last executing test programs: 4.864850587s ago: executing program 2 (id=285): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(r1, 0x63, 0x1, 0x0) r2 = open(0x0, 0x0, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x53, 0x2}, @period={0x0, 0x0, 0x7f, 0x0, 0x0, {0x0, 0x80}, 0x0, 0x0}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862901) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1f8) 3.704615008s ago: executing program 2 (id=292): syz_read_part_table(0x1056, &(0x7f0000000000)="$eJzsz7GpAkEYBODZe+9ODQRDAwOLsAAbsBEjSzjbMbQireEKOJFF4QoQEb4vmV0YBv7wXbuSPl3S1u86h/acxaQyzN/PUuOY5DQk/fYvSZPcN+VVWdZoZnnOXvcl3a2skv+M42QkSXv55GkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CseAQAA//9k2grZ") 3.65009438s ago: executing program 2 (id=294): r0 = socket(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x1004c09, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRES64], 0x2, 0x1f3, &(0x7f0000000800)="$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") mount$9p_unix(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0xa, 0x0) 3.434607937s ago: executing program 2 (id=296): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) mount$overlay(0xa, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 3.402336389s ago: executing program 2 (id=297): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x80, &(0x7f0000000200)={[{@errors_remount}, {@norecovery}, {@dioread_lock}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x1116}}, {@resuid}, {@barrier}, {@quota}, {@nogrpid}]}, 0x52, 0x4d6, &(0x7f0000000540)="$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") rename(0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x18}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x8a, &(0x7f00000002c0)={@local, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) readv(r1, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/185, 0x200004d4}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c8d6a340ac050a038c65000000010902240001000000000904000002039d0200090509ffe700000000090503"], 0x0) write(0xffffffffffffffff, 0x0, 0x0) 3.196442636s ago: executing program 1 (id=299): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x46, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000073"]) 3.145345968s ago: executing program 1 (id=301): r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x171901, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x810, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, 0x0, 0x0) io_submit(r8, 0x5, &(0x7f0000001bc0)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r6, 0x0}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x0, r5, &(0x7f00000009c0)="501eae3e68eda2ed979818234603a566cc2316b0e10f6a5d195772ae3b7336cb0061a76bb5517da66ad98b53485739c6f52bf6204a25fdadbab33cdb58d3f880a4353fa6d56413023cdb2ec9e6fc8d54842ac699f3857defcc15fb02f47fdb8de98ff33362df019d78128657918b0c8668e6086919abc8c680a8e2456c69f90b3a696bfbb96510d7429f850b296fc49dd0721dc95dd10f616988e64aef6bdcd0d1d0e4e921fab0f801874f9a80caeeea6d7e8d4a212f19fb4366171751b09878402f51c9ee3f", 0xc6, 0x8000000000000001, 0x0, 0x0, r1}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x8, 0x8aba, 0xffffffffffffffff, &(0x7f0000000880)="502347ed54f48a573c9fe14bd5cafe9ffa41850a3deda130794e68f51c2b8034cb1330d7f17e1f0b5054f6716e98f84456e99841cc5554eadd1895060dfcd4c04d18cbef7dddc3ba0f745cab9124194048559958f1d14842dbb122bcb7ddd6d781080519aac79abc6894788e9d2b6c148ffe9571cd9d1133c5127a67189d713a48bba84b057d157bd9ffdab7677971d497da818dfdd5748e1fbd90f3983b5f04b3e31d81c29e565d05abebfc853b792e9433da30aabf8c4439bdcd8e30cdfe8d59418b72579962d1c1b769714eff60054e6d5fbe9f6dd7168eb3edbcd98fecf0a87303358a142cb338db9587760b984b40b6eb9d", 0xf4, 0xc08, 0x0, 0x3}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000001980)="79cd6232d76ab7f99c072adc54da66cd985ff98bcb0550a745093ac127cf3fe5e5b88525788a406a50e5e37bcd6034914d8a2250a75b580f71e6924aeeac693aea80f8a3cc8d42fcff9b53e626b571f3c9412f45279d4c436f2503ebcac47cae17371b711fb65f8122d61ba67f854257e944472341ef1675c12d28458e1f52afc089fd16b2d5838cf56f50b12b1a0da0b1e189cbfdc5284d6dd9c0debb9cb6156e7bf9a3fd6ff7021e89748b97e0b292a92c257b00601a411fd276b402fb8c1da09806c1c92e904749c6906e230208", 0xcf, 0x100, 0x0, 0x1, r1}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000001b00)="099fb76ab2d7ef85c078f0102ce4df4da5c107a6ff40a5236043dec11e0a156e575be451ba00256db19aaf8dda3306f25c97fccf61f5a43f9dfa5b744b08a8b40553548d3f9662bfdea51ecc810959e26c2d4767baec1959b7568899312c5ec787682e11e6c4e98f6cff6792522d", 0x6e, 0xe8, 0x0, 0x2}]) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000000)=0x8a8, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') ftruncate(0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private2}}) lseek(r9, 0x6, 0x0) 3.142317938s ago: executing program 3 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000540)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) unshare(0x2000400) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r4 = gettid() epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1b, 0x4, @tid=r4}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f}, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r3, &(0x7f0000000100)=@other={'unlock', ' ', 'none'}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000393000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 3.07216779s ago: executing program 3 (id=303): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002cc0)={&(0x7f0000002b00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000200000d0000000000000000030000050000000000000000000000000000000d"], &(0x7f0000002c00)=""/188, 0x4e, 0xbc, 0x1}, 0x20) 3.069681831s ago: executing program 3 (id=304): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f00000001c0), 0x2, 0x52a, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x45, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001c2097088680030b28f4010203010902"], 0x0) getdents(r0, &(0x7f0000000180)=""/98, 0xba) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180100fffffffffffffffc00ea1f20207b1af8ff00000000bfa1000000000701f8ffffffb702000008000000b703000000000000c50000051c0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) read$char_usb(r0, &(0x7f0000000a80)=""/240, 0xf0) 2.415790764s ago: executing program 4 (id=306): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0xdd19, 0x80000000, 0x240, r0, 0x8, '\x00', r1, r0, 0x2, 0x0, 0x5, 0x5}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='jbd2_handle_stats\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_NMI(r10, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r10, 0xae80, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000440)='fd/4\x00') syz_kvm_setup_cpu$x86(r11, r6, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EVIOCGABS20(r9, 0x80184560, &(0x7f00000004c0)=""/81) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) 2.387842235s ago: executing program 4 (id=307): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fcdbdf250000000008000500", @ANYRES32, @ANYBLOB="24000300a05ca84f6c9c00000000fd7a70ae0fb20fa152600cb0084517"], 0x6c}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2}) read$eventfd(r2, &(0x7f0000000380), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x200, 0x0, 0x0, 0x7, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x100}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GE={0x14}]}]}}}]}, 0x90}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0xfffffec7) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) r11 = dup2(r7, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r11, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="10040000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250c0000001c000780080001000800000008000100000000000800010050ffffff1c0003800800020000000000080003000900000008000200010000000401068004000500040002003d00040067636d286165732900000000000000000000000000000000000000000000000015000000cd33a1e5b063891ce7d275dda3956b258ba5310b47000000b80003009c172cc366cf1eea38071a983a1f9dbdf4041cd8b3dffeef31dec81d80df859d526dfaca7d148db1bf50245861a279e82c2c4659d85008f6e36abd6fbd487cb1d285d06ff8df84619e7b8a215512f823eb907a16cb4db1648f8d2286ec0e8a64367d00ced604ec957535984bdaeee6b2f2acc487c494e8a55608ee23f6686844be26039ac911986575e741e4f9c36ff7e527e70bcea9ea121732fbc75c1a08907df81d14599d76655858000580070001006962000007000100696200003c00028008000200070000000800030002000000080004000600000008000200fdffffff08000400ff0f00000800030061000000080001000f00000008000100657468009c0004801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000c00078008000300090000000900010073797a31000000000900010073797a31000000000900010073797a30000000000900010073797a30000000000900010073797a30000000001300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b0000140106803d00040067636d286165732900000000000000000000000000000000000000000000000015000000c40d6a84f5096b6d6411d7e6e3905c2716fd9ab1740000004e00030012d62ce6b96a32c873e2a308c8a512b257ebfb71befc21559b1a1462cc518d5c21ccbbc1150948554d5045c776c89c68b54fb7cfa3026fd0a5634be13f212c453d37eb39121ab0817f480000040002000400050004000500710003000db5eca92d374b995e24789ee6fc65b1488d7d5b976a24ef385f541977a9d3df11d52df05b2917f180649526f49013987c3fd4df00ba2ecd525ce1dd12285d89e375c8402db96340b874e21cdc1ff1bff8e087451df41faf599291a7d7308952cbdf324f2ce21cc1d0dda08eba000000540009800800020006000000080002000800000008000100b200000008000200810000000800010001000000080002000000000008000200060000000800010000040000080002000104000008000200810000006400028004000400080001000000000008000200010100002c00038008000200060000000800020005000000080002000000000008000100060000000800010093b300000800020001000000080001000700000008000200ff0100000800010001000000"], 0x410}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008c000000950000270e000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000200)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) 2.280584139s ago: executing program 0 (id=308): syz_open_dev$vcsa(0x0, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000500), 0x1, 0x4ec, &(0x7f0000000740)="$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") quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x8, 0x5, 0x578, 0x130, 0x130, 0xffffffff, 0x130, 0x130, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@remote, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00', [], [], 'vlan0\x00', 'team0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"afc1"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv6=@private2, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 2.24800999s ago: executing program 4 (id=309): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0)='?', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x3c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_UID={0x8, 0xe, 0xffffffffffffffff}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xfffffffffffffffd}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "109a64db5c527e75"}, 0x6}}]}, 0x3c}}, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_setup(0x80000001, &(0x7f0000000000)=0x0) io_destroy(r3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)='N', 0x1}]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.175036522s ago: executing program 1 (id=310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8002, 0x100004, 0x0, 0xffffffffffffffff, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, 0x0, &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r2}, 0x10) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400000040, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000000000bf0900df6f0000005509000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000950000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x285c0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r9 = open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSMASK(r10, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r10, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d20f9d0040ed691e7770c000043bdb358a8b6245c00"}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x10}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r3, r9}, 0xc) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) 1.885590223s ago: executing program 4 (id=311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x46, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000073"]) 1.884684293s ago: executing program 0 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.696570919s ago: executing program 4 (id=313): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x19, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [], 0x0, 0x0, 0x0}, 0x1f0) pipe2$9p(0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x143) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x10001, 0x9}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000400), 0x9) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000006231306e53f070c0000000a9000140900be0003000000000b09007a150b5d8c3d34c0429b0d90694461a747cd21a9c15649a6dfcc2e1b8aab02b10d02d0930813797deeabd05c189a54906128e16a95cdf5a5e4ae8fd160b8059c5685e262fb4e0df5430bacc70cb34c99b33533d3739104000000e804bc"], 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000000)='B') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4a1e, 0x0, @mcast2, 0x4}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x0, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001b000000000045848378f761bb6d5e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000580)={r7, &(0x7f00000005c0)="cb38a31ca01ec71f6157024bff7dfaf0b14e292357064504ed4f3d2330ee66a1f91811868b7d179f6efe41b4725ffe16ea3af81fadd35956421aab51739e932ee3c477e24357a9684a05bf3019b51ef2284bc7321957435809781dd5d89919baf86b599b8d5932145bb41c556902e2511b27dd9527ad3050bc2d53e4c607", &(0x7f0000000680)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0xfffffd43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r8}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.66629235s ago: executing program 0 (id=314): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0xfc, 0x0, 0x0, 0x0, 0x0}) 1.235685776s ago: executing program 0 (id=324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.227097706s ago: executing program 0 (id=315): unshare(0x20000600) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x18) ioctl$BLKTRACETEARDOWN(r0, 0x40101287, 0x0) 1.140658029s ago: executing program 0 (id=316): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x14a, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getgroups(0x0, 0x0) lseek(0xffffffffffffffff, 0x5b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ac0000000001010300000000000000000a0000083c0001802c000180140003"], 0xac}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000002f00007f00000765e7959b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000f600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') fchdir(r6) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000900), 0x3, 0x4ec, &(0x7f0000000bc0)="$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") syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15}, @mdlm={0x15}]}}}]}}]}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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") utimes(&(0x7f0000000280)='./file0\x00', 0x0) 1.025887793s ago: executing program 3 (id=317): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x60400) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}]}}}}}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r4, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) fcntl$getflags(r4, 0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f0000000080)=0x35) 1.007140134s ago: executing program 4 (id=318): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(r2, 0x63, 0x1, 0x0) r3 = open(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x53, 0x2}, @period={0x0, 0x0, 0x7f, 0x0, 0x0, {0x0, 0x80}, 0x0, 0x0}}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) write$char_usb(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0xa00) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r5}, 0x10) 840.59266ms ago: executing program 3 (id=319): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(&(0x7f0000000080), 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00000001c0), 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400), 0x8) inotify_init1(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x5000410) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 144.430125ms ago: executing program 2 (id=320): unshare(0x400) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x4004, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) read(r1, &(0x7f00000000c0)=""/78, 0x4e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x655, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x8000000000400000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000008a5b06d300000000070100000c009b000f04000001000000000000000000"], 0x0, 0x28, 0x0, 0x2}, 0x20) ioctl$TIOCNOTTY(r0, 0x5422) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x659080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'geneve0\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x13) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) r7 = socket(0x1, 0x6, 0xfffffffd) sendto$inet6(r7, &(0x7f0000000200)="7800000018001feeb8f9f50dffff00000204be04fe05fe020611230943000400150000bcfac8388827a685a168d0bf46d323456536f7578d270009000000000000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b0014000000000000000018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 119.992126ms ago: executing program 1 (id=321): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x43, &(0x7f0000000400), 0x8) 56.650178ms ago: executing program 1 (id=322): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='devlink_health_recover_aborted\x00'}, 0x10) getpriority(0x0, 0x0) (async) getpriority(0x0, 0x0) r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) setreuid(r1, 0x0) 56.325917ms ago: executing program 1 (id=323): syz_open_dev$vcsa(0x0, 0x10001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000500), 0x1, 0x4ec, &(0x7f0000000740)="$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") quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x168) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x8, 0x5, 0x578, 0x130, 0x130, 0xffffffff, 0x130, 0x130, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@remote, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00', [], [], 'vlan0\x00', 'team0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"afc1"}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv6=@private2, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 0s ago: executing program 3 (id=325): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x6, &(0x7f00000003c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r3, 0x0, 0x18, &(0x7f0000002100)={0x0, @local, @local}, &(0x7f0000000100)=0x1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000001ac0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. [ 20.839126][ T23] audit: type=1400 audit(1719737341.470:66): avc: denied { mounton } for pid=341 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.840653][ T341] cgroup1: Unknown subsys name 'net' [ 20.861700][ T23] audit: type=1400 audit(1719737341.470:67): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.866853][ T341] cgroup1: Unknown subsys name 'net_prio' [ 20.894596][ T341] cgroup1: Unknown subsys name 'devices' [ 20.900959][ T23] audit: type=1400 audit(1719737341.530:68): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.040586][ T341] cgroup1: Unknown subsys name 'hugetlb' [ 21.046209][ T341] cgroup1: Unknown subsys name 'rlimit' [ 21.179680][ T23] audit: type=1400 audit(1719737341.810:69): avc: denied { setattr } for pid=341 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.202722][ T23] audit: type=1400 audit(1719737341.810:70): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.227273][ T23] audit: type=1400 audit(1719737341.810:71): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.232891][ T344] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.258942][ T23] audit: type=1400 audit(1719737341.890:72): avc: denied { relabelto } for pid=344 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.284312][ T23] audit: type=1400 audit(1719737341.890:73): avc: denied { write } for pid=344 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.312690][ T23] audit: type=1400 audit(1719737341.940:74): avc: denied { read } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.338062][ T23] audit: type=1400 audit(1719737341.940:75): avc: denied { open } for pid=341 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.363893][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.591220][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.600184][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.607365][ T351] device bridge_slave_0 entered promiscuous mode [ 21.615788][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.622647][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.629931][ T351] device bridge_slave_1 entered promiscuous mode [ 21.765617][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.772577][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.779889][ T354] device bridge_slave_0 entered promiscuous mode [ 21.798496][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.805328][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.812746][ T354] device bridge_slave_1 entered promiscuous mode [ 21.828508][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.835340][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.842800][ T353] device bridge_slave_0 entered promiscuous mode [ 21.852334][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.859334][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.866480][ T353] device bridge_slave_1 entered promiscuous mode [ 21.942073][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.949189][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.956347][ T355] device bridge_slave_0 entered promiscuous mode [ 21.963021][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.969888][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.977032][ T352] device bridge_slave_0 entered promiscuous mode [ 21.987277][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.994129][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.001412][ T352] device bridge_slave_1 entered promiscuous mode [ 22.016099][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.023322][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.030573][ T355] device bridge_slave_1 entered promiscuous mode [ 22.127551][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.134405][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.141545][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.148290][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.203669][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.210525][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.217731][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.224507][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.260864][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.267705][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.274863][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.281609][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.309001][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.316077][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.323371][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.330705][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.337631][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.344670][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.352492][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.359798][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.379003][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.386940][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.393777][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.401015][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.409136][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.415945][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.423161][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.430960][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.458186][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.468471][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.476509][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.483351][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.496206][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.504593][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.511442][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.549338][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.556918][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.565722][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.609489][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.617369][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.626735][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.633599][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.641835][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.649757][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.657458][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.665652][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.673820][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.681759][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.689631][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.697519][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.705620][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.713878][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.722046][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.728887][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.736110][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.743850][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.751487][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.759670][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.767608][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.774464][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.781733][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.789980][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.797894][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.804752][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.811886][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.819895][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.827754][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.855251][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.863770][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.871871][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.880249][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.887932][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.895873][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.903610][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.911722][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.938706][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.946857][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.955964][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.964457][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.972752][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.981072][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.989365][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.996519][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.003900][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.011711][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.019479][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.027537][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.035573][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.042399][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.049615][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.057809][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.065774][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.072608][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.079769][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.102043][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.110520][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.119454][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.149754][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.159354][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.167365][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.175660][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.183892][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.191863][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.203017][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.229018][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.237089][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.241020][ T380] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.245786][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.286643][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.295111][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.309344][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.319727][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.327994][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.336513][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.357330][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.365699][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.374309][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.379879][ T380] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 23.383423][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.390371][ T380] System zones: 0-1, 3-12 [ 23.398771][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.404063][ T380] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,debug,,errors=continue [ 23.428263][ T18] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.438807][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.449314][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.457437][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.466588][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.474943][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.561892][ T394] overlayfs: missing 'lowerdir' [ 23.600494][ T406] Zero length message leads to an empty skb [ 23.788250][ T18] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.809281][ T18] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.845132][ T18] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 23.882256][ T18] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 23.907169][ T18] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 23.961085][ T391] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.036427][ T391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.109875][ T18] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.119180][ T18] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.126960][ T18] usb 1-1: Product: syz [ 24.131530][ T18] usb 1-1: Manufacturer: syz [ 24.135922][ T18] usb 1-1: SerialNumber: syz [ 24.460338][ T376] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 24.471678][ T434] F2FS-fs (loop2): invalid crc value [ 24.508782][ T434] F2FS-fs (loop2): Found nat_bits in checkpoint [ 24.555135][ T434] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 24.568350][ T434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 24.611777][ T443] FAT-fs (loop3): Directory bread(block 64) failed [ 24.623361][ T443] FAT-fs (loop3): Directory bread(block 65) failed [ 24.637016][ T443] FAT-fs (loop3): Directory bread(block 66) failed [ 24.650623][ T443] FAT-fs (loop3): Directory bread(block 67) failed [ 24.659910][ T443] FAT-fs (loop3): Directory bread(block 68) failed [ 24.666287][ T443] FAT-fs (loop3): Directory bread(block 69) failed [ 24.672938][ T443] FAT-fs (loop3): Directory bread(block 70) failed [ 24.679670][ T443] FAT-fs (loop3): Directory bread(block 71) failed [ 24.686144][ T443] FAT-fs (loop3): Directory bread(block 72) failed [ 24.693217][ T443] FAT-fs (loop3): Directory bread(block 73) failed [ 25.110943][ T449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 25.121772][ T449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 25.137348][ T413] F2FS-fs (loop1): Unrecognized mount option "00000000000000000000" or missing value [ 25.324981][ T449] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.335162][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.342039][ T448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.354590][ T352] attempt to access beyond end of device [ 25.354590][ T352] loop2: rw=2049, want=45104, limit=40427 [ 25.472341][ T457] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 25.728704][ T18] cdc_ncm 1-1:1.0: bind() failure [ 25.768260][ T18] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 25.798152][ T18] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 25.805534][ T18] usb 1-1: USB disconnect, device number 2 [ 25.904206][ T472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 25.932364][ T472] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.21: couldn't read orphan inode 26 (err -116) [ 25.944051][ T472] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 25.952802][ T472] ext4 filesystem being mounted at /root/syzkaller.VRrN72/2/file1 supports timestamps until 2038 (0x7fffffff) [ 25.975442][ T484] EXT4-fs (loop3): Ignoring removed nobh option [ 25.989347][ T484] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 26.018690][ T23] kauditd_printk_skb: 70 callbacks suppressed [ 26.018699][ T23] audit: type=1400 audit(1719737346.650:146): avc: denied { create } for pid=483 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.046259][ T23] audit: type=1400 audit(1719737346.670:147): avc: denied { write } for pid=483 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 26.065779][ T23] audit: type=1400 audit(1719737346.670:148): avc: denied { write } for pid=483 comm="syz.3.28" name="tcp" dev="proc" ino=4026532441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 26.088125][ T23] audit: type=1400 audit(1719737346.690:149): avc: denied { write } for pid=488 comm="syz.1.30" name="uinput" dev="devtmpfs" ino=9245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.193251][ T495] incfs: ino conflict with backing FS 3 [ 26.312021][ T389] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.319320][ T377] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.320447][ T23] audit: type=1400 audit(1719737346.690:150): avc: denied { ioctl } for pid=488 comm="syz.1.30" path="/dev/uinput" dev="devtmpfs" ino=9245 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.352472][ T23] audit: type=1400 audit(1719737346.800:151): avc: denied { mounton } for pid=468 comm="syz.4.21" path="/root/syzkaller.VRrN72/2/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.377570][ T23] audit: type=1400 audit(1719737346.810:152): avc: denied { mount } for pid=468 comm="syz.4.21" name="/" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 26.399596][ T23] audit: type=1400 audit(1719737346.820:153): avc: denied { mounton } for pid=468 comm="syz.4.21" path="/root/syzkaller.VRrN72/2/file1/file0" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 26.438086][ T23] audit: type=1400 audit(1719737346.850:154): avc: denied { mounton } for pid=468 comm="syz.4.21" path="/root/syzkaller.VRrN72/2/file1/file0" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.478071][ T23] audit: type=1400 audit(1719737346.850:155): avc: denied { getattr } for pid=468 comm="syz.4.21" name="/" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.578056][ T389] usb 3-1: Using ep0 maxpacket: 8 [ 26.598052][ T377] usb 4-1: Using ep0 maxpacket: 16 [ 26.687000][ T493] F2FS-fs (loop1): invalid crc value [ 26.698248][ T389] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 26.712870][ T355] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /root/syzkaller.VRrN72/2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 26.735238][ T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.738977][ T355] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 26.744205][ T389] usb 3-1: config 0 descriptor?? [ 26.751856][ T377] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 26.770104][ T493] F2FS-fs (loop1): Found nat_bits in checkpoint [ 26.779194][ T355] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor: bg 0: block 64: padding at end of block bitmap is not set [ 26.787092][ T377] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 26.822679][ T377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.841611][ T377] usb 4-1: config 0 descriptor?? [ 26.846837][ T493] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 26.899869][ T355] syz-executor (355) used greatest stack depth: 20760 bytes left [ 26.916449][ T393] attempt to access beyond end of device [ 26.916449][ T393] loop1: rw=2049, want=45104, limit=40427 [ 27.066029][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.072998][ T507] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.081736][ T507] device bridge_slave_0 entered promiscuous mode [ 27.088919][ T507] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.095831][ T507] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.104887][ T507] device bridge_slave_1 entered promiscuous mode [ 27.162455][ T507] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.169407][ T507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.176484][ T507] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.183299][ T507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.196493][ T500] F2FS-fs (loop0): Unrecognized mount option "00000000000000000000" or missing value [ 27.219368][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.226989][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.234296][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.262090][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.270880][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.277793][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.298311][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.303419][ T484] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.317615][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.324486][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.340475][ T377] hid (null): unknown global tag 0x83 [ 27.346181][ T377] hid (null): unknown global tag 0xc [ 27.353386][ T377] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 27.361421][ T377] hid-generic 0003:0158:0100.0001: unexpected long global item [ 27.376501][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.377762][ T377] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 27.393468][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.432254][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.448970][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.473426][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.496912][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.506239][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.528486][ T9] device bridge_slave_1 left promiscuous mode [ 27.540328][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.560563][ T9] device bridge_slave_0 left promiscuous mode [ 27.566523][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.585982][ T373] usb 4-1: USB disconnect, device number 2 [ 27.619945][ T530] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (-1 log_block_size) [ 27.728324][ T389] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 27.738220][ T389] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 27.768150][ T389] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 27.799831][ T389] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 27.810437][ T389] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 27.815494][ T528] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 27.836555][ T546] netlink: 'syz.0.44': attribute type 4 has an invalid length. [ 27.849390][ T528] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 27.877946][ T528] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.884354][ T389] asix: probe of 3-1:0.0 failed with error -71 [ 27.898235][ T389] usb 3-1: USB disconnect, device number 2 [ 27.939659][ T528] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 27.953812][ T528] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 27.961110][ T528] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 28.436104][ T354] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 28.436110][ T354] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 28.456197][ T354] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 28.475165][ T354] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 28.488087][ T354] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 28.498202][ T354] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 28.515680][ T354] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 28.630272][ T569] overlayfs: missing 'workdir' [ 28.643141][ T569] [ 28.645275][ T569] ********************************************************** [ 28.652762][ T569] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 28.660071][ T569] ** ** [ 28.667358][ T569] ** trace_printk() being used. Allocating extra memory. ** [ 28.675605][ T569] ** ** [ 28.682814][ T569] ** This means that this is a DEBUG kernel and it is ** [ 28.690030][ T569] ** unsafe for production use. ** [ 28.697193][ T569] ** ** [ 28.704483][ T569] ** If you see this message and you are not debugging ** [ 28.711740][ T569] ** the kernel, report this immediately to your vendor! ** [ 28.725377][ T569] ** ** [ 28.732627][ T569] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 28.739805][ T569] ********************************************************** [ 28.821139][ T539] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.934687][ T539] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 28.944767][ T539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.975820][ T589] netlink: 25 bytes leftover after parsing attributes in process `syz.0.55'. [ 29.185771][ T589] device gretap0 entered promiscuous mode [ 29.206952][ T592] netlink: 5 bytes leftover after parsing attributes in process `syz.0.55'. [ 29.238183][ T592] 0XD: renamed from gretap0 [ 29.255246][ T592] device 00XD left promiscuous mode [ 29.347421][ T570] F2FS-fs (loop2): invalid crc value [ 29.355642][ T570] F2FS-fs (loop2): invalid crc value [ 29.360927][ T570] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 29.468155][ T18] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.561032][ T595] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 29.583929][ T595] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 29.608882][ T595] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 29.621881][ T595] System zones: 0-2, 18-18, 34-34 [ 29.632977][ T595] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 29.663624][ T595] EXT4-fs (loop0): 1 truncate cleaned up [ 29.673262][ T595] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.745880][ T18] usb 2-1: Using ep0 maxpacket: 8 [ 29.801854][ T595] EXT4-fs error (device loop0): ext4_find_dest_de:2063: inode #2: block 3: comm syz.0.57: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 30.018138][ T18] usb 2-1: config 32 has an invalid interface number: 77 but max is 1 [ 30.026122][ T18] usb 2-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 30.044894][ T18] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 30.058074][ T18] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 30.068921][ T18] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 30.079625][ T18] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 30.088067][ T513] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.091547][ T18] usb 2-1: config 32 has no interface number 0 [ 30.107573][ T18] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 30.118402][ T18] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 30.129229][ T18] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 30.141907][ T18] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 30.157825][ T18] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 30.168775][ T18] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 30.179673][ T18] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 30.190642][ T18] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 30.203212][ T18] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 30.214160][ T600] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 30.221642][ T18] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 30.233420][ T600] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 30.233535][ T18] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 30.254776][ T18] usb 2-1: config 32 interface 77 has no altsetting 0 [ 30.263270][ T600] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.320097][ T600] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 30.338080][ T513] usb 5-1: Using ep0 maxpacket: 32 [ 30.352972][ T600] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 30.362078][ T600] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.418378][ T18] usb 2-1: Dual-Role OTG device on HNP port [ 30.438180][ T18] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 30.447118][ T18] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.458141][ T513] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.476062][ T513] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 30.494971][ T513] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 30.513307][ T18] usb 2-1: Product: syz [ 30.517305][ T18] usb 2-1: Manufacturer: syz [ 30.521766][ T18] usb 2-1: SerialNumber: syz [ 30.530613][ T614] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.554875][ T614] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.749586][ T353] attempt to access beyond end of device [ 30.749586][ T353] loop3: rw=2049, want=45104, limit=40427 [ 30.828169][ T513] usb 5-1: New USB device found, idVendor=7f25, idProduct=a4a1, bcdDevice= 0.40 [ 30.848063][ T513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.855878][ T513] usb 5-1: Product: syz [ 30.859918][ T513] usb 5-1: Manufacturer: syz [ 30.864287][ T513] usb 5-1: SerialNumber: syz [ 30.947851][ T352] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 30.947856][ T352] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 30.960134][ T352] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 31.004553][ T585] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 31.034876][ T23] kauditd_printk_skb: 32 callbacks suppressed [ 31.034885][ T23] audit: type=1400 audit(1719737351.660:186): avc: denied { setopt } for pid=638 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.056624][ T585] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 31.076069][ T23] audit: type=1400 audit(1719737351.700:187): avc: denied { read } for pid=638 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.096603][ T585] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.098862][ T639] EXT4-fs (loop3): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 31.115223][ T23] audit: type=1400 audit(1719737351.740:188): avc: denied { setopt } for pid=605 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.135020][ T23] audit: type=1400 audit(1719737351.740:189): avc: denied { shutdown } for pid=605 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.137760][ T585] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 31.166281][ T585] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.173492][ T585] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.181334][ T513] cdc_ncm 5-1:1.0: skipping garbage [ 31.186432][ T513] cdc_ncm 5-1:1.0: bind() failure [ 31.192251][ T513] usb 5-1: USB disconnect, device number 2 [ 31.209441][ T23] audit: type=1400 audit(1719737351.840:190): avc: denied { write } for pid=638 comm="syz.3.65" name="001" dev="devtmpfs" ino=9222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.330664][ T18] usb 2-1: USB disconnect, device number 2 [ 31.440403][ T666] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 31.540383][ T23] audit: type=1400 audit(1719737352.150:191): avc: denied { read } for pid=662 comm="syz.0.70" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.561350][ T666] ext4 filesystem being mounted at /root/syzkaller.gPU3o3/17/file1 supports timestamps until 2038 (0x7fffffff) [ 31.650163][ T23] audit: type=1400 audit(1719737352.280:192): avc: denied { nlmsg_read } for pid=672 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.817547][ T685] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 31.827484][ T685] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 31.885959][ T683] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 0 [ 31.943941][ T23] audit: type=1400 audit(1719737352.570:193): avc: denied { watch watch_reads } for pid=672 comm="syz.3.73" path="/root/syzkaller.8HHAdZ/17/file0/file1" dev="loop3" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 31.972980][ T673] syz.3.73 (673) used greatest stack depth: 20728 bytes left [ 32.092002][ T689] overlayfs: './bus' not a directory [ 32.170792][ T23] audit: type=1400 audit(1719737352.800:194): avc: denied { unmount } for pid=353 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.210270][ T23] audit: type=1400 audit(1719737352.840:195): avc: denied { create } for pid=690 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 32.549099][ T701] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.557137][ T701] EXT4-fs (loop3): 1 orphan inode deleted [ 32.563481][ T701] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 32.708801][ T124] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 32.716021][ T124] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 32.723593][ T124] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 32.731034][ T124] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 32.742408][ T124] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 32.758970][ T124] hid-generic 0000:0000:0000.0002: collection stack underflow [ 32.776553][ T124] hid-generic 0000:0000:0000.0002: item 0 0 0 12 parsing failed [ 32.791991][ T124] hid-generic: probe of 0000:0000:0000.0002 failed with error -22 [ 32.872872][ T716] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.87: couldn't read orphan inode 26 (err -116) [ 32.884535][ T716] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 32.893562][ T716] ext4 filesystem being mounted at /root/syzkaller.gPU3o3/22/file1 supports timestamps until 2038 (0x7fffffff) [ 32.929610][ T722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 33.009493][ T735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 33.109890][ T740] incfs: ino conflict with backing FS 3 [ 33.762384][ T352] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /root/syzkaller.gPU3o3/22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 33.790062][ T352] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 33.799730][ T352] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor: bg 0: block 64: padding at end of block bitmap is not set [ 34.162188][ T758] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 34.169768][ T758] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 34.187554][ T758] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.238400][ T758] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 34.245281][ T758] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 34.472086][ T778] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.104: couldn't read orphan inode 26 (err -116) [ 34.483874][ T778] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 34.492660][ T778] ext4 filesystem being mounted at /root/syzkaller.8HHAdZ/24/file1 supports timestamps until 2038 (0x7fffffff) [ 34.572362][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.579792][ T781] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.587289][ T781] device bridge_slave_0 entered promiscuous mode [ 34.594136][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.608174][ T781] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.616697][ T766] F2FS-fs (loop4): invalid crc value [ 34.620740][ T781] device bridge_slave_1 entered promiscuous mode [ 34.641758][ T766] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.705954][ T803] incfs: ino conflict with backing FS 3 [ 34.924446][ T766] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 34.944354][ T766] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 34.955460][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.965249][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.979365][ T766] F2FS-fs (loop4): Unrecognized mount option "u+rjquota=l/fscaps" or missing value [ 34.992753][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.993459][ T507] attempt to access beyond end of device [ 34.993459][ T507] loop4: rw=524288, want=45072, limit=40427 [ 35.003130][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.012358][ T507] attempt to access beyond end of device [ 35.012358][ T507] loop4: rw=0, want=45072, limit=40427 [ 35.020965][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.037356][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.053272][ T507] attempt to access beyond end of device [ 35.053272][ T507] loop4: rw=2049, want=45104, limit=40427 [ 35.055529][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.072382][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.080950][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.089318][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.096162][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.110952][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.119375][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.127470][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.135817][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.251955][ T353] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /root/syzkaller.8HHAdZ/24/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 35.252108][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.276423][ T353] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 35.283950][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.323070][ T353] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz-executor: bg 0: block 64: padding at end of block bitmap is not set [ 35.777433][ T74] cfg80211: failed to load regulatory.db [ 35.872985][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.881671][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.891035][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.902175][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.911919][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.921067][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.930156][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.939196][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.099753][ T23] kauditd_printk_skb: 27 callbacks suppressed [ 36.099763][ T23] audit: type=1400 audit(1719737356.720:219): avc: denied { ioctl } for pid=837 comm="syz.1.116" path="socket:[14918]" dev="sockfs" ino=14918 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.143957][ T23] audit: type=1400 audit(1719737356.770:220): avc: denied { create } for pid=837 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.169187][ T23] audit: type=1400 audit(1719737356.770:221): avc: denied { ioctl } for pid=837 comm="syz.1.116" path="socket:[14922]" dev="sockfs" ino=14922 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.408800][ T524] device bridge_slave_1 left promiscuous mode [ 36.418135][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.444058][ T524] device bridge_slave_0 left promiscuous mode [ 36.457959][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.511417][ T854] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.122: couldn't read orphan inode 26 (err -116) [ 36.519194][ T842] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 36.526802][ T854] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 36.537758][ T842] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 36.539355][ T854] ext4 filesystem being mounted at /root/syzkaller.LE3FCH/25/file1 supports timestamps until 2038 (0x7fffffff) [ 36.571382][ T842] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.606899][ T842] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 36.620787][ T842] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 36.627718][ T842] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.643089][ T852] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 36.960028][ T865] incfs: ino conflict with backing FS 3 [ 37.007579][ T849] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.014620][ T849] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.025532][ T849] device bridge_slave_0 entered promiscuous mode [ 37.219923][ T856] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.227013][ T856] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.236896][ T856] device bridge_slave_0 entered promiscuous mode [ 37.244907][ T856] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.251922][ T856] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.258065][ T18] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.259350][ T856] device bridge_slave_1 entered promiscuous mode [ 37.276724][ T849] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.283728][ T849] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.292331][ T849] device bridge_slave_1 entered promiscuous mode [ 37.330955][ T354] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /root/syzkaller.LE3FCH/25/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 37.370269][ T781] f2fs_fill_dentries: 11 callbacks suppressed [ 37.370275][ T781] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 37.370279][ T781] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 37.372169][ T354] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 37.377030][ T781] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 37.377034][ T781] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 37.384072][ T354] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz-executor: bg 0: block 64: padding at end of block bitmap is not set [ 37.392412][ T781] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 37.392416][ T781] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 37.402341][ T354] Quota error (device loop1): write_blk: dquota write failed [ 37.448052][ T781] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 37.450273][ T354] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 37.534937][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.543346][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.559552][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.567660][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.576525][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.583371][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.590981][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.599209][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.607297][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.619447][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.626861][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.649160][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.657063][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.681491][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.698348][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.717425][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.727587][ T18] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 37.758454][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.770625][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.778613][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.786598][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.794002][ T18] usb 1-1: config 0 descriptor?? [ 37.799653][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.832799][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.843802][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.865244][ T885] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.872646][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.880337][ T23] audit: type=1400 audit(1719737358.510:222): avc: denied { create } for pid=890 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 37.900041][ T885] device bridge_slave_0 entered promiscuous mode [ 37.911386][ T885] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.918525][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.925864][ T885] device bridge_slave_1 entered promiscuous mode [ 37.942299][ T897] ====================================================== [ 37.942299][ T897] WARNING: the mand mount option is being deprecated and [ 37.942299][ T897] will be removed in v5.15! [ 37.942299][ T897] ====================================================== [ 37.970095][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.978582][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.978671][ T897] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 37.986669][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.003397][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.011652][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.019746][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.027744][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.034589][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.058883][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.066372][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.086804][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.136993][ T23] audit: type=1400 audit(1719737358.760:223): avc: denied { name_bind } for pid=900 comm="syz.3.129" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 38.140134][ T885] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.165121][ T885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.172260][ T885] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.179022][ T885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.210259][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.218896][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.226711][ T513] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.235773][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.251933][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.293721][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.302484][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.335242][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.343617][ T23] audit: type=1400 audit(1719737358.970:224): avc: denied { read } for pid=928 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.365255][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.388540][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.406604][ T23] audit: type=1400 audit(1719737358.990:225): avc: denied { ioctl } for pid=928 comm="syz.2.133" path="socket:[15648]" dev="sockfs" ino=15648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.431518][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.448515][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.455393][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.473886][ T23] audit: type=1400 audit(1719737359.000:226): avc: denied { setopt } for pid=928 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.503862][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.529277][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.537335][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.544186][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.573333][ T934] syz.3.129 (pid 934) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 38.598530][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.606512][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.635741][ T935] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.135: couldn't read orphan inode 26 (err -116) [ 38.645207][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.647894][ T935] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 38.663903][ T935] ext4 filesystem being mounted at /root/syzkaller.8y2fZ3/7/file1 supports timestamps until 2038 (0x7fffffff) [ 38.673997][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.707197][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.716569][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.735224][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.743575][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.759342][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.767668][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.786944][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.796146][ T939] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.805755][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.814843][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.825241][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.846995][ T939] EXT4-fs error (device loop4): ext4_orphan_get:1236: inode #17: comm syz.4.130: iget: bad i_size value: -6917529027641081756 [ 38.862267][ T939] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.130: couldn't read orphan inode 17 (err -117) [ 38.874449][ T939] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 38.897501][ T949] incfs: ino conflict with backing FS 3 [ 39.049557][ T781] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /root/syzkaller.8y2fZ3/7/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 39.080252][ T781] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 39.083137][ T874] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.114174][ T939] netlink: 124 bytes leftover after parsing attributes in process `syz.4.130'. [ 39.120286][ T781] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor: bg 0: block 64: padding at end of block bitmap is not set [ 39.189151][ T524] device bridge_slave_1 left promiscuous mode [ 39.195252][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.198082][ T874] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 39.218339][ T524] device bridge_slave_0 left promiscuous mode [ 39.238291][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.248849][ T18] hid (null): report_id 0 is invalid [ 39.257911][ T18] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0 [ 39.294631][ T18] logitech-hidpp-device 0003:046D:C086.0003: report_id 0 is invalid [ 39.314487][ T939] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.130: bg 0: block 65: padding at end of block bitmap is not set [ 39.321529][ T18] logitech-hidpp-device 0003:046D:C086.0003: item 0 0 1 8 parsing failed [ 39.411738][ T969] SELinux: security_context_str_to_sid() failed for (dev bpf, type bpf) errno=-22 [ 39.459093][ T18] logitech-hidpp-device 0003:046D:C086.0003: hidpp_probe:parse failed [ 39.467415][ T18] logitech-hidpp-device: probe of 0003:046D:C086.0003 failed with error -22 [ 39.487268][ T18] usb 1-1: USB disconnect, device number 3 [ 39.496731][ T524] device bridge_slave_1 left promiscuous mode [ 39.505665][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.513515][ T524] device bridge_slave_0 left promiscuous mode [ 39.519601][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.526986][ T524] device bridge_slave_1 left promiscuous mode [ 39.533572][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.541021][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.866043][ T974] mmap: syz.3.140 (974): VmData 17584128 exceed data ulimit 214. Update limits or use boot option ignore_rlimit_data. [ 40.000276][ T351] attempt to access beyond end of device [ 40.000276][ T351] loop0: rw=2049, want=45104, limit=40427 [ 40.150822][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.157658][ T986] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.165558][ T986] device bridge_slave_0 entered promiscuous mode [ 40.172451][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.179388][ T986] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.186543][ T986] device bridge_slave_1 entered promiscuous mode [ 40.269379][ T986] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.276243][ T986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.283392][ T986] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.290247][ T986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.326563][ T993] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.146: couldn't read orphan inode 26 (err -116) [ 40.339180][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.344433][ T993] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 40.355018][ T993] ext4 filesystem being mounted at /root/syzkaller.qR7l7R/2/file1 supports timestamps until 2038 (0x7fffffff) [ 40.357243][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.396841][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.422896][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.436394][ T513] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.443263][ T513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.451072][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.459180][ T513] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.466016][ T513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.904463][ T1002] incfs: ino conflict with backing FS 3 [ 40.918316][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.926172][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.949406][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.962685][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.978769][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.995554][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.014068][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.090991][ T389] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.154039][ T856] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /root/syzkaller.qR7l7R/2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 41.179091][ T856] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 41.187457][ T856] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor: bg 0: block 64: padding at end of block bitmap is not set [ 41.202093][ T856] __quota_error: 16 callbacks suppressed [ 41.202100][ T856] Quota error (device loop4): write_blk: dquota write failed [ 41.215366][ T856] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 41.348114][ T389] usb 4-1: Using ep0 maxpacket: 8 [ 41.436982][ T1001] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.464661][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.471576][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.476763][ T1001] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 41.478919][ T1020] device bridge_slave_0 entered promiscuous mode [ 41.487177][ T1001] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 41.492039][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.505129][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.519277][ T1020] device bridge_slave_1 entered promiscuous mode [ 41.525436][ T23] audit: type=1400 audit(1719737362.150:235): avc: denied { execute } for pid=1000 comm="syz.0.143" path="/root/syzkaller.1CrN0J/29/file0/bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.548132][ T389] usb 4-1: config 32 has an invalid interface number: 77 but max is 1 [ 41.557629][ T389] usb 4-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 41.566597][ T389] usb 4-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 41.575539][ T389] usb 4-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 41.585672][ T389] usb 4-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 41.595861][ T389] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 41.604602][ T389] usb 4-1: config 32 has no interface number 0 [ 41.610607][ T389] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 41.621490][ T389] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 41.632270][ T389] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 41.643109][ T389] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 41.654198][ T389] usb 4-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 41.664794][ T389] usb 4-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 41.669795][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.675305][ T389] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 41.682145][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.682268][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.692992][ T389] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 41.700012][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.706855][ T389] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 41.735894][ T389] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 41.746787][ T389] usb 4-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 41.759893][ T389] usb 4-1: config 32 interface 77 has no altsetting 0 [ 41.782887][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.792034][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.799427][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.819782][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.827831][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.834704][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.844965][ T1030] loop1: p2 p3 p7 [ 41.849518][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.857580][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.864440][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.871735][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.889409][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.909619][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.920028][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.938702][ T23] audit: type=1400 audit(1719737362.570:236): avc: denied { write } for pid=1029 comm="syz.1.153" name="loop1p2" dev="devtmpfs" ino=16155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 41.948138][ T389] usb 4-1: Dual-Role OTG device on HNP port [ 41.983599][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.998680][ T389] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 42.008746][ T23] audit: type=1400 audit(1719737362.570:237): avc: denied { open } for pid=1029 comm="syz.1.153" path="/dev/loop1p2" dev="devtmpfs" ino=16155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.017499][ T389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.043576][ T389] usb 4-1: Product: syz [ 42.048640][ T23] audit: type=1400 audit(1719737362.610:238): avc: denied { map } for pid=1032 comm="syz.2.155" path="socket:[16198]" dev="sockfs" ino=16198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.059898][ T389] usb 4-1: Manufacturer: syz [ 42.076262][ T389] usb 4-1: SerialNumber: syz [ 42.094561][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.102209][ T23] audit: type=1400 audit(1719737362.610:239): avc: denied { read } for pid=1032 comm="syz.2.155" path="socket:[16198]" dev="sockfs" ino=16198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.108893][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.152431][ T438] udevd[438]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 42.153145][ T458] udevd[458]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 42.163074][ T23] audit: type=1400 audit(1719737362.610:240): avc: denied { getopt } for pid=1032 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.176782][ T350] udevd[350]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 42.206898][ T458] udevd[458]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 42.220265][ T23] audit: type=1400 audit(1719737362.840:241): avc: denied { create } for pid=1037 comm="syz.1.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 42.289654][ T524] device bridge_slave_1 left promiscuous mode [ 42.297196][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.316166][ T524] device bridge_slave_0 left promiscuous mode [ 42.332236][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.457320][ T1054] x_tables: unsorted entry at hook 2 [ 42.538101][ T372] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.539558][ T1054] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 42.578360][ T1054] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 42.588163][ T1054] EXT4-fs error (device loop0): ext4_validate_block_bitmap:409: comm syz.0.152: bg 0: block 18: invalid block bitmap [ 42.604525][ T1054] EXT4-fs error (device loop0) in ext4_free_blocks:5019: Corrupt filesystem [ 42.622410][ T1054] EXT4-fs (loop0): 1 truncate cleaned up [ 42.627967][ T1054] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 42.637151][ T1054] ext2 filesystem being mounted at /root/syzkaller.1CrN0J/30/file0 supports timestamps until 2038 (0x7fffffff) [ 42.713652][ T1055] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 42.721926][ T1055] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 42.733166][ T1055] F2FS-fs (loop3): Found nat_bits in checkpoint [ 42.755942][ T1064] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 42.764970][ T1064] ext4 filesystem being mounted at /root/syzkaller.qWdobc/8/file1 supports timestamps until 2038 (0x7fffffff) [ 42.776609][ T1055] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 42.808411][ T1055] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 42.815404][ T1055] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 42.957819][ T1073] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 42.967017][ T1073] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 43.057207][ T372] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.070332][ T389] usb 4-1: USB disconnect, device number 3 [ 43.078636][ T372] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.158348][ T372] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.167305][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.175269][ T372] usb 3-1: SerialNumber: syz [ 43.404642][ T1080] fuse: Bad value for 'fd' [ 43.410056][ T23] audit: type=1400 audit(1719737364.040:242): avc: denied { ioctl } for pid=1079 comm="syz.0.166" path="/dev/rtc0" dev="devtmpfs" ino=9246 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.562581][ T849] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 43.562587][ T849] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 43.573765][ T849] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 43.581611][ T849] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 43.590252][ T849] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 43.600429][ T849] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 43.607812][ T849] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 43.628387][ T524] device bridge_slave_1 left promiscuous mode [ 43.659667][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.686688][ T524] device bridge_slave_0 left promiscuous mode [ 43.699942][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.715448][ T1106] fuse: Unknown parameter '000000000000000000050x0000000000000008' [ 43.792768][ T1108] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 44.038993][ T372] usb 3-1: 0:2 : does not exist [ 44.049500][ T372] usb 3-1: USB disconnect, device number 3 [ 44.205047][ T1132] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 44.402347][ T1116] F2FS-fs (loop1): invalid crc value [ 44.415240][ T1116] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.456169][ T1116] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 44.468203][ T372] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.508446][ T885] attempt to access beyond end of device [ 44.508446][ T885] loop1: rw=2049, want=45104, limit=40427 [ 44.675048][ T1096] F2FS-fs (loop0): Unrecognized mount option "" or missing value [ 44.708056][ T372] usb 3-1: Using ep0 maxpacket: 8 [ 44.855622][ T1135] F2FS-fs (loop3): invalid crc value [ 44.908126][ T372] usb 3-1: config 32 has an invalid interface number: 77 but max is 1 [ 44.916128][ T372] usb 3-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 44.926030][ T1135] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.968083][ T372] usb 3-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 44.976670][ T372] usb 3-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 45.032213][ T372] usb 3-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 45.059074][ T372] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 45.078109][ T1135] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 45.085711][ T372] usb 3-1: config 32 has no interface number 0 [ 45.092922][ T1135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1135 comm=syz.3.182 [ 45.109357][ T372] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 45.140961][ T372] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 45.161973][ T372] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 45.183371][ T372] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 45.204724][ T372] usb 3-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 45.225505][ T372] usb 3-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 45.256519][ T372] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 45.277640][ T372] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 45.292197][ T372] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 45.314684][ T372] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 45.334121][ T372] usb 3-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 45.347535][ T372] usb 3-1: config 32 interface 77 has no altsetting 0 [ 45.508148][ T372] usb 3-1: Dual-Role OTG device on HNP port [ 45.520280][ T1147] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 45.533220][ T372] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 45.542389][ T1147] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 45.551764][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.561463][ T1129] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.566482][ T1147] F2FS-fs (loop0): invalid crc value [ 45.573221][ T372] usb 3-1: Product: syz [ 45.577569][ T372] usb 3-1: Manufacturer: syz [ 45.582063][ T372] usb 3-1: SerialNumber: syz [ 45.590218][ T1147] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.601089][ T1129] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 45.607810][ T1129] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 45.652405][ T1147] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 45.671940][ T1147] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 45.671950][ T1147] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 46.098052][ T343] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 46.210734][ T1127] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 46.228505][ T1127] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 46.272202][ T1127] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.348066][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 46.355788][ T1127] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 46.406575][ T1127] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 46.418221][ T1127] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.478207][ T343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.530589][ T372] usb 3-1: USB disconnect, device number 4 [ 46.578136][ T343] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.587042][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.594859][ T343] usb 2-1: SerialNumber: syz [ 46.638568][ T343] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 46.646240][ T343] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 46.652526][ T343] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 46.839336][ T1174] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 46.849175][ T372] usb 2-1: USB disconnect, device number 3 [ 46.966668][ T986] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 46.966673][ T986] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 46.974107][ T986] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 47.367274][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 47.367283][ T23] audit: type=1400 audit(1719737367.990:249): avc: denied { bind } for pid=1205 comm="syz.3.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.401508][ T23] audit: type=1400 audit(1719737368.000:250): avc: denied { write } for pid=1210 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.524093][ T1226] overlayfs: unrecognized mount option "uid=00000000000000000000" or missing value [ 47.548081][ T343] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 47.698083][ T18] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.728059][ T124] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 47.788103][ T74] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.908137][ T343] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 47.916990][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.925709][ T343] usb 1-1: config 0 descriptor?? [ 47.968144][ T124] usb 2-1: Using ep0 maxpacket: 32 [ 48.038067][ T74] usb 3-1: Using ep0 maxpacket: 8 [ 48.068207][ T18] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.079016][ T18] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 48.168160][ T124] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 212, changing to 11 [ 48.179267][ T124] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 48.238152][ T74] usb 3-1: config 32 has an invalid interface number: 77 but max is 1 [ 48.246167][ T74] usb 3-1: config 32 contains an unexpected descriptor of type 0x1, skipping [ 48.254827][ T74] usb 3-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 48.263410][ T18] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.272334][ T74] usb 3-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 48.282147][ T18] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.290018][ T74] usb 3-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 48.300115][ T18] usb 4-1: Product: syz [ 48.304084][ T18] usb 4-1: Manufacturer: syz [ 48.308657][ T18] usb 4-1: SerialNumber: syz [ 48.313526][ T74] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 48.322659][ T74] usb 3-1: config 32 has no interface number 0 [ 48.328705][ T74] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 48.339470][ T74] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 48.350255][ T124] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.360200][ T74] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 48.371112][ T124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.378905][ T124] usb 2-1: Manufacturer: ⲑ쪊ၥ᎜躅㶈寄ᴨు厘➚䶚劌ᅒ칎⡜ۍ⾏▓巶鹔夁諀뒼슠톀뱸鮶武ኢ얿熼㔮๮麃䣝赥강딮昈흨阼孫咫받딴㚸疘鶡䦿瑀峋㙉꫗᧪번뼕൚홯⸚蘑㢁圸藍禌읬㯀縄蜤 [ 48.403700][ T74] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 48.414516][ T74] usb 3-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 48.425028][ T74] usb 3-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 48.436615][ T124] usb 2-1: SerialNumber: Џ [ 48.441609][ T74] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 48.452999][ T74] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 48.463869][ T74] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 48.474823][ T74] usb 3-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 48.485682][ T74] usb 3-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 48.498974][ T74] usb 3-1: config 32 interface 77 has no altsetting 0 [ 48.559658][ T1217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 48.618144][ T343] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 48.628219][ T343] asix: probe of 1-1:0.0 failed with error -71 [ 48.634866][ T343] usb 1-1: USB disconnect, device number 4 [ 48.668155][ T74] usb 3-1: Dual-Role OTG device on HNP port [ 48.688112][ T74] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 48.696942][ T74] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.705156][ T74] usb 3-1: Product: syz [ 48.709196][ T74] usb 3-1: Manufacturer: syz [ 48.713547][ T74] usb 3-1: SerialNumber: syz [ 48.778524][ T1217] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.786044][ T1217] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.918416][ T1222] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 48.998973][ T1217] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.102387][ T1225] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 49.110060][ T1225] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 49.126030][ T1225] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.166869][ T1225] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 49.182249][ T1225] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 49.189464][ T1225] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.218863][ T1217] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 49.296185][ T74] usb 3-1: USB disconnect, device number 5 [ 49.334769][ T23] audit: type=1400 audit(1719737369.960:251): avc: denied { ioctl } for pid=1248 comm="syz.4.209" path="socket:[18586]" dev="sockfs" ino=18586 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.378126][ T124] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 49.383957][ T124] cdc_ncm 2-1:1.0: bind() failure [ 49.395762][ T124] cdc_ncm 2-1:1.1: bind() failure [ 49.408462][ T124] usb 2-1: USB disconnect, device number 4 [ 49.487450][ T1247] F2FS-fs (loop0): Unrecognized mount option "a_mode=reusei" or missing value [ 49.498139][ T18] cdc_ncm 4-1:1.0: bind() failure [ 49.513188][ T1253] netlink: 56 bytes leftover after parsing attributes in process `syz.4.211'. [ 49.521990][ T18] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 49.548152][ T18] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 49.555903][ T18] usb 4-1: USB disconnect, device number 4 [ 49.790693][ T372] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 49.978738][ T1260] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 50.010963][ T23] audit: type=1400 audit(1719737370.640:252): avc: denied { write } for pid=1265 comm="syz.3.214" name="kvm" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 50.058178][ T372] usb 5-1: Using ep0 maxpacket: 8 [ 50.178185][ T372] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 50.186954][ T1282] x_tables: unsorted entry at hook 2 [ 50.192124][ T372] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 50.206981][ T1282] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 50.219055][ T1282] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 50.219929][ T1282] EXT4-fs error (device loop1): ext4_validate_block_bitmap:409: comm syz.1.219: bg 0: block 18: invalid block bitmap [ 50.220030][ T1282] EXT4-fs error (device loop1) in ext4_free_blocks:5019: Corrupt filesystem [ 50.220104][ T372] usb 5-1: config 135 has no interface number 0 [ 50.220136][ T372] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.220245][ T1282] EXT4-fs (loop1): 1 truncate cleaned up [ 50.220255][ T1282] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 50.220336][ T1282] ext2 filesystem being mounted at /root/syzkaller.qWdobc/19/file0 supports timestamps until 2038 (0x7fffffff) [ 50.257016][ T1289] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,usrquota,noinit_itable,nojournal_checksum,lazytime,,errors=continue [ 50.257100][ T1289] ext4 filesystem being mounted at /root/syzkaller.ZArMTH/9/file0 supports timestamps until 2038 (0x7fffffff) [ 50.286068][ T23] audit: type=1400 audit(1719737370.910:253): avc: denied { write } for pid=1287 comm="syz.2.212" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.295048][ T23] audit: type=1400 audit(1719737370.920:254): avc: denied { add_name } for pid=1287 comm="syz.2.212" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.295840][ T23] audit: type=1400 audit(1719737370.920:255): avc: denied { setattr } for pid=1287 comm="syz.2.212" name="work" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.309736][ T23] audit: type=1400 audit(1719737370.940:256): avc: denied { setattr } for pid=1287 comm="syz.2.212" name="bus" dev="overlay" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.310353][ T23] audit: type=1400 audit(1719737370.940:257): avc: denied { link } for pid=1287 comm="syz.2.212" name="#22" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.327731][ T986] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.ZArMTH/9/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 50.408149][ T372] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 50.428440][ T986] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.ZArMTH/9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 50.444390][ T372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.505980][ T372] usb 5-1: Product: syz [ 50.510144][ T372] usb 5-1: Manufacturer: syz [ 50.514571][ T372] usb 5-1: SerialNumber: syz [ 50.525430][ T986] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.ZArMTH/9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 50.555177][ T986] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.ZArMTH/9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 50.579594][ T986] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.ZArMTH/9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 50.617002][ T986] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.ZArMTH/9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 50.657874][ T986] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /root/syzkaller.ZArMTH/9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 50.700530][ T986] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 50.715332][ T23] audit: type=1400 audit(1719737371.340:258): avc: denied { remove_name } for pid=986 comm="syz-executor" name="bus" dev="loop2" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.898623][ T372] usb 5-1: USB disconnect, device number 3 [ 50.961861][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.969284][ T1321] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.976684][ T1321] device bridge_slave_0 entered promiscuous mode [ 50.983830][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.990808][ T1321] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.004380][ T1321] device bridge_slave_1 entered promiscuous mode [ 51.089936][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.096826][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.103944][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.110685][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.149503][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.157351][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.174652][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.379014][ T1323] F2FS-fs (loop3): invalid crc value [ 51.393646][ T1323] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.396238][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.414516][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.421413][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.431901][ T1323] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.440019][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.448398][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.452716][ T524] attempt to access beyond end of device [ 51.452716][ T524] loop3: rw=2049, want=45104, limit=40427 [ 51.455262][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.492452][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.508836][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.633965][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.645492][ T1062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.659608][ T1062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.671808][ T1340] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 51.675932][ T1062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.679987][ T1340] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 51.698075][ T1340] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 51.707942][ T1340] F2FS-fs (loop4): Found nat_bits in checkpoint [ 51.737069][ T1062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.757607][ T1340] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 51.758866][ T9] device bridge_slave_1 left promiscuous mode [ 51.764563][ T1340] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 51.771335][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.805404][ T9] device bridge_slave_0 left promiscuous mode [ 51.811926][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.930317][ T1349] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.960838][ T1351] attempt to access beyond end of device [ 51.960838][ T1351] loop4: rw=2049, want=45104, limit=40427 [ 52.112903][ T1349] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 52.121885][ T1349] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c01c, mo2=0002] [ 52.129757][ T1349] System zones: 0-2, 18-18, 34-34 [ 52.135435][ T1349] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.150088][ T1349] EXT4-fs (loop2): 1 truncate cleaned up [ 52.155528][ T1349] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 52.370784][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 52.370793][ T23] audit: type=1400 audit(1719737373.000:263): avc: denied { unlink } for pid=1020 comm="syz-executor" name="file0" dev="sda1" ino=1997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 52.548063][ T389] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 52.808064][ T389] usb 4-1: Using ep0 maxpacket: 32 [ 52.928146][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 52.939246][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 52.950526][ T389] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 52.959561][ T389] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.968785][ T389] usb 4-1: config 0 descriptor?? [ 52.988140][ T1360] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 53.010077][ T389] hub 4-1:0.0: USB hub found [ 53.218153][ T389] hub 4-1:0.0: 2 ports detected [ 53.295312][ T23] audit: type=1400 audit(1719737373.920:264): avc: denied { setopt } for pid=1366 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.295403][ T1369] x_tables: duplicate underflow at hook 3 [ 53.334836][ T1368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 53.537589][ T23] audit: type=1400 audit(1719737374.160:265): avc: denied { mount } for pid=1388 comm="syz.4.238" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.592969][ T23] audit: type=1400 audit(1719737374.220:266): avc: denied { write } for pid=1385 comm="syz.2.246" path="socket:[18390]" dev="sockfs" ino=18390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.733020][ T1382] F2FS-fs (loop0): invalid crc value [ 53.751377][ T1382] F2FS-fs (loop0): Found nat_bits in checkpoint [ 53.838097][ T1382] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 53.857473][ T9] attempt to access beyond end of device [ 53.857473][ T9] loop0: rw=2049, want=45104, limit=40427 [ 53.999310][ T1393] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 54.007020][ T1393] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 54.022021][ T1393] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.068124][ T1389] F2FS-fs (loop4): invalid crc value [ 54.082202][ T1393] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 54.088619][ T1389] F2FS-fs (loop4): Found nat_bits in checkpoint [ 54.093040][ T1393] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.115710][ T1389] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 54.134906][ T1389] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 54.211564][ T1413] fuse: blksize only supported for fuseblk [ 54.217539][ T23] audit: type=1400 audit(1719737374.840:267): avc: denied { setattr } for pid=1412 comm="syz.0.248" name="fuse" dev="devtmpfs" ino=9171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.448125][ T23] audit: type=1400 audit(1719737375.070:268): avc: denied { unmount } for pid=1020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.483701][ T1423] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 54.493620][ T1423] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 54.509182][ T1423] F2FS-fs (loop0): Found nat_bits in checkpoint [ 54.546263][ T1423] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 54.553509][ T1423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.561388][ T1440] capability: warning: `syz.1.255' uses deprecated v2 capabilities in a way that may be insecure [ 54.578705][ T1426] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 54.580868][ T23] audit: type=1400 audit(1719737375.210:269): avc: denied { create } for pid=1439 comm="syz.1.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 54.595275][ T1426] attempt to access beyond end of device [ 54.595275][ T1426] loop2: rw=0, want=34359740336, limit=16 [ 54.620342][ T1426] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 54.624560][ T1423] attempt to access beyond end of device [ 54.624560][ T1423] loop0: rw=34817, want=77952, limit=40427 [ 54.630999][ T1426] erofs: erofs_raw_access_readpages, readahead error at page 247 of nid 36 [ 54.659006][ T23] audit: type=1400 audit(1719737375.290:270): avc: denied { create } for pid=1422 comm="syz.0.253" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 54.679980][ T23] audit: type=1400 audit(1719737375.290:271): avc: denied { write } for pid=1422 comm="syz.0.253" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 54.704371][ T23] audit: type=1400 audit(1719737375.290:272): avc: denied { open } for pid=1422 comm="syz.0.253" path="/root/syzkaller.1CrN0J/50/bus/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 54.860030][ T1456] FAT-fs (loop1): Directory bread(block 64) failed [ 54.877689][ T1456] FAT-fs (loop1): Directory bread(block 65) failed [ 54.884376][ T1456] FAT-fs (loop1): Directory bread(block 66) failed [ 54.901008][ T1456] FAT-fs (loop1): Directory bread(block 67) failed [ 54.907377][ T1456] FAT-fs (loop1): Directory bread(block 68) failed [ 54.914121][ T1456] FAT-fs (loop1): Directory bread(block 69) failed [ 54.920882][ T1456] FAT-fs (loop1): Directory bread(block 70) failed [ 54.928286][ T1456] FAT-fs (loop1): Directory bread(block 71) failed [ 54.934731][ T1456] FAT-fs (loop1): Directory bread(block 72) failed [ 54.941507][ T1456] FAT-fs (loop1): Directory bread(block 73) failed [ 55.190955][ T1465] EXT4-fs (sda1): re-mounted. Opts: noblock_validity [ 55.224308][ T1472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1472 comm=syz.1.262 [ 55.381833][ T1495] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 55.400096][ T1495] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold, [ 55.429206][ T1495] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #15: block 1803188595: comm syz.4.269: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 55.445196][ T1495] EXT4-fs (loop4): Remounting filesystem read-only [ 55.518091][ T512] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 55.556993][ T1476] F2FS-fs (loop0): invalid crc value [ 55.568500][ T1476] F2FS-fs (loop0): Found nat_bits in checkpoint [ 55.589012][ T1506] capability: warning: `syz.4.271' uses 32-bit capabilities (legacy support in use) [ 55.614437][ T1476] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 55.628517][ T7] attempt to access beyond end of device [ 55.628517][ T7] loop0: rw=2049, want=45104, limit=40427 [ 55.878175][ T512] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.892615][ T512] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.948056][ T18] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.038466][ T512] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 56.047520][ T512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 56.057278][ T512] usb 2-1: SerialNumber: syz [ 56.284578][ T1543] F2FS-fs (loop2): invalid crc value [ 56.291796][ T1543] F2FS-fs (loop2): Found nat_bits in checkpoint [ 56.308083][ T18] usb 5-1: Using ep0 maxpacket: 8 [ 56.326701][ T1543] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 56.338917][ T512] usb 2-1: 0:2 : does not exist [ 56.343638][ T512] usb 2-1: unit 5 not found! [ 56.348958][ T9] attempt to access beyond end of device [ 56.348958][ T9] loop2: rw=2049, want=45104, limit=40427 [ 56.351871][ T512] usb 2-1: USB disconnect, device number 5 [ 56.438193][ T18] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.449052][ T18] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 56.458848][ T18] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 56.548146][ T18] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 56.557096][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.565417][ T18] usb 5-1: SerialNumber: syz [ 56.598112][ T1514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 56.604830][ T1514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 56.638117][ T372] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 56.669436][ T373] usb 4-1: USB disconnect, device number 5 [ 56.820537][ T1514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 56.840975][ T1514] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 57.341267][ T18] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 57.447686][ T23] kauditd_printk_skb: 65 callbacks suppressed [ 57.447702][ T23] audit: type=1400 audit(1719737378.070:338): avc: denied { read } for pid=201 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 57.585271][ T1590] cgroup: syz.3.293 (1590) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 57.609747][ T1590] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 57.638042][ C0] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification 20! [ 57.658052][ C0] cdc_ether 5-1:1.0 usb0: CDC: unexpected notification d4! [ 57.750291][ T1602] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 57.781066][ T1602] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 57.790654][ T1600] F2FS-fs (loop3): invalid crc value [ 57.791338][ T1602] erofs: (device loop2): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 57.802420][ T1600] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.830473][ T1600] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 57.859702][ T849] attempt to access beyond end of device [ 57.859702][ T849] loop3: rw=2049, want=45104, limit=40427 [ 57.870928][ T1612] EXT4-fs (loop2): bad geometry: block count 38843546786070592 exceeds size of device (64 blocks) [ 57.892234][ T1514] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 57.915422][ T23] audit: type=1400 audit(1719737378.540:339): avc: denied { connect } for pid=1513 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.941304][ T1514] futex_wake_op: syz.4.273 tries to shift op by -1; fix this program [ 58.136363][ T23] audit: type=1400 audit(1719737378.760:340): avc: denied { write } for pid=1627 comm="syz.3.302" name="vga_arbiter" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 58.208251][ T389] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 58.274657][ T1633] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #15: comm syz.3.304: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 58.292416][ T1633] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.304: couldn't read orphan inode 15 (err -117) [ 58.304137][ T1633] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 58.312900][ T1633] ext4 filesystem being mounted at /root/syzkaller.l3UNFp/36/file0 supports timestamps until 2038 (0x7fffffff) [ 58.334975][ T1626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.335829][ T1633] overlayfs: upper fs needs to support d_type. [ 58.367398][ T1626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.389033][ T23] audit: type=1400 audit(1719737379.020:341): avc: denied { execmem } for pid=1625 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.467810][ T373] usb 5-1: USB disconnect, device number 4 [ 58.473830][ T373] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 58.634091][ T512] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 58.678826][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 58.696751][ T389] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.711527][ T1645] overlayfs: './bus' not a directory [ 58.716757][ T389] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 58.726848][ T389] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.747265][ T389] usb 3-1: config 0 descriptor?? [ 58.788757][ T389] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 58.925071][ T512] usb 4-1: Using ep0 maxpacket: 8 [ 58.981675][ T1695] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.308: couldn't read orphan inode 26 (err -116) [ 58.994619][ T1695] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 59.003417][ T1695] ext4 filesystem being mounted at /root/syzkaller.1CrN0J/54/file1 supports timestamps until 2038 (0x7fffffff) [ 59.078137][ T512] usb 4-1: config 0 has no interfaces? [ 59.245116][ T23] audit: type=1400 audit(1719737379.840:342): avc: denied { mounton } for pid=1694 comm="syz.0.308" path="/root/syzkaller.1CrN0J/54/file1/file0" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 59.370359][ T351] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /root/syzkaller.1CrN0J/54/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 59.394389][ T351] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 59.403267][ T351] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor: bg 0: block 64: padding at end of block bitmap is not set [ 59.417608][ T512] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 59.426750][ T512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.437252][ T512] usb 4-1: Product: syz [ 59.441282][ T512] usb 4-1: Manufacturer: syz [ 59.445782][ T512] usb 4-1: SerialNumber: syz [ 59.451064][ T351] Quota error (device loop0): write_blk: dquota write failed [ 59.458632][ T512] usb 4-1: config 0 descriptor?? [ 59.463489][ T351] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 59.579875][ T351] syz-executor (351) used greatest stack depth: 19480 bytes left [ 59.705337][ T1717] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.710555][ T389] usb 4-1: USB disconnect, device number 6 [ 59.717927][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.725623][ T1717] device bridge_slave_0 entered promiscuous mode [ 59.734172][ T1717] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.741451][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.750750][ T1717] device bridge_slave_1 entered promiscuous mode [ 59.797101][ T1717] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.803967][ T1717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.811103][ T1717] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.817922][ T1717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.841643][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.849347][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.856366][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.865679][ T1062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.873718][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.880558][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.892343][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.900390][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.907207][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.929013][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.937313][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.945507][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.958746][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.971536][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.986714][ T1062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.997419][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.035966][ T23] audit: type=1400 audit(1719737380.660:343): avc: denied { create } for pid=1725 comm="syz.0.315" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 60.059099][ T23] audit: type=1400 audit(1719737380.670:344): avc: denied { write } for pid=1725 comm="syz.0.315" name="file0" dev="sda1" ino=2012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 60.072985][ T1728] netlink: 92 bytes leftover after parsing attributes in process `syz.0.316'. [ 60.081529][ T23] audit: type=1400 audit(1719737380.670:345): avc: denied { open } for pid=1725 comm="syz.0.315" path="/root/syzkaller.6Fpoi5/1/file0" dev="sda1" ino=2012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 60.114055][ T1728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'. [ 60.123302][ T1728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 60.132521][ T1728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.316'. [ 60.178265][ T524] device bridge_slave_1 left promiscuous mode [ 60.184366][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.191595][ T524] device bridge_slave_0 left promiscuous mode [ 60.197550][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.095660][ T389] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 61.103461][ T74] usb 3-1: USB disconnect, device number 6 [ 61.217767][ T524] ================================================================== [ 61.225665][ T524] BUG: KASAN: null-ptr-deref in tcf_idrinfo_destroy+0xe2/0x280 [ 61.233030][ T524] Read of size 4 at addr 0000000000000010 by task kworker/u4:4/524 [ 61.240831][ T524] [ 61.243018][ T524] CPU: 0 PID: 524 Comm: kworker/u4:4 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 61.252728][ T524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 61.262632][ T524] Workqueue: netns cleanup_net [ 61.267217][ T524] Call Trace: [ 61.270356][ T524] dump_stack+0x1d8/0x241 [ 61.274515][ T524] ? panic+0x89d/0x89d [ 61.278424][ T524] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 61.284067][ T524] ? idr_get_next_ul+0x32a/0x3f0 [ 61.288839][ T524] ? tcf_idrinfo_destroy+0xe2/0x280 [ 61.293866][ T524] __kasan_report+0xe9/0x120 [ 61.298297][ T524] ? tcf_idrinfo_destroy+0xe2/0x280 [ 61.303326][ T524] kasan_report+0x30/0x60 [ 61.307494][ T524] check_memory_region+0x272/0x280 [ 61.312445][ T524] tcf_idrinfo_destroy+0xe2/0x280 [ 61.317301][ T524] ? tcf_idr_check_alloc+0x370/0x370 [ 61.322424][ T524] ? iput+0x6a4/0x830 [ 61.326241][ T524] mirred_exit_net+0xd7/0x140 [ 61.330759][ T524] ? mirred_init_net+0x1c0/0x1c0 [ 61.335528][ T524] cleanup_net+0x6e2/0xc90 [ 61.339779][ T524] ? ops_init+0x4a0/0x4a0 [ 61.343952][ T524] ? read_word_at_a_time+0xe/0x20 [ 61.348805][ T524] ? strscpy+0x89/0x220 [ 61.352824][ T524] process_one_work+0x765/0xd20 [ 61.357489][ T524] worker_thread+0xaef/0x1470 [ 61.362003][ T524] kthread+0x2da/0x360 [ 61.365905][ T524] ? worker_clr_flags+0x170/0x170 [ 61.370770][ T524] ? kthread_blkcg+0xd0/0xd0 [ 61.375281][ T524] ret_from_fork+0x1f/0x30 [ 61.379529][ T524] ================================================================== [ 61.387422][ T524] Disabling lock debugging due to kernel taint [ 61.394487][ T524] kasan: CONFIG_KASAN_INLINE enabled [ 61.411418][ T524] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 61.418365][ T1752] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.323: couldn't read orphan inode 26 (err -116) [ 61.419756][ T524] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 61.431086][ T1752] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 61.437624][ T524] CPU: 1 PID: 524 Comm: kworker/u4:4 Tainted: G B 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 61.446441][ T1752] ext4 filesystem being mounted at /root/syzkaller.qWdobc/45/file1 supports timestamps until 2038 (0x7fffffff) [ 61.457398][ T524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 61.457410][ T524] Workqueue: netns cleanup_net [ 61.457434][ T524] RIP: 0010:tcf_idrinfo_destroy+0xe9/0x280 [ 61.489101][ T524] Code: ee e8 9b 9b b6 00 48 85 c0 0f 84 54 01 00 00 49 89 c6 48 8d 58 20 48 89 df be 04 00 00 00 e8 6e 55 00 fe 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f5 00 00 00 8b 1b 31 ff 89 de e8 bf 9f [ 61.508525][ T524] RSP: 0018:ffff8881e9defb60 EFLAGS: 00010202 [ 61.514421][ T524] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881ea1f8fc0 [ 61.518068][ T389] usb 1-1: Using ep0 maxpacket: 8 [ 61.522241][ T524] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 61.522246][ T524] RBP: ffff8881e9defc30 R08: ffffffff813ae585 R09: 0000000000000003 [ 61.522252][ T524] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103d3bdf78 [ 61.522257][ T524] R13: ffff8881e9defbc0 R14: fffffffffffffff0 R15: dffffc0000000000 [ 61.522271][ T524] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 61.567115][ T524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.573534][ T524] CR2: 00007fc49d1c9aa8 CR3: 00000001ecc5a000 CR4: 00000000003406a0 [ 61.581348][ T524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.589154][ T524] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.596963][ T524] Call Trace: [ 61.600102][ T524] ? __die+0xb4/0x100 [ 61.603919][ T524] ? die+0x26/0x50 [ 61.607466][ T524] ? do_general_protection+0x266/0x3c0 [ 61.612764][ T524] ? ___preempt_schedule+0x16/0x20 [ 61.617712][ T524] ? do_trap+0x340/0x340 [ 61.621790][ T524] ? check_panic_on_warn+0x5e/0xa0 [ 61.626732][ T524] ? tcf_idrinfo_destroy+0xe2/0x280 [ 61.631896][ T524] ? general_protection+0x28/0x30 [ 61.636760][ T524] ? check_panic_on_warn+0x55/0xa0 [ 61.638186][ T389] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 61.641705][ T524] ? tcf_idrinfo_destroy+0xe9/0x280 [ 61.641715][ T524] ? tcf_idr_check_alloc+0x370/0x370 [ 61.641731][ T524] ? iput+0x6a4/0x830 [ 61.668356][ T524] mirred_exit_net+0xd7/0x140 [ 61.672863][ T524] ? mirred_init_net+0x1c0/0x1c0 [ 61.677634][ T524] cleanup_net+0x6e2/0xc90 [ 61.678060][ T372] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 61.681887][ T524] ? ops_init+0x4a0/0x4a0 [ 61.681897][ T524] ? read_word_at_a_time+0xe/0x20 [ 61.681913][ T524] ? strscpy+0x89/0x220 [ 61.702292][ T524] process_one_work+0x765/0xd20 [ 61.706985][ T524] worker_thread+0xaef/0x1470 [ 61.711489][ T524] kthread+0x2da/0x360 [ 61.715389][ T524] ? worker_clr_flags+0x170/0x170 [ 61.720251][ T524] ? kthread_blkcg+0xd0/0xd0 [ 61.724676][ T524] ret_from_fork+0x1f/0x30 [ 61.728922][ T524] Modules linked in: [ 61.732981][ T524] ---[ end trace e9b4bd0b1ae2c9b5 ]--- [ 61.738599][ T524] RIP: 0010:tcf_idrinfo_destroy+0xe9/0x280 [ 61.744321][ T524] Code: ee e8 9b 9b b6 00 48 85 c0 0f 84 54 01 00 00 49 89 c6 48 8d 58 20 48 89 df be 04 00 00 00 e8 6e 55 00 fe 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f5 00 00 00 8b 1b 31 ff 89 de e8 bf 9f [ 61.763952][ T524] RSP: 0018:ffff8881e9defb60 EFLAGS: 00010202 [ 61.770038][ T524] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff8881ea1f8fc0 [ 61.777899][ T524] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000ffffffff [ 61.779757][ T389] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.797663][ T524] RBP: ffff8881e9defc30 R08: ffffffff813ae585 R09: 0000000000000003 [ 61.805838][ T524] R10: ffffffffffffffff R11: dffffc0000000001 R12: 1ffff1103d3bdf78 [ 61.809194][ T389] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 61.813985][ T524] R13: ffff8881e9defbc0 R14: fffffffffffffff0 R15: dffffc0000000000 [ 61.829405][ T524] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 61.835357][ T389] usb 1-1: SerialNumber: syz [ 61.838287][ T524] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.849086][ T524] CR2: 0000001b33611ff8 CR3: 00000001ecc5a000 CR4: 00000000003426a0 [ 61.856855][ T524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.865620][ T524] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.873491][ T524] Kernel panic - not syncing: Fatal exception [ 61.879481][ T524] Kernel Offset: disabled [ 61.883606][ T524] Rebooting in 86400 seconds..