last executing test programs: 5.920648322s ago: executing program 1 (id=65): add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f0000000280)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1b}, 0x48, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) setreuid(0x0, 0xee01) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "4a8d480f65491adf0fbc0b55d9391fec4647e0a1c2934c637607750100000066ee00", 0x1d}, 0x48, 0xfffffffffffffffd) pread64(r0, &(0x7f00000001c0)=""/136, 0x88, 0x29) 5.899691943s ago: executing program 1 (id=66): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x40, 0x10, 0x55, {0x55, 0x23, "229314360a33bf1d14cf86b8d1a8cd700f67262f784f41901f6121af9ef932eb566d9d0b4507d62396ddc1042c9d4aad6abe75f7f97bf7b3cd7038faacfbf09351e34843a25da89eb996925ed83f64b004f073"}}, &(0x7f00000003c0)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "3fa5e6ff1daa80ff1288a428a14bfbd2389f1b20bd5da38a56e01cb54eacc7ee2385c56a0724c7060e386ac0da8fd1d65bbc44074740449d4a0063edfb0d5be3698435c523478658e69657dc616f6d0c464c73136d8404f59fa53f75c67568dde252754220ebda89904c30d97b072e88d40b336d1a91ed0b311c8c69841597a8d881a23452c278a1f92ae31ef66582bbe2aa3f23f1a9929b26a70f9291e1de8ce705105d0b732c6aa567dd92fce00fb93576311d74f2a4746f2daeb2cdaae6179c64ba7526f5b2a510b06d50cc"}}, &(0x7f0000000000)={0x0, 0x22, 0x14, {[@main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x3, "17ad557d"}, @local=@item_4={0x3, 0x2, 0x3, "bdd299ee"}, @global=@item_012={0x2, 0x1, 0x3, 'HK'}, @local=@item_012={0x2, 0x2, 0x2, "0600"}, @local=@item_012={0x1, 0x2, 0x1, 'O'}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1f3, 0x5, 0x1, {0x22, 0xa1d}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000540)={0x40, 0x9898edb8a7d5916f, 0x1b, "b570dec413c7c72d3e98d8cbb6afc743dc8346004eada8252e7529"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x1, 0x34, "83a79b4bd2987368f1229b3059586ec9b30adaf4c789b20cc36f5cba0e9e088ac1aa110b8a3a6161a20512a94a13979a6d85428d"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io(r0, 0x0, 0x0) 3.359288021s ago: executing program 0 (id=89): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) unshare(0x400) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 3.176436528s ago: executing program 3 (id=91): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xfffffffc]}}) 3.174464268s ago: executing program 3 (id=92): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x202ddd, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000002c0)={0x1}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000280), 0x0, 0x0) 2.737825595s ago: executing program 2 (id=97): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a74e755907cff5eeb3731443b4e7efc382c3ae"}) write$UHID_INPUT(r1, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) 2.723657615s ago: executing program 2 (id=98): r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "67c8"}, 0x6) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0x20, 0x0, [{0x0, 0xb, "34a6caf58db76931cc"}, {0x0, 0xf, "e39335900f115624170e15dad0"}]}, @noop]}}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.415766217s ago: executing program 1 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x24}}, 0x0) 2.379617699s ago: executing program 0 (id=101): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, 0x0, &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.333666211s ago: executing program 3 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xfffffffc]}}) 2.253088724s ago: executing program 3 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xdb, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1.782962912s ago: executing program 4 (id=110): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x7) 1.660078927s ago: executing program 4 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x24}}, 0x0) 1.339145049s ago: executing program 3 (id=112): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0186e86, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00&\x00!F'], 0x24}], 0x1}, 0x0) 1.32904973s ago: executing program 4 (id=113): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, 0x0, &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.290465331s ago: executing program 4 (id=114): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f00000000c0)=0x800, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f100000000000000000000001811", @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRESHEX=r4, @ANYRES16=r3, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800b9f900000000000000000a000000000000000805ffffff00000004000b00"], 0x24}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4ac, &(0x7f0000000f00)="$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") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000000380)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="2de161cec6a2abe0333ca063a5fb0de3067784322a7e1944ce10c17bd3d94b8db1744c083cfe45621a8818a8e096ad08923553d19a9da191e5d70ad22491ee90ef95211ed2583af011dea11308e8e7d25eca5ef5599f490b00bffed20c9cdc848c3283db83718c148b16933d234c6e3689cf0ba697de27dbde228bc1eae03460f574642f7432c5018bdeb5c0ef01cee00bc2a063283232c614d6373bf65da5f9c2", 0xa1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000e0000000000", @ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="ac1e0101ac1414bb00000000140000000000000000000000010000005872000000000000"], 0xd8}}], 0x1, 0xc1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) rmdir(&(0x7f0000000000)='./bus/file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 559.317589ms ago: executing program 0 (id=102): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {@jqfmt_vfsv0}, {@sysvgroups}, {@norecovery}, {@nogrpid}, {@debug}, {@i_version}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="24f54d139a58f1572db2893ce9aefe759123efc01f723037432f1002b4e3e86c54147be8d416ebd4523c0290e22a6dc78c9779dcbcf7f87a04c2871b7570b8c19a08a5989155fff7395f269137bcd7043dd5b472b68a0d9597b1720bf7e07bc0039eaf1ea98bfc0bbbd7ac9768c5b924", @ANYBLOB="fbed68cd38a9fa820c084ba2ac93d443529340591b6313e2d4025673e17d0ec132a4c4f67f5ce4c95996867f50a8b4ad86e73a2d5ca90c113f3fea78c91fecb8abf86e6dca9c3767c52f4c9fc715a93ea57ed76c2061b0135939c1e2075257218ee27517bb649ade535fe2d55cb733f4af8d8cc293f39b209a29ead8f2a9ea994f69bb9afe3305788454b039f58c59b482dd762341f5621f0b8c4787f866e8f2c2ceaa7630c27b1f4355a51b56f9cbafc19f0a79af59c53f852839136607aa31d627a798158da766b460febbb309a1bc06c2c111190e11da0b458737c58b8dbf9eb05894"], 0x835, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) utimes(0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "028df7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x3a, 0x0, @mcast1, @empty, [], "1e520b4c951ee12e"}}}}}}}, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xa0024000) 456.256023ms ago: executing program 3 (id=115): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}}) r1 = epoll_create(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x202ddd, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000002c0)={0x1}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000280), 0x0, 0x0) 385.423536ms ago: executing program 1 (id=100): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x10, 0x3, 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) io_getevents(r1, 0x3, 0x7, &(0x7f00000016c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) fcntl$setstatus(r0, 0x4, 0x6800) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200), 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) socket(0x1e, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) io_destroy(r1) 383.679296ms ago: executing program 4 (id=116): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000540)={[{@sysvgroups}, {@usrjquota}, {@errors_remount}, {@norecovery}, {}, {@nomblk_io_submit}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffffe}}, {@user_xattr}, {@jqfmt_vfsold}]}, 0x45, 0x7bb, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x6c302, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 262.062481ms ago: executing program 0 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x1, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000480), &(0x7f0000000500)}, 0x20) 236.732812ms ago: executing program 2 (id=118): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 197.169563ms ago: executing program 0 (id=119): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000400)={0xff02, 0x0, 0x0, 0xe8, 0x0, "0500ff00001300"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 161.632934ms ago: executing program 2 (id=120): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 158.313495ms ago: executing program 1 (id=121): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x74}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 151.956775ms ago: executing program 0 (id=122): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) shutdown(r1, 0x0) 106.890206ms ago: executing program 1 (id=123): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x10020, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') lseek(r0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chdir(0x0) io_uring_setup(0x7276, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000000)={0x0, 0x2bdf, 0x0, 0x0, 0x0, "70c8781ed26c8c2e91557618cb7d929bb59c86"}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000040)={0x9b, {"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", 0x1000}}, 0x1006) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0x2020) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x2deb, &(0x7f0000001600)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) stat(&(0x7f0000001340)='./file2\x00', &(0x7f00000034c0)) 103.937117ms ago: executing program 4 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xf, &(0x7f00000001c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_emit_ethernet(0x8a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000541100fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/131, 0x83}}], 0x400000000000205, 0x40002041, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) lseek(r5, 0x8, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000000)={0x1, 0x0, 0x27f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r9 = getuid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3, &(0x7f0000000100)={[{@resuid={'resuid', 0x3d, r9}}]}, 0x1, 0x3e6, &(0x7f0000000880)="$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") 43.031129ms ago: executing program 2 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_GROUP_TYPE={0x6}]}, 0x24}}, 0x0) 0s ago: executing program 2 (id=126): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}]}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, 0x0, &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 20.023312][ T23] audit: type=1400 audit(1719917021.900:66): avc: denied { mounton } for pid=341 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.025242][ T341] cgroup1: Unknown subsys name 'net' [ 20.045814][ T23] audit: type=1400 audit(1719917021.900:67): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.051466][ T341] cgroup1: Unknown subsys name 'net_prio' [ 20.078801][ T341] cgroup1: Unknown subsys name 'devices' [ 20.085026][ T23] audit: type=1400 audit(1719917021.960:68): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.248909][ T341] cgroup1: Unknown subsys name 'hugetlb' [ 20.254861][ T341] cgroup1: Unknown subsys name 'rlimit' [ 20.260640][ T23] audit: type=1400 audit(1719917022.140:69): avc: denied { read } for pid=145 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 20.439925][ T23] audit: type=1400 audit(1719917022.320:70): avc: denied { setattr } for pid=341 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.462919][ T23] audit: type=1400 audit(1719917022.320:71): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.469777][ T342] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.487681][ T23] audit: type=1400 audit(1719917022.320:72): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.518755][ T23] audit: type=1400 audit(1719917022.370:73): avc: denied { relabelto } for pid=342 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.544260][ T23] audit: type=1400 audit(1719917022.370:74): avc: denied { write } for pid=342 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.573095][ T23] audit: type=1400 audit(1719917022.450:75): avc: denied { read } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.604664][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.782253][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.789187][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.796725][ T348] device bridge_slave_0 entered promiscuous mode [ 20.832701][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.839703][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.847068][ T348] device bridge_slave_1 entered promiscuous mode [ 20.971085][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.978138][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.985425][ T350] device bridge_slave_0 entered promiscuous mode [ 20.995753][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.002737][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.010154][ T350] device bridge_slave_1 entered promiscuous mode [ 21.053164][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.060291][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.067658][ T351] device bridge_slave_0 entered promiscuous mode [ 21.074395][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.081486][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.088869][ T351] device bridge_slave_1 entered promiscuous mode [ 21.122258][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.129314][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.136739][ T352] device bridge_slave_0 entered promiscuous mode [ 21.157272][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.164086][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.171503][ T352] device bridge_slave_1 entered promiscuous mode [ 21.236380][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.243202][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.250328][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.257098][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.278770][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.285675][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.293307][ T353] device bridge_slave_0 entered promiscuous mode [ 21.303525][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.310848][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.318459][ T353] device bridge_slave_1 entered promiscuous mode [ 21.383154][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.390097][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.397205][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.403953][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.476600][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.483719][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.491261][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.498281][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.506408][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.513645][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.547237][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.555201][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.562029][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.569744][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.578051][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.584874][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.610244][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.617947][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.625947][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.632783][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.639987][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.648143][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.654954][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.679918][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.687928][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.695649][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.703689][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.732330][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.740772][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.758989][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.767394][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.786418][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.794441][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.801289][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.808804][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.816947][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.823758][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.831114][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.838478][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.845707][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.853907][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.861891][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.868715][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.903419][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.911411][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.919114][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.927899][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.935815][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.942681][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.950279][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.958472][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.966231][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.974093][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.981847][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.990000][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.998079][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.004887][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.012108][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.020352][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.028482][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.035308][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.042672][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.050825][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.059076][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.066953][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.074696][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.082636][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.090424][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.106345][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.114206][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.126390][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.134325][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.142330][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.150486][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.164974][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.173415][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.181663][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.189454][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.214058][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.222385][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.231073][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.239716][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.261804][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.270043][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.278534][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.287265][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.295306][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.303346][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.311554][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.319318][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.327009][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.334877][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.343044][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.351226][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.375517][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.383627][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.392558][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.400627][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.408796][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.416998][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.425064][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.433395][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.483769][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.507581][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.531451][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.539847][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.547905][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.555979][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.565713][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.573941][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.584176][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.592291][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.604139][ T378] ====================================================== [ 22.604139][ T378] WARNING: the mand mount option is being deprecated and [ 22.604139][ T378] will be removed in v5.15! [ 22.604139][ T378] ====================================================== [ 22.631011][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.639475][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.653092][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.661536][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.663677][ T388] input: syz0 as /devices/virtual/input/input4 [ 22.866421][ T378] EXT4-fs (loop0): Ignoring removed orlov option [ 22.872838][ T378] EXT4-fs (loop0): Ignoring removed orlov option [ 22.885371][ T378] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,dioread_lock,data_err=abort,jqfmt=vfsv1,barrier,noinit_itable,orlov,minixdf,bsddf,orlov,quota,,errors=continue [ 23.018923][ T401] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 23.038140][ T401] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,nomblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold, [ 23.059312][ T406] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 23.074478][ T406] EXT4-fs (loop0): filesystem is read-only [ 23.081661][ T401] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz.2.3: bg 0: block 234: padding at end of block bitmap is not set [ 23.085773][ T406] EXT4-fs (loop0): filesystem is read-only [ 23.101262][ T406] EXT4-fs (loop0): orphan cleanup on readonly fs [ 23.105188][ T401] EXT4-fs (loop2): Remounting filesystem read-only [ 23.107475][ T406] EXT4-fs error (device loop0): ext4_orphan_get:1260: comm syz.0.10: bad orphan inode 16 [ 23.124054][ T406] ext4_test_bit(bit=15, block=3) = 0 [ 23.129201][ T406] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,,errors=continue [ 23.216801][ T371] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 23.286166][ T394] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.434368][ T424] input: syz0 as /devices/virtual/input/input5 [ 23.457133][ T371] usb 5-1: Using ep0 maxpacket: 32 [ 23.476302][ T18] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.526195][ T394] usb 4-1: Using ep0 maxpacket: 16 [ 23.576228][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.587080][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.596775][ T371] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 23.605587][ T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.614698][ T371] usb 5-1: config 0 descriptor?? [ 23.614958][ T438] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 23.637577][ T438] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,nomblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold, [ 23.657652][ T394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.672312][ T371] hub 5-1:0.0: USB hub found [ 23.673675][ T438] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.22: bg 0: block 234: padding at end of block bitmap is not set [ 23.678325][ T394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.691265][ T438] EXT4-fs (loop1): Remounting filesystem read-only [ 23.701341][ T394] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.724843][ T394] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 23.733813][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.742704][ T394] usb 4-1: config 0 descriptor?? [ 23.865025][ T452] input: syz0 as /devices/virtual/input/input6 [ 23.876217][ T371] hub 5-1:0.0: 1 port detected [ 23.886331][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 23.895926][ T18] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 23.905634][ T18] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 24.236241][ T18] usb 3-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 24.245194][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.252993][ T18] usb 3-1: Product: syz [ 24.258504][ T394] ryos 0003:1E7D:31CE.0001: unbalanced delimiter at end of report description [ 24.268302][ T18] usb 3-1: Manufacturer: syz [ 24.272774][ T18] usb 3-1: SerialNumber: syz [ 24.278101][ T394] ryos 0003:1E7D:31CE.0001: parse failed [ 24.283748][ T18] usb 3-1: config 0 descriptor?? [ 24.288818][ T394] ryos: probe of 0003:1E7D:31CE.0001 failed with error -22 [ 24.297747][ T470] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 24.307585][ T470] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,nomblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold, [ 24.328164][ T18] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 24.336536][ T18] usb 3-1: Detected FT-X [ 24.340583][ T18] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 24.342036][ T470] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.34: bg 0: block 234: padding at end of block bitmap is not set [ 24.361852][ T470] EXT4-fs (loop0): Remounting filesystem read-only [ 24.463528][ T394] usb 4-1: USB disconnect, device number 2 [ 24.546244][ T18] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 24.566218][ T371] hub 5-1:0.0: activate --> -90 [ 24.571144][ T18] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 24.596200][ T18] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 24.603412][ T18] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 24.612539][ T18] usb 3-1: USB disconnect, device number 2 [ 24.619291][ T18] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 24.629560][ T18] ftdi_sio 3-1:0.0: device disconnected [ 25.087568][ T487] input: syz0 as /devices/virtual/input/input7 [ 25.118237][ T23] kauditd_printk_skb: 55 callbacks suppressed [ 25.118246][ T23] audit: type=1400 audit(1719917027.000:131): avc: denied { name_bind } for pid=490 comm="syz.2.41" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.151024][ T23] audit: type=1400 audit(1719917027.000:132): avc: denied { node_bind } for pid=490 comm="syz.2.41" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.209039][ T23] audit: type=1400 audit(1719917027.090:133): avc: denied { mounton } for pid=498 comm="syz.0.45" path="/17/file0" dev="tmpfs" ino=12800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 25.236531][ T499] EXT4-fs (loop0): filesystem is read-only [ 25.243693][ T499] EXT4-fs (loop0): filesystem is read-only [ 25.249511][ T499] EXT4-fs (loop0): orphan cleanup on readonly fs [ 25.255807][ T499] EXT4-fs error (device loop0): ext4_orphan_get:1260: comm syz.0.45: bad orphan inode 16 [ 25.265686][ T499] ext4_test_bit(bit=15, block=3) = 0 [ 25.271072][ T499] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,,errors=continue [ 25.320469][ T18] usb 5-1: USB disconnect, device number 2 [ 25.445745][ T510] request_module fs-ceph succeeded, but still no fs? [ 25.770772][ T371] usb 5-1-port1: config error [ 26.440981][ T23] audit: type=1400 audit(1719917028.290:134): avc: denied { read } for pid=521 comm="syz.1.51" name="kvm" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.702655][ T23] audit: type=1400 audit(1719917028.290:135): avc: denied { open } for pid=521 comm="syz.1.51" path="/dev/kvm" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.723793][ T539] input: syz0 as /devices/virtual/input/input8 [ 26.725486][ T23] audit: type=1400 audit(1719917028.290:136): avc: denied { ioctl } for pid=521 comm="syz.1.51" path="/dev/kvm" dev="devtmpfs" ino=92 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.841896][ T536] EXT4-fs (loop1): orphan cleanup on readonly fs [ 26.848158][ T536] EXT4-fs error (device loop1): ext4_orphan_get:1260: comm syz.1.51: bad orphan inode 256 [ 26.858364][ T536] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 26.895250][ T532] loop3: p1 < > p2 < > p3 p4 < > [ 26.900687][ T532] loop3: partition table partially beyond EOD, truncated [ 26.909338][ T532] loop3: p1 start 2305 is beyond EOD, truncated [ 26.909555][ T23] audit: type=1400 audit(1719917028.790:137): avc: denied { create } for pid=548 comm="syz.4.57" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 26.915407][ T532] loop3: p2 start 4294902784 is beyond EOD, truncated [ 26.945209][ T532] loop3: p3 start 3724543488 is beyond EOD, truncated [ 26.969365][ T551] EXT4-fs (loop0): filesystem is read-only [ 26.970388][ T23] audit: type=1400 audit(1719917028.820:138): avc: denied { read } for pid=548 comm="syz.4.57" name="file5" dev="tmpfs" ino=12906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 26.978900][ T551] EXT4-fs (loop0): filesystem is read-only [ 26.998096][ T23] audit: type=1400 audit(1719917028.820:139): avc: denied { open } for pid=548 comm="syz.4.57" path="/3/file5" dev="tmpfs" ino=12906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 27.002672][ T551] EXT4-fs (loop0): orphan cleanup on readonly fs [ 27.024998][ T23] audit: type=1400 audit(1719917028.820:140): avc: denied { ioctl } for pid=548 comm="syz.4.57" path="/3/file5" dev="tmpfs" ino=12906 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 27.031246][ T551] EXT4-fs error (device loop0): ext4_orphan_get:1260: comm syz.0.58: bad orphan inode 16 [ 27.054643][ T125] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.064545][ T551] ext4_test_bit(bit=15, block=3) = 0 [ 27.077038][ T551] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,,errors=continue [ 27.131031][ T534] syz.1.51 (534) used greatest stack depth: 22680 bytes left [ 27.376859][ T125] usb 4-1: Using ep0 maxpacket: 8 [ 27.646511][ T125] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.657656][ T125] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 63, changing to 9 [ 27.668550][ T523] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.677053][ T125] usb 4-1: config 1 interface 0 has no altsetting 0 [ 27.766146][ T518] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.836240][ T125] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.40 [ 27.845082][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.852946][ T125] usb 4-1: Product: Ї [ 27.857048][ T125] usb 4-1: Manufacturer: 渗劍㞷刧鸙쥩癌ᎎ⵾䬜祅齉햿×⓼䗰ㅳ [ 27.865813][ T125] usb 4-1: SerialNumber: С [ 27.916200][ T523] usb 1-1: Using ep0 maxpacket: 16 [ 27.998471][ T576] input: syz0 as /devices/virtual/input/input9 [ 28.006205][ T518] usb 2-1: Using ep0 maxpacket: 32 [ 28.066250][ T523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 28.077355][ T523] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 28.077370][ T523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.094825][ T523] usb 1-1: config 0 descriptor?? [ 28.126215][ T518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.137453][ T518] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.147339][ T518] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.156212][ T518] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.164907][ T518] usb 2-1: config 0 descriptor?? [ 28.332582][ T518] hub 2-1:0.0: USB hub found [ 28.456389][ T518] hub 2-1:0.0: 1 port detected [ 28.496366][ T125] usbhid 4-1:1.0: can't add hid device: -71 [ 28.502302][ T125] usbhid: probe of 4-1:1.0 failed with error -71 [ 28.515445][ T125] usb 4-1: USB disconnect, device number 3 [ 28.855626][ T532] syz.3.53 (532) used greatest stack depth: 19928 bytes left [ 28.863692][ T564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.889952][ T523] hid-generic 0003:0158:0100.0002: unknown main item tag 0x1 [ 28.897290][ T523] hid-generic 0003:0158:0100.0002: unexpected long global item [ 28.904798][ T523] hid-generic: probe of 0003:0158:0100.0002 failed with error -22 [ 28.943407][ T597] EXT4-fs (loop2): orphan cleanup on readonly fs [ 28.949697][ T597] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.74: bad orphan inode 256 [ 28.959653][ T597] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue [ 29.092962][ T518] usb 1-1: USB disconnect, device number 2 [ 29.381472][ T372] hub 2-1:0.0: activate --> -90 [ 29.971540][ T631] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 29.980310][ T631] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 30.123136][ T631] futex_wake_op: syz.3.88 tries to shift op by 36; fix this program [ 30.133352][ T23] kauditd_printk_skb: 18 callbacks suppressed [ 30.133362][ T23] audit: type=1326 audit(1719917032.010:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=636 comm="syz.0.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc01ad1bf19 code=0x0 [ 30.164912][ T639] mmap: syz.4.90 (639) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 30.269983][ T125] usb 2-1: USB disconnect, device number 2 [ 30.550042][ T652] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 30.606244][ T372] usb 2-1-port1: config error [ 30.896145][ T523] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.136145][ T523] usb 3-1: Using ep0 maxpacket: 16 [ 31.172353][ T673] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 31.190448][ T673] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold, [ 31.216385][ T23] audit: type=1400 audit(1719917033.100:160): avc: denied { read write } for pid=670 comm="syz.4.104" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.220182][ T669] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.239322][ T23] audit: type=1400 audit(1719917033.100:161): avc: denied { open } for pid=670 comm="syz.4.104" path="/16/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.245788][ T669] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.273808][ T673] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #15: block 1803188595: comm syz.4.104: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 31.293323][ T669] device bridge_slave_0 entered promiscuous mode [ 31.325155][ T665] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.333515][ T665] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.343647][ T665] device bridge_slave_0 entered promiscuous mode [ 31.351605][ T669] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.360328][ T669] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.370116][ T669] device bridge_slave_1 entered promiscuous mode [ 31.377528][ T665] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.384792][ T665] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.394713][ T665] device bridge_slave_1 entered promiscuous mode [ 31.414612][ T523] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 31.426104][ T523] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 31.431424][ T673] EXT4-fs (loop4): Remounting filesystem read-only [ 31.434950][ T523] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.449848][ T523] usb 3-1: config 0 descriptor?? [ 31.581965][ T669] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.588960][ T669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.596017][ T669] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.602833][ T669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.607839][ T697] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 31.644361][ T665] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.649748][ T23] audit: type=1400 audit(1719917033.530:162): avc: denied { map } for pid=696 comm="syz.4.110" path="/21/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.651214][ T665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.680209][ T665] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.682742][ T23] audit: type=1400 audit(1719917033.560:163): avc: denied { mounton } for pid=696 comm="syz.4.110" path="/21/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.686970][ T665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.717698][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.725185][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.733707][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.740701][ T23] audit: type=1400 audit(1719917033.610:164): avc: denied { remove_name } for pid=353 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.764044][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.771052][ T23] audit: type=1400 audit(1719917033.610:165): avc: denied { rmdir } for pid=353 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.793638][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.800761][ T23] audit: type=1400 audit(1719917033.610:166): avc: denied { unlink } for pid=353 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.822879][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.824634][ T23] audit: type=1400 audit(1719917033.610:167): avc: denied { unlink } for pid=353 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 31.852178][ T23] audit: type=1400 audit(1719917033.680:168): avc: denied { unmount } for pid=353 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 31.886997][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.894975][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.901815][ T430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.915724][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.924337][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.931173][ T430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.938497][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.946677][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.953515][ T430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.961220][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.977987][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.986038][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.992878][ T430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.022653][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.031970][ T661] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 32.088266][ T710] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 32.098071][ T710] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff) [ 32.114364][ T523] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 32.121691][ T523] hid-generic 0003:0158:0100.0003: unexpected long global item [ 32.129690][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.137572][ T523] hid-generic: probe of 0003:0158:0100.0003 failed with error -22 [ 32.167602][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.175548][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.320764][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.330204][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.339485][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.349144][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.493062][ T523] usb 3-1: USB disconnect, device number 3 [ 32.692143][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.709950][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.717711][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.725617][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.736018][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.744462][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.752596][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.760879][ T430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.784410][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.792972][ T518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.811645][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.811885][ T720] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 32.820100][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.827318][ T720] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 32.843935][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.895758][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.937670][ T384] device bridge_slave_1 left promiscuous mode [ 32.943644][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.951030][ T384] device bridge_slave_0 left promiscuous mode [ 32.959997][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.028342][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.036439][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.044513][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.052931][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.078033][ T720] futex_wake_op: syz.0.102 tries to shift op by 36; fix this program [ 33.137283][ T729] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 33.163599][ T729] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold, [ 33.203030][ T729] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #15: block 1803188595: comm syz.4.116: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 33.233044][ T729] EXT4-fs (loop4): Remounting filesystem read-only [ 33.323816][ T384] ================================================================== [ 33.331839][ T384] BUG: KASAN: null-ptr-deref in tcf_idrinfo_destroy+0xe2/0x280 [ 33.339177][ T384] Read of size 4 at addr 0000000000000010 by task kworker/u4:3/384 [ 33.346896][ T384] [ 33.349079][ T384] CPU: 1 PID: 384 Comm: kworker/u4:3 Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 33.358789][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.368718][ T384] Workqueue: netns cleanup_net [ 33.373279][ T384] Call Trace: [ 33.376415][ T384] dump_stack+0x1d8/0x241 [ 33.380576][ T384] ? panic+0x89d/0x89d [ 33.384484][ T384] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 33.390123][ T384] ? idr_get_next_ul+0x32a/0x3f0 [ 33.394900][ T384] ? tcf_idrinfo_destroy+0xe2/0x280 [ 33.399930][ T384] __kasan_report+0xe9/0x120 [ 33.404358][ T384] ? tcf_idrinfo_destroy+0xe2/0x280 [ 33.409389][ T384] kasan_report+0x30/0x60 [ 33.413565][ T384] check_memory_region+0x272/0x280 [ 33.418506][ T384] tcf_idrinfo_destroy+0xe2/0x280 [ 33.423364][ T384] ? tcf_idr_check_alloc+0x370/0x370 [ 33.428488][ T384] ? netdev_refcnt_read+0x1c0/0x1c0 [ 33.433518][ T384] ? gact_exit_net+0xef/0x140 [ 33.438043][ T384] police_exit_net+0xd7/0x140 [ 33.442555][ T384] ? police_init_net+0x1c0/0x1c0 [ 33.447328][ T384] cleanup_net+0x6e2/0xc90 [ 33.451576][ T384] ? ops_init+0x4a0/0x4a0 [ 33.455738][ T384] ? read_word_at_a_time+0xe/0x20 [ 33.460596][ T384] ? strscpy+0x89/0x220 [ 33.464593][ T384] process_one_work+0x765/0xd20 [ 33.469280][ T384] worker_thread+0xaef/0x1470 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 33.4