last executing test programs: 2.199742386s ago: executing program 4 (id=5): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020}, 0xffffff16) 1.877692064s ago: executing program 3 (id=8): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000b80)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.806176896s ago: executing program 1 (id=2): syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./bus\x00', 0x0, &(0x7f0000000940)=ANY=[], 0x7b, 0x1205, &(0x7f0000002500)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x98) r1 = openat(0xffffffffffffff9c, &(0x7f0000001cc0)='./bus\x00', 0xe4006, 0x12) write(r1, &(0x7f0000001d00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x2fffe) 1.803962736s ago: executing program 0 (id=1): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x607, &(0x7f00000000c0), 0x1, 0x469, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1808003, &(0x7f0000000140)={[], [{@seclabel}]}, 0x3, 0x523, &(0x7f0000000fc0)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000b80)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_setup(0x6617, &(0x7f0000000bc0)={0x0, 0xc241, 0x80, 0x3, 0x3e2}) r2 = inotify_init() r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x3, 0xac5) syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f00000002c0)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000300)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x7, r4, 0x0}]) inotify_add_watch(r2, &(0x7f0000001500)='./file0\x00', 0xa0000041) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/sync_on_suspend', 0x82, 0x10a) io_setup(0x3, &(0x7f0000000440)=0x0) io_submit(r7, 0x1, &(0x7f0000000480)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0xf, r6, &(0x7f0000000500)='F', 0x1, 0x9, 0x0, 0x0, r6}]) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000009c0)={0x0, 0x2, 0x0, 0x5ea}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='.\x00', 0x800, 0xfc) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYRES8=r0]) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a00)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="280000001e00310127bd7000fedbdf2507000000", @ANYRES32=r10, @ANYBLOB="000400004242050008000a00", @ANYRES32=r10, @ANYBLOB="1b"], 0x28}, 0x1, 0x0, 0x0, 0x4d80c}, 0x4044080) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000b00)={@empty, r10}, 0x14) 1.795635196s ago: executing program 3 (id=9): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000640)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 1.720648468s ago: executing program 3 (id=10): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r4, @ANYBLOB="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"], 0x8c8}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2000084c, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f00000012c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000f80)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./proc\x00', 0x180) socket$inet6(0xa, 0x80002, 0x0) symlink(&(0x7f0000001200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000001280)='.\x02\x00') 1.688538249s ago: executing program 2 (id=3): mkdir(&(0x7f0000000580)='./bus\x00', 0x2c) mount$incfs(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x1, 0x0) mount$incfs(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0xc002, 0x0) chdir(&(0x7f0000000480)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x40c8, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0xfb, 0x496, &(0x7f00000006c0)="$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") chdir(&(0x7f0000000b80)='./file0\x00') 1.61350946s ago: executing program 1 (id=11): mount$incfs(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./bus\x00', &(0x7f0000000640), 0x1, 0x0) chdir(&(0x7f0000000680)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.526471693s ago: executing program 1 (id=12): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2000084c, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f00000012c0)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=") syz_mount_image$fuse(0x0, &(0x7f0000000f80)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 1.514191333s ago: executing program 3 (id=13): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x5) sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000540)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r4, &(0x7f00000005c0), 0x651, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000e91f00000600fe7f000008000a0000000080"], 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) recvmmsg(r3, &(0x7f0000000600), 0x4000087, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40004) r6 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4620, 0x0, @loopback, 0x9}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) r7 = timerfd_create(0x9, 0x0) timerfd_settime(r7, 0x2, &(0x7f0000000640)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.497491463s ago: executing program 2 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000d40)={0x10001, 0x2, 0x2, 0x1000, &(0x7f0000003000/0x1000)=nil}) 1.320286138s ago: executing program 1 (id=15): r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x2, &(0x7f0000000640)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 321.252312ms ago: executing program 3 (id=16): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000180)=[@increfs]}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8c, 0x0, &(0x7f0000000380)=[@enter_looper, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x3, 0x2, 0x80, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000fc0)={@ptr={0x70742a85, 0x0, &(0x7f0000000840)=[r1, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1], 0x1c}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @flat=@handle={0x73682a85, 0x180, 0x1}}}}, @request_freeze, @acquire_done={0x40106309, 0x0, 0x1}, @request_freeze={0x400c6313, 0x1, 0x3}]}) 320.966343ms ago: executing program 4 (id=17): r0 = fsmount(0xffffffffffffffff, 0x1, 0xf1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x10, 0x7ff, 0x4, {{0x1b, 0x4, 0x2, 0x33, 0x6c, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@rr={0x7, 0x23, 0x6d, [@dev={0xac, 0x14, 0x14, 0x19}, @remote, @local, @empty, @rand_addr=0x64010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x34, 0x46, 0x1, 0x7, [{@empty, 0x2}, {@multicast1, 0x3ff}, {@loopback, 0x1}, {@empty, 0x7f}, {@remote, 0xc2a}, {@local, 0x8}]}]}}}}}) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)='J', 0x1, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000440)='asymmetric\x00', &(0x7f0000000e80)=@chain) request_key(&(0x7f0000000ec0)='user\x00', &(0x7f0000000f00)={'syz', 0x1}, 0x0, r2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1018e58, &(0x7f00000002c0), 0x4, 0x61f, &(0x7f0000000700)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000d40)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000d80)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x29, 0x5, 0x78, 0x100000, 0x10, @remote, @empty, 0x700, 0x8, 0x1, 0x8}}) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x79}, @initr0={0x18, 0x0, 0x0, 0x0, 0x11000000}, @exit, @alu={0x5, 0x0, 0xd, 0xa}, @exit, @ldst={0x2, 0x2, 0x3, 0x0, 0x7, 0x100, 0x10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0xfe3b, &(0x7f0000000600)=""/238}, 0x28) 205.778975ms ago: executing program 1 (id=18): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r2, @ANYBLOB="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"], 0x8c8}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000f80)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) 198.290006ms ago: executing program 3 (id=19): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) sendmsg$nl_route_sched(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8001, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x8, 0x96, 0xb, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000b80)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 1 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x5) sched_setscheduler(r3, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000540)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x651, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000e91f00000600fe7f000008000a0000000080"], 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) recvmmsg(r4, &(0x7f0000000600), 0x4000087, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40004) r7 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4620, 0x0, @loopback, 0x9}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) r8 = timerfd_create(0x9, 0x0) timerfd_settime(r8, 0x2, &(0x7f0000000640)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0d9e8ed452d000000001e008283a44af58254423a0781d2ab346b6aa523462c358527ea745c8626362682aefa47e1f29779f360b0aecd2af7e5", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000006400088060782b00000005000100000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff04000980240002000a50dc344c3bffbfcc6d435bb6f313ba060006004e220000bfc0bddb35ab4fdcb141d1d5ad83a6ea231a107479f2cb6a6f69a41557b53a9dcbbbaf8a94e5b07ddf37bd2c71e341fe020c0fd9"], 0x94}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/276], 0x44}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 22.489767][ T28] audit: type=1400 audit(1792442353.064:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.490831][ T279] cgroup: Unknown subsys name 'net' [ 22.512426][ T28] audit: type=1400 audit(1792442353.064:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.539689][ T28] audit: type=1400 audit(1792442353.094:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.539822][ T279] cgroup: Unknown subsys name 'devices' [ 22.679445][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.685048][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.787344][ T28] audit: type=1400 audit(1792442353.354:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.810512][ T28] audit: type=1400 audit(1792442353.354:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.835309][ T28] audit: type=1400 audit(1792442353.354:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.843717][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.867836][ T28] audit: type=1400 audit(1792442353.434:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.893510][ T28] audit: type=1400 audit(1792442353.434:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.908059][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.919090][ T28] audit: type=1400 audit(1792442353.474:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.953180][ T28] audit: type=1400 audit(1792442353.474:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.768377][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.775432][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.782919][ T288] device bridge_slave_0 entered promiscuous mode [ 23.791085][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.798275][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.805563][ T288] device bridge_slave_1 entered promiscuous mode [ 23.834490][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.841545][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.848951][ T287] device bridge_slave_0 entered promiscuous mode [ 23.869884][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.876933][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.884655][ T287] device bridge_slave_1 entered promiscuous mode [ 23.891290][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.898369][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.905646][ T291] device bridge_slave_0 entered promiscuous mode [ 23.915502][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.922602][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.929987][ T291] device bridge_slave_1 entered promiscuous mode [ 23.999001][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.006081][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.013515][ T289] device bridge_slave_0 entered promiscuous mode [ 24.020246][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.027272][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.034671][ T290] device bridge_slave_0 entered promiscuous mode [ 24.044249][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.051354][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.058787][ T290] device bridge_slave_1 entered promiscuous mode [ 24.068459][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.075496][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.082866][ T289] device bridge_slave_1 entered promiscuous mode [ 24.199897][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.206932][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.253215][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.260280][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.267531][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.274564][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.304981][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.312036][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.319308][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.326327][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.337672][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.344726][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.351995][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.359023][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.378304][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.385554][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.392901][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.400222][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.407416][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.414712][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.422208][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.430061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.437414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.444852][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.453060][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.461216][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.468239][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.495348][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.503687][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.510744][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.518355][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.526256][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.547407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.560335][ T288] device veth0_vlan entered promiscuous mode [ 24.579052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.587338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.595529][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.603206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.610832][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.619068][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.626074][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.633518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.641746][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.648774][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.660897][ T288] device veth1_macvtap entered promiscuous mode [ 24.672502][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.680798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.688389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.718768][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.729430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.737334][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.745646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.754128][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.761192][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.768640][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.776718][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.783741][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.791137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.799123][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.807183][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.814204][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.821534][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.829819][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.836829][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.844216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.852350][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.859377][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.866697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.874892][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.881906][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.889695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.921683][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.930009][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.938389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.946608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.955133][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.963409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.972039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.980026][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.988051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.996064][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.004181][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.012337][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.020400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.028500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.036336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.044663][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.052948][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.061397][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.069744][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.077531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.085599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.093671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.101645][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.109718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.118297][ T287] device veth0_vlan entered promiscuous mode [ 25.129474][ T291] device veth0_vlan entered promiscuous mode [ 25.138956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.146518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.154166][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.161697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.169293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.177369][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.196200][ T287] device veth1_macvtap entered promiscuous mode [ 25.203078][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 25.206562][ T291] device veth1_macvtap entered promiscuous mode [ 25.217594][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.226171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.234251][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.242477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.250659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.258294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.266341][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.274580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.282494][ T289] device veth0_vlan entered promiscuous mode [ 25.304856][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.314377][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.324255][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.334525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.343102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.345538][ T311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.351978][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.376176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.384618][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.397201][ T289] device veth1_macvtap entered promiscuous mode [ 25.409704][ T290] device veth0_vlan entered promiscuous mode [ 25.417809][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.426023][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.440811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.448805][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.457194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.468394][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.476373][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.503757][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.511379][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.518784][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.527002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.535604][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.545354][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.727538][ T323] device syzkaller0 entered promiscuous mode [ 25.741012][ T323] tipc: Started in network mode [ 25.746178][ T323] tipc: Node identity 4ad870d3b55b, cluster identity 4711 [ 25.755239][ T323] tipc: Enabled bearer , priority 0 [ 25.770083][ T323] tipc: Resetting bearer [ 25.783365][ T322] tipc: Resetting bearer [ 25.789930][ T322] tipc: Disabling bearer [ 25.796552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.805454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.814549][ T290] device veth1_macvtap entered promiscuous mode [ 25.832326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.840402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.851708][ T328] loop0: detected capacity change from 0 to 512 [ 25.858557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.880685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.892504][ T328] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 25.895299][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.905440][ T329] loop1: detected capacity change from 0 to 8192 [ 25.918921][ T328] EXT4-fs (loop0): orphan cleanup on readonly fs [ 25.927881][ T328] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.1: Block bitmap for bg 0 marked uninitialized [ 25.932346][ T334] loop3: detected capacity change from 0 to 256 [ 25.943731][ T328] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 25.958886][ T328] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.1: Block bitmap for bg 0 marked uninitialized [ 25.965527][ T338] loop2: detected capacity change from 0 to 512 [ 25.972220][ T328] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 25.987188][ T334] ======================================================= [ 25.987188][ T334] WARNING: The mand mount option has been deprecated and [ 25.987188][ T334] and is ignored by this kernel. Remove the mand [ 25.987188][ T334] option from the mount to silence this warning. [ 25.987188][ T334] ======================================================= [ 26.023062][ T328] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.1: Block bitmap for bg 0 marked uninitialized [ 26.043567][ T334] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 26.048479][ T328] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 26.064881][ T328] EXT4-fs (loop0): 1 orphan inode deleted [ 26.070710][ T328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.092273][ T338] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #17: comm syz.2.3: iget: bogus i_mode (0) [ 26.098018][ T346] loop1: detected capacity change from 0 to 256 [ 26.109527][ T338] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3: couldn't read orphan inode 17 (err -117) [ 26.109611][ T338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.139781][ T290] EXT4-fs (loop2): unmounting filesystem. [ 26.145929][ T346] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 26.200250][ T290] ------------[ cut here ]------------ [ 26.205752][ T290] WARNING: CPU: 0 PID: 290 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 26.213818][ T290] Modules linked in: [ 26.217714][ T290] CPU: 0 PID: 290 Comm: syz-executor Not tainted syzkaller #0 [ 26.225338][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 26.235439][ T290] RIP: 0010:drop_nlink+0xc5/0x110 [ 26.240503][ T290] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7b 0d ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 26.260194][ T290] RSP: 0000:ffffc90000df7ae0 EFLAGS: 00010293 [ 26.266270][ T290] RAX: ffffffff81c660c5 RBX: ffff8881332f71a8 RCX: ffff88810d7f1440 [ 26.274326][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.282344][ T290] RBP: ffffc90000df7b08 R08: 0000000000000003 R09: 0000000000000004 [ 26.290390][ T290] R10: dffffc0000000000 R11: fffff520001bef4c R12: dffffc0000000000 [ 26.298408][ T290] R13: 1ffff1102665ee3e R14: ffff8881332f71f0 R15: 0000000000000000 [ 26.306386][ T290] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.315542][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.322202][ T290] CR2: 00007f5f24debc40 CR3: 000000000700f000 CR4: 00000000003506b0 [ 26.330578][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.338583][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.346718][ T290] Call Trace: [ 26.350261][ T290] [ 26.353187][ T290] shmem_rmdir+0x5b/0x90 [ 26.357431][ T290] vfs_rmdir+0x381/0x4f0 [ 26.361731][ T290] incfs_kill_sb+0xfe/0x210 [ 26.366234][ T290] deactivate_locked_super+0xb5/0x120 [ 26.371629][ T290] deactivate_super+0xaf/0xe0 [ 26.376303][ T290] cleanup_mnt+0x45e/0x4e0 [ 26.380807][ T290] __cleanup_mnt+0x19/0x20 [ 26.385215][ T290] task_work_run+0x1e1/0x250 [ 26.389926][ T290] ? __cfi_task_work_run+0x10/0x10 [ 26.395033][ T290] ? free_nsproxy+0x21f/0x270 [ 26.399734][ T290] do_exit+0xb0d/0x29f0 [ 26.403890][ T290] ? __cfi_do_exit+0x10/0x10 [ 26.408508][ T290] ? __kasan_check_write+0x14/0x20 [ 26.413612][ T290] ? _raw_spin_lock_irq+0x95/0xf0 [ 26.418651][ T290] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 26.424196][ T290] ? ksys_write+0x1eb/0x260 [ 26.428794][ T290] ? zap_other_threads+0x321/0x3a0 [ 26.433902][ T290] do_group_exit+0x21b/0x2e0 [ 26.438505][ T290] __x64_sys_exit_group+0x3f/0x40 [ 26.443527][ T290] x64_sys_call+0x7b4/0x9a0 [ 26.448039][ T290] do_syscall_64+0x4c/0xa0 [ 26.452447][ T290] ? clear_bhb_loop+0x30/0x80 [ 26.457117][ T290] ? clear_bhb_loop+0x30/0x80 [ 26.461814][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.467704][ T290] RIP: 0033:0x7f36f9d9e559 [ 26.472172][ T290] Code: Unable to access opcode bytes at 0x7f36f9d9e52f. [ 26.479195][ T290] RSP: 002b:00007ffc3f6e3088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 26.487601][ T290] RAX: ffffffffffffffda RBX: 00007f36f9e34f7b RCX: 00007f36f9d9e559 [ 26.495587][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 26.503563][ T290] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f36f9e34f1b [ 26.511662][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3f6e4340 [ 26.519656][ T290] R13: 00007f36f9e34f1b R14: 0000555585fe34e8 R15: 00007ffc3f6e5410 [ 26.527627][ T290] [ 26.530650][ T290] ---[ end trace 0000000000000000 ]--- [ 27.272651][ T290] ------------[ cut here ]------------ [ 27.278155][ T290] WARNING: CPU: 0 PID: 290 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 27.286058][ T290] Modules linked in: [ 27.290063][ T290] CPU: 0 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 [ 27.299028][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 27.309240][ T290] RIP: 0010:drop_nlink+0xc5/0x110 [ 27.314447][ T290] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 aa f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7b 0d ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 27.334226][ T290] RSP: 0000:ffffc90000df7ae0 EFLAGS: 00010293 [ 27.340539][ T290] RAX: ffffffff81c660c5 RBX: ffff8881332f6650 RCX: ffff88810d7f1440 [ 27.348599][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.356574][ T290] RBP: ffffc90000df7b08 R08: 0000000000000003 R09: 0000000000000004 [ 27.364635][ T290] R10: dffffc0000000000 R11: fffff520001bef4c R12: dffffc0000000000 [ 27.372648][ T290] R13: 1ffff1102665ecd3 R14: ffff8881332f6698 R15: 0000000000000000 [ 27.380666][ T290] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 27.389645][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.396234][ T290] CR2: 00007faf753ebc40 CR3: 000000011e28d000 CR4: 00000000003506b0 [ 27.404255][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.412253][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.419121][ T357] binder: 353:357 ioctl 4018620d 0 returned -22 [ 27.420297][ T290] Call Trace: [ 27.429913][ T290] [ 27.432988][ T290] shmem_rmdir+0x5b/0x90 [ 27.437369][ T290] vfs_rmdir+0x381/0x4f0 [ 27.441689][ T290] incfs_kill_sb+0x18f/0x210 [ 27.446284][ T290] deactivate_locked_super+0xb5/0x120 [ 27.451820][ T290] deactivate_super+0xaf/0xe0 [ 27.456500][ T290] cleanup_mnt+0x45e/0x4e0 [ 27.460926][ T290] __cleanup_mnt+0x19/0x20 [ 27.465336][ T290] task_work_run+0x1e1/0x250 [ 27.469949][ T290] ? __cfi_task_work_run+0x10/0x10 [ 27.475056][ T290] ? free_nsproxy+0x21f/0x270 [ 27.479779][ T290] do_exit+0xb0d/0x29f0 [ 27.483930][ T290] ? __cfi_do_exit+0x10/0x10 [ 27.488531][ T290] ? __kasan_check_write+0x14/0x20 [ 27.493622][ T290] ? _raw_spin_lock_irq+0x95/0xf0 [ 27.498744][ T290] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 27.504308][ T290] ? ksys_write+0x1eb/0x260 [ 27.508465][ T350] Zero length message leads to an empty skb [ 27.508839][ T290] ? zap_other_threads+0x321/0x3a0 [ 27.519776][ T290] do_group_exit+0x21b/0x2e0 [ 27.524352][ T290] __x64_sys_exit_group+0x3f/0x40 [ 27.529405][ T290] x64_sys_call+0x7b4/0x9a0 [ 27.533899][ T290] do_syscall_64+0x4c/0xa0 [ 27.538315][ T290] ? clear_bhb_loop+0x30/0x80 [ 27.542988][ T290] ? clear_bhb_loop+0x30/0x80 [ 27.547648][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.553561][ T290] RIP: 0033:0x7f36f9d9e559 [ 27.557998][ T290] Code: Unable to access opcode bytes at 0x7f36f9d9e52f. [ 27.564991][ T290] RSP: 002b:00007ffc3f6e3088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 27.573426][ T290] RAX: ffffffffffffffda RBX: 00007f36f9e34f7b RCX: 00007f36f9d9e559 [ 27.581574][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 27.589567][ T290] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f36f9e34f1b [ 27.597536][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3f6e4340 [ 27.605547][ T290] R13: 00007f36f9e34f1b R14: 0000555585fe34e8 R15: 00007ffc3f6e5410 [ 27.613537][ T290] [ 27.616626][ T290] ---[ end trace 0000000000000000 ]--- [ 27.626844][ T365] device syzkaller0 entered promiscuous mode [ 27.641063][ T367] loop4: detected capacity change from 0 to 1024 [ 27.660782][ T361] tipc: Enabled bearer , priority 0 [ 27.669045][ T361] tipc: Resetting bearer [ 27.675473][ T360] tipc: Resetting bearer [ 27.682169][ T360] tipc: Disabling bearer [ 27.698710][ T290] ================================================================== [ 27.706783][ T290] BUG: KASAN: use-after-free in fast_dput+0x1e0/0x290 [ 27.713551][ T290] Read of size 4 at addr ffff888111910bb0 by task syz-executor/290 [ 27.721431][ T290] [ 27.723738][ T290] CPU: 1 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 [ 27.732647][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 27.742683][ T290] Call Trace: [ 27.745942][ T290] [ 27.748854][ T290] __dump_stack+0x21/0x24 [ 27.753171][ T290] dump_stack_lvl+0x110/0x170 [ 27.757833][ T290] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.762846][ T290] ? fast_dput+0x1e0/0x290 [ 27.767248][ T290] print_address_description+0x71/0x200 [ 27.772776][ T290] print_report+0x4a/0x60 [ 27.777088][ T290] kasan_report+0x122/0x150 [ 27.781663][ T290] ? fast_dput+0x1e0/0x290 [ 27.786070][ T290] __asan_report_load4_noabort+0x14/0x20 [ 27.791682][ T290] fast_dput+0x1e0/0x290 [ 27.795907][ T290] dput+0x21/0x80 [ 27.799523][ T290] incfs_free_mount_info+0x60/0x200 [ 27.804706][ T290] incfs_kill_sb+0x1af/0x210 [ 27.809281][ T290] deactivate_locked_super+0xb5/0x120 [ 27.814637][ T290] deactivate_super+0xaf/0xe0 [ 27.819296][ T290] cleanup_mnt+0x45e/0x4e0 [ 27.823697][ T290] __cleanup_mnt+0x19/0x20 [ 27.828097][ T290] task_work_run+0x1e1/0x250 [ 27.832931][ T290] ? __cfi_task_work_run+0x10/0x10 [ 27.838023][ T290] ? free_nsproxy+0x21f/0x270 [ 27.842689][ T290] do_exit+0xb0d/0x29f0 [ 27.846828][ T290] ? __cfi_do_exit+0x10/0x10 [ 27.851403][ T290] ? __kasan_check_write+0x14/0x20 [ 27.856492][ T290] ? _raw_spin_lock_irq+0x95/0xf0 [ 27.861495][ T290] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 27.867018][ T290] ? ksys_write+0x1eb/0x260 [ 27.871503][ T290] ? zap_other_threads+0x321/0x3a0 [ 27.876598][ T290] do_group_exit+0x21b/0x2e0 [ 27.881174][ T290] __x64_sys_exit_group+0x3f/0x40 [ 27.886181][ T290] x64_sys_call+0x7b4/0x9a0 [ 27.890666][ T290] do_syscall_64+0x4c/0xa0 [ 27.895064][ T290] ? clear_bhb_loop+0x30/0x80 [ 27.899724][ T290] ? clear_bhb_loop+0x30/0x80 [ 27.904382][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.910258][ T290] RIP: 0033:0x7f36f9d9e559 [ 27.914650][ T290] Code: Unable to access opcode bytes at 0x7f36f9d9e52f. [ 27.921644][ T290] RSP: 002b:00007ffc3f6e3088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 27.930036][ T290] RAX: ffffffffffffffda RBX: 00007f36f9e34f7b RCX: 00007f36f9d9e559 [ 27.937992][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 27.945940][ T290] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f36f9e34f1b [ 27.953889][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3f6e4340 [ 27.961837][ T290] R13: 00007f36f9e34f1b R14: 0000555585fe34e8 R15: 00007ffc3f6e5410 [ 27.969790][ T290] [ 27.972789][ T290] [ 27.975091][ T290] Allocated by task 338: [ 27.979306][ T290] kasan_set_track+0x4b/0x70 [ 27.983882][ T290] kasan_save_alloc_info+0x1f/0x30 [ 27.988970][ T290] __kasan_slab_alloc+0x72/0x80 [ 27.993799][ T290] slab_post_alloc_hook+0x4f/0x2d0 [ 27.998890][ T290] kmem_cache_alloc_lru+0x104/0x280 [ 28.004071][ T290] __d_alloc+0x34/0x6d0 [ 28.008207][ T290] d_alloc_parallel+0xe2/0x1280 [ 28.013042][ T290] __lookup_slow+0x14f/0x410 [ 28.017625][ T290] lookup_one_len+0x19d/0x2e0 [ 28.022286][ T290] incfs_lookup_dentry+0x60/0xb0 [ 28.027218][ T290] open_or_create_special_dir+0x4c/0x1f0 [ 28.032936][ T290] incfs_mount_fs+0x42f/0x890 [ 28.037601][ T290] legacy_get_tree+0xfe/0x1a0 [ 28.042269][ T290] vfs_get_tree+0x9a/0x270 [ 28.046665][ T290] do_new_mount+0x251/0xb40 [ 28.051145][ T290] path_mount+0x640/0xfd0 [ 28.055457][ T290] __se_sys_mount+0x320/0x390 [ 28.060110][ T290] __x64_sys_mount+0xbf/0xd0 [ 28.064674][ T290] x64_sys_call+0x65d/0x9a0 [ 28.069158][ T290] do_syscall_64+0x4c/0xa0 [ 28.073554][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.079502][ T290] [ 28.081811][ T290] Freed by task 13: [ 28.085768][ T290] kasan_set_track+0x4b/0x70 [ 28.090338][ T290] kasan_save_free_info+0x2b/0x40 [ 28.095339][ T290] ____kasan_slab_free+0x132/0x180 [ 28.100434][ T290] __kasan_slab_free+0x11/0x20 [ 28.105178][ T290] slab_free_freelist_hook+0xc2/0x190 [ 28.110527][ T290] kmem_cache_free+0x12d/0x300 [ 28.115274][ T290] __d_free+0x23/0x30 [ 28.119257][ T290] rcu_do_batch+0x52b/0xc30 [ 28.123737][ T290] rcu_core+0x486/0xf00 [ 28.127867][ T290] rcu_core_si+0x9/0x10 [ 28.132005][ T290] handle_softirqs+0x1d7/0x600 [ 28.136746][ T290] run_ksoftirqd+0x28/0x30 [ 28.141140][ T290] smpboot_thread_fn+0x48c/0x8e0 [ 28.146060][ T290] kthread+0x281/0x320 [ 28.150108][ T290] ret_from_fork+0x1f/0x30 [ 28.154510][ T290] [ 28.156813][ T290] Last potentially related work creation: [ 28.163281][ T290] kasan_save_stack+0x3a/0x60 [ 28.167937][ T290] __kasan_record_aux_stack+0xb6/0xc0 [ 28.173305][ T290] kasan_record_aux_stack_noalloc+0xb/0x10 [ 28.179084][ T290] call_rcu+0xcf/0xf50 [ 28.183129][ T290] dentry_free+0xbd/0x150 [ 28.187438][ T290] __dentry_kill+0x535/0x680 [ 28.192007][ T290] dentry_kill+0xc0/0x2a0 [ 28.196319][ T290] dput+0x42/0x80 [ 28.199933][ T290] incfs_free_mount_info+0x60/0x200 [ 28.205219][ T290] incfs_kill_sb+0x1af/0x210 [ 28.209796][ T290] deactivate_locked_super+0xb5/0x120 [ 28.215147][ T290] deactivate_super+0xaf/0xe0 [ 28.219802][ T290] cleanup_mnt+0x45e/0x4e0 [ 28.224194][ T290] __cleanup_mnt+0x19/0x20 [ 28.228584][ T290] task_work_run+0x1e1/0x250 [ 28.233155][ T290] do_exit+0xb0d/0x29f0 [ 28.237293][ T290] do_group_exit+0x21b/0x2e0 [ 28.241863][ T290] __x64_sys_exit_group+0x3f/0x40 [ 28.246868][ T290] x64_sys_call+0x7b4/0x9a0 [ 28.251355][ T290] do_syscall_64+0x4c/0xa0 [ 28.255760][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.261639][ T290] [ 28.263950][ T290] Second to last potentially related work creation: [ 28.270507][ T290] kasan_save_stack+0x3a/0x60 [ 28.275175][ T290] __kasan_record_aux_stack+0xb6/0xc0 [ 28.280539][ T290] kasan_record_aux_stack_noalloc+0xb/0x10 [ 28.286323][ T290] call_rcu+0xcf/0xf50 [ 28.290372][ T290] dentry_free+0xbd/0x150 [ 28.294684][ T290] __dentry_kill+0x535/0x680 [ 28.299253][ T290] dentry_kill+0xc0/0x2a0 [ 28.303563][ T290] dput+0x42/0x80 [ 28.307174][ T290] step_into+0xa02/0xf00 [ 28.311395][ T290] link_path_walk+0x744/0xeb0 [ 28.316045][ T290] path_openat+0x27f/0x2f30 [ 28.320529][ T290] do_filp_open+0x1ee/0x420 [ 28.325008][ T290] do_sys_openat2+0x15e/0x820 [ 28.329665][ T290] __x64_sys_openat+0x136/0x160 [ 28.334496][ T290] x64_sys_call+0x783/0x9a0 [ 28.338984][ T290] do_syscall_64+0x4c/0xa0 [ 28.343379][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.349248][ T290] [ 28.351552][ T290] The buggy address belongs to the object at ffff888111910bb0 [ 28.351552][ T290] which belongs to the cache dentry of size 208 [ 28.365145][ T290] The buggy address is located 0 bytes inside of [ 28.365145][ T290] 208-byte region [ffff888111910bb0, ffff888111910c80) [ 28.378220][ T290] [ 28.380522][ T290] The buggy address belongs to the physical page: [ 28.386908][ T290] page:ffffea0004464400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111910 [ 28.397136][ T290] flags: 0x4000000000000200(slab|zone=1) [ 28.402758][ T290] raw: 4000000000000200 ffffea00044643c0 dead000000000003 ffff8881001ed800 [ 28.411320][ T290] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 28.419872][ T290] page dumped because: kasan: bad access detected [ 28.426262][ T290] page_owner tracks the page as allocated [ 28.431950][ T290] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x12cd0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 105, tgid 105 (udevd), ts 4145546717, free_ts 0 [ 28.450243][ T290] post_alloc_hook+0x1f5/0x210 [ 28.454991][ T290] prep_new_page+0x1c/0x110 [ 28.459475][ T290] get_page_from_freelist+0x2ca9/0x2d20 [ 28.465006][ T290] __alloc_pages+0x1fa/0x610 [ 28.469577][ T290] alloc_slab_page+0x6e/0xf0 [ 28.474145][ T290] new_slab+0x98/0x3e0 [ 28.478191][ T290] ___slab_alloc+0x70f/0xb70 [ 28.482763][ T290] __slab_alloc+0x5e/0xa0 [ 28.487073][ T290] kmem_cache_alloc_lru+0x144/0x280 [ 28.492252][ T290] __d_alloc+0x34/0x6d0 [ 28.496390][ T290] d_alloc_parallel+0xe2/0x1280 [ 28.501216][ T290] __lookup_slow+0x14f/0x410 [ 28.505784][ T290] lookup_slow+0x57/0x70 [ 28.510002][ T290] link_path_walk+0x984/0xeb0 [ 28.514654][ T290] __filename_parentat+0x22d/0x650 [ 28.519743][ T290] do_unlinkat+0xeb/0x6c0 [ 28.524051][ T290] page_owner free stack trace missing [ 28.529392][ T290] [ 28.531694][ T290] Memory state around the buggy address: [ 28.537300][ T290] ffff888111910a80: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb [ 28.545350][ T290] ffff888111910b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 28.553412][ T290] >ffff888111910b80: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 28.561464][ T290] ^ [ 28.567087][ T290] ffff888111910c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 28.575130][ T290] ffff888111910c80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 28.583170][ T290] ================================================================== [ 28.592245][ T290] Disabling lock debugging due to kernel taint [ 28.598526][ T290] ------------[ cut here ]------------ [ 28.603993][ T290] WARNING: CPU: 1 PID: 290 at fs/dcache.c:794 fast_dput+0x207/0x290 [ 28.608591][ T367] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #3: block 1: comm syz.4.17: lblock 1 mapped to illegal pblock 1 (length 1) [ 28.612016][ T290] Modules linked in: [ 28.629571][ T290] CPU: 1 PID: 290 Comm: syz-executor Tainted: G B W syzkaller #0 [ 28.638504][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 28.648562][ T290] RIP: 0010:fast_dput+0x207/0x290 [ 28.653584][ T290] Code: 99 f1 ff e9 4e fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a1 fe ff ff 48 89 df e8 93 99 f1 ff e9 94 fe ff ff e8 e9 ff ab ff <0f> 0b e9 13 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ec fe ff [ 28.673386][ T290] RSP: 0018:ffffc90000df7af0 EFLAGS: 00010293 [ 28.679469][ T290] RAX: ffffffff81c56e57 RBX: ffff888111910bb0 RCX: ffff88810d7f1440 [ 28.687434][ T290] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001 [ 28.695404][ T290] RBP: ffffc90000df7b18 R08: 0000000000000003 R09: 0000000000000004 [ 28.703396][ T290] R10: dffffc0000000000 R11: fffff520001bef50 R12: 00000000ffffff80 [ 28.711390][ T290] R13: dffffc0000000000 R14: ffff888111910c08 R15: 1ffff11022322181 [ 28.719371][ T290] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 28.728309][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.734879][ T290] CR2: 00007fa441a6ad58 CR3: 0000000110081000 CR4: 00000000003506a0 [ 28.742856][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.750830][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.758800][ T290] Call Trace: [ 28.762065][ T290] [ 28.764983][ T290] dput+0x21/0x80 [ 28.768632][ T290] incfs_free_mount_info+0x60/0x200 [ 28.773825][ T290] incfs_kill_sb+0x1af/0x210 [ 28.778416][ T290] deactivate_locked_super+0xb5/0x120 [ 28.783781][ T290] deactivate_super+0xaf/0xe0 [ 28.788456][ T290] cleanup_mnt+0x45e/0x4e0 [ 28.792861][ T290] __cleanup_mnt+0x19/0x20 [ 28.797263][ T290] task_work_run+0x1e1/0x250 [ 28.801853][ T290] ? __cfi_task_work_run+0x10/0x10 [ 28.806952][ T290] ? free_nsproxy+0x21f/0x270 [ 28.811631][ T290] do_exit+0xb0d/0x29f0 [ 28.815783][ T290] ? __cfi_do_exit+0x10/0x10 [ 28.820375][ T290] ? __kasan_check_write+0x14/0x20 [ 28.825474][ T290] ? _raw_spin_lock_irq+0x95/0xf0 [ 28.830612][ T290] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 28.836148][ T290] ? ksys_write+0x1eb/0x260 [ 28.840649][ T290] ? zap_other_threads+0x321/0x3a0 [ 28.845748][ T290] do_group_exit+0x21b/0x2e0 [ 28.850363][ T290] __x64_sys_exit_group+0x3f/0x40 [ 28.855379][ T290] x64_sys_call+0x7b4/0x9a0 [ 28.859887][ T290] do_syscall_64+0x4c/0xa0 [ 28.864297][ T290] ? clear_bhb_loop+0x30/0x80 [ 28.868972][ T290] ? clear_bhb_loop+0x30/0x80 [ 28.873640][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.879535][ T290] RIP: 0033:0x7f36f9d9e559 [ 28.883936][ T290] Code: Unable to access opcode bytes at 0x7f36f9d9e52f. [ 28.890964][ T290] RSP: 002b:00007ffc3f6e3088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 28.899374][ T290] RAX: ffffffffffffffda RBX: 00007f36f9e34f7b RCX: 00007f36f9d9e559 [ 28.907332][ T290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 28.915439][ T290] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f36f9e34f1b [ 28.923409][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc3f6e4340 [ 28.931377][ T290] R13: 00007f36f9e34f1b R14: 0000555585fe34e8 R15: 00007ffc3f6e5410 [ 28.939347][ T290] [ 28.942349][ T290] ---[ end trace 0000000000000000 ]--- [ 28.968051][ T289] EXT4-fs (loop0): unmounting filesystem. [ 28.979379][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 28.979400][ T28] audit: type=1400 audit(1792442359.554:137): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 29.212635][ T367] Quota error (device loop4): write_blk: dquota write failed [ 29.230035][ T28] audit: type=1400 audit(1792442359.604:138): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.253854][ T367] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 29.273739][ T367] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.17: Failed to acquire dquot type 0 [ 29.307807][ T28] audit: type=1400 audit(1792442359.604:139): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.331080][ T367] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.17: Freeing blocks not in datazone - block = 0, count = 4096 [ 29.354707][ T367] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.17: Invalid inode bitmap blk 0 in block_group 0 [ 29.367815][ T333] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 29.388485][ T28] audit: type=1400 audit(1792442359.604:140): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.417883][ T333] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 29.426463][ T367] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 29.446531][ T333] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:3: Failed to release dquot type 0 [ 29.458222][ T367] EXT4-fs (loop4): 1 orphan inode deleted [ 29.463953][ T367] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.473215][ T28] audit: type=1400 audit(1792442359.604:141): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.524113][ T28] audit: type=1400 audit(1792442359.614:142): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.569663][ T28] audit: type=1400 audit(1792442359.614:143): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.598449][ T291] EXT4-fs (loop4): unmounting filesystem. [ 30.098589][ T335] device bridge_slave_1 left promiscuous mode [ 30.104754][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.112892][ T335] device bridge_slave_0 left promiscuous mode [ 30.119122][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.127320][ T335] device veth1_macvtap left promiscuous mode [ 30.133668][ T335] device veth0_vlan left promiscuous mode