafd108b487be169a7bd49de322163858ae595e084074253c72d65f402752618d636a30c7800d77cbe196c326ca4d210f12f442868cba3ea9a0cbca8f59b1054675e2b1e898305a7245aae76525aaf2460152e5647f", @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2aa, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) 8.731005973s ago: executing program 3 (id=56): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, 0x0) 8.639905164s ago: executing program 3 (id=59): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getpid() setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 8.486629796s ago: executing program 3 (id=60): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @val=@iter={0x0}}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c) shutdown(0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 7.149802166s ago: executing program 3 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000480)={r2, 0x0, 0x40, &(0x7f0000000340)={@_ha_fsid={[0x9, 0x3]}, {0x5279, 0x9, 0x8, 0x4}}, 0x5e1, 0x0, &(0x7f0000000440)=0x401}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) 7.026092868s ago: executing program 32 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000480)={r2, 0x0, 0x40, &(0x7f0000000340)={@_ha_fsid={[0x9, 0x3]}, {0x5279, 0x9, 0x8, 0x4}}, 0x5e1, 0x0, &(0x7f0000000440)=0x401}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) 5.49629673s ago: executing program 0 (id=96): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f00000000c0)={[{@numtail}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlate}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '437'}}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@shortname_winnt}]}, 0x1, 0x362, &(0x7f0000000900)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5.239962654s ago: executing program 0 (id=99): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000040)='./file1\x00', 0x2200044, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,shortname=lower,shortname=winnt,iocharset=cp866,shortname=winnt,iocharset=iso8859-15,codepage=775,nonumtail=0,shortname=winnt,shortname=mixed,uni_xlate=1,shortname=lower,uni_xlate=1,uid=', @ANYRESHEX=0xee01, @ANYBLOB], 0x1, 0x36f, &(0x7f00000016c0)="$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") r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc, 0x0, 0x782f9abb}, 0x28) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 4.858699959s ago: executing program 0 (id=105): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x41090420}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700000f, 0x4, 0x1, 0x0, r3, 0x0}]) dup3(r0, r1, 0x0) 4.759366501s ago: executing program 4 (id=108): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r2, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 4.652054752s ago: executing program 4 (id=110): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000980)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@resgid}, {@test_dummy_encryption_v1}, {@norecovery}, {@nomblk_io_submit}, {@errors_continue}, {@minixdf}], [{@subj_type={'subj_type', 0x3d, '-@*'}}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, 'w'}}]}, 0x1, 0xbef, &(0x7f0000001f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xa4909000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4091, 0xffb) 4.651856402s ago: executing program 0 (id=111): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a08e700c20000000100eafb0d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.611715423s ago: executing program 0 (id=112): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5b) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000880)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x5c, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r4, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 4.570176453s ago: executing program 4 (id=113): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) 3.708612076s ago: executing program 4 (id=117): openat(0xffffffffffffff9c, 0x0, 0x80042, 0x4d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000851) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) socket$inet(0x2, 0x3, 0xd) syz_io_uring_setup(0x208c, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x48}}, 0x80) 2.780234899s ago: executing program 4 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) prctl$PR_GET_IO_FLUSHER(0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40881}, 0x4000000) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x8010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@ipv4_newnexthop={0x18, 0x68, 0x400, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x2, 0x0, 0x22}}, 0x18}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x50) 2.396287655s ago: executing program 5 (id=124): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000600)="87"}) 2.395993075s ago: executing program 5 (id=125): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000700), &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x10, 0x2, 0x0, 0x0}}, &(0x7f0000000b00)) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_io_cmd_sqes={0x2e, 0x0, 0x0, r9, 0xc0107521, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, r6, '\x00', @fetch_req_cmd={0x3, 0xa7b, 0x0, 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 2.344313245s ago: executing program 5 (id=126): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000040)='./file1\x00', 0x2200044, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,shortname=lower,shortname=winnt,iocharset=cp866,shortname=winnt,iocharset=iso8859-15,codepage=775,nonumtail=0,shortname=winnt,shortname=mixed,uni_xlate=1,shortname=lower,uni_xlate=1,uid=', @ANYRESHEX=0xee01, @ANYBLOB], 0x1, 0x36f, &(0x7f00000016c0)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc, 0x0, 0x782f9abb}, 0x28) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 2.176744448s ago: executing program 5 (id=127): recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x8}], 0x1, 0x2, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x8, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 2.155585058s ago: executing program 5 (id=128): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@bh}]}, 0x1, 0x50d, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r1, 0x10, 0x820, 0x8000) 1.989819921s ago: executing program 5 (id=129): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.595807247s ago: executing program 0 (id=135): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000100)={[{@mblk_io_submit}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x10008, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) pwrite64(r0, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0x0, 0x4, 0x1000000000000}) 1.595148447s ago: executing program 2 (id=136): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1.257507461s ago: executing program 2 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000b0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000002080)=""/4102, 0x40f00}, 0x94) 1.237335702s ago: executing program 1 (id=140): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1808, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.181510013s ago: executing program 2 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x12, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd, 0x6, @multicast}, 0x14) 1.180865483s ago: executing program 1 (id=142): syz_io_uring_setup(0x34b8, 0x0, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.108575464s ago: executing program 1 (id=143): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010400, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@uni_xlateno}, {@uni_xlate}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@numtail}, {@shortname_lower}, {@utf8no}, {@shortname_win95}, {@rodir}, {@fat=@umask={'umask', 0x3d, 0x6}}]}, 0x1, 0x37b, &(0x7f0000000940)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 1.094649854s ago: executing program 2 (id=144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x3, 0x0, 0x2004cb, 0x2, 0xa7c, 0x9, 0xa, 0x8000000009, 0x803, 0x200, 0x3, 0x9], 0x100000, 0x202}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 954.547136ms ago: executing program 1 (id=145): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001200011c4967a3137fd055cf2f0a"], 0x24}}, 0x4) 891.433117ms ago: executing program 4 (id=146): keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5b) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x1fc7, &(0x7f0000000880)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r4, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 891.169117ms ago: executing program 1 (id=147): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) fstatfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f000001f540)) 891.011527ms ago: executing program 2 (id=148): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000040)='./file1\x00', 0x2200044, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=iso8859-6,shortname=lower,shortname=winnt,iocharset=cp866,shortname=winnt,iocharset=iso8859-15,codepage=775,nonumtail=0,shortname=winnt,shortname=mixed,uni_xlate=1,shortname=lower,uni_xlate=1,uid=', @ANYRESHEX=0xee01, @ANYBLOB], 0x1, 0x36f, &(0x7f00000016c0)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 684.51656ms ago: executing program 2 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000470fafe0fddeb5303dc020f161c83448e25f813a6c2dbf6bef95c3c9dc49f94d6673d07d71862a3d564242799c2d1437ff0748768281af2f3f"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 0s ago: executing program 1 (id=150): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 21.326092][ T28] audit: type=1400 audit(1782605534.366:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.329528][ T278] cgroup: Unknown subsys name 'net' [ 21.348778][ T28] audit: type=1400 audit(1782605534.366:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.376120][ T28] audit: type=1400 audit(1782605534.396:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.376524][ T278] cgroup: Unknown subsys name 'devices' [ 21.524630][ T278] cgroup: Unknown subsys name 'hugetlb' [ 21.530285][ T278] cgroup: Unknown subsys name 'rlimit' [ 21.665560][ T28] audit: type=1400 audit(1782605534.706:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.688817][ T28] audit: type=1400 audit(1782605534.706:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.713612][ T28] audit: type=1400 audit(1782605534.706:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.743997][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.753308][ T28] audit: type=1400 audit(1782605534.796:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.778755][ T28] audit: type=1400 audit(1782605534.796:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.804909][ T28] audit: type=1400 audit(1782605534.826:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.805644][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.830721][ T28] audit: type=1400 audit(1782605534.846:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.121529][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.128646][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.136312][ T288] device bridge_slave_0 entered promiscuous mode [ 23.166214][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.173370][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.180782][ T288] device bridge_slave_1 entered promiscuous mode [ 23.223860][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.230948][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.238715][ T286] device bridge_slave_0 entered promiscuous mode [ 23.247330][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.254534][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.261998][ T286] device bridge_slave_1 entered promiscuous mode [ 23.335916][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.343058][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.350578][ T287] device bridge_slave_0 entered promiscuous mode [ 23.376613][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.383746][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.391263][ T287] device bridge_slave_1 entered promiscuous mode [ 23.424341][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.431427][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.439112][ T289] device bridge_slave_0 entered promiscuous mode [ 23.445985][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.453083][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.460503][ T290] device bridge_slave_0 entered promiscuous mode [ 23.471238][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.478353][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.485909][ T290] device bridge_slave_1 entered promiscuous mode [ 23.509833][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.516978][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.524632][ T289] device bridge_slave_1 entered promiscuous mode [ 23.647934][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.655029][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.662302][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.669410][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.701756][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.708872][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.716189][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.723255][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.753384][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.760467][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.767785][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.774849][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.793986][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.801066][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.808379][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.815443][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.844195][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.851269][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.858632][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.865698][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.873938][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.881267][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.888820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.896487][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.904193][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.911482][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.918980][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.926874][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.934244][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.941477][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.948943][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.956919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.964499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.993820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.002029][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.009110][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.016842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.025562][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.032659][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.040113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.048384][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.055429][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.072898][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.080455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.088741][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.095877][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.103669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.111980][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.119063][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.126802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.135074][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.142103][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.166828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.175186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.182915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.191260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.199775][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.206895][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.214754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.223142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.231276][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.238345][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.245731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.253900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.261823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.269988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.277963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.286263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.294430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.302554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.326123][ T286] device veth0_vlan entered promiscuous mode [ 24.337135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.345453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.354260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.362312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.370868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.379413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.387931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.395954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.404318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.412930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.420940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.429148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.437241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.444809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.463832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.472300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.493342][ T287] device veth0_vlan entered promiscuous mode [ 24.505256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.514302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.522707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.530159][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.538072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.545785][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.553420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.561707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.570012][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.577071][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.584612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.593029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.601216][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.608286][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.621685][ T286] device veth1_macvtap entered promiscuous mode [ 24.634084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.642825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.651116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.659246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.667531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.675782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.684067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.692085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.700614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.708414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.717169][ T287] device veth1_macvtap entered promiscuous mode [ 24.726579][ T288] device veth0_vlan entered promiscuous mode [ 24.739314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.747942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.758459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.766976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.793507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.794136][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 24.804091][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.817495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.826631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.835148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.843692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.851905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.861057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.869573][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.887313][ T290] device veth0_vlan entered promiscuous mode [ 24.899160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.912961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.921648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.930591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.940390][ T288] device veth1_macvtap entered promiscuous mode [ 24.959448][ T290] device veth1_macvtap entered promiscuous mode [ 24.976606][ T289] device veth0_vlan entered promiscuous mode [ 24.995195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.003952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.012168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.020085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.047478][ T289] device veth1_macvtap entered promiscuous mode [ 25.063767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.074267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.083039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.091541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.100654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.109420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.118770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.127775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.136794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.168191][ T314] device syzkaller0 entered promiscuous mode [ 25.181386][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.190406][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.233267][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.241990][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.260241][ T323] loop1: detected capacity change from 0 to 2048 [ 25.304682][ T323] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.334527][ T287] EXT4-fs (loop1): unmounting filesystem. [ 25.355812][ T336] loop0: detected capacity change from 0 to 8192 [ 25.415119][ T340] tipc: Started in network mode [ 25.420211][ T340] tipc: Node identity 401000000000000005, cluster identity 4711 [ 25.451273][ T344] loop4: detected capacity change from 0 to 512 [ 25.470559][ T344] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.485813][ T344] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.498988][ T344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 25.510747][ T344] EXT4-fs (loop4): 1 truncate cleaned up [ 25.517019][ T344] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 25.539915][ T344] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.12: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 25.562656][ T318] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.603268][ T289] EXT4-fs (loop4): unmounting filesystem. [ 25.763475][ T318] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.787964][ T318] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 25.805571][ T318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 25.837678][ T362] device syzkaller0 entered promiscuous mode [ 25.839048][ T318] usb 3-1: Product: syz [ 25.869393][ T318] usb 3-1: Manufacturer: syz [ 25.888474][ T318] usb 3-1: SerialNumber: syz [ 26.044672][ T371] loop3: detected capacity change from 0 to 512 [ 26.051446][ T371] EXT4-fs: dax option not supported [ 26.098978][ T375] loop3: detected capacity change from 0 to 128 [ 26.117417][ T375] ======================================================= [ 26.117417][ T375] WARNING: The mand mount option has been deprecated and [ 26.117417][ T375] and is ignored by this kernel. Remove the mand [ 26.117417][ T375] option from the mount to silence this warning. [ 26.117417][ T375] ======================================================= [ 26.155248][ T318] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 26.170399][ T377] loop0: detected capacity change from 0 to 256 [ 26.186066][ T377] FAT-fs (loop0): Directory bread(block 64) failed [ 26.191659][ T375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 26.193239][ T377] FAT-fs (loop0): Directory bread(block 65) failed [ 26.208277][ T377] FAT-fs (loop0): Directory bread(block 66) failed [ 26.210997][ T375] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.215649][ T377] FAT-fs (loop0): Directory bread(block 67) failed [ 26.231948][ T377] FAT-fs (loop0): Directory bread(block 68) failed [ 26.238582][ T377] FAT-fs (loop0): Directory bread(block 69) failed [ 26.245173][ T377] FAT-fs (loop0): Directory bread(block 70) failed [ 26.251726][ T377] FAT-fs (loop0): Directory bread(block 71) failed [ 26.260307][ T377] FAT-fs (loop0): Directory bread(block 72) failed [ 26.266956][ T377] FAT-fs (loop0): Directory bread(block 73) failed [ 26.290298][ T377] syz.0.26: attempt to access beyond end of device [ 26.290298][ T377] loop0: rw=2049, sector=1192, nr_sectors = 32 limit=256 [ 26.304279][ T288] EXT4-fs (loop3): unmounting filesystem. [ 26.316184][ T377] syz.0.26: attempt to access beyond end of device [ 26.316184][ T377] loop0: rw=34817, sector=1192, nr_sectors = 32 limit=256 [ 26.348622][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 26.348644][ T28] audit: type=1400 audit(1782605539.386:137): avc: denied { read } for pid=380 comm="syz.3.27" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.376228][ T28] audit: type=1400 audit(1782605539.416:138): avc: denied { open } for pid=380 comm="syz.3.27" path="net:[4026532301]" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.400103][ T28] audit: type=1400 audit(1782605539.416:139): avc: denied { read write } for pid=320 comm="syz.2.3" name="lp0" dev="devtmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 26.425557][ T28] audit: type=1400 audit(1782605539.416:140): avc: denied { open } for pid=320 comm="syz.2.3" path="/dev/usb/lp0" dev="devtmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 26.480527][ T28] audit: type=1400 audit(1782605539.516:141): avc: denied { map } for pid=383 comm="syz.4.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.504875][ C0] usblp0: nonzero write bulk status received: -71 [ 26.511456][ T318] usb 3-1: USB disconnect, device number 2 [ 26.530227][ T318] usblp0: removed [ 26.543820][ T28] audit: type=1400 audit(1782605539.516:142): avc: denied { read write } for pid=383 comm="syz.4.28" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.577801][ T28] audit: type=1400 audit(1782605539.546:143): avc: denied { create } for pid=320 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.597772][ T28] audit: type=1400 audit(1782605539.546:144): avc: denied { setopt } for pid=320 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.623846][ T28] audit: type=1400 audit(1782605539.566:145): avc: denied { write } for pid=389 comm="syz.0.30" name="ipv6_route" dev="proc" ino=4026532526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 26.679894][ T397] device syzkaller0 entered promiscuous mode [ 26.747118][ T402] loop1: detected capacity change from 0 to 128 [ 26.843221][ T402] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 26.855510][ T402] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.887690][ T287] EXT4-fs (loop1): unmounting filesystem. [ 26.903271][ T28] audit: type=1400 audit(1782605539.946:146): avc: denied { read write } for pid=410 comm="syz.1.39" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.239706][ T419] loop3: detected capacity change from 0 to 1024 [ 27.277749][ T419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.286588][ T419] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.308618][ T419] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.41: lblock 0 mapped to illegal pblock 0 (length 6) [ 27.330122][ T419] EXT4-fs error (device loop3): ext4_map_blocks:747: inode #15: comm syz.3.41: lblock 0 mapped to illegal pblock 0 (length 1) [ 27.344028][ T419] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 27.356735][ T419] EXT4-fs (loop3): This should not happen!! Data will be lost [ 27.356735][ T419] [ 27.368382][ T419] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.41: bg 0: block 112: padding at end of block bitmap is not set [ 27.383338][ T419] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 27.395842][ T419] EXT4-fs (loop3): This should not happen!! Data will be lost [ 27.395842][ T419] [ 27.405770][ T419] EXT4-fs (loop3): Total free blocks count 0 [ 27.412075][ T419] EXT4-fs (loop3): Free/Dirty block details [ 27.432401][ T419] EXT4-fs (loop3): free_blocks=0 [ 27.437441][ T419] EXT4-fs (loop3): dirty_blocks=0 [ 27.442577][ T419] EXT4-fs (loop3): Block reservation details [ 27.892524][ T450] loop3: detected capacity change from 0 to 128 [ 27.899586][ T450] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 27.943598][ T10] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 28.001153][ T460] loop3: detected capacity change from 0 to 1024 [ 28.019845][ T460] EXT4-fs: Ignoring removed bh option [ 28.044967][ T460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.070428][ T460] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.59: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 28.090249][ T460] EXT4-fs (loop3): Remounting filesystem read-only [ 28.097115][ T460] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 28.116274][ T460] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.59: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 28.136592][ T460] EXT4-fs (loop3): Remounting filesystem read-only [ 28.146668][ T460] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.59: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 28.166946][ T460] EXT4-fs (loop3): Remounting filesystem read-only [ 28.206600][ T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.229449][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 28.260031][ T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.287710][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 28.298526][ T288] EXT4-fs error (device loop3): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 28.358326][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 28.365566][ T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.380661][ T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.403898][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 28.410634][ T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.463409][ T474] EXT4-fs: Ignoring removed nobh option [ 28.469307][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 28.478363][ T288] EXT4-fs error (device loop3): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 28.549703][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 28.561262][ T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.567099][ T474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.647649][ T288] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.671843][ T474] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.765384][ T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.783911][ T290] EXT4-fs (loop2): unmounting filesystem. [ 28.794622][ T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 28.978768][ T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.038056][ T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.053256][ T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.069712][ T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.250886][ T288] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 29.392836][ T500] FAT-fs (loop0): Directory bread(block 64) failed [ 29.399956][ T500] FAT-fs (loop0): Directory bread(block 65) failed [ 29.407243][ T500] FAT-fs (loop0): Directory bread(block 66) failed [ 29.414498][ T500] FAT-fs (loop0): Directory bread(block 67) failed [ 29.421560][ T500] FAT-fs (loop0): Directory bread(block 68) failed [ 29.428860][ T500] FAT-fs (loop0): Directory bread(block 69) failed [ 29.436067][ T500] FAT-fs (loop0): Directory bread(block 70) failed [ 29.443281][ T500] FAT-fs (loop0): Directory bread(block 71) failed [ 29.450669][ T500] FAT-fs (loop0): Directory bread(block 72) failed [ 29.458426][ T500] FAT-fs (loop0): Directory bread(block 73) failed [ 29.505216][ T513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 29.527606][ T512] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.542865][ T512] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 29.555980][ T512] EXT4-fs (loop1): This should not happen!! Data will be lost [ 29.555980][ T512] [ 29.572449][ T512] EXT4-fs (loop1): Total free blocks count 0 [ 29.578685][ T512] EXT4-fs (loop1): Free/Dirty block details [ 29.584893][ T512] EXT4-fs (loop1): free_blocks=2415919504 [ 29.590740][ T512] EXT4-fs (loop1): dirty_blocks=32 [ 29.595971][ T512] EXT4-fs (loop1): Block reservation details [ 29.602065][ T512] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 29.612080][ T513] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 29.819591][ T522] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.917182][ T290] EXT4-fs (loop2): unmounting filesystem. [ 30.095084][ T8] device bridge_slave_1 left promiscuous mode [ 30.102864][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.104540][ T534] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.83: bad orphan inode 15 [ 30.124094][ T8] device bridge_slave_0 left promiscuous mode [ 30.130524][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.141868][ T8] device veth1_macvtap left promiscuous mode [ 30.148363][ T8] device veth0_vlan left promiscuous mode [ 30.153174][ T534] ext4_test_bit(bit=14, block=5) = 0 [ 30.160472][ T534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 30.181562][ T534] EXT4-fs error (device loop4): __ext4_new_inode:1081: comm syz.4.83: reserved inode found cleared - inode=1 [ 30.236322][ T289] EXT4-fs (loop4): unmounting filesystem. [ 30.352407][ T19] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 30.612207][ T545] set_capacity_and_notify: 5 callbacks suppressed [ 30.612227][ T545] loop0: detected capacity change from 0 to 512 [ 30.640337][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.651830][ T545] EXT4-fs: Ignoring removed bh option [ 30.661637][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 30.663965][ T547] loop4: detected capacity change from 0 to 256 [ 30.685905][ T545] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.699254][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 30.722544][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.731954][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.741892][ T19] usb 3-1: Product: syz [ 30.746938][ T19] usb 3-1: Manufacturer: syz [ 30.751744][ T19] usb 3-1: SerialNumber: syz [ 30.758246][ T536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 30.767936][ T547] FAT-fs (loop4): Directory bread(block 64) failed [ 30.779358][ T545] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 30.794192][ T547] FAT-fs (loop4): Directory bread(block 65) failed [ 30.800804][ T547] FAT-fs (loop4): Directory bread(block 66) failed [ 30.815735][ T545] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.85: bg 0: block 248: padding at end of block bitmap is not set [ 30.818567][ T547] FAT-fs (loop4): Directory bread(block 67) failed [ 30.836762][ T547] FAT-fs (loop4): Directory bread(block 68) failed [ 30.843470][ T547] FAT-fs (loop4): Directory bread(block 69) failed [ 30.850179][ T547] FAT-fs (loop4): Directory bread(block 70) failed [ 30.862825][ T547] FAT-fs (loop4): Directory bread(block 71) failed [ 30.867075][ T545] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.85: Failed to acquire dquot type 1 [ 30.869498][ T547] FAT-fs (loop4): Directory bread(block 72) failed [ 30.888251][ T547] FAT-fs (loop4): Directory bread(block 73) failed [ 30.895870][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.903679][ T545] EXT4-fs (loop0): 1 truncate cleaned up [ 30.912499][ T545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.923400][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.934318][ T540] device bridge_slave_0 entered promiscuous mode [ 30.942748][ T545] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.85: Failed to acquire dquot type 1 [ 30.944581][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.971025][ T536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 30.978372][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.986088][ T540] device bridge_slave_1 entered promiscuous mode [ 31.000996][ T286] EXT4-fs (loop0): unmounting filesystem. [ 31.095711][ T568] loop1: detected capacity change from 0 to 512 [ 31.122510][ T568] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.148605][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.155737][ T540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.163084][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.170142][ T540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.178713][ T575] loop0: detected capacity change from 0 to 256 [ 31.189060][ T568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.198580][ T568] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.221047][ T576] process 'syz.4.95' launched './file0' with NULL argv: empty string added [ 31.234757][ T575] FAT-fs (loop0): Directory bread(block 64) failed [ 31.245799][ T575] FAT-fs (loop0): Directory bread(block 65) failed [ 31.259036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.260200][ T575] FAT-fs (loop0): Directory bread(block 66) failed [ 31.273437][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.276990][ T575] FAT-fs (loop0): Directory bread(block 67) failed [ 31.287995][ T575] FAT-fs (loop0): Directory bread(block 68) failed [ 31.294791][ T575] FAT-fs (loop0): Directory bread(block 69) failed [ 31.301486][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.302507][ T575] FAT-fs (loop0): Directory bread(block 70) failed [ 31.315206][ T575] FAT-fs (loop0): Directory bread(block 71) failed [ 31.321966][ T287] EXT4-fs (loop1): unmounting filesystem. [ 31.323355][ T575] FAT-fs (loop0): Directory bread(block 72) failed [ 31.334947][ T575] FAT-fs (loop0): Directory bread(block 73) failed [ 31.366841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.384668][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.391771][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.399808][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.408882][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.415999][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.423848][ T19] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 31.429933][ T19] cdc_ncm 3-1:1.0: bind() failure [ 31.436998][ T19] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 31.444201][ T19] cdc_ncm 3-1:1.1: bind() failure [ 31.454189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.462288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.473198][ T583] loop0: detected capacity change from 0 to 256 [ 31.493206][ T578] device syzkaller0 entered promiscuous mode [ 31.508470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.518212][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 31.518228][ T28] audit: type=1400 audit(1782605544.556:196): avc: denied { ioctl } for pid=577 comm="syz.4.98" path="socket:[17653]" dev="sockfs" ino=17653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.534128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.559537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.567500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.588760][ T583] FAT-fs (loop0): Directory bread(block 64) failed [ 31.595584][ T583] FAT-fs (loop0): Directory bread(block 65) failed [ 31.602165][ T583] FAT-fs (loop0): Directory bread(block 66) failed [ 31.608816][ T583] FAT-fs (loop0): Directory bread(block 67) failed [ 31.616584][ T583] FAT-fs (loop0): Directory bread(block 68) failed [ 31.623310][ T583] FAT-fs (loop0): Directory bread(block 69) failed [ 31.629961][ T583] FAT-fs (loop0): Directory bread(block 70) failed [ 31.632294][ T540] device veth0_vlan entered promiscuous mode [ 31.637542][ T583] FAT-fs (loop0): Directory bread(block 71) failed [ 31.653926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.662668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.672020][ T583] FAT-fs (loop0): Directory bread(block 72) failed [ 31.675196][ T540] device veth1_macvtap entered promiscuous mode [ 31.687556][ T583] FAT-fs (loop0): Directory bread(block 73) failed [ 31.718963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.727118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.735612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.757473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.774168][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.907161][ T603] loop5: detected capacity change from 0 to 4096 [ 31.930414][ T603] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 31.948763][ T28] audit: type=1400 audit(1782605544.986:197): avc: denied { append } for pid=602 comm="syz.5.107" path="/3/file0/bus/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.978943][ T540] EXT4-fs (loop5): unmounting filesystem. [ 32.025039][ T28] audit: type=1400 audit(1782605545.066:198): avc: denied { write } for pid=612 comm="syz.0.111" path="socket:[17760]" dev="sockfs" ino=17760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.048781][ T609] loop4: detected capacity change from 0 to 4096 [ 32.060495][ T609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.074690][ T609] ext4: Unknown parameter 'subj_type' [ 32.084104][ T28] audit: type=1400 audit(1782605545.126:199): avc: denied { unlink } for pid=608 comm="syz.4.110" name="#7" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.342481][ T472] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.523727][ T472] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.537968][ T472] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 32.547126][ T472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 32.555278][ T472] usb 1-1: Product: syz [ 32.559482][ T472] usb 1-1: Manufacturer: syz [ 32.564149][ T472] usb 1-1: SerialNumber: syz [ 32.772220][ T472] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 32.866546][ T623] loop5: detected capacity change from 0 to 256 [ 32.881176][ T623] FAT-fs (loop5): Directory bread(block 64) failed [ 32.888054][ T623] FAT-fs (loop5): Directory bread(block 65) failed [ 32.897093][ T623] FAT-fs (loop5): Directory bread(block 66) failed [ 32.903876][ T623] FAT-fs (loop5): Directory bread(block 67) failed [ 32.910447][ T623] FAT-fs (loop5): Directory bread(block 68) failed [ 32.917090][ T623] FAT-fs (loop5): Directory bread(block 69) failed [ 32.923695][ T623] FAT-fs (loop5): Directory bread(block 70) failed [ 32.930243][ T623] FAT-fs (loop5): Directory bread(block 71) failed [ 32.936954][ T623] FAT-fs (loop5): Directory bread(block 72) failed [ 32.943523][ T623] FAT-fs (loop5): Directory bread(block 73) failed [ 33.077755][ T28] audit: type=1400 audit(1782605546.116:200): avc: denied { sqpoll } for pid=628 comm="syz.5.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.081528][ T295] usb 3-1: USB disconnect, device number 3 [ 33.268549][ C0] usblp0: nonzero write bulk status received: -71 [ 33.294741][ T317] usb 1-1: USB disconnect, device number 2 [ 33.324253][ T317] usblp0: removed [ 34.217087][ T646] netlink: 104 bytes leftover after parsing attributes in process `syz.5.122'. [ 34.263353][ T650] binder: 649:650 ioctl c0306201 2000000002c0 returned -14 [ 34.304446][ T28] audit: type=1400 audit(1782605547.346:201): avc: denied { cmd } for pid=652 comm="syz.5.125" path="/dev/ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 34.364222][ T656] loop5: detected capacity change from 0 to 256 [ 34.399785][ T656] FAT-fs (loop5): Directory bread(block 64) failed [ 34.407045][ T656] FAT-fs (loop5): Directory bread(block 65) failed [ 34.413804][ T656] FAT-fs (loop5): Directory bread(block 66) failed [ 34.420465][ T656] FAT-fs (loop5): Directory bread(block 67) failed [ 34.427252][ T656] FAT-fs (loop5): Directory bread(block 68) failed [ 34.434289][ T656] FAT-fs (loop5): Directory bread(block 69) failed [ 34.440936][ T656] FAT-fs (loop5): Directory bread(block 70) failed [ 34.447724][ T656] FAT-fs (loop5): Directory bread(block 71) failed [ 34.454459][ T656] FAT-fs (loop5): Directory bread(block 72) failed [ 34.461106][ T656] FAT-fs (loop5): Directory bread(block 73) failed [ 34.550132][ T660] loop5: detected capacity change from 0 to 512 [ 34.572606][ T660] EXT4-fs: Ignoring removed bh option [ 34.596223][ T660] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 34.605313][ T660] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.695654][ T540] EXT4-fs (loop5): unmounting filesystem. [ 34.816796][ T28] audit: type=1400 audit(1782605547.856:202): avc: denied { bind } for pid=666 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.903492][ T28] audit: type=1400 audit(1782605547.946:203): avc: denied { read write } for pid=672 comm="syz.1.133" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.932992][ T28] audit: type=1400 audit(1782605547.966:204): avc: denied { open } for pid=672 comm="syz.1.133" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.962406][ T673] FAT-fs (loop1): Directory bread(block 64) failed [ 34.970389][ T673] FAT-fs (loop1): Directory bread(block 65) failed [ 34.979148][ T673] FAT-fs (loop1): Directory bread(block 66) failed [ 34.989738][ T673] FAT-fs (loop1): Directory bread(block 67) failed [ 34.996819][ T673] FAT-fs (loop1): Directory bread(block 68) failed [ 35.003546][ T673] FAT-fs (loop1): Directory bread(block 69) failed [ 35.010115][ T673] FAT-fs (loop1): Directory bread(block 70) failed [ 35.012557][ T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 35.017485][ T673] FAT-fs (loop1): Directory bread(block 71) failed [ 35.031316][ T673] FAT-fs (loop1): Directory bread(block 72) failed [ 35.038047][ T673] FAT-fs (loop1): Directory bread(block 73) failed [ 35.107396][ T677] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.158556][ T677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.187944][ T677] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.203493][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.215067][ T682] FAT-fs (loop1): Directory bread(block 64) failed [ 35.234766][ T682] FAT-fs (loop1): Directory bread(block 65) failed [ 35.241419][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 35.268789][ T682] FAT-fs (loop1): Directory bread(block 66) failed [ 35.275449][ T682] FAT-fs (loop1): Directory bread(block 67) failed [ 35.282027][ T682] FAT-fs (loop1): Directory bread(block 68) failed [ 35.283061][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 35.296110][ T682] FAT-fs (loop1): Directory bread(block 69) failed [ 35.306409][ T682] FAT-fs (loop1): Directory bread(block 70) failed [ 35.313014][ T682] FAT-fs (loop1): Directory bread(block 71) failed [ 35.319651][ T682] FAT-fs (loop1): Directory bread(block 72) failed [ 35.326288][ T682] FAT-fs (loop1): Directory bread(block 73) failed [ 35.378563][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.401796][ T687] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 35.412391][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.430119][ T24] usb 6-1: Product: syz [ 35.434819][ T24] usb 6-1: Manufacturer: syz [ 35.439586][ T24] usb 6-1: SerialNumber: syz [ 35.453129][ T665] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 35.479688][ T690] binder: 689:690 ioctl c0306201 200000000180 returned -14 [ 35.510889][ T693] device syzkaller0 entered promiscuous mode [ 35.554854][ T697] FAT-fs (loop1): Directory bread(block 64) failed [ 35.561481][ T697] FAT-fs (loop1): Directory bread(block 65) failed [ 35.568262][ T697] FAT-fs (loop1): Directory bread(block 66) failed [ 35.576042][ T697] FAT-fs (loop1): Directory bread(block 67) failed [ 35.605483][ T697] FAT-fs (loop1): Directory bread(block 68) failed [ 35.612787][ T697] FAT-fs (loop1): Directory bread(block 69) failed [ 35.619785][ T28] audit: type=1400 audit(1782605548.656:205): avc: denied { read } for pid=698 comm="syz.2.144" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.643067][ T699] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 35.659119][ T697] FAT-fs (loop1): Directory bread(block 70) failed [ 35.666891][ T665] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 35.674597][ T697] FAT-fs (loop1): Directory bread(block 71) failed [ 35.681183][ T697] FAT-fs (loop1): Directory bread(block 72) failed [ 35.690178][ T697] FAT-fs (loop1): Directory bread(block 73) failed [ 35.795190][ T709] set_capacity_and_notify: 4 callbacks suppressed [ 35.795208][ T709] loop2: detected capacity change from 0 to 256 [ 35.837654][ T709] FAT-fs (loop2): Directory bread(block 64) failed [ 35.850294][ T709] FAT-fs (loop2): Directory bread(block 65) failed [ 35.858297][ T709] FAT-fs (loop2): Directory bread(block 66) failed [ 35.865853][ T709] FAT-fs (loop2): Directory bread(block 67) failed [ 35.872704][ T709] FAT-fs (loop2): Directory bread(block 68) failed [ 35.879329][ T709] FAT-fs (loop2): Directory bread(block 69) failed [ 35.886249][ T709] FAT-fs (loop2): Directory bread(block 70) failed [ 35.893886][ T709] FAT-fs (loop2): Directory bread(block 71) failed [ 35.900917][ T709] FAT-fs (loop2): Directory bread(block 72) failed [ 35.909736][ T709] FAT-fs (loop2): Directory bread(block 73) failed [ 35.923738][ T709] syz.2.148: attempt to access beyond end of device [ 35.923738][ T709] loop2: rw=2049, sector=1192, nr_sectors = 32 limit=256 [ 36.099124][ T317] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.099290][ T24] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 36.112749][ T24] cdc_ncm 6-1:1.0: bind() failure [ 36.118975][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 36.125873][ T24] cdc_ncm 6-1:1.1: bind() failure [ 36.303467][ T317] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.317795][ T317] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 36.326953][ T317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 36.335228][ T317] usb 5-1: Product: syz [ 36.339469][ T317] usb 5-1: Manufacturer: syz [ 36.344166][ T317] usb 5-1: SerialNumber: syz [ 36.552143][ T317] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 36.662498][ C1] ================================================================== [ 36.670627][ C1] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 36.678065][ C1] Read of size 8 at addr ffff888133972590 by task ksoftirqd/1/23 [ 36.685822][ C1] [ 36.688224][ C1] CPU: 1 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 36.695542][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 36.705646][ C1] Call Trace: [ 36.708957][ C1] [ 36.711917][ C1] __dump_stack+0x21/0x24 [ 36.716285][ C1] dump_stack_lvl+0x110/0x170 [ 36.721009][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.726075][ C1] ? debug_smp_processor_id+0x17/0x20 [ 36.731489][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 36.736561][ C1] print_address_description+0x71/0x200 [ 36.742155][ C1] print_report+0x4a/0x60 [ 36.746528][ C1] kasan_report+0x122/0x150 [ 36.751078][ C1] ? rcu_cblist_dequeue+0x6c/0xb0 [ 36.756145][ C1] __asan_report_load8_noabort+0x14/0x20 [ 36.761817][ C1] rcu_cblist_dequeue+0x6c/0xb0 [ 36.766707][ C1] rcu_do_batch+0x4bc/0xc30 [ 36.771248][ C1] ? rcu_core+0xf00/0xf00 [ 36.775612][ C1] rcu_core+0x486/0xf00 [ 36.779803][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 36.785048][ C1] ? sched_clock+0x9/0x10 [ 36.789419][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 36.794653][ C1] ? finish_task_switch+0x16b/0x7c0 [ 36.799900][ C1] ? irqtime_account_irq+0x75/0x240 [ 36.805147][ C1] rcu_core_si+0x9/0x10 [ 36.809341][ C1] handle_softirqs+0x1d7/0x600 [ 36.814136][ C1] ? __cfi_run_ksoftirqd+0x10/0x10 [ 36.819292][ C1] run_ksoftirqd+0x28/0x30 [ 36.823744][ C1] smpboot_thread_fn+0x48c/0x8e0 [ 36.828724][ C1] kthread+0x281/0x320 [ 36.832829][ C1] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 36.838337][ C1] ? __cfi_kthread+0x10/0x10 [ 36.842966][ C1] ret_from_fork+0x1f/0x30 [ 36.847425][ C1] [ 36.850462][ C1] [ 36.852807][ C1] Allocated by task 707: [ 36.857077][ C1] kasan_set_track+0x4b/0x70 [ 36.861886][ C1] kasan_save_alloc_info+0x1f/0x30 [ 36.867033][ C1] __kasan_kmalloc+0x95/0xb0 [ 36.871666][ C1] __kmalloc+0xb4/0x1e0 [ 36.875854][ C1] l2tp_session_create+0x38/0xbd0 [ 36.880912][ C1] pppol2tp_connect+0xbf5/0x1640 [ 36.885891][ C1] __sys_connect+0x3da/0x460 [ 36.890638][ C1] __x64_sys_connect+0x7a/0x90 [ 36.895435][ C1] x64_sys_call+0x88d/0x9a0 [ 36.899985][ C1] do_syscall_64+0x4c/0xa0 [ 36.904442][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.910402][ C1] [ 36.912754][ C1] Freed by task 8: [ 36.916491][ C1] kasan_set_track+0x4b/0x70 [ 36.921117][ C1] kasan_save_free_info+0x2b/0x40 [ 36.926173][ C1] ____kasan_slab_free+0x132/0x180 [ 36.931319][ C1] __kasan_slab_free+0x11/0x20 [ 36.936122][ C1] slab_free_freelist_hook+0xc2/0x190 [ 36.941524][ C1] __kmem_cache_free+0xb7/0x1b0 [ 36.946416][ C1] kfree+0x6f/0xf0 [ 36.950231][ C1] l2tp_session_put+0xaf/0x1a0 [ 36.955034][ C1] l2tp_session_delete+0x3df/0x4d0 [ 36.960185][ C1] l2tp_tunnel_del_work+0x199/0x410 [ 36.965431][ C1] process_one_work+0x717/0xc30 [ 36.970321][ C1] worker_thread+0xa4d/0x11d0 [ 36.975053][ C1] kthread+0x281/0x320 [ 36.979167][ C1] ret_from_fork+0x1f/0x30 [ 36.983631][ C1] [ 36.985987][ C1] Last potentially related work creation: [ 36.991733][ C1] kasan_save_stack+0x3a/0x60 [ 36.996455][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 37.001860][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 37.007700][ C1] call_rcu+0xcf/0xf50 [ 37.011822][ C1] pppol2tp_release+0x1e3/0x2b0 [ 37.016308][ C0] usblp0: nonzero write bulk status received: -71 [ 37.016706][ C1] sock_close+0xc9/0x220 [ 37.025747][ T6] usb 5-1: USB disconnect, device number 2 [ 37.027388][ C1] __fput+0x1fd/0x8f0 [ 37.037207][ C1] ____fput+0x15/0x20 [ 37.041236][ C1] task_work_run+0x1e1/0x250 [ 37.045865][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 37.051111][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 37.056604][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 37.062096][ C1] do_syscall_64+0x58/0xa0 [ 37.066556][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 37.072488][ C1] [ 37.074831][ C1] The buggy address belongs to the object at ffff888133972400 [ 37.074831][ C1] which belongs to the cache kmalloc-512 of size 512 [ 37.088938][ C1] The buggy address is located 400 bytes inside of [ 37.088938][ C1] 512-byte region [ffff888133972400, ffff888133972600) [ 37.102261][ C1] [ 37.104621][ C1] The buggy address belongs to the physical page: [ 37.111074][ C1] page:ffffea0004ce5c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133970 [ 37.121356][ C1] head:ffffea0004ce5c00 order:2 compound_mapcount:0 compound_pincount:0 [ 37.125462][ T6] usblp0: removed [ 37.129706][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 37.129792][ C1] raw: 4000000000010200 ffffea0004ce3400 dead000000000003 ffff888100042f00 [ 37.148068][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 37.156682][ C1] page dumped because: kasan: bad access detected [ 37.163125][ C1] page_owner tracks the page as allocated [ 37.168865][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 289, tgid 289 (syz-executor), ts 25253997081, free_ts 0 [ 37.190615][ C1] post_alloc_hook+0x1f5/0x210 [ 37.195430][ C1] prep_new_page+0x1c/0x110 [ 37.199977][ C1] get_page_from_freelist+0x2ca9/0x2d20 [ 37.205568][ C1] __alloc_pages+0x1fa/0x610 [ 37.210200][ C1] alloc_slab_page+0x6e/0xf0 [ 37.214824][ C1] new_slab+0x98/0x3e0 [ 37.218934][ C1] ___slab_alloc+0x70f/0xb70 [ 37.223570][ C1] __slab_alloc+0x5e/0xa0 [ 37.227943][ C1] __kmem_cache_alloc_node+0x204/0x2d0 [ 37.233440][ C1] __kmalloc+0xa4/0x1e0 [ 37.237619][ C1] fib6_info_alloc+0x34/0xe0 [ 37.242237][ C1] ip6_route_info_create+0x51b/0x14d0 [ 37.247672][ C1] ip6_route_add+0x27/0x130 [ 37.252217][ C1] addrconf_prefix_route+0x233/0x310 [ 37.257541][ C1] inet6_addr_add+0x527/0x9c0 [ 37.262255][ C1] inet6_rtm_newaddr+0x74a/0xa10 [ 37.267223][ C1] page_owner free stack trace missing [ 37.272622][ C1] [ 37.274962][ C1] Memory state around the buggy address: [ 37.280591][ C1] ffff888133972480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.288653][ C1] ffff888133972500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.296715][ C1] >ffff888133972580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 37.304780][ C1] ^ [ 37.309398][ C1] ffff888133972600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.317471][ C1] ffff888133972680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.325528][ C1] ================================================================== [ 37.333678][ C1] Disabling lock debugging due to kernel taint [ 37.337971][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 37.338018][ T28] audit: type=1400 audit(1782605550.376:211): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 37.370071][ T28] audit: type=1400 audit(1782605550.376:212): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.392814][ T28] audit: type=1400 audit(1782605550.376:213): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.414388][ T28] audit: type=1400 audit(1782605550.376:214): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.437785][ T28] audit: type=1400 audit(1782605550.376:215): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.459982][ T28] audit: type=1400 audit(1782605550.376:216): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.482941][ T28] audit: type=1400 audit(1782605550.376:217): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.730252][ T24] usb 6-1: USB disconnect, device number 2