last executing test programs: 3.587142212s ago: executing program 3 (id=95): r0 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x22, &(0x7f0000000000), 0x20000000) 3.548556298s ago: executing program 3 (id=98): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX=r2, @ANYRESHEX, @ANYRES8, @ANYRES8=0x0], 0x2, 0x1eb, &(0x7f0000000a40)="$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") 3.413713608s ago: executing program 3 (id=103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x10) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x20000}], 0x1, 0x0, 0x68b70100}, 0x700) 3.317175173s ago: executing program 1 (id=106): syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x10, 0xf989, "6080356e793ca9d55b8ef24e"}, @fastopen={0x22, 0x3, "e1"}, @generic={0x0, 0xe, "04f6fea52eb715ea7022d662"}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 3.306570735s ago: executing program 1 (id=107): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@generic="c0"]}, 0x18}}, 0x0) 3.284423838s ago: executing program 1 (id=108): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 3.265366951s ago: executing program 1 (id=109): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040435122050000000000010902"], 0x0) 2.493797279s ago: executing program 3 (id=120): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) accept(r3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x1a, {0x1a, 0x0, "b72916c49aab1bc8f6189969ae91a93796417d1faef28827"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40830}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x73990369) sendto$packet(r6, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb1000011", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000009c0)={0x44, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d7872ac05d8c"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 2.239372237s ago: executing program 4 (id=127): syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x10, 0xf989, "6080356e793ca9d55b8ef24e"}, @fastopen={0x22, 0x3, "e1"}, @generic={0x0, 0xe, "04f6fea52eb715ea7022d662"}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 2.135754623s ago: executing program 4 (id=129): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_adj\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$FUSE(r0, 0x0, 0x5e) 1.707644889s ago: executing program 2 (id=139): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x401870c8, 0x0) 1.683027833s ago: executing program 2 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000041, 0x0, 0x0, 0x0, &(0x7f0000000040)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x8208200) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) mmap(&(0x7f000041c000/0x4000)=nil, 0x4000, 0x7ffffe, 0x4002011, r4, 0x0) ftruncate(r4, 0x5) 1.272158835s ago: executing program 4 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="88010000", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000004000180540009800800020000000000080002000000000008000200000000000800010000000000080001000000000008000200000000000800010000001b0008000100000000000800020000000000080002000000000064000780080002000000000008000200000000000c0003000000000000000000080001000000000008000200fc"], 0x188}}, 0x0) 1.23952793s ago: executing program 4 (id=142): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/44, 0x2c) getdents(r1, 0x0, 0x58) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='fdinfo/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/123, 0x7b}], 0x1, 0x80020000, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000480)="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", 0x5d5}], 0x1}}], 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0xee00) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) 1.158368552s ago: executing program 0 (id=144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.147646884s ago: executing program 0 (id=145): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071115c000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 1.136549016s ago: executing program 0 (id=146): syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v3, 0x18, 0x0) fchmodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0) 744.714836ms ago: executing program 2 (id=147): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000480)=0x4000) fallocate(r0, 0x100000003, 0x4, 0x80fd0f) ftruncate(r1, 0x40) 695.225343ms ago: executing program 2 (id=148): mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/132, 0x84}}], 0x1, 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='tracefs\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x800000, &(0x7f0000000000)={[{@noblock_validity}, {@nodiscard}, {@noquota}, {@init_itable}, {@jqfmt_vfsv1}, {@dioread_nolock}, {@test_dummy_encryption}, {@delalloc}, {@nolazytime}]}, 0x1, 0x4f9, &(0x7f0000000180)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socket$igmp6(0xa, 0x3, 0x2) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r2, 0x0, 0x80000000) 533.219918ms ago: executing program 1 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000300000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000300008500000006000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) 392.900589ms ago: executing program 4 (id=150): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1081000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) r1 = open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)) 340.603117ms ago: executing program 2 (id=151): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) 290.677015ms ago: executing program 1 (id=152): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB=' \x006'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) 243.258643ms ago: executing program 0 (id=153): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000d80)={'trans=unix,', {[{@msize}]}}) readlinkat(r0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=""/29, 0x1d) 203.300418ms ago: executing program 0 (id=154): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000600)=ANY=[@ANYBLOB='nodots,nodots,check=relaxed,dots,nodots,allow_utime=00000000000000000000006,time_offset=0xfffffffffffffa93,nodots,showexec,dots,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c6e6f646f74732c6e66732c6e6f646f74732c6e6f646f74732c6e6f646f74732c646f74732c7379735f696d6d757461626c652c6e6f646f74732c646f74732c646f74732c646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303437612c646f6e745f686173682c736d61636b66736465663d3a370bcb886e6f1bf42c66c07b9f06643d3164303361650a382d356530622d623066342d303098302d38744aa0a964665b2c00"], 0x1, 0x1c7, &(0x7f0000000780)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x0, 0x0) 127.89138ms ago: executing program 2 (id=155): clock_adjtime(0x0, &(0x7f0000000200)={0x553, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}) 126.85532ms ago: executing program 4 (id=156): r0 = syz_io_uring_setup(0x2def, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x8fb64, 0x1, &(0x7f0000000040), 0x8) 51.228281ms ago: executing program 3 (id=158): r0 = getpid() process_vm_readv(r0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000600)=""/17, 0x11}], 0x2, &(0x7f0000000d00)=[{&(0x7f0000000680)=""/128, 0x80}], 0x1, 0x0) 12.952728ms ago: executing program 0 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x400454d8, 0x0) 0s ago: executing program 3 (id=160): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r3}, 0x10) write$cgroup_type(r1, &(0x7f0000000140), 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 22.191608][ T23] audit: type=1400 audit(1719358653.610:66): avc: denied { mounton } for pid=340 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.193074][ T340] cgroup1: Unknown subsys name 'net' [ 22.214445][ T23] audit: type=1400 audit(1719358653.610:67): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.220192][ T340] cgroup1: Unknown subsys name 'net_prio' [ 22.250409][ T340] cgroup1: Unknown subsys name 'devices' [ 22.256791][ T23] audit: type=1400 audit(1719358653.680:68): avc: denied { unmount } for pid=340 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.397531][ T340] cgroup1: Unknown subsys name 'hugetlb' [ 22.403802][ T340] cgroup1: Unknown subsys name 'rlimit' [ 22.596796][ T23] audit: type=1400 audit(1719358654.020:69): avc: denied { setattr } for pid=340 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.621932][ T23] audit: type=1400 audit(1719358654.020:70): avc: denied { mounton } for pid=340 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.631520][ T343] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.648223][ T23] audit: type=1400 audit(1719358654.020:71): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.685442][ T23] audit: type=1400 audit(1719358654.070:72): avc: denied { read } for pid=143 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 22.713337][ T23] audit: type=1400 audit(1719358654.080:73): avc: denied { relabelto } for pid=343 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.713622][ T340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.741528][ T23] audit: type=1400 audit(1719358654.080:74): avc: denied { write } for pid=343 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.741544][ T23] audit: type=1400 audit(1719358654.090:75): avc: denied { read } for pid=340 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.142800][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.150212][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.160383][ T351] device bridge_slave_0 entered promiscuous mode [ 23.168846][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.176166][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.187060][ T351] device bridge_slave_1 entered promiscuous mode [ 23.196025][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.203854][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.212688][ T353] device bridge_slave_0 entered promiscuous mode [ 23.243120][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.251094][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.260681][ T353] device bridge_slave_1 entered promiscuous mode [ 23.317546][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.325833][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.335254][ T354] device bridge_slave_0 entered promiscuous mode [ 23.362847][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.370390][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.379372][ T354] device bridge_slave_1 entered promiscuous mode [ 23.400168][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.407950][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.416869][ T350] device bridge_slave_0 entered promiscuous mode [ 23.436735][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.443854][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.452727][ T350] device bridge_slave_1 entered promiscuous mode [ 23.492297][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.501345][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.509788][ T352] device bridge_slave_0 entered promiscuous mode [ 23.521690][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.528969][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.538748][ T352] device bridge_slave_1 entered promiscuous mode [ 23.676123][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.685684][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.696674][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.706806][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.751426][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.760970][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.768359][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.777060][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.831619][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.840831][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.849522][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.858327][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.875295][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.887672][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.897460][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.905990][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.914310][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.922719][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.932578][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.942085][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.969949][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.980252][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.005742][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.014132][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.023881][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.033888][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.041736][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.049849][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.058415][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.066458][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.096457][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.106554][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.116818][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.125253][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.144950][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.154059][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.163339][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.171861][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.197365][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.206300][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.216226][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.225980][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.234729][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.244643][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.252965][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.262295][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.292463][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.303619][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.313585][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.321620][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.332622][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.344622][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.354367][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.363279][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.374084][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.383651][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.395156][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.403000][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.412001][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.422772][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.434430][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.444173][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.452835][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.463518][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.472999][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.481505][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.490542][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.500393][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.509545][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.518726][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.535084][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.543407][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.576545][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.586060][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.596566][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.610322][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.621419][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.630046][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.641318][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.650270][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.660657][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.673406][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.696894][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.706746][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.719814][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.730435][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.745077][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.754165][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.786879][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.796058][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.804385][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.815483][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.823736][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.833135][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.846353][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.858173][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.868518][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.878293][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.899817][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.909658][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.920800][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.935491][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.947060][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.978300][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.991327][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.002642][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.014248][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.025117][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.034010][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.049595][ T379] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 25.072188][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.095599][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.109923][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.120431][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.129660][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.139501][ T379] ====================================================== [ 25.139501][ T379] WARNING: the mand mount option is being deprecated and [ 25.139501][ T379] will be removed in v5.15! [ 25.139501][ T379] ====================================================== [ 25.191691][ T379] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 25.198175][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.203803][ T379] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 25.229098][ T379] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 25.265126][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.319555][ T385] syz.4.5 (385) used greatest stack depth: 22104 bytes left [ 25.340609][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.351145][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.370909][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.382114][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.391903][ T342] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.439477][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.469028][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.500225][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.532642][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.664935][ T342] usb 4-1: Using ep0 maxpacket: 16 [ 25.738130][ T410] syz.4.11[410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.738184][ T410] syz.4.11[410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.769373][ T406] EXT4-fs (sda1): re-mounted. Opts: (null) [ 25.809668][ T414] usb usb8: usbfs: process 414 (syz.1.2) did not claim interface 7 before use [ 25.883872][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.160287][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.170565][ T342] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.184361][ T342] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.193929][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.202995][ T342] usb 4-1: config 0 descriptor?? [ 26.257057][ T439] FAT-fs (loop2): Directory bread(block 64) failed [ 26.265065][ T439] FAT-fs (loop2): Directory bread(block 65) failed [ 26.273359][ T439] FAT-fs (loop2): Directory bread(block 66) failed [ 26.281425][ T439] FAT-fs (loop2): Directory bread(block 67) failed [ 26.288668][ T439] FAT-fs (loop2): Directory bread(block 68) failed [ 26.297384][ T439] FAT-fs (loop2): Directory bread(block 69) failed [ 26.305686][ T439] FAT-fs (loop2): Directory bread(block 70) failed [ 26.313423][ T439] FAT-fs (loop2): Directory bread(block 71) failed [ 26.323108][ T439] FAT-fs (loop2): Directory bread(block 72) failed [ 26.331394][ T439] FAT-fs (loop2): Directory bread(block 73) failed [ 26.736539][ T342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.745465][ T342] microsoft 0003:045E:07DA.0001: item 0 0 0 9 parsing failed [ 26.756478][ T342] microsoft 0003:045E:07DA.0001: parse failed [ 26.790397][ T342] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 26.808028][ T450] tipc: Started in network mode [ 26.814319][ T450] tipc: Own node identity , cluster identity 4711 [ 26.821381][ T450] tipc: Failed to set node id, please configure manually [ 26.830375][ T450] tipc: Enabling of bearer rejected, failed to enable media [ 26.862997][ T454] usb usb8: usbfs: process 454 (syz.1.25) did not claim interface 7 before use [ 26.937169][ T375] usb 4-1: USB disconnect, device number 2 [ 27.087865][ T463] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 27.105319][ T178] attempt to access beyond end of device [ 27.105319][ T178] loop2: rw=1, want=1832, limit=256 [ 27.138801][ T178] attempt to access beyond end of device [ 27.138801][ T178] loop2: rw=1, want=5420, limit=256 [ 27.219614][ T463] syz.0.30 (463) used greatest stack depth: 21624 bytes left [ 27.299036][ T23] kauditd_printk_skb: 86 callbacks suppressed [ 27.299044][ T23] audit: type=1400 audit(1719358658.720:162): avc: denied { create } for pid=475 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.301011][ T467] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 27.310231][ T23] audit: type=1400 audit(1719358658.730:163): avc: denied { bind } for pid=475 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.366147][ T23] audit: type=1400 audit(1719358658.730:164): avc: denied { mount } for pid=475 comm="syz.0.33" name="/" dev="configfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 27.395956][ T23] audit: type=1400 audit(1719358658.730:165): avc: denied { read } for pid=475 comm="syz.0.33" name="/" dev="configfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.426237][ T470] EXT4-fs (loop1): Ignoring removed nobh option [ 27.435825][ T23] audit: type=1400 audit(1719358658.730:166): avc: denied { open } for pid=475 comm="syz.0.33" path="/root/syzkaller.WY6nkM/5/file0" dev="configfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 27.462927][ T470] EXT4-fs (loop1): Ignoring removed orlov option [ 27.470214][ T23] audit: type=1400 audit(1719358658.730:167): avc: denied { listen } for pid=475 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.498738][ T485] usb usb8: usbfs: process 485 (syz.3.36) did not claim interface 7 before use [ 27.504701][ T23] audit: type=1400 audit(1719358658.730:168): avc: denied { connect } for pid=475 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.532984][ T23] audit: type=1400 audit(1719358658.730:169): avc: denied { read } for pid=475 comm="syz.0.33" name="kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.560936][ T23] audit: type=1400 audit(1719358658.730:170): avc: denied { open } for pid=475 comm="syz.0.33" path="/dev/kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.589303][ T23] audit: type=1326 audit(1719358658.750:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=475 comm="syz.0.33" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6120539ae9 code=0x0 [ 27.619610][ T470] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,abort,block_validity,init_itable=0x0000000000000006,block_validity,max_dir_size_kb=0x00000000000007b1,nobh,block_validity,orlov,user_xattr,quota,,errors=continue [ 27.710558][ T498] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.716356][ T495] tipc: Started in network mode [ 27.742745][ T495] tipc: Own node identity , cluster identity 4711 [ 27.753517][ T495] tipc: Failed to set node id, please configure manually [ 27.777662][ T495] tipc: Enabling of bearer rejected, failed to enable media [ 27.899793][ T503] FAT-fs (loop1): Directory bread(block 64) failed [ 27.918068][ T503] FAT-fs (loop1): Directory bread(block 65) failed [ 27.925398][ T515] usb usb8: usbfs: process 515 (syz.4.47) did not claim interface 7 before use [ 27.936234][ T503] FAT-fs (loop1): Directory bread(block 66) failed [ 27.943368][ T503] FAT-fs (loop1): Directory bread(block 67) failed [ 27.953114][ T503] FAT-fs (loop1): Directory bread(block 68) failed [ 27.960489][ T503] FAT-fs (loop1): Directory bread(block 69) failed [ 27.967477][ T503] FAT-fs (loop1): Directory bread(block 70) failed [ 27.974932][ T503] FAT-fs (loop1): Directory bread(block 71) failed [ 27.983497][ T503] FAT-fs (loop1): Directory bread(block 72) failed [ 27.991385][ T503] FAT-fs (loop1): Directory bread(block 73) failed [ 28.279731][ T355] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.292984][ T531] tipc: Started in network mode [ 28.310052][ T531] tipc: Own node identity , cluster identity 4711 [ 28.320707][ T531] tipc: Failed to set node id, please configure manually [ 28.328182][ T531] tipc: Enabling of bearer rejected, failed to enable media [ 28.360440][ T529] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 28.396280][ T529] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 28.455659][ T542] netlink: 'syz.0.57': attribute type 3 has an invalid length. [ 28.572248][ T568] input: syz0 as /devices/virtual/input/input4 [ 28.675056][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.688852][ T387] attempt to access beyond end of device [ 28.688852][ T387] loop1: rw=1, want=1832, limit=256 [ 28.710253][ T355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.726677][ T355] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 28.738785][ T355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.745999][ T387] attempt to access beyond end of device [ 28.745999][ T387] loop1: rw=1, want=5420, limit=256 [ 28.761332][ T355] usb 5-1: config 0 descriptor?? [ 28.830759][ T572] FAT-fs (loop2): Directory bread(block 64) failed [ 28.864057][ T572] FAT-fs (loop2): Directory bread(block 65) failed [ 28.881041][ T572] FAT-fs (loop2): Directory bread(block 66) failed [ 28.908778][ T572] FAT-fs (loop2): Directory bread(block 67) failed [ 28.936939][ T572] FAT-fs (loop2): Directory bread(block 68) failed [ 28.971560][ T581] syz.0.63 (581) used greatest stack depth: 21336 bytes left [ 28.982163][ T572] FAT-fs (loop2): Directory bread(block 69) failed [ 28.991058][ T572] FAT-fs (loop2): Directory bread(block 70) failed [ 28.999318][ T572] FAT-fs (loop2): Directory bread(block 71) failed [ 29.012574][ T572] FAT-fs (loop2): Directory bread(block 72) failed [ 29.020115][ T572] FAT-fs (loop2): Directory bread(block 73) failed [ 29.051686][ T588] tipc: Started in network mode [ 29.054501][ T585] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 29.056663][ T588] tipc: Own node identity , cluster identity 4711 [ 29.079786][ T588] tipc: Failed to set node id, please configure manually [ 29.090875][ T588] tipc: Enabling of bearer rejected, failed to enable media [ 29.122297][ T593] netlink: 'syz.3.68': attribute type 3 has an invalid length. [ 29.205307][ T597] overlayfs: failed to resolve './file0': -2 [ 29.248162][ T355] logitech-hidpp-device 0003:046D:C086.0002: ignoring exceeding usage max [ 29.268685][ T355] logitech-hidpp-device 0003:046D:C086.0002: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 29.410271][ T597] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 29.445623][ T597] EXT4-fs (loop2): Test dummy encryption mode enabled [ 29.449556][ T605] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.476801][ T608] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.546674][ T608] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 29.570634][ T597] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 29.635282][ T597] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 29.705460][ T597] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 29.806328][ T597] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 29.845302][ T624] EXT4-fs (loop3): Ignoring removed nobh option [ 29.853220][ T624] EXT4-fs (loop3): Ignoring removed orlov option [ 29.863717][ T597] EXT4-fs error (device loop2): ext4_evict_inode:312: comm syz.2.69: couldn't truncate inode 16 (err -27) [ 29.880065][ T624] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,abort,block_validity,init_itable=0x0000000000000006,block_validity,max_dir_size_kb=0x00000000000007b1,nobh,block_validity,orlov,user_xattr,quota,,errors=continue [ 29.909419][ T597] EXT4-fs (loop2): 1 orphan inode deleted [ 29.938814][ T597] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nodiscard,noquota,init_itable,jqfmt=vfsv1,dioread_nolock,test_dummy_encryption,delalloc,nolazytime,,errors=continue [ 30.169648][ T627] overlayfs: filesystem on './file2' not supported [ 30.211563][ T597] ext4 filesystem being mounted at /root/syzkaller.fxw2uB/9/file1 supports timestamps until 2038 (0x7fffffff) [ 30.345808][ T635] tipc: Started in network mode [ 30.366510][ T635] tipc: Own node identity , cluster identity 4711 [ 30.384348][ T635] tipc: Failed to set node id, please configure manually [ 30.441848][ T373] usb 5-1: USB disconnect, device number 2 [ 30.455787][ T635] tipc: Enabling of bearer rejected, failed to enable media [ 30.466135][ T637] netlink: 'syz.3.81': attribute type 3 has an invalid length. [ 30.560461][ T354] syz-executor (354) used greatest stack depth: 20760 bytes left [ 30.676652][ T665] netlink: 'syz.0.96': attribute type 3 has an invalid length. [ 30.719403][ T667] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 30.781834][ T670] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.790144][ T670] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.799002][ T670] device bridge_slave_0 entered promiscuous mode [ 30.811525][ T670] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.820430][ T670] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.829171][ T670] device bridge_slave_1 entered promiscuous mode [ 30.905606][ T696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 30.941417][ T670] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.950306][ T670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.960664][ T670] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.968846][ T670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.996182][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.005928][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.016951][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.029298][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.040486][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.048526][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.072990][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.087283][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.096117][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.107136][ T465] device bridge_slave_1 left promiscuous mode [ 31.114675][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.124007][ T465] device bridge_slave_0 left promiscuous mode [ 31.131672][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.199456][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.215247][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.233998][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.256474][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.270239][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.288528][ T715] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 31.288528][ T715] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 31.288528][ T715] [ 31.294454][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.324064][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.334470][ T393] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.345421][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.346966][ T715] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noacl,usrquota,noauto_da_alloc,,errors=continue [ 31.395846][ T353] EXT4-fs error (device loop4): ext4_empty_dir:2990: inode #11: comm syz-executor: invalid size [ 31.410563][ T353] EXT4-fs warning (device loop4): ext4_rmdir:3274: inode #11: comm syz-executor: empty directory 'file1' has too many links (0) [ 31.493190][ T726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 31.653164][ T730] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 31.725217][ T393] usb 2-1: config 0 has no interfaces? [ 31.732024][ T393] usb 2-1: New USB device found, idVendor=5143, idProduct=0522, bcdDevice= 0.00 [ 31.742975][ T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.758844][ T393] usb 2-1: config 0 descriptor?? [ 31.767864][ T733] EXT4-fs (loop0): Ignoring removed nobh option [ 31.784229][ T733] EXT4-fs (loop0): Ignoring removed orlov option [ 31.835523][ T733] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,abort,block_validity,init_itable=0x0000000000000006,block_validity,max_dir_size_kb=0x00000000000007b1,nobh,block_validity,orlov,user_xattr,quota,,errors=continue [ 32.002767][ T751] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 32.002767][ T751] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 32.002767][ T751] [ 32.026331][ T751] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noacl,usrquota,noauto_da_alloc,,errors=continue [ 32.069000][ T350] EXT4-fs error (device loop0): ext4_empty_dir:2990: inode #11: comm syz-executor: invalid size [ 32.083064][ T350] EXT4-fs warning (device loop0): ext4_rmdir:3274: inode #11: comm syz-executor: empty directory 'file1' has too many links (0) [ 32.125280][ T355] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.174772][ T760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 32.353055][ T23] kauditd_printk_skb: 164 callbacks suppressed [ 32.353064][ T23] audit: type=1400 audit(1719358663.770:336): avc: denied { read } for pid=777 comm="syz.2.137" name="usbmon0" dev="devtmpfs" ino=9225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.386591][ T23] audit: type=1400 audit(1719358663.770:337): avc: denied { open } for pid=777 comm="syz.2.137" path="/dev/usbmon0" dev="devtmpfs" ino=9225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.414309][ T23] audit: type=1400 audit(1719358663.780:338): avc: denied { ioctl } for pid=777 comm="syz.2.137" path="/dev/usbmon0" dev="devtmpfs" ino=9225 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.470747][ T23] audit: type=1400 audit(1719358663.890:339): avc: denied { create } for pid=782 comm="syz.2.139" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 32.495472][ T23] audit: type=1400 audit(1719358663.890:340): avc: denied { write } for pid=782 comm="syz.2.139" name="file0" dev="sda1" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 32.521191][ T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.536790][ T355] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.549006][ T355] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 32.559513][ T23] audit: type=1400 audit(1719358663.890:341): avc: denied { open } for pid=782 comm="syz.2.139" path="/root/syzkaller.fA5XZ0/9/file0" dev="sda1" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 32.586478][ T23] audit: type=1400 audit(1719358663.890:342): avc: denied { ioctl } for pid=782 comm="syz.2.139" path="/root/syzkaller.fA5XZ0/9/file0" dev="sda1" ino=1971 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 32.599366][ T355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.614884][ T23] audit: type=1400 audit(1719358663.920:343): avc: denied { unlink } for pid=670 comm="syz-executor" name="file0" dev="sda1" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 32.627274][ T355] usb 4-1: config 0 descriptor?? [ 32.834428][ T23] audit: type=1400 audit(1719358664.190:344): avc: denied { mount } for pid=785 comm="syz.2.140" name="/" dev="tmpfs" ino=14732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.862325][ T23] audit: type=1400 audit(1719358664.210:345): avc: denied { execute } for pid=785 comm="syz.2.140" path="/root/syzkaller.fA5XZ0/10/file0/bus" dev="tmpfs" ino=14733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.939110][ T790] netlink: 184 bytes leftover after parsing attributes in process `syz.4.141'. [ 32.949562][ T790] netlink: 52 bytes leftover after parsing attributes in process `syz.4.141'. [ 33.009490][ T107] usb 2-1: USB disconnect, device number 2 [ 33.128439][ T355] logitech-hidpp-device 0003:046D:C086.0003: ignoring exceeding usage max [ 33.146905][ T355] logitech-hidpp-device 0003:046D:C086.0003: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 33.472348][ T804] overlayfs: filesystem on './file2' not supported [ 33.522374][ T809] overlayfs: failed to resolve './file0': -2 [ 33.543152][ T375] usb 4-1: USB disconnect, device number 3 [ 33.610223][ T809] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 33.623181][ T809] EXT4-fs (loop2): Test dummy encryption mode enabled [ 33.638007][ T809] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 33.652440][ T809] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 33.674679][ T809] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 33.685922][ T815] [ 33.690836][ T815] ********************************************************** [ 33.690858][ T809] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 33.699383][ T815] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 33.709093][ T809] EXT4-fs error (device loop2): ext4_evict_inode:312: comm syz.2.148: couldn't truncate inode 16 (err -27) [ 33.718172][ T815] ** ** [ 33.733828][ T809] EXT4-fs (loop2): 1 orphan inode deleted [ 33.742903][ T815] ** trace_printk() being used. Allocating extra memory. ** [ 33.748825][ T809] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,nodiscard,noquota,init_itable,jqfmt=vfsv1,dioread_nolock,test_dummy_encryption,delalloc,nolazytime,,errors=continue [ 33.756699][ T815] ** ** [ 33.777846][ T809] ext4 filesystem being mounted at /root/syzkaller.fA5XZ0/12/file1 supports timestamps until 2038 (0x7fffffff) [ 33.795489][ T815] ** This means that this is a DEBUG kernel and it is ** [ 33.809198][ T815] ** unsafe for production use. ** [ 33.818846][ T815] ** ** [ 33.831828][ T815] ** If you see this message and you are not debugging ** [ 33.841988][ T815] ** the kernel, report this immediately to your vendor! ** [ 33.851145][ T815] ** ** [ 33.862397][ T815] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 33.870326][ T815] ********************************************************** [ 33.936267][ T818] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 34.078350][ T353] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 34.111022][ T353] EXT4-fs error (device loop4): __ext4_iget:5217: inode #13: block 127754: comm syz-executor: invalid block [ 34.124760][ T353] EXT4-fs error (device loop4): __ext4_iget:5217: inode #13: block 127754: comm syz-executor: invalid block [ 34.204801][ T820] ------------[ cut here ]------------ [ 34.204867][ T830] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.210542][ T820] kernel BUG at fs/buffer.c:3027! [ 34.211366][ T820] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 34.219013][ T830] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.224818][ T820] CPU: 0 PID: 820 Comm: kmmpd-loop4 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 34.233722][ T830] device bridge_slave_0 entered promiscuous mode [ 34.240710][ T820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 34.240742][ T820] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 34.240750][ T820] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 f6 a7 ba ff 0f 0b e8 ef a7 ba ff <0f> 0b e8 e8 a7 ba ff 0f 0b e8 e1 a7 ba ff 0f 0b e8 da a7 ba ff 0f [ 34.240763][ T820] RSP: 0018:ffff8881ef12fbf0 EFLAGS: 00010293 [ 34.254148][ T830] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.261343][ T820] RAX: ffffffff81a99431 RBX: 0000000000000000 RCX: ffff8881da10de80 [ 34.261347][ T820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.261352][ T820] RBP: 0000000000003800 R08: ffffffff81a98ca4 R09: ffffed103d1ff3e4 [ 34.261357][ T820] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 34.261361][ T820] R13: ffff8881e8ff9f18 R14: 0000000000000001 R15: 0000000000000000 [ 34.261367][ T820] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.261381][ T820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.261395][ T820] CR2: 00005555575654a8 CR3: 00000001dd1ac000 CR4: 00000000003406b0 [ 34.273803][ T830] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.279916][ T820] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.279921][ T820] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.279924][ T820] Call Trace: [ 34.279942][ T820] ? __die+0xb4/0x100 [ 34.279958][ T820] ? die+0x26/0x50 [ 34.302821][ T830] device bridge_slave_1 entered promiscuous mode [ 34.309636][ T820] ? do_trap+0x1e7/0x340 [ 34.309647][ T820] ? submit_bh_wbc+0x831/0x850 [ 34.309662][ T820] ? submit_bh_wbc+0x831/0x850 [ 34.376309][ T830] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.379258][ T820] ? do_invalid_op+0xfb/0x110 [ 34.379268][ T820] ? submit_bh_wbc+0x831/0x850 [ 34.379285][ T820] ? invalid_op+0x1e/0x30 [ 34.386618][ T830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.396485][ T820] ? submit_bh_wbc+0xa4/0x850 [ 34.396493][ T820] ? submit_bh_wbc+0x831/0x850 [ 34.396500][ T820] ? submit_bh_wbc+0x831/0x850 [ 34.396509][ T820] ? debug_smp_processor_id+0x20/0x20 [ 34.396526][ T820] ? bit_waitqueue+0x30/0x30 [ 34.405149][ T830] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.413817][ T820] submit_bh+0x21/0x30 [ 34.423894][ T830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.427683][ T820] write_mmp_block+0x3ff/0x5b0 [ 34.427698][ T820] ? console_conditional_schedule+0x10/0x10 [ 34.456526][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.461643][ T820] ? check_preemption_disabled+0x9f/0x320 [ 34.597573][ T820] ? read_mmp_block+0x8a0/0x8a0 [ 34.603272][ T820] kmmpd+0x7de/0xa10 [ 34.608127][ T820] ? write_mmp_block+0x5b0/0x5b0 [ 34.614560][ T820] ? __wake_up_locked+0xb7/0x110 [ 34.619877][ T820] ? __kthread_parkme+0xb0/0x1b0 [ 34.625135][ T820] kthread+0x2da/0x360 [ 34.631835][ T820] ? write_mmp_block+0x5b0/0x5b0 [ 34.640120][ T820] ? kthread_blkcg+0xd0/0xd0 [ 34.646324][ T820] ret_from_fork+0x1f/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 34.651492][ T820] Modules linked in: [ 34.658077][ T355] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.667177][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.675019][ T820] ---[ end trace 3084ba4270dbc49a ]--- [ 34.683370][ T820] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 34.690244][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.691226][ T820] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7