last executing test programs: 6.139385546s ago: executing program 0 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@crypto_settings]}, 0x1c}}, 0xc800) 5.095779597s ago: executing program 0 (id=89): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) close(r2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x5450, 0x0) 4.184016154s ago: executing program 0 (id=100): r0 = memfd_create(&(0x7f0000000600)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$binfmt_script(r1, &(0x7f00000003c0), 0x4) copy_file_range(r1, &(0x7f0000000000), r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) socket$nl_xfrm(0x10, 0x3, 0x6) 1.855248766s ago: executing program 3 (id=120): openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) r0 = open(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3) 1.699751262s ago: executing program 0 (id=123): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x4, @string={0x4, 0x3, 'OQ'}}, 0x0, 0x0, 0x0}, 0x0) 1.699571312s ago: executing program 3 (id=124): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6) 1.26834415s ago: executing program 3 (id=126): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0x18, 0x1e8, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) 1.110168696s ago: executing program 4 (id=127): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) link(0x0, 0x0) fsync(r0) 1.060133888s ago: executing program 3 (id=129): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x0) 970.302801ms ago: executing program 4 (id=130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 859.941096ms ago: executing program 4 (id=132): syz_emit_ethernet(0x2a, &(0x7f0000001ec0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa4305"], 0x0) 859.395136ms ago: executing program 4 (id=135): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) poll(0x0, 0x0, 0x64) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x60}, 0x0) close(r4) rt_sigreturn() memfd_create(&(0x7f0000000200)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a', 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pipe2$watch_queue(0x0, 0xb82e336200000000) syncfs(0xffffffffffffffff) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, r5+60000000}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 747.28068ms ago: executing program 2 (id=138): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000001b80), 0x8) 636.146635ms ago: executing program 2 (id=139): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6) 631.480025ms ago: executing program 4 (id=140): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) link(0x0, 0x0) fsync(r0) 509.792949ms ago: executing program 4 (id=142): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf) writev(r0, &(0x7f0000001540), 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x2880008}) r1 = socket(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x8}]}}}]}, 0x3c}}, 0x0) rt_sigsuspend(&(0x7f0000000000), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 509.641419ms ago: executing program 1 (id=143): ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 412.162304ms ago: executing program 1 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) 411.994754ms ago: executing program 1 (id=145): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) 407.094424ms ago: executing program 1 (id=146): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000002380)) 372.867655ms ago: executing program 1 (id=147): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4bd, &(0x7f0000000f00)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYPQX7VOf+lLoH1Ao+RNKIdC+l1JaQpukD31oqyL5KnFdyZaJbSXW5wPH9557r/z9Hgkd6dxz0Q2gY52JiLGI6IqI8xHRn27PpCXW1kv1uEcP70xWSxKVyo0vkkjSbfX/laTLY+nDeiPiH3+L+Hfy47illdW5iUIhv5TWc+X5xVxpZfXC7PzETH4mvzA2Mnx59MropdGhXWvr1b98+sr/3vrr1fd+f+vj8c/P/aeaVl+6b2M7WrHW4nHrTe+pPRd13RGxtJNgz7GutD097U4EAICWVL/j/zQifh0Rj19vdzYAAADAXqj8qS++SSIqAAAAwIGVqV0Dm2Sy6bUAfZHJZLPr1/D+PI5mCsVS+XfTxeWFqfVrZQeiJzM9W8gPpdcKD0RPUq0P19af1i9uqo9ExImIeKn/SK2enSwWptp98gMAAAA6xLFN4/+v+tfH/wAAAMABM9DuBAAAAIA9Z/wPAAAAB1/T8X/Svb+JAAAAAHvh79euVUulfv/rqZsry3PFmxem8qW57PzyZHayuLSYnSkWZ2q/2Te/3f8rFIuLf4iF5du5cr5UzpVWVsfni8sL5fHafb3H8+4TDQAAAPvvxK/ufZRExNofj9RK1aF0Xwtj9bG9zQ7YS5mdHZ7sVR7A/utqdwJA27jAFzqX+Xhgm4H9y5vqOzxtAAAAPA8Gf/FM8//mA+EFZiAPncv8P3Qu8//Qucz/Q4c7vP0hvc12vL/LuQAAAHumr1aSTDadC+yLTCabjTheuy1ATzI9W8gPRcRPIuLD/p7D1fpwu5MGAAAAAAAAAAAAAAAAAAAAAAAAgBdMpZJEBQAAADjQIjKfJemN/Af7z/ZtPj9wKPm6v7aMiFtv3Hj19kS5vDRc3f7lk+3l19LtF9txBgMAAADYrD5Or4/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA3PXp4Z7Je9jPugz9HxECj+N3RW1v2Rk9EHH2cRPeGxyUR0bUL8dfuRsTJRvGTaloxkGaxOX4mIo60Of6xXYgPnexetf8Za/T+y8SZ2rLx+687Lc/qwZlm/V/mSf/X1aT/O95ijFP338k1jX834lR34/6nHj95xv73X/9cXW22r/JmxGDDz5/kB7Fy5fnFXGll9cLs/MRMfia/MDIyfHn0yuil0aHc9Gwhn/5tGOP/v3z3u63af7RJ/IFt2n+2xfZ/e//2w59tEf/cbxq//ie3iF997n+bfg5U9w/W19fW1zc6/fYHp7dq/1ST9m/3+p9rsf3nr//3kxYPBQD2QWlldW6iUMgvWbFi5eCtXE/f6Dt+eJs7JgAAYNc9/dLf7kwAAAAAAAAAAAAAAAAAAACgc+3Hj5BtjNfbvqYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzp+wAAAP//hqfSmw==") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 87.541217ms ago: executing program 2 (id=148): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000002380)) 51.087098ms ago: executing program 1 (id=149): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 2 (id=150): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @multicast2}}}, 0x2e) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) epoll_create1(0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="03011400012989290e358000ad0001140000002f0600ac141418e0000003808a8972bd0b72e410820c520f061fe4fdfe4b889430ebb52997e36e039b1c598825f80100e3c06376c33076a167d514fa570a440261a67a34a07605c93a194946bc6283f4"], 0xdd12}, {&(0x7f0000007240)=ANY=[], 0x2520}], 0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 21.196288][ T23] audit: type=1400 audit(1719846730.790:66): avc: denied { mounton } for pid=342 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.197916][ T342] cgroup1: Unknown subsys name 'net' [ 21.218976][ T23] audit: type=1400 audit(1719846730.790:67): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.224264][ T342] cgroup1: Unknown subsys name 'net_prio' [ 21.252343][ T342] cgroup1: Unknown subsys name 'devices' [ 21.258589][ T23] audit: type=1400 audit(1719846730.850:68): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.421309][ T342] cgroup1: Unknown subsys name 'hugetlb' [ 21.426930][ T342] cgroup1: Unknown subsys name 'rlimit' [ 21.432735][ T23] audit: type=1400 audit(1719846731.030:69): avc: denied { read } for pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 21.580201][ T23] audit: type=1400 audit(1719846731.180:70): avc: denied { setattr } for pid=342 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.602696][ T344] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.603338][ T23] audit: type=1400 audit(1719846731.180:71): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.636303][ T23] audit: type=1400 audit(1719846731.180:72): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.659215][ T23] audit: type=1400 audit(1719846731.210:73): avc: denied { relabelto } for pid=344 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.684784][ T23] audit: type=1400 audit(1719846731.210:74): avc: denied { write } for pid=344 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.710153][ T23] audit: type=1400 audit(1719846731.260:75): avc: denied { read } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.710393][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.080674][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.087505][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.095309][ T351] device bridge_slave_0 entered promiscuous mode [ 22.104165][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.111033][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.118202][ T351] device bridge_slave_1 entered promiscuous mode [ 22.154200][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.161076][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.168425][ T352] device bridge_slave_0 entered promiscuous mode [ 22.175136][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.182288][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.189578][ T353] device bridge_slave_0 entered promiscuous mode [ 22.196031][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.203093][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.210512][ T354] device bridge_slave_0 entered promiscuous mode [ 22.220714][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.227537][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.234875][ T352] device bridge_slave_1 entered promiscuous mode [ 22.248720][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.255558][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.263000][ T353] device bridge_slave_1 entered promiscuous mode [ 22.269389][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.276216][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.283681][ T354] device bridge_slave_1 entered promiscuous mode [ 22.369749][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.376588][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.384012][ T355] device bridge_slave_0 entered promiscuous mode [ 22.394318][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.401201][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.408344][ T355] device bridge_slave_1 entered promiscuous mode [ 22.550423][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.557263][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.564410][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.571550][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.604489][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.611350][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.618745][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.625475][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.635781][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.642632][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.649845][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.656585][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.666099][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.673200][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.680346][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.687161][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.724879][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.731991][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.739573][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.746558][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.753587][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.761060][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.768075][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.775210][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.782953][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.790290][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.809565][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.817726][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.824578][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.831884][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.840157][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.846992][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.854220][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.862044][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.907243][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.939354][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.947806][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.956224][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.964236][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.971838][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.979965][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.986784][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.994250][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.002329][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.009165][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.016455][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.023954][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.032011][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.039278][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.046372][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.054773][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.061630][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.068974][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.076925][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.083776][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.112078][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.120504][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.128609][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.135561][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.143232][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.151922][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.159932][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.167738][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.175543][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.183354][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.202574][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.210651][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.218796][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.226629][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.248745][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.256005][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.263483][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.271635][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.280650][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.287460][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.294685][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.302917][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.310930][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.317735][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.324950][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.332882][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.340687][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.348491][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.356572][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.369322][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.377302][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.385316][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.393548][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.414497][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.422843][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.431406][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.439585][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.447735][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.456088][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.464715][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.472515][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.513297][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.523310][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.535338][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.543326][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.551090][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.559158][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.577513][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.585869][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.594621][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.602459][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.610246][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.618457][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.650119][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.658353][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.666799][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.675193][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.684225][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.692617][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.701624][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.709967][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.718397][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.726744][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.735209][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.743140][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.782986][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.791371][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.809734][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.820591][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.829522][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.838175][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.874391][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.936924][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.037527][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.041648][ T395] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 24.048409][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.064637][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.074180][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.098956][ T395] overlayfs: maximum fs stacking depth exceeded [ 24.299680][ T409] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.161526][ T422] syz.0.13 (422) used greatest stack depth: 22680 bytes left [ 26.052097][ T476] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 26.111448][ T477] tipc: Started in network mode [ 26.116259][ T477] tipc: Own node identity 4, cluster identity 4711 [ 26.122665][ T477] tipc: 32-bit node address hash set to 4 [ 26.467749][ T23] kauditd_printk_skb: 61 callbacks suppressed [ 26.467757][ T23] audit: type=1400 audit(1719846736.060:137): avc: denied { getopt } for pid=481 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.862088][ T23] audit: type=1400 audit(1719846736.460:138): avc: denied { bind } for pid=499 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.908853][ T502] syz.2.44 (pid 502) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 27.018072][ T23] audit: type=1400 audit(1719846736.480:139): avc: denied { setopt } for pid=499 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.228557][ T507] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 27.747674][ T507] syz.2.44 (507) used greatest stack depth: 22008 bytes left [ 27.969843][ T527] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 0 (only 8 groups) [ 27.972916][ T23] audit: type=1400 audit(1719846737.570:140): avc: denied { create } for pid=528 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 28.028370][ T23] audit: type=1400 audit(1719846737.620:141): avc: denied { name_bind } for pid=530 comm="syz.4.51" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.039131][ T531] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 28.049812][ T23] audit: type=1400 audit(1719846737.620:142): avc: denied { node_bind } for pid=530 comm="syz.4.51" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.640792][ T551] tipc: Started in network mode [ 28.645539][ T551] tipc: Own node identity 4, cluster identity 4711 [ 28.651980][ T551] tipc: 32-bit node address hash set to 4 [ 29.022387][ T23] audit: type=1400 audit(1719846738.620:143): avc: denied { connect } for pid=554 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.182996][ T23] audit: type=1400 audit(1719846738.780:144): avc: denied { name_bind } for pid=558 comm="syz.0.60" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 29.204436][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 29.542654][ T23] audit: type=1400 audit(1719846739.140:145): avc: denied { create } for pid=569 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.740043][ T604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 31.160561][ T606] fuse: Unknown parameter '00000000000000060928' [ 31.356882][ T626] tipc: Started in network mode [ 31.361870][ T626] tipc: Own node identity 4, cluster identity 4711 [ 31.368143][ T626] tipc: 32-bit node address hash set to 4 [ 31.639261][ T609] syz.1.74 (609) used greatest stack depth: 21688 bytes left [ 31.735399][ T23] audit: type=1400 audit(1719846741.330:146): avc: denied { execute } for pid=634 comm="syz.4.81" path=2F6D656D66643AC0873A2A18C16BA7875BA06F38AA4BA5D30B86CA3C7FFD368D7DD8F247B8EA65299086E39608E0FAB1D84EB257CB8D7D336C6D38A537C9202864656C6574656429 dev="tmpfs" ino=12694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.885359][ T643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 32.529709][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 33.530451][ T705] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 33.835229][ T711] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 33.859535][ T23] audit: type=1400 audit(1719846743.460:147): avc: denied { mount } for pid=710 comm="syz.3.104" name="/" dev="loop3" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.897210][ T711] ====================================================== [ 33.897210][ T711] WARNING: the mand mount option is being deprecated and [ 33.897210][ T711] will be removed in v5.15! [ 33.897210][ T711] ====================================================== [ 33.949582][ T23] audit: type=1400 audit(1719846743.480:148): avc: denied { mount } for pid=713 comm="syz.4.105" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.985035][ T352] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 34.003717][ T23] audit: type=1400 audit(1719846743.490:149): avc: denied { mounton } for pid=710 comm="syz.3.104" path="/root/syzkaller.8x66wj/23/file2/file0" dev="loop3" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.029088][ T352] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 34.043245][ T352] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 34.058660][ T23] audit: type=1400 audit(1719846743.490:150): avc: denied { unmount } for pid=355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.059059][ T352] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 34.098716][ T23] audit: type=1400 audit(1719846743.580:151): avc: denied { unmount } for pid=352 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.118883][ T352] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 34.150337][ T717] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro, [ 34.168752][ T717] ext4 filesystem being mounted at /root/syzkaller.3gTOaz/20/file1 supports timestamps until 2038 (0x7fffffff) [ 34.248990][ T23] audit: type=1400 audit(1719846743.850:152): avc: denied { write } for pid=716 comm="syz.4.106" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.318660][ T23] audit: type=1400 audit(1719846743.850:153): avc: denied { add_name } for pid=716 comm="syz.4.106" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.361027][ T717] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.106: path /root/syzkaller.3gTOaz/20/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 34.384000][ T352] syz-executor (352) used greatest stack depth: 20760 bytes left [ 34.392309][ T380] tipc: Left network mode [ 34.407497][ T23] audit: type=1400 audit(1719846743.850:154): avc: denied { create } for pid=716 comm="syz.4.106" name="hugetlb.2MB.rsvd.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.459681][ T23] audit: type=1400 audit(1719846743.850:155): avc: denied { read append open } for pid=716 comm="syz.4.106" path="/root/syzkaller.3gTOaz/20/file1/hugetlb.2MB.rsvd.usage_in_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.549797][ T717] EXT4-fs (loop4): Remounting filesystem read-only [ 34.601633][ T725] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz.4.106: path /root/syzkaller.3gTOaz/20/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 34.630440][ T725] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz.4.106: path /root/syzkaller.3gTOaz/20/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 34.671604][ T725] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz.4.106: path /root/syzkaller.3gTOaz/20/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.699015][ T725] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz.4.106: path /root/syzkaller.3gTOaz/20/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 34.723323][ T725] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz.4.106: path /root/syzkaller.3gTOaz/20/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 34.746788][ T725] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz.4.106: path /root/syzkaller.3gTOaz/20/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 34.769402][ T725] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 18: comm syz.4.106: lblock 23 mapped to illegal pblock 18 (length 1) [ 34.770003][ T730] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.783792][ T725] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 19: comm syz.4.106: path /root/syzkaller.3gTOaz/20/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 34.794876][ T730] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.819212][ T725] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 20: comm syz.4.106: path /root/syzkaller.3gTOaz/20/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 34.821021][ T730] device bridge_slave_0 entered promiscuous mode [ 34.850386][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.857268][ T730] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.865080][ T730] device bridge_slave_1 entered promiscuous mode [ 34.897505][ T720] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 34.921007][ T720] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 34.931911][ T720] F2FS-fs (loop2): invalid crc value [ 34.938384][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.945251][ T730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.945377][ T720] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.952410][ T730] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.965663][ T730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.992244][ T720] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 34.999719][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.009021][ T720] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.016659][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.024531][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.038964][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.047298][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.054245][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.071011][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.105935][ T397] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.112801][ T397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.150194][ T7] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 35.159713][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.167549][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.176781][ T7] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 35.187257][ T743] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.195205][ T743] EXT4-fs (loop4): Ignoring removed orlov option [ 35.219020][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.248992][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.256687][ T743] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 35.269177][ T753] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 35.277566][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.300146][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.310592][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.346567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.361931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.376675][ T380] device bridge_slave_1 left promiscuous mode [ 35.383803][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.391777][ T380] device bridge_slave_0 left promiscuous mode [ 35.397766][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.439664][ T746] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.467295][ T746] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.599469][ T769] request_module fs-afs succeeded, but still no fs? [ 35.613161][ T354] attempt to access beyond end of device [ 35.613161][ T354] loop0: rw=2049, want=45104, limit=40427 [ 35.719894][ T774] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro, [ 35.735024][ T774] ext4 filesystem being mounted at /root/syzkaller.9RsKrt/29/file1 supports timestamps until 2038 (0x7fffffff) [ 35.741278][ T772] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 35.767814][ T772] ext4 filesystem being mounted at /root/syzkaller.3gTOaz/24/file1 supports timestamps until 2038 (0x7fffffff) [ 35.783365][ T772] EXT4-fs (loop4): re-mounted. Opts: (null) [ 35.806655][ T782] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro, [ 35.812930][ T774] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.122: path /root/syzkaller.9RsKrt/29/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 35.838266][ T782] ext4 filesystem being mounted at /root/syzkaller.FXfwP8/1/file1 supports timestamps until 2038 (0x7fffffff) [ 35.852805][ T774] EXT4-fs (loop1): Remounting filesystem read-only [ 35.864751][ T774] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.122: path /root/syzkaller.9RsKrt/29/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 35.888151][ T774] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz.1.122: path /root/syzkaller.9RsKrt/29/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 35.911442][ T774] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz.1.122: path /root/syzkaller.9RsKrt/29/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 35.933955][ T774] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz.1.122: path /root/syzkaller.9RsKrt/29/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 35.940005][ T782] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.124: path /root/syzkaller.FXfwP8/1/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 35.986933][ T774] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.122: path /root/syzkaller.9RsKrt/29/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 36.022904][ T791] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 36.042125][ T782] EXT4-fs (loop3): Remounting filesystem read-only [ 36.050366][ T774] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.122: path /root/syzkaller.9RsKrt/29/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 36.075935][ T789] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 36.096781][ T789] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 36.108881][ T789] EXT4-fs (loop4): This should not happen!! Data will be lost [ 36.108881][ T789] [ 36.109671][ T774] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 18: comm syz.1.122: lblock 23 mapped to illegal pblock 18 (length 1) [ 36.118334][ T789] EXT4-fs (loop4): Total free blocks count 0 [ 36.138158][ T789] EXT4-fs (loop4): Free/Dirty block details [ 36.143894][ T789] EXT4-fs (loop4): free_blocks=68451041280 [ 36.168915][ T774] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 19: comm syz.1.122: path /root/syzkaller.9RsKrt/29/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 36.169593][ T789] EXT4-fs (loop4): dirty_blocks=64 [ 36.191268][ T774] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 20: comm syz.1.122: path /root/syzkaller.9RsKrt/29/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 36.220371][ T789] EXT4-fs (loop4): Block reservation details [ 36.226221][ T789] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 36.356147][ T803] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 36.392710][ T808] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 36.408714][ T808] overlayfs: maximum fs stacking depth exceeded [ 36.438688][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.540508][ T822] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 36.555669][ T822] ext4 filesystem being mounted at /root/syzkaller.9RsKrt/34/file1 supports timestamps until 2038 (0x7fffffff) [ 36.579049][ T822] EXT4-fs (loop1): re-mounted. Opts: (null) [ 36.672541][ T831] device wireguard0 entered promiscuous mode [ 36.778568][ T831] syz.1.137 (831) used greatest stack depth: 19448 bytes left [ 36.790822][ T836] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro, [ 36.801053][ T836] ext4 filesystem being mounted at /root/syzkaller.pQzznr/22/file1 supports timestamps until 2038 (0x7fffffff) [ 36.815343][ T840] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 36.823292][ T5] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 36.834526][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.847112][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.852762][ T836] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.139: path /root/syzkaller.pQzznr/22/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 36.857073][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 36.880016][ T836] EXT4-fs (loop2): Remounting filesystem read-only [ 36.918237][ T836] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.139: path /root/syzkaller.pQzznr/22/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 36.945672][ T23] kauditd_printk_skb: 18 callbacks suppressed [ 36.945681][ T23] audit: type=1400 audit(1719846746.530:174): avc: denied { create } for pid=850 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.958956][ T853] process 'syz.1.146' launched './file0' with NULL argv: empty string added [ 36.983462][ T23] audit: type=1400 audit(1719846746.540:175): avc: denied { setopt } for pid=850 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.989269][ T836] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz.2.139: path /root/syzkaller.pQzznr/22/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 37.003318][ T23] audit: type=1400 audit(1719846746.550:176): avc: denied { bind } for pid=850 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.025333][ T836] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz.2.139: path /root/syzkaller.pQzznr/22/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 37.044415][ T5] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 37.070794][ T836] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz.2.139: path /root/syzkaller.pQzznr/22/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 37.075247][ T5] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 37.097276][ T836] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.139: path /root/syzkaller.pQzznr/22/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 37.104985][ T5] usb 1-1: Manufacturer: syz [ 37.144457][ T836] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz.2.139: path /root/syzkaller.pQzznr/22/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 37.146271][ T5] usb 1-1: config 0 descriptor?? [ 37.171372][ T836] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 18: comm syz.2.139: lblock 23 mapped to illegal pblock 18 (length 1) [ 37.185729][ T836] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 19: comm syz.2.139: path /root/syzkaller.pQzznr/22/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 37.208456][ T836] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 20: comm syz.2.139: path /root/syzkaller.pQzznr/22/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=1, size=2048 fake=0 [ 37.233151][ T857] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 37.235326][ T861] device bridge_slave_0 left promiscuous mode [ 37.248534][ T857] ext4 filesystem being mounted at /root/syzkaller.9RsKrt/41/file1 supports timestamps until 2038 (0x7fffffff) [ 37.269631][ T861] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.279272][ T861] device bridge_slave_1 left promiscuous mode [ 37.285332][ T861] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.293783][ T857] EXT4-fs (loop1): re-mounted. Opts: (null) [ 37.368828][ T23] audit: type=1400 audit(1719846746.970:177): avc: denied { bind } for pid=866 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.388299][ T23] audit: type=1400 audit(1719846746.980:178): avc: denied { setopt } for pid=866 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.388882][ T867] ------------[ cut here ]------------ [ 37.407863][ T23] audit: type=1400 audit(1719846746.980:179): avc: denied { write } for pid=866 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.412742][ T867] kernel BUG at net/core/dev.c:2869! [ 37.412811][ T867] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 37.442946][ T867] CPU: 0 PID: 867 Comm: syz.2.150 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 37.452410][ T867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 37.462329][ T867] RIP: 0010:skb_checksum_help+0x86c/0x880 [ 37.467855][ T867] Code: 05 16 fe e9 b3 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c d0 fc ff ff 48 89 df e8 0e 05 16 fe e9 c3 fc ff ff e8 f4 1f e6 fd <0f> 0b e8 ed 1f e6 fd 0f 0b 66 66 2e 0f 1f 84 00 00 00 00 00 41 57 [ 37.487392][ T867] RSP: 0018:ffff8881e247eec8 EFLAGS: 00010283 [ 37.493453][ T867] RAX: ffffffff837e190c RBX: 0000000000002989 RCX: 0000000000040000 [ 37.501276][ T867] RDX: ffffc90001146000 RSI: 0000000000001172 RDI: 0000000000001173 [ 37.509078][ T867] RBP: 0000000000002989 R08: ffffffff837e1307 R09: ffff8881e247f080 [ 37.516888][ T867] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e02a7bb0 [ 37.524700][ T867] R13: 0000000000002989 R14: ffff8881e02a7b40 R15: 1ffff1103c054f76 [ 37.532610][ T867] FS: 00007f5ed7f526c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.541362][ T867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.547782][ T867] CR2: 000000002000e000 CR3: 00000001e1347000 CR4: 00000000003406b0 [ 37.555592][ T867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.563403][ T867] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.571216][ T867] Call Trace: [ 37.574350][ T867] ? __die+0xb4/0x100 [ 37.578208][ T867] ? die+0x26/0x50 [ 37.581807][ T867] ? do_trap+0x1e7/0x340 [ 37.585887][ T867] ? skb_checksum_help+0x86c/0x880 [ 37.590835][ T867] ? skb_checksum_help+0x86c/0x880 [ 37.595779][ T867] ? do_invalid_op+0xfb/0x110 [ 37.600298][ T867] ? skb_checksum_help+0x86c/0x880 [ 37.605239][ T867] ? invalid_op+0x1e/0x30 [ 37.609404][ T867] ? skb_checksum_help+0x267/0x880 [ 37.614351][ T867] ? skb_checksum_help+0x86c/0x880 [ 37.619297][ T867] ? skb_checksum_help+0x86c/0x880 [ 37.624261][ T867] ? skb_checksum_help+0x86c/0x880 [ 37.629195][ T867] ip_do_fragment+0x15e/0x2200 [ 37.633801][ T867] ? ipt_alloc_initial_table+0x570/0x570 [ 37.639266][ T867] ? ip_fragment+0x210/0x210 [ 37.643691][ T867] ? ip_frag_next+0xad0/0xad0 [ 37.648208][ T867] ? iptable_mangle_hook+0x1c6/0x540 [ 37.653321][ T867] ? nf_nat_ipv4_local_fn+0x1c2/0x520 [ 37.658528][ T867] ? nf_nat_ipv4_out+0x2fb/0x4f0 [ 37.663303][ T867] ? __ip_finish_output+0x410/0x710 [ 37.668345][ T867] ? ip_fragment+0x9a/0x210 [ 37.672682][ T867] ip_output+0x19b/0x3a0 [ 37.676912][ T867] ? ip_finish_output+0x1d0/0x1d0 [ 37.681765][ T867] ? ip_mc_finish_output+0x340/0x340 [ 37.686886][ T867] iptunnel_xmit+0x476/0x850 [ 37.691315][ T867] ip_tunnel_xmit+0x1ac0/0x2690 [ 37.695997][ T867] ? ip_tunnel_xmit+0xf1/0x2690 [ 37.700681][ T867] ? tnl_update_pmtu+0xbb0/0xbb0 [ 37.705454][ T867] ? gre_build_header+0x23f/0x7a0 [ 37.710314][ T867] ipgre_xmit+0x81a/0xbf0 [ 37.714482][ T867] dev_hard_start_xmit+0x1b7/0x6b0 [ 37.719430][ T867] __dev_queue_xmit+0x14da/0x27e0 [ 37.724291][ T867] ? dev_queue_xmit+0x20/0x20 [ 37.728799][ T867] ? virtio_net_hdr_to_skb+0xa10/0x1130 [ 37.734182][ T867] ? fanout_demux_rollover+0xc10/0xc10 [ 37.739478][ T867] packet_sendmsg+0x4747/0x6100 [ 37.744176][ T867] ? avc_has_perm+0x21a/0x260 [ 37.748678][ T867] ? selinux_socket_sendmsg+0x243/0x340 [ 37.754056][ T867] ? selinux_socket_accept+0x5b0/0x5b0 [ 37.759353][ T867] ? rw_copy_check_uvector+0x2a3/0x2f0 [ 37.764647][ T867] ? compat_packet_setsockopt+0x160/0x160 [ 37.770206][ T867] ? push_pipe+0x6ee/0x760 [ 37.774454][ T867] ? security_socket_sendmsg+0x7d/0xa0 [ 37.779748][ T867] ? compat_packet_setsockopt+0x160/0x160 [ 37.785308][ T867] ____sys_sendmsg+0x5ac/0x8f0 [ 37.789906][ T867] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 37.794942][ T867] ? selinux_socket_setsockopt+0x260/0x360 [ 37.800588][ T867] __sys_sendmsg+0x28b/0x380 [ 37.805014][ T867] ? ____sys_sendmsg+0x8f0/0x8f0 [ 37.809784][ T867] ? fput_many+0x15e/0x1b0 [ 37.814036][ T867] ? sockfs_listxattr+0xe0/0xe0 [ 37.818722][ T867] ? anon_inode_getfile+0xfb/0x180 [ 37.823667][ T867] do_syscall_64+0xca/0x1c0 [ 37.828010][ T867] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 37.833731][ T867] RIP: 0033:0x7f5ed8cd0b99 [ 37.837984][ T867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.857513][ T867] RSP: 002b:00007f5ed7f52048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.865765][ T867] RAX: ffffffffffffffda RBX: 00007f5ed8e5efa0 RCX: 00007f5ed8cd0b99 [ 37.873568][ T867] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000004 [ 37.881378][ T867] RBP: 00007f5ed8d5177e R08: 0000000000000000 R09: 0000000000000000 [ 37.889196][ T867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.896998][ T867] R13: 000000000000000b R14: 00007f5ed8e5efa0 R15: 00007ffebca07668 [ 37.904817][ T867] Modules linked in: [ 37.908614][ T867] ---[ end trace 7f20d18039e51425 ]--- [ 37.914145][ T867] RIP: 0010:skb_checksum_help+0x86c/0x880 [ 37.919699][ T867] Code: 05 16 fe e9 b3 fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c d0 fc ff ff 48 89 df e8 0e 05 16 fe e9 c3 fc ff ff e8 f4 1f e6 fd <0f> 0b e8 ed 1f e6 fd 0f 0b 66 66 2e 0f 1f 84 00 00 00 00 00 41 57 [ 37.939228][ T867] RSP: 0018:ffff8881e247eec8 EFLAGS: 00010283 [ 37.945098][ T867] RAX: ffffffff837e190c RBX: 0000000000002989 RCX: 0000000000040000 [ 37.952936][ T867] RDX: ffffc90001146000 RSI: 0000000000001172 RDI: 0000000000001173 [ 37.960751][ T867] RBP: 0000000000002989 R08: ffffffff837e1307 R09: ffff8881e247f080 [ 37.968651][ T867] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881e02a7bb0 [ 37.976439][ T867] R13: 0000000000002989 R14: ffff8881e02a7b40 R15: 1ffff1103c054f76 [ 37.984293][ T867] FS: 00007f5ed7f526c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 37.993036][ T867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.999460][ T867] CR2: 000000002000e000 CR3: 00000001e1347000 CR4: 00000000003406b0 [ 38.007270][ T867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.015083][ T867] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.022986][ T867] Kernel panic - not syncing: Fatal exception in interrupt [ 38.030331][ T867] Kernel Offset: disabled [ 38.034558][ T867] Rebooting in 86400 seconds..