last executing test programs: 6.540421949s ago: executing program 4 (id=5): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffd8, 0x0, 0x4, 0xdd67, 0xff, "033a920887e8d2b791f19dd026d76d7fcb0f0e", 0x4, 0xb67}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1, 0x6, 0x8) 6.166797506s ago: executing program 2 (id=3): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000203030000000000000000200000"], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) eventfd2(0x0, 0x0) io_setup(0x81, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r7, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) copy_file_range(r8, &(0x7f00000001c0)=0x3, r1, &(0x7f0000000280)=0x2, 0x4, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r10, 0x800, 0x1ff, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000060}, 0x4004151) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113f00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) 6.12027333s ago: executing program 4 (id=7): syz_usb_connect(0x0, 0x52, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x1, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '|'}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}], [{{0x9, 0x5, 0xa, 0x2, 0x20, 0x1, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1e, 0xf814}]}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0xc, 0xffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 5.806034121s ago: executing program 2 (id=8): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(0x0, &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r4, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') 5.768300605s ago: executing program 2 (id=9): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@time_offset={'time_offset', 0x3d, 0x39e}}, {@numtail}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_mixed}, {@numtail}, {@fat=@nfs_stale_rw}, {@fat=@dmask={'dmask', 0x3d, 0x81}}, {@shortname_lower}, {@fat=@nfs_nostale_ro}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) io_setup(0x987, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vlan0\x00'}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x90) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) 4.099892398s ago: executing program 3 (id=24): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000680)={[{@utf8}, {@fat=@nfs}, {@numtail}, {@rodir}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@numtail}, {@numtail}, {@utf8}, {@uni_xlate}, {@utf8no}, {@shortname_win95}, {@fat=@check_strict}]}, 0x1, 0x360, &(0x7f0000000900)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.932181095s ago: executing program 3 (id=26): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) 3.858362862s ago: executing program 3 (id=28): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.285099358s ago: executing program 4 (id=34): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.400237565s ago: executing program 2 (id=50): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000580)={0x2, &(0x7f0000000540)=[{0x4d, 0x0, 0x7, 0x8}, {0x492, 0x6, 0x6a, 0x7}]}) 2.237924871s ago: executing program 2 (id=51): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000240)=':', 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000280)=0x1ff, 0x4) 2.13710498s ago: executing program 32 (id=51): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000240)=':', 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000280)=0x1ff, 0x4) 1.775153936s ago: executing program 0 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 1.721955161s ago: executing program 0 (id=65): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@namecase}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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") lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 1.62499082s ago: executing program 0 (id=67): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./bus\x00') 1.443263008s ago: executing program 0 (id=68): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x1, 0x40004000) ppoll(&(0x7f0000000440)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 1.276523815s ago: executing program 5 (id=52): unshare(0x22020600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r0, &(0x7f00000003c0)={0x1f, @any, 0x5}, 0xa) 1.22590081s ago: executing program 5 (id=71): ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) sendfile(r0, r0, 0x0, 0x7f03) 1.22570303s ago: executing program 5 (id=72): syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x100) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 1.21980338s ago: executing program 5 (id=75): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x40080) 1.185451663s ago: executing program 5 (id=77): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc49, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.185226934s ago: executing program 1 (id=78): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000000)='./file2\x00', 0x149) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1.185037194s ago: executing program 5 (id=79): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) 1.001580402s ago: executing program 1 (id=80): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x0, 0x9b, 0x5, 0xffffffff7fffffff, 0x2, 0x3, 0x8, 0x2a, 0x38, 0x329, 0xb, 0x0, 0x20, 0x1, 0x9, 0x7ff}, [{0x2, 0x5dbf, 0x2, 0x6, 0x8000, 0x5, 0x400, 0xb}], "", ['\x00', '\x00', '\x00']}, 0x358) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)={0x528, 0x0, 0x38, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7b}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x509, 0xc5, "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"}]}, 0x528}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 938.011338ms ago: executing program 1 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4c10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000b40)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1232010, 0x0, 0xfc, 0x0, &(0x7f0000000100)) 937.843408ms ago: executing program 1 (id=82): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 857.825356ms ago: executing program 3 (id=83): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x2}}, 0x18}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 848.075677ms ago: executing program 3 (id=84): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000700000000000008000000000000000000000461"], 0x0, 0x2d}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 798.073201ms ago: executing program 3 (id=85): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0}) 631.071948ms ago: executing program 0 (id=86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 622.582099ms ago: executing program 0 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) write(r4, &(0x7f0000000040), 0x0) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x18240, 0x15}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000aa8771f7970000000000002000"/25, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 186.053582ms ago: executing program 4 (id=88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) mlockall(0x7) 98.57793ms ago: executing program 1 (id=89): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r1, 0x4, 0x1, 0x3, 0xd, 0x58, @private1, @local, 0x700, 0x1, 0x7, 0x7}}) 23.008768ms ago: executing program 1 (id=90): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 0s ago: executing program 4 (id=91): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 19.734523][ T30] audit: type=1400 audit(1761426474.327:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.735620][ T273] cgroup: Unknown subsys name 'net' [ 19.737961][ T30] audit: type=1400 audit(1761426474.327:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.742113][ T30] audit: type=1400 audit(1761426474.327:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.742247][ T273] cgroup: Unknown subsys name 'devices' [ 19.922299][ T273] cgroup: Unknown subsys name 'hugetlb' [ 19.927889][ T273] cgroup: Unknown subsys name 'rlimit' [ 20.094417][ T30] audit: type=1400 audit(1761426474.687:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.117614][ T30] audit: type=1400 audit(1761426474.687:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.142527][ T30] audit: type=1400 audit(1761426474.687:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.148140][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.174362][ T30] audit: type=1400 audit(1761426474.767:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.199844][ T30] audit: type=1400 audit(1761426474.767:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.233070][ T30] audit: type=1400 audit(1761426474.827:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.258626][ T30] audit: type=1400 audit(1761426474.827:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.258721][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.755782][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.762858][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.770285][ T283] device bridge_slave_0 entered promiscuous mode [ 21.784225][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.791333][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.798714][ T281] device bridge_slave_0 entered promiscuous mode [ 21.805466][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.812614][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.819855][ T283] device bridge_slave_1 entered promiscuous mode [ 21.833526][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.840599][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.847830][ T281] device bridge_slave_1 entered promiscuous mode [ 21.866280][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.873504][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.881004][ T285] device bridge_slave_0 entered promiscuous mode [ 21.894855][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.901910][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.909306][ T285] device bridge_slave_1 entered promiscuous mode [ 21.948240][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.955504][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.963104][ T282] device bridge_slave_0 entered promiscuous mode [ 21.978998][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.986089][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.993501][ T282] device bridge_slave_1 entered promiscuous mode [ 22.010206][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.017270][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.024685][ T284] device bridge_slave_0 entered promiscuous mode [ 22.043606][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.050676][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.058081][ T284] device bridge_slave_1 entered promiscuous mode [ 22.209643][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.216711][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.224043][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.231075][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.245039][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.252100][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.259349][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.266405][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.279236][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.286299][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.293586][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.300616][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.316602][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.323664][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.330928][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.337941][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.355847][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.362916][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.370177][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.377211][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.397565][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.404915][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.412259][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.419807][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.427371][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.434706][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.442136][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.449319][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.456662][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.464063][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.471491][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.497458][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.505736][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.512771][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.520214][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.528539][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.535603][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.543053][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.565960][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.573757][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.582613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.590485][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.598776][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.605817][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.613625][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.621804][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.628807][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.636164][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.643571][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.650998][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.675537][ T285] device veth0_vlan entered promiscuous mode [ 22.682493][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.691902][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.699761][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.707914][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.716231][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.723283][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.730766][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.738883][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.745911][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.753396][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.761566][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.768565][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.775910][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.784070][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.791161][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.798559][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.818114][ T281] device veth0_vlan entered promiscuous mode [ 22.826284][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.833841][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.841501][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.849738][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.858301][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.865372][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.872853][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.881185][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.889270][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.896303][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.903660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.911831][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.919707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.927862][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.935827][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.944421][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.952786][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.960733][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.968645][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.976121][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.989316][ T285] device veth1_macvtap entered promiscuous mode [ 22.997084][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.005361][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.014171][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.026660][ T281] device veth1_macvtap entered promiscuous mode [ 23.041376][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.049644][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.057642][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.065819][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.074091][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.082026][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.090113][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.098193][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.106410][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.114462][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.122621][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.130486][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.138840][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.159790][ T282] device veth0_vlan entered promiscuous mode [ 23.166128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.174366][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.182860][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.191266][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.199487][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.207878][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.216282][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.224577][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.232863][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.240774][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.249876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.257457][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.265389][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.273788][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.287725][ T283] device veth0_vlan entered promiscuous mode [ 23.300422][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.308598][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.308731][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 23.317179][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.331595][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.353250][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.364966][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.385312][ T282] device veth1_macvtap entered promiscuous mode [ 23.399637][ T284] device veth0_vlan entered promiscuous mode [ 23.411387][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.419113][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.428141][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.436794][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.445352][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.454729][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.464052][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.477704][ T283] device veth1_macvtap entered promiscuous mode [ 23.488200][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.496196][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.504006][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.517851][ T284] device veth1_macvtap entered promiscuous mode [ 23.532670][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.542876][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.551436][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.559799][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.568749][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.577629][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.586368][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.595077][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.603717][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.612275][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.630697][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.642223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.691839][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.702612][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.729968][ T350] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.770979][ T352] syz.2.3[352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.771051][ T352] syz.2.3[352] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 23.811212][ T352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 23.847240][ T346] loop3: detected capacity change from 0 to 128 [ 23.871447][ T348] input: syz0 as /devices/virtual/input/input4 [ 23.871661][ T352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 23.953379][ T346] FAT-fs (loop3): bogus number of reserved sectors [ 23.966408][ T346] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 23.997790][ T346] FAT-fs (loop3): Can't find a valid FAT filesystem [ 24.040604][ T340] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.049572][ T352] syz.2.3 (352) used greatest stack depth: 22592 bytes left [ 24.057378][ T360] syz.2.3 (360) used greatest stack depth: 22304 bytes left [ 24.085949][ T364] 9p: Unknown uid 18446744073709551615 [ 24.095225][ T346] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 24.120867][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.130481][ T366] loop2: detected capacity change from 0 to 128 [ 24.144975][ T366] ======================================================= [ 24.144975][ T366] WARNING: The mand mount option has been deprecated and [ 24.144975][ T366] and is ignored by this kernel. Remove the mand [ 24.144975][ T366] option from the mount to silence this warning. [ 24.144975][ T366] ======================================================= [ 24.195038][ T369] loop1: detected capacity change from 0 to 512 [ 24.301047][ T369] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 24.315601][ T369] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.087144][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 25.087248][ T30] audit: type=1400 audit(1761426479.627:141): avc: denied { write } for pid=368 comm="syz.1.10" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.127512][ T376] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.10: invalid size [ 25.138603][ T376] EXT4-fs (loop1): Remounting filesystem read-only [ 25.227702][ T346] syz.3.4 (346) used greatest stack depth: 21760 bytes left [ 25.241343][ T30] audit: type=1400 audit(1761426479.627:142): avc: denied { add_name } for pid=368 comm="syz.1.10" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.287679][ T30] audit: type=1400 audit(1761426479.627:143): avc: denied { create } for pid=368 comm="syz.1.10" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 25.340688][ T340] usb 5-1: unable to get BOS descriptor or descriptor too short [ 25.355113][ T30] audit: type=1400 audit(1761426479.637:144): avc: denied { create } for pid=365 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.385270][ T30] audit: type=1400 audit(1761426479.647:145): avc: denied { connect } for pid=365 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 25.420707][ T340] usb 5-1: config 14 has an invalid interface number: 21 but max is 0 [ 25.434417][ T340] usb 5-1: config 14 has no interface number 0 [ 25.440118][ T376] syz.1.10 (376) used greatest stack depth: 21408 bytes left [ 25.449989][ T340] usb 5-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 25.450093][ T30] audit: type=1400 audit(1761426479.717:146): avc: denied { remove_name } for pid=368 comm="syz.1.10" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.470450][ T340] usb 5-1: config 14 interface 21 has no altsetting 0 [ 25.504090][ T30] audit: type=1400 audit(1761426479.717:147): avc: denied { rename } for pid=368 comm="syz.1.10" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 25.553673][ T333] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.561827][ T30] audit: type=1400 audit(1761426479.717:148): avc: denied { rmdir } for pid=368 comm="syz.1.10" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.584008][ T30] audit: type=1400 audit(1761426479.787:149): avc: denied { read } for pid=368 comm="syz.1.10" path="socket:[15967]" dev="sockfs" ino=15967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.608354][ T30] audit: type=1400 audit(1761426479.897:150): avc: denied { name_bind } for pid=377 comm="syz.3.11" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.700779][ T340] usb 5-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 25.719379][ T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.734063][ T340] usb 5-1: Product: syz [ 25.738334][ T340] usb 5-1: Manufacturer: syz [ 25.743407][ T340] usb 5-1: SerialNumber: syz [ 25.760731][ T356] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 25.789618][ T411] loop3: detected capacity change from 0 to 256 [ 25.830140][ T411] FAT-fs (loop3): Directory bread(block 64) failed [ 25.836951][ T411] FAT-fs (loop3): Directory bread(block 65) failed [ 25.841640][ T414] loop1: detected capacity change from 0 to 4096 [ 25.843934][ T411] FAT-fs (loop3): Directory bread(block 66) failed [ 25.857005][ T411] FAT-fs (loop3): Directory bread(block 67) failed [ 25.863796][ T411] FAT-fs (loop3): Directory bread(block 68) failed [ 25.870402][ T411] FAT-fs (loop3): Directory bread(block 69) failed [ 25.877360][ T411] FAT-fs (loop3): Directory bread(block 70) failed [ 25.884183][ T411] FAT-fs (loop3): Directory bread(block 71) failed [ 25.889064][ T414] EXT4-fs (loop1): Test dummy encryption mode enabled [ 25.891017][ T411] FAT-fs (loop3): Directory bread(block 72) failed [ 25.898582][ T414] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 25.904395][ T411] FAT-fs (loop3): Directory bread(block 73) failed [ 25.912370][ T414] System zones: 0-5 [ 25.928323][ T414] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,barrier,,errors=continue. Quota mode: writeback. [ 25.958866][ T414] fs-verity: sha512 using implementation "sha512-avx2" [ 25.967442][ T414] syz.1.25 (414) used greatest stack depth: 20480 bytes left [ 25.980658][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.015035][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.100705][ T333] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 26.109822][ T333] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 26.118098][ T333] usb 3-1: Manufacturer: syz [ 26.127712][ T333] usb 3-1: config 0 descriptor?? [ 26.220765][ T340] usb 5-1: MIDIStreaming interface descriptor not found [ 26.231739][ T340] usb 5-1: USB disconnect, device number 2 [ 26.290714][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.451984][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:14.21/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.508073][ T434] loop0: detected capacity change from 0 to 1024 [ 26.540642][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 26.541504][ T434] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 26.554308][ T434] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,barrier,minixdf,noblock_validity,debug_want_extra_isize=0x0000000000000080,bsddf,debug,acl,noinit_itable,,errors=continue. Quota mode: none. [ 26.578126][ T434] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.33: bg 0: block 88: padding at end of block bitmap is not set [ 26.690649][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.701549][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 26.711049][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.719740][ T20] usb 4-1: config 0 descriptor?? [ 26.733235][ T455] loop0: detected capacity change from 0 to 128 [ 26.838857][ T459] loop0: detected capacity change from 0 to 512 [ 26.870653][ T340] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 26.911009][ T459] EXT4-fs (loop0): Ignoring removed nobh option [ 26.918472][ T459] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.44: iget: bad i_size value: 38620345925642 [ 26.931193][ T459] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.44: couldn't read orphan inode 15 (err -117) [ 26.943152][ T459] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,grpquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 27.134557][ T468] loop0: detected capacity change from 0 to 40427 [ 27.161904][ T468] F2FS-fs (loop0): fault_injection options not supported [ 27.169100][ T468] F2FS-fs (loop0): fault_type options not supported [ 27.177806][ T340] usb 5-1: Using ep0 maxpacket: 8 [ 27.183662][ T468] F2FS-fs (loop0): invalid crc value [ 27.193506][ T468] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.256217][ T468] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.341841][ T283] attempt to access beyond end of device [ 27.341841][ T283] loop0: rw=2049, want=45104, limit=40427 [ 27.550761][ T333] usbhid 3-1:0.0: can't add hid device: -71 [ 27.557046][ T333] usbhid: probe of 3-1:0.0 failed with error -71 [ 27.563595][ T340] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 27.565018][ T333] usb 3-1: USB disconnect, device number 2 [ 27.644934][ T340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.679139][ T340] usb 5-1: Product: syz [ 27.693463][ T340] usb 5-1: Manufacturer: syz [ 27.707949][ T340] usb 5-1: SerialNumber: syz [ 27.737196][ T340] usb 5-1: config 0 descriptor?? [ 27.926562][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.931993][ T497] loop0: detected capacity change from 0 to 256 [ 27.934365][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.947513][ T487] device bridge_slave_0 entered promiscuous mode [ 27.979860][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.986959][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.997679][ T487] device bridge_slave_1 entered promiscuous mode [ 28.054161][ T506] netlink: 83 bytes leftover after parsing attributes in process `syz.0.59'. [ 28.072816][ T510] loop1: detected capacity change from 0 to 2048 [ 28.094544][ T339] loop1: p1 < > p3 [ 28.100231][ T339] loop1: p3 size 134217728 extends beyond EOD, truncated [ 28.119592][ T510] loop1: p1 < > p3 [ 28.126408][ T510] loop1: p3 size 134217728 extends beyond EOD, truncated [ 28.128728][ T521] loop0: detected capacity change from 0 to 256 [ 28.146460][ T521] exfat: Deprecated parameter 'namecase' [ 28.154248][ T521] exfat: Unknown parameter 'keep_last_dots' [ 28.161915][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.167858][ T101] loop1: p1 < > p3 [ 28.168991][ T487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.173364][ T101] loop1: p3 size 134217728 extends beyond EOD, truncated [ 28.180014][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.194010][ T487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.211083][ T45] device bridge_slave_1 left promiscuous mode [ 28.217243][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.224823][ T45] device bridge_slave_0 left promiscuous mode [ 28.231417][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.239619][ T45] device veth0_vlan left promiscuous mode [ 28.274398][ T339] udevd[339]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 28.276330][ T526] loop1: detected capacity change from 0 to 1024 [ 28.291558][ T527] loop0: detected capacity change from 0 to 128 [ 28.303179][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 28.322520][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 28.331728][ T339] udevd[339]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 28.332673][ T526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 28.351757][ T527] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.364949][ T527] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.365879][ T526] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,barrier,minixdf,noblock_validity,debug_want_extra_isize=0x0000000000000080,bsddf,debug,acl,noinit_itable,,errors=continue. Quota mode: none. [ 28.406906][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.417999][ T526] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.66: bg 0: block 88: padding at end of block bitmap is not set [ 28.419018][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.441288][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.441296][ T526] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.470445][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.479084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.494266][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.505182][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.513417][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.521071][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.535643][ T487] device veth0_vlan entered promiscuous mode [ 28.535785][ T536] loop1: detected capacity change from 0 to 128 [ 28.548231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.557475][ T487] device veth1_macvtap entered promiscuous mode [ 28.567136][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.576740][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.585241][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.701737][ T556] loop1: detected capacity change from 0 to 512 [ 28.772987][ T556] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.786123][ T556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 28.797863][ T556] EXT4-fs (loop1): 1 truncate cleaned up [ 28.803578][ T556] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 28.830054][ T556] EXT4-fs error (device loop1): ext4_xattr_block_list:719: inode #15: comm syz.1.78: corrupted xattr block 33 [ 28.842063][ T556] EXT4-fs (loop1): Remounting filesystem read-only [ 28.907796][ T565] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 28.914817][ T565] overlayfs: failed to set xattr on upper [ 28.970671][ T474] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 29.023130][ T340] usb 4-1: USB disconnect, device number 2 [ 29.330741][ T474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 29.341653][ T474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 29.351758][ T474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 29.362750][ T474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 29.419685][ T580] Zero length message leads to an empty skb [ 29.490663][ T340] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.550800][ T474] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 29.559996][ T474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.568110][ T474] usb 6-1: Product: syz [ 29.572379][ T474] usb 6-1: Manufacturer: syz [ 29.577076][ T474] usb 6-1: SerialNumber: syz [ 29.583782][ T474] usb 6-1: config 0 descriptor?? [ 29.627886][ T474] usb 5-1: USB disconnect, device number 3 [ 29.870672][ T340] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.887773][ T340] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 29.898264][ T340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.904193][ T591] ================================================================== [ 29.907214][ T340] usb 4-1: config 0 descriptor?? [ 29.914347][ T591] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 29.914393][ T591] Read of size 8 at addr ffff888117ccd0c0 by task syz.1.90/591 [ 29.934981][ T591] [ 29.937316][ T591] CPU: 1 PID: 591 Comm: syz.1.90 Not tainted syzkaller #0 [ 29.944401][ T591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 29.954460][ T591] Call Trace: [ 29.957731][ T591] [ 29.960647][ T591] __dump_stack+0x21/0x30 [ 29.964962][ T591] dump_stack_lvl+0xee/0x150 [ 29.969528][ T591] ? show_regs_print_info+0x20/0x20 [ 29.974704][ T591] ? load_image+0x3a0/0x3a0 [ 29.979189][ T591] print_address_description+0x7f/0x2c0 [ 29.985153][ T591] ? tc_setup_flow_action+0x870/0x3240 [ 29.990595][ T591] kasan_report+0xf1/0x140 [ 29.995116][ T591] ? tc_setup_flow_action+0x870/0x3240 [ 30.000552][ T591] __asan_report_load8_noabort+0x14/0x20 [ 30.006202][ T591] tc_setup_flow_action+0x870/0x3240 [ 30.011467][ T591] mall_replace_hw_filter+0x293/0x820 [ 30.016819][ T591] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 30.022884][ T591] ? mall_set_parms+0x520/0x520 [ 30.027759][ T591] ? tcf_exts_destroy+0xb0/0xb0 [ 30.032617][ T591] ? mall_set_parms+0x1e8/0x520 [ 30.037447][ T591] mall_change+0x526/0x740 [ 30.041841][ T591] ? __kasan_check_write+0x14/0x20 [ 30.046932][ T591] ? mall_get+0xa0/0xa0 [ 30.051078][ T591] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 30.056946][ T591] tc_new_tfilter+0x12a2/0x1870 [ 30.061781][ T591] ? tcf_gate_entry_destructor+0x20/0x20 [ 30.067402][ T591] ? security_capable+0x87/0xb0 [ 30.072233][ T591] ? ns_capable+0x8c/0xf0 [ 30.076540][ T591] ? netlink_net_capable+0x125/0x160 [ 30.081797][ T591] ? tcf_gate_entry_destructor+0x20/0x20 [ 30.087406][ T591] rtnetlink_rcv_msg+0x81b/0xb90 [ 30.092324][ T591] ? rtnetlink_bind+0x80/0x80 [ 30.096979][ T591] ? memcpy+0x56/0x70 [ 30.100945][ T591] ? avc_has_perm_noaudit+0x2f4/0x460 [ 30.106295][ T591] ? arch_stack_walk+0xee/0x140 [ 30.111140][ T591] ? avc_denied+0x1b0/0x1b0 [ 30.115654][ T591] ? stack_trace_save+0x98/0xe0 [ 30.120507][ T591] ? avc_has_perm+0x158/0x240 [ 30.125163][ T591] ? avc_has_perm_noaudit+0x460/0x460 [ 30.130515][ T591] ? x64_sys_call+0x4b/0x9a0 [ 30.135085][ T591] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 30.140437][ T591] netlink_rcv_skb+0x1e0/0x430 [ 30.145183][ T591] ? rtnetlink_bind+0x80/0x80 [ 30.149840][ T591] ? netlink_ack+0xb60/0xb60 [ 30.154406][ T591] ? __netlink_lookup+0x387/0x3b0 [ 30.159406][ T591] rtnetlink_rcv+0x1c/0x20 [ 30.163803][ T591] netlink_unicast+0x876/0xa40 [ 30.168543][ T591] netlink_sendmsg+0x86a/0xb70 [ 30.173286][ T591] ? netlink_getsockopt+0x530/0x530 [ 30.178463][ T591] ? security_socket_sendmsg+0x82/0xa0 [ 30.183905][ T591] ? netlink_getsockopt+0x530/0x530 [ 30.189083][ T591] ____sys_sendmsg+0x5a2/0x8c0 [ 30.193832][ T591] ? __sys_sendmsg_sock+0x40/0x40 [ 30.198842][ T591] ? import_iovec+0x7c/0xb0 [ 30.203326][ T591] ___sys_sendmsg+0x1f0/0x260 [ 30.208022][ T591] ? __sys_sendmsg+0x250/0x250 [ 30.212790][ T591] ? sock_show_fdinfo+0xa0/0xa0 [ 30.217621][ T591] ? __fdget+0x1a1/0x230 [ 30.221851][ T591] __x64_sys_sendmsg+0x1e2/0x2a0 [ 30.226796][ T591] ? ___sys_sendmsg+0x260/0x260 [ 30.231632][ T591] ? __kasan_check_write+0x14/0x20 [ 30.236720][ T591] ? switch_fpu_return+0x15d/0x2c0 [ 30.241809][ T591] x64_sys_call+0x4b/0x9a0 [ 30.246202][ T591] do_syscall_64+0x4c/0xa0 [ 30.250596][ T591] ? clear_bhb_loop+0x50/0xa0 [ 30.255253][ T591] ? clear_bhb_loop+0x50/0xa0 [ 30.259906][ T591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.265781][ T591] RIP: 0033:0x7f643f384fc9 [ 30.270174][ T591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.289784][ T591] RSP: 002b:00007f643dded038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.298178][ T591] RAX: ffffffffffffffda RBX: 00007f643f5dbfa0 RCX: 00007f643f384fc9 [ 30.306129][ T591] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 30.314085][ T591] RBP: 00007f643f407f91 R08: 0000000000000000 R09: 0000000000000000 [ 30.322054][ T591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.330057][ T591] R13: 00007f643f5dc038 R14: 00007f643f5dbfa0 R15: 00007ffe1f1a8bf8 [ 30.338029][ T591] [ 30.341052][ T591] [ 30.343357][ T591] Allocated by task 591: [ 30.347574][ T591] __kasan_kmalloc+0xda/0x110 [ 30.352240][ T591] __kmalloc+0x13d/0x2c0 [ 30.356464][ T591] tcf_idr_create+0x5f/0x790 [ 30.361052][ T591] tcf_idr_create_from_flags+0x61/0x70 [ 30.366494][ T591] tcf_gact_init+0x346/0x580 [ 30.371073][ T591] tcf_action_init_1+0x3f7/0x6a0 [ 30.375993][ T591] tcf_action_init+0x1e9/0x710 [ 30.380739][ T591] tcf_exts_validate+0x217/0x520 [ 30.385658][ T591] mall_set_parms+0x48/0x520 [ 30.390324][ T591] mall_change+0x45a/0x740 [ 30.394722][ T591] tc_new_tfilter+0x12a2/0x1870 [ 30.399555][ T591] rtnetlink_rcv_msg+0x81b/0xb90 [ 30.404566][ T591] netlink_rcv_skb+0x1e0/0x430 [ 30.409315][ T591] rtnetlink_rcv+0x1c/0x20 [ 30.413722][ T591] netlink_unicast+0x876/0xa40 [ 30.418470][ T591] netlink_sendmsg+0x86a/0xb70 [ 30.423255][ T591] ____sys_sendmsg+0x5a2/0x8c0 [ 30.428006][ T591] ___sys_sendmsg+0x1f0/0x260 [ 30.432670][ T591] __x64_sys_sendmsg+0x1e2/0x2a0 [ 30.437591][ T591] x64_sys_call+0x4b/0x9a0 [ 30.441997][ T591] do_syscall_64+0x4c/0xa0 [ 30.446403][ T591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.452284][ T591] [ 30.454591][ T591] The buggy address belongs to the object at ffff888117ccd000 [ 30.454591][ T591] which belongs to the cache kmalloc-192 of size 192 [ 30.468636][ T591] The buggy address is located 0 bytes to the right of [ 30.468636][ T591] 192-byte region [ffff888117ccd000, ffff888117ccd0c0) [ 30.482238][ T591] The buggy address belongs to the page: [ 30.487845][ T591] page:ffffea00045f3340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117ccd [ 30.498086][ T591] flags: 0x4000000000000200(slab|zone=1) [ 30.503813][ T591] raw: 4000000000000200 ffffea000465c5c0 0000000200000002 ffff888100042c00 [ 30.512391][ T591] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 30.520953][ T591] page dumped because: kasan: bad access detected [ 30.527342][ T591] page_owner tracks the page as allocated [ 30.533039][ T591] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 110, ts 4878853830, free_ts 4855443378 [ 30.548821][ T591] post_alloc_hook+0x192/0x1b0 [ 30.553579][ T591] prep_new_page+0x1c/0x110 [ 30.558065][ T591] get_page_from_freelist+0x2cc5/0x2d50 [ 30.563592][ T591] __alloc_pages+0x18f/0x440 [ 30.568165][ T591] new_slab+0xa1/0x4d0 [ 30.572216][ T591] ___slab_alloc+0x381/0x810 [ 30.576789][ T591] __slab_alloc+0x49/0x90 [ 30.581099][ T591] kmem_cache_alloc_trace+0x146/0x270 [ 30.586455][ T591] kernfs_fop_open+0x343/0xb30 [ 30.591202][ T591] do_dentry_open+0x834/0x1010 [ 30.595949][ T591] vfs_open+0x73/0x80 [ 30.599916][ T591] path_openat+0x2646/0x2f10 [ 30.604487][ T591] do_filp_open+0x1b3/0x3e0 [ 30.608971][ T591] do_sys_openat2+0x14c/0x7b0 [ 30.613632][ T591] __x64_sys_openat+0x136/0x160 [ 30.618467][ T591] x64_sys_call+0x219/0x9a0 [ 30.622952][ T591] page last free stack trace: [ 30.627608][ T591] free_unref_page_prepare+0x542/0x550 [ 30.633075][ T591] free_unref_page_list+0x134/0x9d0 [ 30.638257][ T591] release_pages+0xfda/0x1030 [ 30.642915][ T591] free_pages_and_swap_cache+0x86/0xa0 [ 30.648355][ T591] tlb_finish_mmu+0x175/0x300 [ 30.653042][ T591] exit_mmap+0x40f/0x860 [ 30.657267][ T591] __mmput+0x93/0x320 [ 30.661233][ T591] mmput+0x50/0x150 [ 30.665026][ T591] do_exit+0x9d2/0x27a0 [ 30.669163][ T591] do_group_exit+0x141/0x310 [ 30.673734][ T591] __x64_sys_exit_group+0x3f/0x40 [ 30.678742][ T591] x64_sys_call+0x832/0x9a0 [ 30.683226][ T591] do_syscall_64+0x4c/0xa0 [ 30.687625][ T591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.693506][ T591] [ 30.695810][ T591] Memory state around the buggy address: [ 30.701419][ T591] ffff888117cccf80: fa fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 30.709460][ T591] ffff888117ccd000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 30.717500][ T591] >ffff888117ccd080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 30.725538][ T591] ^ [ 30.731666][ T591] ffff888117ccd100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.739707][ T591] ffff888117ccd180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 30.747744][ T591] ================================================================== [ 30.755777][ T591] Disabling lock debugging due to kernel taint [ 31.122173][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 31.122188][ T30] audit: type=1400 audit(1761426485.717:201): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.150150][ T30] audit: type=1400 audit(1761426485.717:202): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.172301][ T30] audit: type=1400 audit(1761426485.717:203): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.193552][ T30] audit: type=1400 audit(1761426485.717:204): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.214175][ T30] audit: type=1400 audit(1761426485.717:205): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.234663][ T30] audit: type=1400 audit(1761426485.717:206): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.257655][ T30] audit: type=1400 audit(1761426485.717:207): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.717953][ T474] usb 6-1: USB disconnect, device number 2 [ 31.818117][ T333] usb 4-1: USB disconnect, device number 3