last executing test programs: 6.201186106s ago: executing program 3 (id=52): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 4.978961571s ago: executing program 0 (id=81): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@delchain={0x24, 0x64, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 4.971853562s ago: executing program 3 (id=82): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x88d1}, 0x10) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 4.882096991s ago: executing program 0 (id=84): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000c00)=0x7) connect$unix(r0, &(0x7f0000000c40)=@file={0x1, './file0\x00'}, 0x6e) 4.861397374s ago: executing program 0 (id=85): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={0x0, 0x21, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x2}, {0x5, 0xa, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x4}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 4.858611424s ago: executing program 3 (id=86): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) exit(0x100000000000035) tkill(r0, 0x12) ptrace(0x4206, r0) wait4(r0, 0x0, 0x8, 0x0) 4.79206114s ago: executing program 0 (id=87): syz_mount_image$exfat(&(0x7f0000002c80), &(0x7f0000002cc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000002d40)={[{@sys_tz}, {@namecase}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@keep_last_dots}, {@errors_continue}, {@gid}, {@discard}, {@umask={'umask', 0x3d, 0x3ff}}, {@dmask}]}, 0x11, 0x1533, &(0x7f0000002e00)="$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") creat(&(0x7f0000004340)='./bus\x00', 0x0) mount(&(0x7f00000043c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000004400)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000004440)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004580)='memory.events\x00', 0x7a05, 0x1700) 4.410346889s ago: executing program 0 (id=91): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@init_itable}]}, 0x1, 0x4f6, &(0x7f0000000480)="$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") rename(&(0x7f0000000980)='./file3\x00', &(0x7f00000009c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x101842, 0x15) pwrite64(r0, &(0x7f0000000a40)='2', 0xfdef, 0xc00) accept$inet(r0, &(0x7f0000000c00)={0x2, 0x0, @multicast1}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000f40)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000001", @ANYRES16], 0x24, 0x3) 4.292300571s ago: executing program 0 (id=94): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x28, 0x0, 0x5, 0xfffff038}, {0x6, 0x1, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 4.271569993s ago: executing program 32 (id=94): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x28, 0x0, 0x5, 0xfffff038}, {0x6, 0x1, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e1d, 0x4, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 4.269142334s ago: executing program 1 (id=96): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x88, 0x23) ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000002c0)={0x0}) 4.247798536s ago: executing program 1 (id=98): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000000480)) syz_clone3(&(0x7f00000004c0)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f0000000540)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 4.00841322s ago: executing program 3 (id=108): syz_mount_image$ext4(&(0x7f0000001d80)='ext4\x00', &(0x7f0000001dc0)='./file0\x00', 0x200000, &(0x7f0000001e00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f0000001ec0)="$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") open(&(0x7f0000002440)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000002480)=@loop={'/dev/loop', 0x0}, &(0x7f00000024c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000002500)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) creat(&(0x7f0000003680)='./file1\x00', 0x0) 3.769676395s ago: executing program 3 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x4a, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000140)="bf", 0xfd62, 0x0, 0x0, 0x2}]) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffffc, 0x4}, 0x18}}, 0x0) 3.539911868s ago: executing program 2 (id=115): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000b40)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000080)="4019e057e893aa2f", 0x8}], 0x1, 0x0, 0x0, 0x40080}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="84", 0x1}], 0x1}, 0x2404c140) 3.393191403s ago: executing program 1 (id=119): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x32d26, 0x1cdb5}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4) 3.333934439s ago: executing program 2 (id=122): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x4}, 0x6) syz_ublk_setup_io_uring(0xd, &(0x7f0000000300)={0x0, 0x30b5, 0x0, 0x2, 0x377}, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000180)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r3, r1, 0x0) 3.276235575s ago: executing program 3 (id=123): pipe2(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r1, &(0x7f0000000d80)=ANY=[], 0xffffff6a) unshare(0x6020400) pipe2(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x1) tee(r0, r2, 0x1fc, 0x0) 3.253702658s ago: executing program 33 (id=123): pipe2(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r1, &(0x7f0000000d80)=ANY=[], 0xffffff6a) unshare(0x6020400) pipe2(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0xfffffffffffffc01, 0x1) tee(r0, r2, 0x1fc, 0x0) 3.251883658s ago: executing program 2 (id=124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)={@val={0x14, 0x4}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x68, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) 3.2266811s ago: executing program 1 (id=126): syz_mount_image$ext4(&(0x7f0000001d80)='ext4\x00', &(0x7f0000001dc0)='./file0\x00', 0x200000, &(0x7f0000001e00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f0000001ec0)="$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") open(&(0x7f0000002440)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000002480)=@loop={'/dev/loop', 0x0}, &(0x7f00000024c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000002500)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) creat(&(0x7f0000003680)='./file1\x00', 0x0) 3.187899894s ago: executing program 2 (id=127): syz_mount_image$exfat(&(0x7f0000002c80), &(0x7f0000002cc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000002d40)={[{@sys_tz}, {@namecase}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@keep_last_dots}, {@errors_continue}, {@gid}, {@discard}, {@umask={'umask', 0x3d, 0x3ff}}, {@dmask}]}, 0x11, 0x1533, &(0x7f0000002e00)="$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") creat(&(0x7f0000004340)='./bus\x00', 0x0) mount(&(0x7f00000043c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000004400)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000004440)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004580)='memory.events\x00', 0x7a05, 0x1700) 3.041286169s ago: executing program 2 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x44894) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) 3.011339042s ago: executing program 5 (id=129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x4001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newtfilter={0x68, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002, 0x5}, {0x1004}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_VAR="bf2f05090c14ac91"]}]}}]}]}]}}]}, 0x68}}, 0x0) 2.982529805s ago: executing program 4 (id=130): r0 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r0) ptrace(0x4208, r0) ptrace$peek(0x2, r0, &(0x7f0000000300)) 2.982027855s ago: executing program 1 (id=131): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) exit(0x100000000000035) tkill(r0, 0x12) ptrace(0x4206, r0) wait4(r0, 0x0, 0x8, 0x0) 2.801595713s ago: executing program 2 (id=133): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005a80)={0x1f, 0x18, &(0x7f0000005b40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000005c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000005c40)={r2}, 0xc) 2.773678576s ago: executing program 34 (id=133): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005a80)={0x1f, 0x18, &(0x7f0000005b40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000005c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000005c40)={r2}, 0xc) 2.771633477s ago: executing program 5 (id=135): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x4}, 0x6) syz_ublk_setup_io_uring(0xd, &(0x7f0000000300)={0x0, 0x30b5, 0x0, 0x2, 0x377}, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000180)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r3, r1, 0x0) 2.748201709s ago: executing program 5 (id=136): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000680)=0x100000001, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000740)=0xfffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2.592960525s ago: executing program 1 (id=137): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000000000000200001304000000030000000000000b000000000400000000000008000000000000002e5f"], 0x0, 0x43}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x0, 0xfffffffffffffffd}, 0x10) 2.567776037s ago: executing program 35 (id=137): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000000000000200001304000000030000000000000b000000000400000000000008000000000000002e5f"], 0x0, 0x43}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x0, 0xfffffffffffffffd}, 0x10) 2.565846808s ago: executing program 5 (id=139): syz_mount_image$exfat(&(0x7f0000002c80), &(0x7f0000002cc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000002d40)={[{@sys_tz}, {@namecase}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@keep_last_dots}, {@errors_continue}, {@gid}, {@discard}, {@umask={'umask', 0x3d, 0x3ff}}, {@dmask}]}, 0x11, 0x1533, &(0x7f0000002e00)="$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") creat(&(0x7f0000004340)='./bus\x00', 0x0) mount(&(0x7f00000043c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000004400)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000004440)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004580)='memory.events\x00', 0x7a05, 0x1700) 2.397889055s ago: executing program 5 (id=140): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) write(r1, &(0x7f00000002c0)='0', 0x1) 2.232113062s ago: executing program 5 (id=141): syz_mount_image$ext4(&(0x7f0000001d80)='ext4\x00', &(0x7f0000001dc0)='./file0\x00', 0x200000, &(0x7f0000001e00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f0000001ec0)="$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") open(&(0x7f0000002440)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000002480)=@loop={'/dev/loop', 0x0}, &(0x7f00000024c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000002500)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) creat(&(0x7f0000003680)='./file1\x00', 0x0) 2.214182804s ago: executing program 36 (id=141): syz_mount_image$ext4(&(0x7f0000001d80)='ext4\x00', &(0x7f0000001dc0)='./file0\x00', 0x200000, &(0x7f0000001e00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f0000001ec0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") open(&(0x7f0000002440)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000002480)=@loop={'/dev/loop', 0x0}, &(0x7f00000024c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000002500)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) creat(&(0x7f0000003680)='./file1\x00', 0x0) 2.113674474s ago: executing program 4 (id=143): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000c80)={0x0, 0xb007}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000cc0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d00)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000d40)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000d80)={0x11, 0x0, r2}, 0x14) 2.024249453s ago: executing program 4 (id=144): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000000240)={0x26, 0x7}) rt_tgsigqueueinfo(r0, r1, 0x36, &(0x7f00000002c0)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)={[0x100000001]}, 0x8) 2.024030963s ago: executing program 4 (id=145): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000400)={@multicast2, @loopback, @empty}, 0xc) 1.808070775s ago: executing program 4 (id=148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000680)=0x100000001, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000700), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000740)=0xfffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1.717264104s ago: executing program 6 (id=151): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x102, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000004c0)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2076) ppoll(&(0x7f0000000500)=[{r1, 0x2090}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 1.642230842s ago: executing program 4 (id=152): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x45) syz_usb_connect(0x5, 0x36, 0x0, 0x0) 1.17168626s ago: executing program 7 (id=134): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 1.152981542s ago: executing program 7 (id=153): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000cc0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000d40)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d80)={r3, 0x0, 0x0}, 0x20) 1.100236467s ago: executing program 7 (id=154): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) read(r0, &(0x7f0000000a00), 0x1000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 979.32013ms ago: executing program 8 (id=146): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x4}, 0x6) syz_ublk_setup_io_uring(0xd, &(0x7f0000000300)={0x0, 0x30b5, 0x0, 0x2, 0x377}, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000180)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r3, r1, 0x0) 948.538623ms ago: executing program 8 (id=155): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x80, 0x1, 0x3}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)) syz_io_uring_modify_offsets$flags(r1, r2, 0x68, 0x1) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x8) r3 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000500)=r3, 0x1) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 858.528592ms ago: executing program 8 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 852.066113ms ago: executing program 6 (id=157): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='mnt\x00', 0x4, &(0x7f0000000200)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000cc0)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000f00)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000087c0)={@id={0x2, 0x0, @a}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 827.133275ms ago: executing program 8 (id=158): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) unshare(0x22060400) r0 = fsopen(&(0x7f0000000380)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x6) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x28) 720.230856ms ago: executing program 8 (id=159): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) unshare(0x22020600) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f0000000080)='/', 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000100), 0x7fa) symlink(0x0, 0x0) 720.078416ms ago: executing program 8 (id=160): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/205, 0xcd}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x205, &(0x7f00000003c0)=0x0) io_submit(r1, 0x47f, &(0x7f0000000400)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1000, r0, 0x0, 0x0, 0x40000008}]) 719.851906ms ago: executing program 6 (id=161): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_btf_id_by_name$bpf_lsm(0x0) 579.721051ms ago: executing program 9 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 500.287909ms ago: executing program 9 (id=168): r0 = memfd_create(&(0x7f0000000700)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0x20176000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000900)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000940)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000980)={&(0x7f00005a7000/0x3000)=nil, &(0x7f0000a16000/0x1000)=nil, 0x3000, 0x1}) 484.255941ms ago: executing program 9 (id=169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000740)={0x0, &(0x7f0000000780)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6806, 0x10000000, 0x80}}], 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 342.291525ms ago: executing program 9 (id=170): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000380)={&(0x7f0000000400)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="0200ee050a000200aae6dd462c0200000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x14040080}, 0x800) 250.701764ms ago: executing program 7 (id=171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e22, 0x4, @rand_addr, 0x7fff}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000780)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000007c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000840)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) 250.525894ms ago: executing program 7 (id=172): syz_mount_image$ext4(&(0x7f0000000f40)='ext4\x00', &(0x7f0000000f80)='./file1\x00', 0x804000, &(0x7f0000000fc0), 0xff, 0x54a, &(0x7f0000001000)="$eJzs3U9vHGcZAPBn1l7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQt0pI5R6MvbGsrL2RvW5jq4LNJ0BCCJA4wYULEh8ACUXiwhEhRYIzSEUgBClIcCgdNLOzdrqZtTdhvUvs30+azPvOv+d5N57ZmZ1XMwGcWc9HxBsR8WGapi9FxHwxvVIM0ekO2XLv3393NRuSSNO3/pZEUkzLFkvTNO1t82K+ytRBjG8mDwScLcZ7+zdXms3GdlGttzdv1Xf29q9ubK6sN9YbW0tLi68uv7b8yvK1kbTzUkS8/pU/ff87P/3q67/8/Dt/vP6XK9/K0por5vfa8Rimj5rZbXr13GzfCtuPGez/Udae6gdF5fxw69w5yYQAABgoO8f/WER8JiJeivmYOvp0FgAAAHgCpV+aiw+S7v27EjMDpgMAAABPkEreBzap1Iq+AHNRqdRq3T68n4gLlWZrp/25G63drbVuX9mFqFZubDQb14q+wgtRTbL6Yl4+rL/cV1+KiKcj4nvz5/N6bbXVXJv0jx8AAABwRlzsu/7/53z3+v9oyXiSAwAAAEZnYdIJAAAAACfO9T8AAACcatVJJwAAAACcuK+9+WY2pL33X6+9vbd7s/X21bXGzs3a5u5qbbW1fau23mqt58/s2zxue81W69YXYmv3dr3d2GnXL+3tX99s7W61r2/E7FgaBAAAADzk6U/f/X0SEZ0vns+HzMykkwLGYvqg1HumZ8ne/4enuuP3xpQUMBZTQyzz3rny6c4T4Mk23T9hwL4OnD76/wPHvdFjYOed33RHlRHnAwAAjN7lT5Xf/z/+fL7jlB+ecHZiOLv67v+n85NKBBi7/P7/sB15nCzAqVIdqgcgcJr9r/f/j5emj5QQAAAwcnP5kFRqxc97c1Gp1GoRl/LXAlaTGxvNxrWIeCoifjdfPZfVF/M1k2OvGQAAAAAAAAAAAAAAAAAAAAAAAACArjRNIgUAAABOtYjKn5NfdZ/lf3n+xbn+3wdmkn/nrwSeiYh3fvTWD26vtNvbi9n0vx9Mb/+wmP7yJH7BAAAAAPr1rtPz8b8mnQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp837999d7Q1DLH5+VHH/+uWIWCiLPx2z+Xg2qhFx4R9JTD+wXhIRUyOI37kTEZ8si59kaR2ELIs/ig+hcyfppLnS+LFQfApl8S+OID6cZXez488bZft/JZ7Px+X733TER+qPa/DxLw6Of1MD9v9LQ8Z45t7P6wPj34l4Zrr8+NeLnwyI/8JQ0avxja/v7w+am/444nLv+yc/4j0Y4bBUb2/equ/s7V/d2FxZb6w3tpaWFl9dfm35leVr9RsbzUbxb2mM7z77iw+Pav+F0u+/pMhmcPtfLNneVEn+/7l3+/7He5XOw/GvvFAS/9c/KZZ4OH6liPPZopzNv9wrd7rlBz33s98+d1T71w7bX32U//8rgzba76Ed5dnh/nQAgBOxs7d/c6XZbGyfdCG7WB5XrI8UssBjDzqawsxkPrGzU/h2Vrg3qg2maZpm+1TJrLsRMcx2khhxSyvl+RwWBh4BJn1kAgAARu3wpH/SmQAAAAAAAAAAAAAAAAAAAMDZNY6nrPXHPHwEcjKKR2gDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzEfwMAAP//O7TZvA==") renameat2(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000015c0)='./file2\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000c40)={@id={0x2, 0x0, @d}}) mkdir(&(0x7f0000000c80)='./control\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 202.007239ms ago: executing program 6 (id=173): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) 201.860459ms ago: executing program 6 (id=174): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000006c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}, 0x9}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000001a80)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 107.640829ms ago: executing program 6 (id=175): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000002400)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000002440)) timer_settime(0x0, 0x0, &(0x7f0000002480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/126, 0x7e}], 0x1) 67.813803ms ago: executing program 9 (id=176): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xdff) accept(r0, 0x0, 0x0) shutdown(r0, 0x0) 0s ago: executing program 9 (id=177): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 22.009732][ T28] audit: type=1400 audit(1793863072.034:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.010828][ T279] cgroup: Unknown subsys name 'net' [ 22.032400][ T28] audit: type=1400 audit(1793863072.034:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.059636][ T28] audit: type=1400 audit(1793863072.064:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.059773][ T279] cgroup: Unknown subsys name 'devices' [ 22.203134][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.208731][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.310744][ T28] audit: type=1400 audit(1793863072.334:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.333930][ T28] audit: type=1400 audit(1793863072.334:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.358696][ T28] audit: type=1400 audit(1793863072.334:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.366977][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.390781][ T28] audit: type=1400 audit(1793863072.414:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.416268][ T28] audit: type=1400 audit(1793863072.414:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.416286][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.442369][ T28] audit: type=1400 audit(1793863072.444:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.475974][ T28] audit: type=1400 audit(1793863072.444:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.440996][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.448128][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.455570][ T290] device bridge_slave_0 entered promiscuous mode [ 23.463891][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.470913][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.478361][ T290] device bridge_slave_1 entered promiscuous mode [ 23.502198][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.509234][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.516578][ T289] device bridge_slave_0 entered promiscuous mode [ 23.525432][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.532608][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.539853][ T289] device bridge_slave_1 entered promiscuous mode [ 23.587741][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.594820][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.602228][ T287] device bridge_slave_0 entered promiscuous mode [ 23.630198][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.637269][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.644671][ T287] device bridge_slave_1 entered promiscuous mode [ 23.690358][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.697455][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.704815][ T288] device bridge_slave_0 entered promiscuous mode [ 23.714341][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.721372][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.728836][ T288] device bridge_slave_1 entered promiscuous mode [ 23.764005][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.771132][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.778562][ T291] device bridge_slave_0 entered promiscuous mode [ 23.787986][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.795115][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.802523][ T291] device bridge_slave_1 entered promiscuous mode [ 23.916318][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.923380][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.930638][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.937675][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.948547][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.955624][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.962903][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.969920][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.997625][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.004694][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.011957][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.018970][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.028995][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.036053][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.043324][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.050338][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.072881][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.079926][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.087224][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.094259][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.120774][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.128256][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.135832][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.143256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.150706][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.158043][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.165241][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.172733][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.179841][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.187114][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.194302][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.203570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.232541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.240364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.248051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.256338][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.263381][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.271346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.279543][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.286562][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.293932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.301826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.309660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.317287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.324715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.332826][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.339843][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.347188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.355290][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.362310][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.371053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.379254][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.386281][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.405767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.414001][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.421004][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.428506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.437065][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.444094][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.451391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.459549][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.466562][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.473913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.482544][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.489550][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.496980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.504884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.521951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.530124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.538106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.546502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.554615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.563010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.571079][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.578100][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.590303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.598716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.611141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.619262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.627196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.635830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.652452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.660877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.669202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.677842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.689449][ T287] device veth0_vlan entered promiscuous mode [ 24.699571][ T290] device veth0_vlan entered promiscuous mode [ 24.710880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.718770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.726952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.735165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.743206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.750995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.759058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.767160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.775199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.782766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.790110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.797689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.812505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.820632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.828769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.836585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.849237][ T287] device veth1_macvtap entered promiscuous mode [ 24.856996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.864648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.872188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.879557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.888348][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.896775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.904909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.913543][ T289] device veth0_vlan entered promiscuous mode [ 24.922496][ T290] device veth1_macvtap entered promiscuous mode [ 24.932077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.939866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.948187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.956546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.964558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.972858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.980286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.996111][ T291] device veth0_vlan entered promiscuous mode [ 25.003195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.011437][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.019828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.027855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.036010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.044353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.052732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.060165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.071858][ T288] device veth0_vlan entered promiscuous mode [ 25.084362][ T291] device veth1_macvtap entered promiscuous mode [ 25.092184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.100360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.108567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.117971][ T289] device veth1_macvtap entered promiscuous mode [ 25.133836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.141741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.141803][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 25.150009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.165705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.174155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.182494][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.190687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.199206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.207565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.227872][ T288] device veth1_macvtap entered promiscuous mode [ 25.245026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.258347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.266759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.275192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.283757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.292055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.333067][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.352373][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.381926][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.390332][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.469784][ T317] syz.4.5 (317) used greatest stack depth: 19488 bytes left [ 25.508397][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 25.524499][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 25.537118][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 25.551408][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 25.561377][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 25.574135][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 25.590886][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 25.601456][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 25.610122][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.730009][ T374] SELinux: failed to load policy [ 25.753362][ T378] loop1: detected capacity change from 0 to 512 [ 25.780291][ T378] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.31: Unrecognised inode hash code 255 [ 25.792397][ T378] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.31: Corrupt directory, running e2fsck is recommended [ 25.810118][ T378] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 25.818812][ T378] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.31: corrupted in-inode xattr [ 25.831009][ T378] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.31: couldn't read orphan inode 15 (err -117) [ 25.843201][ T378] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 25.867563][ T288] EXT4-fs (loop1): unmounting filesystem. [ 25.939756][ T386] process 'syz.1.32' launched './file1' with NULL argv: empty string added [ 26.310481][ T392] device pim6reg1 entered promiscuous mode [ 26.438672][ T413] netlink: 68 bytes leftover after parsing attributes in process `syz.0.45'. [ 26.447974][ T413] netlink: 4200 bytes leftover after parsing attributes in process `syz.0.45'. [ 26.514961][ T426] sock: sock_set_timeout: `syz.0.50' (pid 426) tries to set negative timeout [ 26.535622][ T430] loop3: detected capacity change from 0 to 1024 [ 26.553387][ T430] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.145579][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 27.145593][ T28] audit: type=1400 audit(1793863078.175:174): avc: denied { create } for pid=452 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.471599][ T461] Zero length message leads to an empty skb [ 27.569838][ T28] audit: type=1400 audit(1793863078.595:175): avc: denied { write } for pid=470 comm="syz.1.68" name="anycast6" dev="proc" ino=4026532518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 27.634295][ T28] audit: type=1400 audit(1793863078.645:176): avc: denied { unlink } for pid=290 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.730580][ T28] audit: type=1400 audit(1793863078.705:177): avc: denied { name_bind } for pid=485 comm="syz.4.76" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 27.771940][ T289] EXT4-fs (loop3): unmounting filesystem. [ 27.799147][ T28] audit: type=1400 audit(1793863078.825:178): avc: denied { execute } for pid=499 comm="syz.1.83" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.936819][ T491] loop4: detected capacity change from 0 to 40427 [ 27.948102][ T513] loop0: detected capacity change from 0 to 256 [ 27.962526][ T491] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 27.974564][ T491] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 27.983417][ T513] exfat: Deprecated parameter 'namecase' [ 27.993574][ T513] exFAT-fs (loop0): failed to load upcase table (idx : 0x000124d2, chksum : 0x8bf59041, utbl_chksum : 0xe619d30d) [ 28.007029][ T491] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.039519][ T28] audit: type=1400 audit(1793863079.065:179): avc: denied { write } for pid=512 comm="syz.0.87" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.063210][ T28] audit: type=1400 audit(1793863079.095:180): avc: denied { add_name } for pid=512 comm="syz.0.87" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.084685][ T28] audit: type=1400 audit(1793863079.095:181): avc: denied { associate } for pid=512 comm="syz.0.87" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.093891][ T500] syz.1.83 (500) used greatest stack depth: 18984 bytes left [ 28.110882][ T28] audit: type=1400 audit(1793863079.095:182): avc: denied { write open } for pid=512 comm="syz.0.87" path=2F31392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop0" ino=1048645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.121697][ T491] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 28.150964][ T28] audit: type=1400 audit(1793863079.115:183): avc: denied { mounton } for pid=512 comm="syz.0.87" path=2F31392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop0" ino=1048645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.172703][ T491] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.194301][ T513] loop0: detected capacity change from 256 to 0 [ 28.209128][ C0] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.218821][ C0] I/O error, dev loop0, sector 161 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.228485][ C0] I/O error, dev loop0, sector 162 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.238172][ C0] I/O error, dev loop0, sector 163 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.247828][ C0] I/O error, dev loop0, sector 164 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.257512][ C0] I/O error, dev loop0, sector 165 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.267171][ C0] I/O error, dev loop0, sector 166 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.276850][ C0] I/O error, dev loop0, sector 167 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.282828][ C1] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 28.289564][ T290] syz-executor: attempt to access beyond end of device [ 28.289564][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 28.301731][ C1] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.325203][ T8] loop: Write error at byte offset 9223372036854775807, length 512. [ 28.334562][ C1] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 28.376047][ T528] loop1: detected capacity change from 0 to 1024 [ 28.383887][ T528] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 28.395824][ T528] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 28.405522][ T528] EXT4-fs (loop1): failed to open journal device unknown-block(11,8) -6 [ 28.654237][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.661300][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.669535][ T540] device bridge_slave_0 entered promiscuous mode [ 28.676831][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.684047][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.692106][ T540] device bridge_slave_1 entered promiscuous mode [ 28.730700][ T567] loop3: detected capacity change from 0 to 1024 [ 28.751792][ T567] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.793536][ T572] netlink: 'syz.4.109': attribute type 4 has an invalid length. [ 28.804554][ T567] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.827590][ T524] device bridge_slave_1 left promiscuous mode [ 28.835008][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.851935][ T524] device bridge_slave_0 left promiscuous mode [ 28.859010][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.867489][ T524] device veth1_macvtap left promiscuous mode [ 28.873672][ T524] device veth0_vlan left promiscuous mode [ 28.901572][ T567] loop3: detected capacity change from 1024 to 64 [ 28.909748][ T578] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.961099][ T289] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 28.974891][ T289] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 28.989785][ T289] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.003725][ T289] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.009596][ T572] netlink: 'syz.4.109': attribute type 4 has an invalid length. [ 29.017295][ T289] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.038365][ T289] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.056950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.071261][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.078874][ T289] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.096129][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.109687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.118338][ T289] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.132391][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.139421][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.160128][ T289] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.177970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.197844][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.212802][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.224325][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.231371][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.250082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.266239][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.298755][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.316193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.329155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.329494][ T289] EXT4-fs (loop3): unmounting filesystem. [ 29.348139][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.356307][ T569] kmmpd-loop3: attempt to access beyond end of device [ 29.356307][ T569] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 29.363754][ T598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 29.387415][ T569] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 29.410435][ T540] device veth0_vlan entered promiscuous mode [ 29.433733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.453073][ T540] device veth1_macvtap entered promiscuous mode [ 29.473901][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.503452][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.529339][ T612] loop1: detected capacity change from 0 to 1024 [ 29.550563][ T615] loop2: detected capacity change from 0 to 256 [ 29.561912][ T612] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.575797][ T615] exfat: Deprecated parameter 'namecase' [ 29.603710][ T615] exFAT-fs (loop2): failed to load upcase table (idx : 0x000124d2, chksum : 0x8bf59041, utbl_chksum : 0xe619d30d) [ 29.639059][ T612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.692851][ T308] loop: Write error at byte offset 9223372036854775807, length 512. [ 29.700924][ C1] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 29.704794][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.716285][ T619] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.728597][ T619] device bridge_slave_0 entered promiscuous mode [ 29.741607][ T288] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.755189][ T288] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.768894][ T288] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.782695][ T288] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.796300][ T288] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.810166][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.810369][ T288] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.817262][ T619] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.839975][ T288] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.840520][ T619] device bridge_slave_1 entered promiscuous mode [ 29.853977][ T288] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.875080][ T288] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.889272][ T288] EXT4-fs warning (device loop1): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 29.922882][ T417] EXT4-fs (loop1): unmounting filesystem. [ 29.948508][ T619] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.955600][ T619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.962896][ T619] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.969919][ T619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.977826][ T618] kmmpd-loop1: attempt to access beyond end of device [ 29.977826][ T618] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 29.994419][ T618] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 30.040393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.058284][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.065759][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.096456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.107821][ T638] TCP: TCP_TX_DELAY enabled [ 30.122920][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.129976][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.167718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.176209][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.179302][ T643] exfat: Deprecated parameter 'namecase' [ 30.183273][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.183997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.202151][ T643] exFAT-fs (loop5): failed to load upcase table (idx : 0x000124d2, chksum : 0x8bf59041, utbl_chksum : 0xe619d30d) [ 30.204956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.242606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.256695][ T619] device veth0_vlan entered promiscuous mode [ 30.264618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.273691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.281138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.315084][ T640] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.323111][ T640] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.330537][ T640] device bridge_slave_0 entered promiscuous mode [ 30.337762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.345901][ T43] loop: Write error at byte offset 9223372036854775807, length 512. [ 30.354152][ C1] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 30.355650][ T619] device veth1_macvtap entered promiscuous mode [ 30.372045][ T640] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.379068][ T640] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.386512][ T640] device bridge_slave_1 entered promiscuous mode [ 30.416606][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.435593][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.487713][ T644] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.501328][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.509068][ T644] device bridge_slave_0 entered promiscuous mode [ 30.518808][ T644] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.525936][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.533967][ T644] device bridge_slave_1 entered promiscuous mode [ 30.580445][ T640] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.587521][ T640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.594800][ T640] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.601833][ T640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.631584][ T656] IPv4: Oversized IP packet from 127.202.26.0 [ 30.673270][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.683080][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.702921][ T661] netlink: 'syz.4.145': attribute type 4 has an invalid length. [ 30.712763][ T308] device bridge_slave_1 left promiscuous mode [ 30.718887][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.726712][ T308] device bridge_slave_0 left promiscuous mode [ 30.726846][ T654] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 30.734350][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.740849][ T654] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 30.755620][ T308] device veth1_macvtap left promiscuous mode [ 30.760642][ T654] F2FS-fs (loop6): Found nat_bits in checkpoint [ 30.765933][ T308] device veth0_vlan left promiscuous mode [ 30.797584][ T654] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 30.805505][ T654] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 30.838191][ T619] syz-executor: attempt to access beyond end of device [ 30.838191][ T619] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.892616][ T661] netlink: 'syz.4.145': attribute type 4 has an invalid length. [ 30.934515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.942796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.980930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.989932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.998456][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.005517][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.018001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.026376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.034535][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.041570][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.048955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.057331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.065481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.074152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.102840][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.111156][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.136366][ T657] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.143974][ T657] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.151407][ T657] device bridge_slave_0 entered promiscuous mode [ 31.158714][ T657] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.165862][ T657] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.173169][ T657] device bridge_slave_1 entered promiscuous mode [ 31.192743][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.200706][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.209009][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.216471][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.224062][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.231505][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.243198][ T640] device veth0_vlan entered promiscuous mode [ 31.252448][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.260733][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.269015][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.276065][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.283477][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.292055][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.300169][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.307204][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.314591][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.349881][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.358045][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.366926][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.375607][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.384760][ T640] device veth1_macvtap entered promiscuous mode [ 31.397266][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.404895][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.412964][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.440500][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.449011][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.468279][ T644] device veth0_vlan entered promiscuous mode [ 31.475316][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.483788][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.492074][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.499437][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.506925][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.515235][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.546666][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.560667][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.569059][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.578945][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.585993][ T524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.593993][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.602585][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.609601][ T524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.617798][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.630157][ T644] device veth1_macvtap entered promiscuous mode [ 31.642822][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.651129][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.666316][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.674668][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.683256][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.696152][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.704315][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.729938][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.738555][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.755821][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.765526][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.774926][ T657] device veth0_vlan entered promiscuous mode [ 31.787441][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.794951][ T524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.807301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.815915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.879600][ T657] device veth1_macvtap entered promiscuous mode [ 31.890201][ T702] set_capacity_and_notify: 5 callbacks suppressed [ 31.890216][ T702] loop6: detected capacity change from 0 to 128 [ 31.909643][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.919392][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.923626][ T702] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 31.928292][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.936480][ T702] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.946667][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.963116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.001208][ T619] EXT4-fs (loop6): unmounting filesystem. [ 32.042946][ T308] device bridge_slave_1 left promiscuous mode [ 32.057995][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.070095][ T308] device bridge_slave_0 left promiscuous mode [ 32.080170][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.100324][ T308] device bridge_slave_1 left promiscuous mode [ 32.108876][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.125029][ T308] device bridge_slave_0 left promiscuous mode [ 32.134651][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.153431][ T308] device veth1_macvtap left promiscuous mode [ 32.159464][ T308] device veth0_vlan left promiscuous mode [ 32.168706][ T308] device veth1_macvtap left promiscuous mode [ 32.175712][ T308] device veth0_vlan left promiscuous mode [ 32.267161][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 32.267175][ T28] audit: type=1400 audit(1793863083.295:212): avc: denied { ioctl } for pid=732 comm="syz.9.169" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.283507][ T733] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.462977][ T741] loop7: detected capacity change from 0 to 512 [ 32.470099][ T741] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.494290][ T741] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 32.508762][ T28] audit: type=1400 audit(1793863083.525:213): avc: denied { create } for pid=743 comm="syz.6.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.512599][ T741] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.172: bg 0: block 248: padding at end of block bitmap is not set [ 32.532475][ T28] audit: type=1400 audit(1793863083.525:214): avc: denied { connect } for pid=743 comm="syz.6.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.542870][ T741] Quota error (device loop7): write_blk: dquota write failed [ 32.576322][ T28] audit: type=1400 audit(1793863083.535:215): avc: denied { ioctl } for pid=743 comm="syz.6.173" path="socket:[18750]" dev="sockfs" ino=18750 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.577318][ T741] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 32.610828][ T741] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.172: Failed to acquire dquot type 1 [ 32.622859][ T741] EXT4-fs (loop7): 1 truncate cleaned up [ 32.628642][ T741] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 32.637072][ T28] audit: type=1326 audit(1793863083.655:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=751 comm="syz.9.176" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bd39fb19 code=0x7ffc0000 [ 32.647773][ T741] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 32.665398][ T28] audit: type=1326 audit(1793863083.665:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=751 comm="syz.9.176" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37bd39fb19 code=0x7ffc0000 [ 32.676573][ T741] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 32.706713][ T741] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.172: Failed to acquire dquot type 1 [ 32.707323][ T753] EXT4-fs (loop7): shut down requested (2) [ 32.741566][ C0] ================================================================== [ 32.749647][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 32.757021][ C0] Read of size 8 at addr ffff888132973990 by task kworker/u4:0/8 [ 32.764716][ C0] [ 32.767027][ C0] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 32.774306][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 32.784365][ C0] Workqueue: writeback wb_workfn (flush-7:7) [ 32.790394][ C0] Call Trace: [ 32.793674][ C0] [ 32.796518][ C0] __dump_stack+0x21/0x24 [ 32.800853][ C0] dump_stack_lvl+0x110/0x170 [ 32.805535][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.810562][ C0] ? debug_smp_processor_id+0x17/0x20 [ 32.815940][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 32.820966][ C0] print_address_description+0x71/0x200 [ 32.826494][ C0] print_report+0x4a/0x60 [ 32.830803][ C0] kasan_report+0x122/0x150 [ 32.835281][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 32.840280][ C0] __asan_report_load8_noabort+0x14/0x20 [ 32.845887][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 32.850719][ C0] rcu_do_batch+0x4bc/0xc30 [ 32.855195][ C0] ? rcu_core+0xf00/0xf00 [ 32.859498][ C0] ? __kasan_check_write+0x14/0x20 [ 32.864585][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 32.870017][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 32.875881][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 32.881661][ C0] ? rcu_report_qs_rnp+0x2b9/0x390 [ 32.886750][ C0] rcu_core+0x486/0xf00 [ 32.890882][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 32.896053][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 32.901236][ C0] ? run_rebalance_domains+0xf7/0x1c0 [ 32.906585][ C0] rcu_core_si+0x9/0x10 [ 32.910719][ C0] handle_softirqs+0x1dd/0x5f0 [ 32.915472][ C0] __irq_exit_rcu+0x52/0xf0 [ 32.919962][ C0] irq_exit_rcu+0x9/0x10 [ 32.924191][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 32.929800][ C0] [ 32.932708][ C0] [ 32.935615][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 32.941570][ C0] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 32.947351][ C0] Code: 74 12 48 89 fb 48 c7 c7 c0 db 0d 87 e8 d1 fa b4 fc 48 89 df 48 83 3d 26 c8 0b 02 00 74 26 e8 13 0d 00 00 90 fb bf 01 00 00 00 83 83 4a fc 65 8b 05 14 5a 00 7b 85 c0 74 03 5b 5d c3 e8 e4 68 [ 32.966930][ C0] RSP: 0018:ffffc900000874d8 EFLAGS: 00000246 [ 32.972983][ C0] RAX: 0000000000000001 RBX: ffff88810bb6287c RCX: dffffc0000000000 [ 32.980929][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 32.988877][ C0] RBP: ffffc900000874e0 R08: ffffc90000087167 R09: 1ffff92000010e2c [ 32.996827][ C0] R10: 0000000000000000 R11: ffffffff8134b090 R12: ffff88810bb62880 [ 33.004777][ C0] R13: ffff88810bbe8b88 R14: dffffc0000000000 R15: ffff88810bb62888 [ 33.012728][ C0] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 33.017998][ C0] ? _raw_spin_unlock_irq+0x41/0x70 [ 33.023170][ C0] loop_queue_rq+0x927/0xae0 [ 33.027737][ C0] __blk_mq_try_issue_directly+0x4d0/0x7e0 [ 33.033542][ C0] ? blk_mq_commit_rqs+0x280/0x280 [ 33.038635][ C0] ? _find_next_bit+0x129/0x130 [ 33.043468][ C0] blk_mq_plug_issue_direct+0x173/0x3e0 [ 33.049031][ C0] blk_mq_flush_plug_list+0x450/0xa70 [ 33.054400][ C0] ? __cfi_blk_mq_flush_plug_list+0x10/0x10 [ 33.060273][ C0] __blk_flush_plug+0x3f2/0x470 [ 33.065105][ C0] ? __cfi___blk_flush_plug+0x10/0x10 [ 33.070453][ C0] ? up_read+0x56/0x1d0 [ 33.074611][ C0] blk_finish_plug+0x5d/0x80 [ 33.079195][ C0] wb_writeback+0x917/0x990 [ 33.083690][ C0] ? inode_cgwb_move_to_attached+0x3b0/0x3b0 [ 33.089651][ C0] ? __kasan_check_write+0x14/0x20 [ 33.094744][ C0] wb_workfn+0xae6/0xeb0 [ 33.098972][ C0] ? __cfi_wb_workfn+0x10/0x10 [ 33.103713][ C0] ? __schedule+0xcbb/0x1700 [ 33.108279][ C0] process_one_work+0x717/0xc30 [ 33.113107][ C0] worker_thread+0xa4d/0x11d0 [ 33.117760][ C0] kthread+0x281/0x320 [ 33.121833][ C0] ? __cfi_worker_thread+0x10/0x10 [ 33.126915][ C0] ? __cfi_kthread+0x10/0x10 [ 33.131478][ C0] ret_from_fork+0x1f/0x30 [ 33.135903][ C0] [ 33.138907][ C0] [ 33.141205][ C0] Allocated by task 744: [ 33.145422][ C0] kasan_set_track+0x4b/0x70 [ 33.149993][ C0] kasan_save_alloc_info+0x1f/0x30 [ 33.155075][ C0] __kasan_kmalloc+0x95/0xb0 [ 33.159665][ C0] __kmalloc+0xb4/0x1e0 [ 33.163804][ C0] l2tp_session_create+0x38/0xbd0 [ 33.168806][ C0] pppol2tp_connect+0xbf5/0x1640 [ 33.173734][ C0] __sys_connect+0x3da/0x460 [ 33.178299][ C0] __x64_sys_connect+0x7a/0x90 [ 33.183038][ C0] x64_sys_call+0x88d/0x9a0 [ 33.187513][ C0] do_syscall_64+0x4c/0xa0 [ 33.191904][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.197785][ C0] [ 33.200080][ C0] Freed by task 8: [ 33.203772][ C0] kasan_set_track+0x4b/0x70 [ 33.208445][ C0] kasan_save_free_info+0x2b/0x40 [ 33.213440][ C0] ____kasan_slab_free+0x132/0x180 [ 33.218525][ C0] __kasan_slab_free+0x11/0x20 [ 33.223262][ C0] slab_free_freelist_hook+0xc2/0x190 [ 33.228606][ C0] __kmem_cache_free+0xb7/0x1b0 [ 33.233431][ C0] kfree+0x6f/0xf0 [ 33.237123][ C0] l2tp_session_put+0xaf/0x1a0 [ 33.241863][ C0] l2tp_session_delete+0x3df/0x4d0 [ 33.246952][ C0] l2tp_tunnel_del_work+0x199/0x410 [ 33.252123][ C0] process_one_work+0x717/0xc30 [ 33.256948][ C0] worker_thread+0xa4d/0x11d0 [ 33.261621][ C0] kthread+0x281/0x320 [ 33.265663][ C0] ret_from_fork+0x1f/0x30 [ 33.270052][ C0] [ 33.272350][ C0] Last potentially related work creation: [ 33.278050][ C0] kasan_save_stack+0x3a/0x60 [ 33.282704][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 33.288049][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 33.293836][ C0] call_rcu+0xcf/0xf50 [ 33.297883][ C0] pppol2tp_release+0x1e3/0x2b0 [ 33.302738][ C0] sock_close+0xc9/0x220 [ 33.307021][ C0] __fput+0x1fd/0x8f0 [ 33.310976][ C0] ____fput+0x15/0x20 [ 33.314937][ C0] task_work_run+0x1e1/0x250 [ 33.319503][ C0] do_exit+0xb0d/0x29f0 [ 33.323633][ C0] __cfi___ia32_sys_exit+0x0/0x10 [ 33.328634][ C0] x64_sys_call+0x67/0x9a0 [ 33.333023][ C0] do_syscall_64+0x4c/0xa0 [ 33.337411][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.343281][ C0] [ 33.345581][ C0] The buggy address belongs to the object at ffff888132973800 [ 33.345581][ C0] which belongs to the cache kmalloc-512 of size 512 [ 33.359619][ C0] The buggy address is located 400 bytes inside of [ 33.359619][ C0] 512-byte region [ffff888132973800, ffff888132973a00) [ 33.372865][ C0] [ 33.375169][ C0] The buggy address belongs to the physical page: [ 33.381551][ C0] page:ffffea0004ca5c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x132970 [ 33.391774][ C0] head:ffffea0004ca5c00 order:2 compound_mapcount:0 compound_pincount:0 [ 33.400106][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 33.406160][ C0] raw: 4000000000010200 ffffea0004ca5a00 dead000000000002 ffff888100042f00 [ 33.414717][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 33.423277][ C0] page dumped because: kasan: bad access detected [ 33.429666][ C0] page_owner tracks the page as allocated [ 33.435350][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 290, tgid 290 (syz-executor), ts 24710124430, free_ts 0 [ 33.455634][ C0] post_alloc_hook+0x1f5/0x210 [ 33.460384][ C0] prep_new_page+0x1c/0x110 [ 33.464879][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 33.470402][ C0] __alloc_pages+0x1fa/0x610 [ 33.474968][ C0] alloc_slab_page+0x6e/0xf0 [ 33.479530][ C0] new_slab+0x98/0x3e0 [ 33.483571][ C0] ___slab_alloc+0x70f/0xb70 [ 33.488139][ C0] __slab_alloc+0x5e/0xa0 [ 33.492462][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 33.497915][ C0] __kmalloc_node_track_caller+0xa1/0x1e0 [ 33.503606][ C0] __alloc_skb+0x226/0x4a0 [ 33.507998][ C0] netlink_ack+0x373/0x1160 [ 33.512473][ C0] netlink_rcv_skb+0x27e/0x450 [ 33.517226][ C0] rtnetlink_rcv+0x1c/0x20 [ 33.521616][ C0] netlink_unicast+0x8c1/0xa60 [ 33.526367][ C0] netlink_sendmsg+0x8b9/0xbd0 [ 33.531104][ C0] page_owner free stack trace missing [ 33.536442][ C0] [ 33.538738][ C0] Memory state around the buggy address: [ 33.544340][ C0] ffff888132973880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.552374][ C0] ffff888132973900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.560510][ C0] >ffff888132973980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.568542][ C0] ^ [ 33.573107][ C0] ffff888132973a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 33.581140][ C0] ffff888132973a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 33.589173][ C0] ================================================================== [ 33.597249][ C0] Disabling lock debugging due to kernel taint [ 33.603649][ T757] Bluetooth: hci0: command 0x1003 tx timeout [ 33.604826][ T440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.609980][ T640] EXT4-fs (loop7): unmounting filesystem. [ 34.582171][ T308] device bridge_slave_1 left promiscuous mode [ 34.588283][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.595697][ T308] device bridge_slave_0 left promiscuous mode [ 34.601880][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.609563][ T308] device bridge_slave_1 left promiscuous mode [ 34.615715][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.623188][ T308] device bridge_slave_0 left promiscuous mode [ 34.629284][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.637018][ T308] device bridge_slave_1 left promiscuous mode [ 34.643460][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.650755][ T308] device bridge_slave_0 left promiscuous mode [ 34.656945][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.664893][ T308] device veth1_macvtap left promiscuous mode [ 34.670876][ T308] device veth0_vlan left promiscuous mode [ 34.676860][ T308] device veth1_macvtap left promiscuous mode [ 34.682895][ T308] device veth0_vlan left promiscuous mode [ 34.688737][ T308] device veth1_macvtap left promiscuous mode [ 34.694802][ T308] device veth0_vlan left promiscuous mode [ 34.801654][ T682] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 35.952020][ T308] device bridge_slave_1 left promiscuous mode [ 35.958136][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.965578][ T308] device bridge_slave_0 left promiscuous mode [ 35.971774][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.979360][ T308] device veth1_macvtap left promiscuous mode [ 35.985409][ T308] device veth0_vlan left promiscuous mode