last executing test programs: 768.409783ms ago: executing program 2 (id=143): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000040)) 694.576453ms ago: executing program 2 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r1 = eventfd2(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x2, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000001a40)={0xfffffffffffffffe, 0x0, 0x2, r1, 0x1}) 637.781953ms ago: executing program 1 (id=147): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 636.042832ms ago: executing program 0 (id=148): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c2, &(0x7f0000000c40)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 622.503782ms ago: executing program 2 (id=149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 593.798282ms ago: executing program 2 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 578.939882ms ago: executing program 1 (id=151): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) ftruncate(r1, 0x0) 519.319332ms ago: executing program 1 (id=152): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6020400) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) 508.029532ms ago: executing program 2 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000003000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 458.830162ms ago: executing program 3 (id=157): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0x208e24b) lseek(r1, 0x0, 0x5) 452.770622ms ago: executing program 2 (id=158): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 446.538901ms ago: executing program 0 (id=159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009502"]) 444.676131ms ago: executing program 1 (id=160): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 366.165302ms ago: executing program 4 (id=162): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x22) 365.822041ms ago: executing program 1 (id=163): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3000010, &(0x7f00000000c0), 0xfe, 0x44e, &(0x7f00000004c0)="$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") 342.502281ms ago: executing program 0 (id=164): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) syz_clone3(&(0x7f0000006a80)={0x80000200, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, &(0x7f0000006a40)=[0xffffffffffffffff], 0x1}, 0x58) 328.543351ms ago: executing program 4 (id=165): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006000100000008000900010000"], 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[]) 228.670501ms ago: executing program 0 (id=166): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x44, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 213.3755ms ago: executing program 1 (id=167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) 213.27598ms ago: executing program 4 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 177.67015ms ago: executing program 0 (id=169): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 177.16788ms ago: executing program 3 (id=170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r2}, 0x10) 177.001251ms ago: executing program 4 (id=171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 162.909041ms ago: executing program 4 (id=172): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0xa6af401c81cc4462, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 115.67099ms ago: executing program 0 (id=173): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0)={[{@data_err_ignore}, {@nouid32}, {@minixdf}]}, 0x1, 0x51c, &(0x7f0000000780)="$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") r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) listxattr(&(0x7f00000002c0)='./file1\x00', 0x0, 0x51) 108.58115ms ago: executing program 3 (id=174): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000000000000000000400850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x2, @val=@tracing={0x0, 0x4a9}}, 0x20) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) 78.23957ms ago: executing program 3 (id=175): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) 54.41219ms ago: executing program 3 (id=176): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 17.86571ms ago: executing program 3 (id=177): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 0s ago: executing program 4 (id=178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 21.235123][ T28] audit: type=1400 audit(1734466568.503:66): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.236104][ T281] cgroup: Unknown subsys name 'net' [ 21.257590][ T28] audit: type=1400 audit(1734466568.503:67): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.284481][ T28] audit: type=1400 audit(1734466568.533:68): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.284609][ T281] cgroup: Unknown subsys name 'devices' [ 21.428327][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.433721][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.536499][ T28] audit: type=1400 audit(1734466568.803:69): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.559452][ T28] audit: type=1400 audit(1734466568.803:70): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.583987][ T28] audit: type=1400 audit(1734466568.813:71): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.591139][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.615526][ T28] audit: type=1400 audit(1734466568.893:72): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.640725][ T28] audit: type=1400 audit(1734466568.893:73): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.713031][ T28] audit: type=1400 audit(1734466568.983:74): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.713405][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.738341][ T28] audit: type=1400 audit(1734466568.983:75): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.256285][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.263187][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.270441][ T291] device bridge_slave_0 entered promiscuous mode [ 22.278319][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.285278][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.292619][ T291] device bridge_slave_1 entered promiscuous mode [ 22.375845][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.382720][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.389920][ T292] device bridge_slave_0 entered promiscuous mode [ 22.396494][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.403404][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.410567][ T292] device bridge_slave_1 entered promiscuous mode [ 22.424195][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.431086][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.438324][ T295] device bridge_slave_0 entered promiscuous mode [ 22.451065][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.457944][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.465160][ T295] device bridge_slave_1 entered promiscuous mode [ 22.520673][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.527612][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.534759][ T293] device bridge_slave_0 entered promiscuous mode [ 22.554300][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.561180][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.568456][ T293] device bridge_slave_1 entered promiscuous mode [ 22.621936][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.628915][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.636040][ T296] device bridge_slave_0 entered promiscuous mode [ 22.653430][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.660286][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.667571][ T296] device bridge_slave_1 entered promiscuous mode [ 22.735447][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.742310][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.749415][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.756175][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.802370][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.809233][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.816341][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.823133][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.831625][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.838486][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.845529][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.852369][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.872015][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.878865][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.885936][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.892760][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.916538][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.923399][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.930499][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.937286][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.963732][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.971155][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.978725][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.985668][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.992718][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.999858][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.007071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.014319][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.021374][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.028589][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.035600][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.047227][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.054441][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.073815][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.081372][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.089451][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.096277][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.108717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.116651][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.123500][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.131114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.139217][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.146036][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.153323][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.174337][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.182284][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.189122][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.196296][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.204538][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.211400][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.218703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.226637][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.233485][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.240678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.248667][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.255484][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.262706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.270663][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.277498][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.308830][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.316953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.324729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.332873][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.340855][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.348915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.356604][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.364566][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.372339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.380191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.388025][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.395811][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.403793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.411615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.419494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.427385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.437595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.444841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.465741][ T291] device veth0_vlan entered promiscuous mode [ 23.473294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.481653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.489876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.498188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.506198][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.514322][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.522493][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.530265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.538067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.546116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.556543][ T295] device veth0_vlan entered promiscuous mode [ 23.564353][ T292] device veth0_vlan entered promiscuous mode [ 23.576689][ T293] device veth0_vlan entered promiscuous mode [ 23.582888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.590886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.598286][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.605426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.612812][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.620050][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.627743][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.635402][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.643320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.651115][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.659292][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.667351][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.674168][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.681494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.689907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.698228][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.705049][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.712324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.719558][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.726710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.734039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.750609][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.758765][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.769271][ T295] device veth1_macvtap entered promiscuous mode [ 23.782022][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.789860][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.797807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.805477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.814276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.822552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.830617][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.838722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.846705][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.858532][ T292] device veth1_macvtap entered promiscuous mode [ 23.868698][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.876697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.884662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.892251][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.900479][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.915911][ T293] device veth1_macvtap entered promiscuous mode [ 23.922662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.930975][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.939250][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.947387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.958816][ T291] device veth1_macvtap entered promiscuous mode [ 23.979367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.987011][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.987464][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 23.995108][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.018494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.026582][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.035018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.053469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.062173][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.072397][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.079821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.087203][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.096152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.107210][ T296] device veth0_vlan entered promiscuous mode [ 24.169307][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.182683][ T327] loop0: detected capacity change from 0 to 2048 [ 24.198038][ T296] device veth1_macvtap entered promiscuous mode [ 24.214835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.228209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.239499][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.248005][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.271835][ T337] loop3: detected capacity change from 0 to 2048 [ 24.311675][ T327] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 24.322212][ T327] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.323274][ T337] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 24.412017][ T350] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.421154][ T325] loop1: detected capacity change from 0 to 40427 [ 24.444393][ T293] EXT4-fs (loop0): unmounting filesystem. [ 24.444501][ T292] EXT4-fs (loop3): unmounting filesystem. [ 24.455818][ T325] F2FS-fs (loop1): fault_injection options not supported [ 24.463078][ T325] F2FS-fs (loop1): fault_type options not supported [ 24.485225][ T325] F2FS-fs (loop1): Image doesn't support compression [ 24.501865][ T325] F2FS-fs (loop1): Image doesn't support compression [ 24.532385][ T325] F2FS-fs (loop1): invalid crc value [ 24.553180][ T325] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.587842][ T367] syz.0.18[367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.587911][ T367] syz.0.18[367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 24.642272][ T325] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 24.698511][ T377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 24.737753][ T381] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 24.761852][ T325] syz.1.2: attempt to access beyond end of device [ 24.761852][ T325] loop1: rw=2049, sector=77824, nr_sectors = 256 limit=40427 [ 24.811276][ T291] syz-executor: attempt to access beyond end of device [ 24.811276][ T291] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 24.847928][ T394] loop2: detected capacity change from 0 to 512 [ 24.885412][ T394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 24.922668][ T295] EXT4-fs (loop2): unmounting filesystem. [ 25.010842][ T407] loop1: detected capacity change from 0 to 256 [ 25.058116][ T407] ======================================================= [ 25.058116][ T407] WARNING: The mand mount option has been deprecated and [ 25.058116][ T407] and is ignored by this kernel. Remove the mand [ 25.058116][ T407] option from the mount to silence this warning. [ 25.058116][ T407] ======================================================= [ 25.109264][ T407] FAT-fs (loop1): Directory bread(block 64) failed [ 25.116156][ T407] FAT-fs (loop1): Directory bread(block 65) failed [ 25.135865][ T407] FAT-fs (loop1): Directory bread(block 66) failed [ 25.142245][ T407] FAT-fs (loop1): Directory bread(block 67) failed [ 25.156915][ T407] FAT-fs (loop1): Directory bread(block 68) failed [ 25.163291][ T407] FAT-fs (loop1): Directory bread(block 69) failed [ 25.173420][ T407] FAT-fs (loop1): Directory bread(block 70) failed [ 25.179836][ T407] FAT-fs (loop1): Directory bread(block 71) failed [ 25.186194][ T407] FAT-fs (loop1): Directory bread(block 72) failed [ 25.192617][ T407] FAT-fs (loop1): Directory bread(block 73) failed [ 25.238877][ T407] syz.1.36: attempt to access beyond end of device [ 25.238877][ T407] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 25.455116][ T447] loop4: detected capacity change from 0 to 128 [ 25.688100][ T436] loop3: detected capacity change from 0 to 40427 [ 25.712714][ T436] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 25.723608][ T436] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 25.743175][ T436] F2FS-fs (loop3): invalid crc value [ 25.787693][ T436] F2FS-fs (loop3): Found nat_bits in checkpoint [ 25.872837][ T436] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 25.878485][ T468] loop1: detected capacity change from 0 to 40427 [ 25.886505][ T436] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 25.894134][ T468] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 25.913498][ T468] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 25.936542][ T468] F2FS-fs (loop1): invalid crc value [ 25.955165][ T468] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.979538][ T494] loop4: detected capacity change from 0 to 256 [ 26.005231][ T468] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 26.012457][ T468] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 26.047177][ T494] FAT-fs (loop4): Directory bread(block 64) failed [ 26.053658][ T494] FAT-fs (loop4): Directory bread(block 65) failed [ 26.054862][ T468] syz.1.62: attempt to access beyond end of device [ 26.054862][ T468] loop1: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 26.087345][ T494] FAT-fs (loop4): Directory bread(block 66) failed [ 26.093991][ T494] FAT-fs (loop4): Directory bread(block 67) failed [ 26.094037][ T291] syz-executor: attempt to access beyond end of device [ 26.094037][ T291] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 26.128886][ T494] FAT-fs (loop4): Directory bread(block 68) failed [ 26.135387][ T494] FAT-fs (loop4): Directory bread(block 69) failed [ 26.141816][ T494] FAT-fs (loop4): Directory bread(block 70) failed [ 26.148197][ T494] FAT-fs (loop4): Directory bread(block 71) failed [ 26.154584][ T494] FAT-fs (loop4): Directory bread(block 72) failed [ 26.161477][ T494] FAT-fs (loop4): Directory bread(block 73) failed [ 26.225119][ T499] capability: warning: `syz.3.71' uses deprecated v2 capabilities in a way that may be insecure [ 26.276351][ T499] loop3: detected capacity change from 0 to 1024 [ 26.308226][ T499] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 26.330063][ T503] loop1: detected capacity change from 0 to 128 [ 26.341921][ T499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.351093][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 26.351106][ T28] audit: type=1400 audit(1734466573.623:170): avc: denied { create } for pid=506 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.418762][ T28] audit: type=1400 audit(1734466573.623:171): avc: denied { write } for pid=506 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.439110][ T28] audit: type=1400 audit(1734466573.623:172): avc: denied { nlmsg_read } for pid=506 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 26.442513][ T292] EXT4-fs (loop3): unmounting filesystem. [ 26.485371][ T501] loop4: detected capacity change from 0 to 40427 [ 26.492358][ T501] F2FS-fs (loop4): fault_injection options not supported [ 26.499253][ T501] F2FS-fs (loop4): fault_type options not supported [ 26.505720][ T501] F2FS-fs (loop4): Image doesn't support compression [ 26.512202][ T501] F2FS-fs (loop4): Image doesn't support compression [ 26.527202][ T28] audit: type=1400 audit(1734466573.803:173): avc: denied { create } for pid=514 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.548805][ T501] F2FS-fs (loop4): invalid crc value [ 26.551973][ T28] audit: type=1400 audit(1734466573.823:174): avc: denied { ioctl } for pid=514 comm="syz.3.76" path="socket:[16291]" dev="sockfs" ino=16291 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.579277][ T501] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.622229][ T501] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.722751][ T296] syz-executor: attempt to access beyond end of device [ 26.722751][ T296] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.728582][ T521] loop0: detected capacity change from 0 to 40427 [ 26.754083][ T28] audit: type=1400 audit(1734466574.023:175): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.762053][ T521] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 26.803939][ T28] audit: type=1400 audit(1734466574.023:176): avc: denied { open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.826130][ T521] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 26.866483][ T28] audit: type=1400 audit(1734466574.023:177): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.868179][ T532] syz.1.85[532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.911958][ T521] F2FS-fs (loop0): invalid crc value [ 26.928634][ T532] syz.1.85[532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.977427][ T521] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.997317][ T530] loop2: detected capacity change from 0 to 40427 [ 27.021224][ T530] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 27.029071][ T530] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 27.054533][ T530] F2FS-fs (loop2): invalid crc value [ 27.057634][ T544] loop4: detected capacity change from 0 to 512 [ 27.061400][ T521] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 27.073113][ T521] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.077859][ T530] F2FS-fs (loop2): Found nat_bits in checkpoint [ 27.098523][ T544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.107483][ T544] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.133780][ T521] syz.0.79: attempt to access beyond end of device [ 27.133780][ T521] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.145618][ T530] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 27.154084][ T530] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 27.166781][ T296] EXT4-fs (loop4): unmounting filesystem. [ 27.183825][ T28] audit: type=1400 audit(1734466574.453:178): avc: denied { read } for pid=554 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 27.215786][ T333] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 27.224924][ T333] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 27.325768][ T28] audit: type=1400 audit(1734466574.593:179): avc: denied { create } for pid=556 comm="syz.2.90" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.395187][ T521] F2FS-fs (loop0): Start checkpoint disabled! [ 27.401381][ T521] syz.0.79: attempt to access beyond end of device [ 27.401381][ T521] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 27.496420][ T563] loop0: detected capacity change from 0 to 512 [ 27.508435][ T563] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 27.517234][ T563] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.536583][ T293] EXT4-fs (loop0): unmounting filesystem. [ 27.757068][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.936841][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 27.942979][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.954302][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 27.977070][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 27.987244][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 27.997829][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 28.023686][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.052257][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.060452][ T6] usb 3-1: SerialNumber: syz [ 28.071494][ T561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 28.087932][ T6] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 28.105734][ T6] cdc_acm: probe of 3-1:1.0 failed with error -12 [ 28.163070][ T579] loop1: detected capacity change from 0 to 8192 [ 28.301668][ T338] usb 3-1: USB disconnect, device number 2 [ 28.441301][ T609] netlink: 277 bytes leftover after parsing attributes in process `syz.4.110'. [ 28.466969][ T611] loop4: detected capacity change from 0 to 256 [ 28.483423][ T611] FAT-fs (loop4): Directory bread(block 64) failed [ 28.495377][ T611] FAT-fs (loop4): Directory bread(block 65) failed [ 28.507093][ T611] FAT-fs (loop4): Directory bread(block 66) failed [ 28.523406][ T611] FAT-fs (loop4): Directory bread(block 67) failed [ 28.533914][ T611] FAT-fs (loop4): Directory bread(block 68) failed [ 28.541034][ T611] FAT-fs (loop4): Directory bread(block 69) failed [ 28.547814][ T611] FAT-fs (loop4): Directory bread(block 70) failed [ 28.554138][ T611] FAT-fs (loop4): Directory bread(block 71) failed [ 28.560925][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.574552][ T611] FAT-fs (loop4): Directory bread(block 72) failed [ 28.585975][ T611] FAT-fs (loop4): Directory bread(block 73) failed [ 28.622371][ T611] process 'syz.4.111' launched './file0' with NULL argv: empty string added [ 28.631313][ T611] syz.4.111: attempt to access beyond end of device [ 28.631313][ T611] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 28.645130][ T611] syz.4.111: attempt to access beyond end of device [ 28.645130][ T611] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 28.873312][ T647] loop2: detected capacity change from 0 to 1024 [ 28.893548][ T647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 28.910893][ T647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.928135][ T295] EXT4-fs (loop2): unmounting filesystem. [ 29.087856][ T670] loop1: detected capacity change from 0 to 1024 [ 29.094570][ T670] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.105755][ T670] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 29.115256][ T670] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 29.134067][ T291] EXT4-fs (loop1): unmounting filesystem. [ 29.486173][ T701] loop0: detected capacity change from 0 to 128 [ 29.492863][ T701] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 29.508948][ T701] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 29.780473][ T736] loop1: detected capacity change from 0 to 512 [ 29.790965][ T736] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 29.829687][ T736] EXT4-fs (loop1): external journal has bad superblock [ 29.961306][ T753] loop4: detected capacity change from 0 to 512 [ 29.986932][ T753] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.172: casefold flag without casefold feature [ 30.007129][ T753] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.172: couldn't read orphan inode 15 (err -117) [ 30.045583][ T763] loop0: detected capacity change from 0 to 512 [ 30.051890][ T753] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.083247][ T768] ------------[ cut here ]------------ [ 30.088632][ T768] kernel BUG at fs/buffer.c:2714! [ 30.100362][ T768] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 30.106252][ T768] CPU: 1 PID: 768 Comm: kmmpd-(null) Not tainted 6.1.118-syzkaller-00067-gd0e1b23b5d6a #0 [ 30.115971][ T768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 30.125863][ T768] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 30.131072][ T768] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d4 c3 e6 ff e9 b0 fe ff ff e8 8a 50 9f ff 0f 0b e8 83 50 9f ff <0f> 0b e8 7c 50 9f ff 0f 0b e8 75 50 9f ff 0f 0b e8 6e 50 9f ff 0f [ 30.150520][ T768] RSP: 0018:ffffc90000967c20 EFLAGS: 00010293 [ 30.156413][ T768] RAX: ffffffff81d6362d RBX: 0000000000000000 RCX: ffff8881138aa880 [ 30.164228][ T768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.172038][ T768] RBP: ffffc90000967c70 R08: ffffffff81d63200 R09: ffffed1021f9ab27 [ 30.179849][ T768] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 30.187661][ T768] R13: 1ffff11021f9ab26 R14: ffff88810fcd5930 R15: 0000000000003801 [ 30.195472][ T768] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 30.204237][ T768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.210661][ T768] CR2: 0000000020069000 CR3: 000000011091a000 CR4: 00000000003506a0 [ 30.218475][ T768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.226282][ T768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.234095][ T768] Call Trace: [ 30.237220][ T768] [ 30.240011][ T768] ? __die_body+0x62/0xb0 [ 30.244159][ T768] ? die+0x88/0xb0 [ 30.247740][ T768] ? do_trap+0x103/0x330 [ 30.251798][ T768] ? submit_bh_wbc+0x4cd/0x4f0 [ 30.256407][ T768] ? handle_invalid_op+0x95/0xc0 [ 30.261174][ T768] ? submit_bh_wbc+0x4cd/0x4f0 [ 30.265772][ T768] ? exc_invalid_op+0x32/0x50 [ 30.270284][ T768] ? asm_exc_invalid_op+0x1b/0x20 [ 30.275145][ T768] ? submit_bh_wbc+0xa0/0x4f0 [ 30.279660][ T768] ? submit_bh_wbc+0x4cd/0x4f0 [ 30.284263][ T768] ? submit_bh_wbc+0x4cd/0x4f0 [ 30.288862][ T768] ? trace_save_cmdline+0x1d1/0x510 [ 30.293893][ T768] submit_bh+0x1d/0x30 [ 30.297799][ T768] write_mmp_block_thawed+0x3a0/0x570 [ 30.303006][ T768] ? read_mmp_block+0x7d0/0x7d0 [ 30.307696][ T768] ? _raw_spin_unlock+0x4c/0x70 [ 30.312390][ T768] write_mmp_block+0x12b/0x2a0 [ 30.316980][ T768] kmmpd+0x40c/0xa10 [ 30.320714][ T768] ? write_mmp_block_thawed+0x570/0x570 [ 30.326093][ T768] ? __kthread_parkme+0x12d/0x180 [ 30.330958][ T768] kthread+0x26d/0x300 [ 30.334860][ T768] ? write_mmp_block_thawed+0x570/0x570 [ 30.340242][ T768] ? kthread_blkcg+0xd0/0xd0 [ 30.344667][ T768] ret_from_fork+0x1f/0x30 [ 30.348923][ T768] [ 30.351783][ T768] Modules linked in: [ 30.365865][ T768] ---[ end trace 0000000000000000 ]--- [ 30.373509][ T296] EXT4-fs (loop4): unmounting filesystem. [ 30.374302][ T768] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 30.384558][ T768] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 d4 c3 e6 ff e9 b0 fe ff ff e8 8a 50 9f ff 0f 0b e8 83 50 9f ff <0f> 0b e8 7c 50 9f ff 0f 0b e8 75 50 9f ff 0f 0b e8 6e 50 9f ff 0f [ 30.404452][ T768] RSP: 0018:ffffc90000967c20 EFLAGS: 00010293 [ 30.410521][ T768] RAX: ffffffff81d6362d RBX: 0000000000000000 RCX: ffff8881138aa880 [ 30.421256][ T768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.429273][ T768] RBP: ffffc90000967c70 R08: ffffffff81d63200 R09: ffffed1021f9ab27 [ 30.437228][ T768] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 30.445013][ T768] R13: 1ffff11021f9ab26 R14: ffff88810fcd5930 R15: 0000000000003801 [ 30.453085][ T768] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 30.462051][ T768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.468634][ T768] CR2: 000000110c30a622 CR3: 00000001104fe000 CR4: 00000000003506b0 [ 30.477576][ T771] SELinux: policydb version 0 does not match my version range 15-33 [ 30.485692][ T768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.498531][ T771] SELinux: failed to load policy [ 30.508142][ T768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.515940][ T768] Kernel panic - not syncing: Fatal exception [ 30.522111][ T768] Kernel Offset: disabled [ 30.526242][ T768] Rebooting in 86400 seconds..