last executing test programs: 4.742248904s ago: executing program 1 (id=2562): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresuid(0xee00, 0x0, 0xffffffffffffffff) stat(&(0x7f00000004c0)='./file0\x00', 0x0) 4.148311905s ago: executing program 1 (id=2567): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000e5000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000001400008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) rt_sigsuspend(0x0, 0x0) 3.687966815s ago: executing program 0 (id=2570): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) write$FUSE_DIRENTPLUS(r5, 0x0, 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3.637259563s ago: executing program 2 (id=2571): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x28, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}}, 0x0) 3.533803649s ago: executing program 1 (id=2572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)='\x00!', 0x2}], 0x1, 0x0, 0x0) 3.384933952s ago: executing program 4 (id=2573): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r1}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000000), 0xffe000) 3.056518322s ago: executing program 0 (id=2574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 3.055802942s ago: executing program 3 (id=2575): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0xfa) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="ec", 0x1}], 0x1}}], 0x2, 0x0) 2.962723756s ago: executing program 1 (id=2576): r0 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) fcntl$addseals(r0, 0x409, 0x10) fcntl$setstatus(r0, 0x4, 0x42000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 2.881594939s ago: executing program 4 (id=2577): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x8) 2.785914183s ago: executing program 2 (id=2578): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) stat(0x0, 0x0) 2.580827095s ago: executing program 3 (id=2579): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x200000a, &(0x7f0000000140)={[{@utf8}, {@uni_xlate}, {@shortname_lower}, {@numtail}, {@shortname_win95}, {@rodir}, {@fat=@check_strict}, {@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}]}, 0x1, 0x256, &(0x7f0000000c00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'batadv_slave_1\x00', 0x2}, 0x18) 2.472700781s ago: executing program 1 (id=2580): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x1670e68) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x25, 0xe7030003, 0x2, 0x8, 0x0, r1, 0x0, 0x0, 0x1}]) 2.450513085s ago: executing program 0 (id=2581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) 2.41227485s ago: executing program 4 (id=2582): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x6, 0x0, 0x6, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x21) 2.312702006s ago: executing program 2 (id=2583): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_QUOTAON(0x0, &(0x7f0000000040)=@filename='./file0\x00', 0x0, 0x0) 2.111407797s ago: executing program 3 (id=2584): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {0x3, 0x3, 0x3, 0xa, 0x9}, {}, {}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.89148385s ago: executing program 4 (id=2585): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 1.800481684s ago: executing program 0 (id=2586): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x15) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 1.719062966s ago: executing program 2 (id=2587): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.516949927s ago: executing program 3 (id=2588): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x18}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r5, @ANYBLOB, @ANYRES32], 0x64}}, 0x0) 1.417744992s ago: executing program 4 (id=2589): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000480)='./bus\x00', 0xe0101, 0x0) pwrite64(r1, &(0x7f0000000180)="be", 0x1, 0x4010000bffd) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x64c42, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) 1.343956494s ago: executing program 1 (id=2590): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1208, &(0x7f0000001540)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) unshare(0x4000400) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r4) r5 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r6, 0x7ffffb, 0x0) write$binfmt_elf64(r6, &(0x7f0000000140)=ANY=[], 0xfd14) sendfile(r5, r5, 0x0, 0x100000000) sendfile(r1, r1, 0x0, 0x80000007) prlimit64(0x0, 0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x7c}}, 0x0}, 0x90) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000440)=""/217, 0xd9}], 0x4) r7 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) 1.296946741s ago: executing program 0 (id=2591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=6']) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000240), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) 1.219283643s ago: executing program 2 (id=2592): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1081000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) r1 = open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)) 968.870091ms ago: executing program 3 (id=2593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendto$inet(r3, 0x0, 0x0, 0x20000010, &(0x7f0000000540)={0x2, 0x0, @empty}, 0x10) 775.682131ms ago: executing program 4 (id=2594): close(0xffffffffffffffff) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) r0 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r0, &(0x7f0000000040)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x1, 0x101}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000040)) socket(0x0, 0x0, 0x0) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)=@x25, 0x80) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) 650.66247ms ago: executing program 0 (id=2595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setfsuid(0x0) 273.520668ms ago: executing program 2 (id=2596): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000002c0)=@ethtool_stats}) 0s ago: executing program 3 (id=2597): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x43400) kernel console output (not intermixed with test programs): iled to create directory ./bus/work (errno: 126); mounting read-only [ 361.457947][ T374] usb 4-1: device descriptor read/8, error -61 [ 361.774994][ T6707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 361.785310][ T6716] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 361.790542][ T435] hid (null): invalid report_size 1684763247 [ 361.793152][ T6716] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 361.806849][ T435] hid-generic 0003:0158:0100.00AA: unknown main item tag 0x1 [ 361.811322][ T6716] F2FS-fs (loop4): Found nat_bits in checkpoint [ 361.814267][ T435] hid-generic 0003:0158:0100.00AA: unexpected long global item [ 361.828118][ T374] usb 4-1: device descriptor read/8, error -61 [ 361.834644][ T435] hid-generic: probe of 0003:0158:0100.00AA failed with error -22 [ 361.857553][ T6716] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 361.870982][ T6716] F2FS-fs (loop4): recover fsync data on readonly fs [ 361.877807][ T6716] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 361.884977][ T6716] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 361.996290][ T435] usb 1-1: USB disconnect, device number 88 [ 362.364164][ T6726] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 362.381126][ T6726] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 362.393423][ T6726] F2FS-fs (loop3): invalid crc value [ 362.407298][ T6726] F2FS-fs (loop3): Found nat_bits in checkpoint [ 362.518221][ T6726] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 362.529510][ T6726] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 362.656734][ T6726] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1638'. [ 362.689363][ T7] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 362.698715][ T7] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 362.728144][ T5032] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 363.077911][ T5032] usb 2-1: Using ep0 maxpacket: 16 [ 363.268185][ T23] audit: type=1400 audit(1719576071.949:336): avc: denied { remount } for pid=6748 comm="syz.2.1644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 363.841644][ T6759] binder_alloc: 6758: pid 6758 spamming oneway? 1 buffers allocated for a total size of 4200 [ 363.878221][ T13] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 363.907957][ T5032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.918938][ T5032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.928997][ T5032] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.941726][ T5032] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.950963][ T5032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.951681][ T23] audit: type=1400 audit(1719576072.649:337): avc: denied { getopt } for pid=6760 comm="syz.4.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 363.978303][ T5032] usb 2-1: config 0 descriptor?? [ 364.137899][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 364.157933][ T372] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 364.247910][ T374] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 364.255327][ T74] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 364.257949][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 364.274110][ T13] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 364.283296][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.292349][ T13] usb 1-1: config 0 descriptor?? [ 364.308083][ T5032] usbhid 2-1:0.0: can't add hid device: -71 [ 364.313886][ T5032] usbhid: probe of 2-1:0.0 failed with error -71 [ 364.323936][ T5032] usb 2-1: USB disconnect, device number 93 [ 364.397899][ T372] usb 3-1: Using ep0 maxpacket: 16 [ 364.497947][ T74] usb 5-1: Using ep0 maxpacket: 32 [ 364.517989][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 364.529333][ T372] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 364.538432][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.541398][ T6747] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 364.550779][ T372] usb 3-1: config 0 descriptor?? [ 364.555681][ T6747] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 364.568828][ T6747] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 364.638033][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.648718][ T374] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.658646][ T374] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 364.667428][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.675283][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.684821][ T74] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 364.694119][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.702170][ T374] usb 4-1: config 0 descriptor?? [ 364.707566][ T74] usb 5-1: config 0 descriptor?? [ 364.748564][ T374] rndis_host: probe of 4-1:0.0 failed with error -22 [ 364.755491][ T74] hub 5-1:0.0: USB hub found [ 364.760197][ T374] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 364.768320][ T374] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 364.774591][ T374] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 364.800727][ T6763] overlayfs: missing 'lowerdir' [ 364.848525][ T6747] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 364.870019][ T13] hid (null): invalid report_size 1684763247 [ 364.878073][ T13] hid-generic 0003:0158:0100.00AB: unknown main item tag 0x1 [ 364.885270][ T13] hid-generic 0003:0158:0100.00AB: unexpected long global item [ 364.892913][ T13] hid-generic: probe of 0003:0158:0100.00AB failed with error -22 [ 364.950106][ T13] usb 4-1: USB disconnect, device number 84 [ 364.952028][ T23] audit: type=1400 audit(1719576073.639:338): avc: denied { map } for pid=6760 comm="syz.4.1647" path="socket:[48806]" dev="sockfs" ino=48806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 364.979109][ T23] audit: type=1400 audit(1719576073.649:339): avc: denied { read } for pid=6760 comm="syz.4.1647" path="socket:[48806]" dev="sockfs" ino=48806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 365.072316][ T5032] usb 1-1: USB disconnect, device number 89 [ 365.078374][ T6763] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 365.110369][ T372] hid (null): invalid report_size 1684763247 [ 365.118526][ T372] hid-generic 0003:0158:0100.00AC: unknown main item tag 0x1 [ 365.125758][ T372] hid-generic 0003:0158:0100.00AC: unexpected long global item [ 365.133515][ T372] hid-generic: probe of 0003:0158:0100.00AC failed with error -22 [ 365.267974][ T74] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 365.312021][ T5032] usb 3-1: USB disconnect, device number 89 [ 365.388000][ T74] usbhid 5-1:0.0: can't add hid device: -71 [ 365.393915][ T74] usbhid: probe of 5-1:0.0 failed with error -71 [ 365.428290][ T74] usb 5-1: USB disconnect, device number 80 [ 365.671062][ T6779] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,noblock_validity,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue [ 365.723847][ T6779] 9pnet: Insufficient options for proto=fd [ 365.729666][ T372] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 365.802833][ T6778] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 365.810824][ T6778] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 365.873106][ T6778] F2FS-fs (loop0): Found nat_bits in checkpoint [ 365.913195][ T6778] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 365.926369][ T6778] F2FS-fs (loop0): recover fsync data on readonly fs [ 365.933547][ T6778] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 365.942312][ T6778] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 366.216356][ T372] usb 4-1: Using ep0 maxpacket: 16 [ 366.365749][ T6789] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 366.373924][ T6789] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 366.382424][ T372] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.400767][ T6789] F2FS-fs (loop2): invalid crc value [ 366.460365][ T372] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 366.463796][ T6789] F2FS-fs (loop2): Found nat_bits in checkpoint [ 366.483584][ T372] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 366.512062][ T6789] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 366.532786][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.533634][ T6789] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 366.549124][ T372] usb 4-1: config 0 descriptor?? [ 366.591113][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1653'. [ 366.603964][ T7] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 366.612925][ T7] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 366.789243][ T372] usb 4-1: USB disconnect, device number 85 [ 366.828068][ T435] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 367.137986][ T5032] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 367.217941][ T435] usb 2-1: Using ep0 maxpacket: 16 [ 367.338341][ T435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 367.349469][ T435] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 367.358395][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.366852][ T435] usb 2-1: config 0 descriptor?? [ 367.457989][ T5032] usb 1-1: Using ep0 maxpacket: 16 [ 367.611843][ T6800] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 367.620981][ T6800] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 367.622314][ T5032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 367.632614][ T6800] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 367.641341][ T5032] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 367.659154][ T5032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.671313][ T5032] usb 1-1: config 0 descriptor?? [ 367.688013][ T372] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 367.913448][ T6804] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 367.918413][ T6800] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 367.922656][ T6804] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 367.938894][ T372] usb 4-1: Using ep0 maxpacket: 16 [ 367.944030][ T6804] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 367.980717][ T435] hid (null): invalid report_size 1684763247 [ 367.989101][ T435] hid-generic 0003:0158:0100.00AD: unknown main item tag 0x1 [ 367.998417][ T435] hid-generic 0003:0158:0100.00AD: unexpected long global item [ 368.006624][ T435] hid-generic: probe of 0003:0158:0100.00AD failed with error -22 [ 368.058042][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.068813][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.078572][ T372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 368.091630][ T372] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 368.100574][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.109040][ T372] usb 4-1: config 0 descriptor?? [ 368.170671][ T435] usb 2-1: USB disconnect, device number 94 [ 368.228414][ T6804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 368.249105][ T5032] hid (null): invalid report_size 1684763247 [ 368.255999][ T5032] hid-generic 0003:0158:0100.00AE: unknown main item tag 0x1 [ 368.263525][ T5032] hid-generic 0003:0158:0100.00AE: unexpected long global item [ 368.271338][ T5032] hid-generic: probe of 0003:0158:0100.00AE failed with error -22 [ 368.448294][ T372] usbhid 4-1:0.0: can't add hid device: -71 [ 368.454153][ T372] usbhid: probe of 4-1:0.0 failed with error -71 [ 368.455527][ T435] usb 1-1: USB disconnect, device number 90 [ 368.461287][ T372] usb 4-1: USB disconnect, device number 86 [ 368.707939][ T5032] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 368.947956][ T5032] usb 5-1: Using ep0 maxpacket: 16 [ 368.967913][ T435] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 369.052056][ T6836] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 369.064316][ T6836] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 369.078074][ T5032] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 369.095524][ T6836] F2FS-fs (loop3): Found nat_bits in checkpoint [ 369.097104][ T5032] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 369.132623][ T5032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.156989][ T5032] usb 5-1: config 0 descriptor?? [ 369.164974][ T6836] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 369.177914][ T6836] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 369.224818][ T23] audit: type=1400 audit(1719576077.909:340): avc: denied { getopt } for pid=6835 comm="syz.3.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 369.262763][ T3140] attempt to access beyond end of device [ 369.262763][ T3140] loop3: rw=2049, want=45112, limit=40427 [ 369.267910][ T23] audit: type=1400 audit(1719576077.939:341): avc: denied { write } for pid=6835 comm="syz.3.1665" name="ns" dev="proc" ino=49063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 369.337878][ T23] audit: type=1400 audit(1719576077.939:342): avc: denied { add_name } for pid=6835 comm="syz.3.1665" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 369.357940][ T435] usb 2-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 369.387910][ T435] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 369.396753][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.417885][ T23] audit: type=1400 audit(1719576077.939:343): avc: denied { create } for pid=6835 comm="syz.3.1665" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 369.420844][ T6830] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 369.447209][ T435] usb 2-1: config 0 descriptor?? [ 369.467966][ T23] audit: type=1400 audit(1719576077.939:344): avc: denied { associate } for pid=6835 comm="syz.3.1665" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 369.489378][ T435] rndis_host: probe of 2-1:0.0 failed with error -22 [ 369.507980][ T435] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 369.515607][ T435] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 369.527915][ T435] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 369.536105][ T6830] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 369.542443][ T6840] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 369.558940][ T6840] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 369.571869][ T6840] F2FS-fs (loop0): Found nat_bits in checkpoint [ 369.599973][ T6830] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 369.603332][ T6840] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 369.622275][ T6840] F2FS-fs (loop0): recover fsync data on readonly fs [ 369.629193][ T6840] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 369.636188][ T6840] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 369.695485][ T372] usb 2-1: USB disconnect, device number 95 [ 369.825131][ T6830] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 370.043439][ T5032] hid (null): invalid report_size 1684763247 [ 370.051162][ T5032] hid-generic 0003:0158:0100.00AF: unknown main item tag 0x1 [ 370.058566][ T5032] hid-generic 0003:0158:0100.00AF: unexpected long global item [ 370.066861][ T5032] hid-generic: probe of 0003:0158:0100.00AF failed with error -22 [ 370.133880][ T374] usb 5-1: USB disconnect, device number 81 [ 370.404585][ T6856] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 370.413110][ T6856] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 370.424795][ T6856] F2FS-fs (loop2): invalid crc value [ 370.432381][ T6856] F2FS-fs (loop2): Found nat_bits in checkpoint [ 370.472535][ T6856] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 370.479482][ T6856] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 370.517202][ T6856] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1668'. [ 370.530873][ T7] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 370.540033][ T7] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 370.587895][ T435] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 370.677964][ T385] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 370.957912][ T435] usb 1-1: device descriptor read/64, error 18 [ 370.977898][ T385] usb 2-1: Using ep0 maxpacket: 16 [ 371.098002][ T385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 371.116420][ T385] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 371.130363][ T385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.143785][ T385] usb 2-1: config 0 descriptor?? [ 371.227937][ T374] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 371.347915][ T435] usb 1-1: device descriptor read/64, error 18 [ 371.390294][ T6863] overlayfs: missing 'lowerdir' [ 371.468021][ T374] usb 3-1: Using ep0 maxpacket: 16 [ 371.588016][ T374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 371.599144][ T374] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 371.608083][ T374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.616520][ T374] usb 3-1: config 0 descriptor?? [ 371.621341][ T435] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 371.658265][ T6863] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 371.679190][ T385] hid (null): invalid report_size 1684763247 [ 371.686179][ T385] hid-generic 0003:0158:0100.00B0: unknown main item tag 0x1 [ 371.693513][ T385] hid-generic 0003:0158:0100.00B0: unexpected long global item [ 371.701089][ T385] hid-generic: probe of 0003:0158:0100.00B0 failed with error -22 [ 371.787938][ T74] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 371.871156][ T6875] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 371.880327][ T6875] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 371.882778][ T372] usb 2-1: USB disconnect, device number 96 [ 371.889981][ T6875] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 371.907898][ T435] usb 1-1: device descriptor read/64, error 18 [ 371.962897][ T6875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 372.027931][ T74] usb 5-1: Using ep0 maxpacket: 16 [ 372.148106][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 372.159670][ T74] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 372.168767][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.177174][ T74] usb 5-1: config 0 descriptor?? [ 372.258001][ T374] usbhid 3-1:0.0: can't add hid device: -71 [ 372.263882][ T374] usbhid: probe of 3-1:0.0 failed with error -71 [ 372.270884][ T374] usb 3-1: USB disconnect, device number 90 [ 372.297947][ T435] usb 1-1: device descriptor read/64, error 18 [ 372.417981][ T435] usb usb1-port1: attempt power cycle [ 372.420766][ T6881] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 372.432138][ T6881] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 372.441451][ T6881] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 372.697899][ T18] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 372.722424][ T6894] binder_alloc: 6893: pid 6893 spamming oneway? 1 buffers allocated for a total size of 4200 [ 372.827938][ T435] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 372.857942][ T374] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 372.937987][ T18] usb 2-1: Using ep0 maxpacket: 16 [ 372.997994][ T74] usbhid 5-1:0.0: can't add hid device: -71 [ 373.003747][ T74] usbhid: probe of 5-1:0.0 failed with error -71 [ 373.010118][ T124] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 373.017487][ T435] usb 1-1: device descriptor read/8, error -61 [ 373.024431][ T74] usb 5-1: USB disconnect, device number 82 [ 373.057997][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.068991][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.078667][ T18] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 373.091373][ T18] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 373.100318][ T374] usb 4-1: Using ep0 maxpacket: 16 [ 373.105273][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.113805][ T18] usb 2-1: config 0 descriptor?? [ 373.218036][ T374] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 373.229262][ T374] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 373.238283][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.247237][ T374] usb 4-1: config 0 descriptor?? [ 373.288040][ T435] usb 1-1: device descriptor read/8, error -61 [ 373.367971][ T124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.378402][ T124] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 373.387328][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.396518][ T124] usb 3-1: config 0 descriptor?? [ 373.439097][ T124] rndis_host: probe of 3-1:0.0 failed with error -22 [ 373.453888][ T124] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 373.461755][ T18] usbhid 2-1:0.0: can't add hid device: -71 [ 373.462956][ T6897] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 373.467660][ T18] usbhid: probe of 2-1:0.0 failed with error -71 [ 373.480647][ T6897] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 373.481557][ T124] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 373.492239][ T6892] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 373.496925][ T124] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 373.509705][ T6897] F2FS-fs (loop0): invalid crc value [ 373.510999][ T18] usb 2-1: USB disconnect, device number 97 [ 373.516154][ T6892] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 373.531308][ T6892] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 373.541117][ T6897] F2FS-fs (loop0): Found nat_bits in checkpoint [ 373.609047][ T6897] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 373.615887][ T6897] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 373.641265][ T356] usb 3-1: USB disconnect, device number 91 [ 373.660558][ T6897] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1679'. [ 373.675008][ T7] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 373.683938][ T7] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 373.831576][ T6892] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 373.849017][ T374] hid (null): invalid report_size 1684763247 [ 373.856122][ T374] hid-generic 0003:0158:0100.00B1: unknown main item tag 0x1 [ 373.863406][ T374] hid-generic 0003:0158:0100.00B1: unexpected long global item [ 373.871097][ T374] hid-generic: probe of 0003:0158:0100.00B1 failed with error -22 [ 373.883421][ T124] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 374.050760][ T372] usb 4-1: USB disconnect, device number 87 [ 374.264285][ T6907] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 374.271848][ T6907] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 374.283511][ T6907] F2FS-fs (loop1): invalid crc value [ 374.290098][ T6907] F2FS-fs (loop1): Found nat_bits in checkpoint [ 374.315159][ T6907] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 374.322165][ T6907] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 374.370366][ T6907] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1682'. [ 374.387220][ T621] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 374.396144][ T621] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 374.487986][ T124] usb 5-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 374.498195][ T124] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 374.507520][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.516159][ T124] usb 5-1: config 0 descriptor?? [ 374.558635][ T124] rndis_host: probe of 5-1:0.0 failed with error -22 [ 374.565256][ T124] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 374.572896][ T124] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 374.579096][ T124] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 374.663234][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'. [ 374.759431][ T74] usb 5-1: USB disconnect, device number 83 [ 374.937941][ T124] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 374.967892][ T435] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 374.983684][ T6934] F2FS-fs (loop0): invalid crc value [ 374.990841][ T6934] F2FS-fs (loop0): Found nat_bits in checkpoint [ 375.015157][ T6934] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 375.021897][ T6934] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 375.040169][ T23] audit: type=1400 audit(1719576083.729:345): avc: denied { create } for pid=6933 comm="syz.0.1687" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 375.043814][ T6934] [ 375.063025][ T6934] ********************************************************** [ 375.070327][ T6934] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 375.077480][ T6934] ** ** [ 375.084991][ T6934] ** trace_printk() being used. Allocating extra memory. ** [ 375.092198][ T6934] ** ** [ 375.099574][ T6934] ** This means that this is a DEBUG kernel and it is ** [ 375.101746][ T23] audit: type=1400 audit(1719576083.789:346): avc: denied { rename } for pid=6933 comm="syz.0.1687" name="bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 375.106779][ T6934] ** unsafe for production use. ** [ 375.128364][ T23] audit: type=1400 audit(1719576083.789:347): avc: denied { unlink } for pid=6933 comm="syz.0.1687" name="file0" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 375.136412][ T6934] ** ** [ 375.165766][ T6934] ** If you see this message and you are not debugging ** [ 375.173321][ T6934] ** the kernel, report this immediately to your vendor! ** [ 375.181364][ T6934] ** ** [ 375.188955][ T6934] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 375.196123][ T6934] ********************************************************** [ 375.197983][ T124] usb 4-1: Using ep0 maxpacket: 16 [ 375.223789][ T607] attempt to access beyond end of device [ 375.223789][ T607] loop0: rw=2049, want=45104, limit=40427 [ 375.327974][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.338989][ T435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.349710][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.359592][ T435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.369369][ T124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 375.382207][ T435] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 375.391378][ T124] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 375.400578][ T435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.408608][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.417327][ T435] usb 2-1: config 0 descriptor?? [ 375.426575][ T124] usb 4-1: config 0 descriptor?? [ 375.509213][ T6946] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 375.516992][ T6946] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 375.528076][ T6946] F2FS-fs (loop4): invalid crc value [ 375.534657][ T6946] F2FS-fs (loop4): Found nat_bits in checkpoint [ 375.559428][ T6946] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 375.566345][ T6946] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 375.593917][ T6946] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1690'. [ 375.606737][ T621] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 375.615783][ T621] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 375.727908][ T5032] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 375.879706][ T6932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6932 comm=syz.1.1685 [ 375.898231][ T435] hid (null): bogus close delimiter [ 375.909237][ T124] microsoft 0003:045E:07DA.00B3: unbalanced collection at end of report description [ 375.918733][ T124] microsoft 0003:045E:07DA.00B3: parse failed [ 375.924738][ T124] microsoft: probe of 0003:045E:07DA.00B3 failed with error -22 [ 376.017945][ T5032] usb 1-1: device descriptor read/64, error 18 [ 376.115927][ T372] usb 4-1: USB disconnect, device number 88 [ 376.118073][ T374] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 376.357944][ T385] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 376.368097][ T374] usb 5-1: Using ep0 maxpacket: 16 [ 376.417912][ T5032] usb 1-1: device descriptor read/64, error 18 [ 376.488019][ T374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 376.499111][ T374] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 376.507906][ T374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.516336][ T374] usb 5-1: config 0 descriptor?? [ 376.598023][ T385] usb 3-1: Using ep0 maxpacket: 16 [ 376.598047][ T435] uclogic 0003:256C:006D.00B2: failed retrieving string descriptor #200: -71 [ 376.611823][ T435] uclogic 0003:256C:006D.00B2: failed retrieving pen parameters: -71 [ 376.619873][ T435] uclogic 0003:256C:006D.00B2: failed probing pen v2 parameters: -71 [ 376.627768][ T435] uclogic 0003:256C:006D.00B2: failed probing parameters: -71 [ 376.635110][ T435] uclogic: probe of 0003:256C:006D.00B2 failed with error -71 [ 376.645378][ T435] usb 2-1: USB disconnect, device number 98 [ 376.648425][ T23] audit: type=1400 audit(1719576085.339:348): avc: denied { ioctl } for pid=6961 comm="syz.3.1693" path="socket:[49577]" dev="sockfs" ino=49577 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 376.680440][ T23] audit: type=1400 audit(1719576085.359:349): avc: denied { write } for pid=6961 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 376.701574][ T5032] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 376.703315][ T23] audit: type=1400 audit(1719576085.359:350): avc: denied { nlmsg_write } for pid=6961 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 376.761923][ T6956] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 376.770977][ T6956] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 376.779937][ T385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.780955][ T6956] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 376.790664][ T385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.809589][ T385] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 376.822228][ T385] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 376.831150][ T385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.839869][ T385] usb 3-1: config 0 descriptor?? [ 376.957923][ T356] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 376.997988][ T5032] usb 1-1: device descriptor read/64, error 18 [ 377.141181][ T6967] binder_alloc: 6966: pid 6966 spamming oneway? 1 buffers allocated for a total size of 4200 [ 377.178067][ T385] usbhid 3-1:0.0: can't add hid device: -71 [ 377.183809][ T385] usbhid: probe of 3-1:0.0 failed with error -71 [ 377.191447][ T385] usb 3-1: USB disconnect, device number 92 [ 377.198001][ T356] usb 4-1: Using ep0 maxpacket: 16 [ 377.318142][ T356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 377.329873][ T356] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 377.338866][ T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.347462][ T356] usb 4-1: config 0 descriptor?? [ 377.388015][ T374] usbhid 5-1:0.0: can't add hid device: -71 [ 377.393896][ T374] usbhid: probe of 5-1:0.0 failed with error -71 [ 377.403838][ T374] usb 5-1: USB disconnect, device number 84 [ 377.407906][ T5032] usb 1-1: device descriptor read/64, error 18 [ 377.427934][ T13] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 377.528025][ T5032] usb usb1-port1: attempt power cycle [ 377.592876][ T6964] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 377.602234][ T6964] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 377.617991][ T6964] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 377.899824][ T6964] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 377.922413][ T356] hid (null): invalid report_size 1684763247 [ 377.927996][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.929630][ T356] hid-generic 0003:0158:0100.00B4: unknown main item tag 0x1 [ 377.941522][ T13] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 377.946345][ T356] hid-generic 0003:0158:0100.00B4: unexpected long global item [ 377.954627][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.962226][ T356] hid-generic: probe of 0003:0158:0100.00B4 failed with error -22 [ 377.969567][ T5032] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 377.998396][ T13] usb 2-1: config 0 descriptor?? [ 378.038638][ T13] rndis_host: probe of 2-1:0.0 failed with error -22 [ 378.045228][ T13] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 378.052965][ T13] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 378.059650][ T13] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 378.122225][ T374] usb 4-1: USB disconnect, device number 89 [ 378.147978][ T5032] usb 1-1: device descriptor read/8, error -61 [ 378.241479][ T13] usb 2-1: USB disconnect, device number 99 [ 378.287896][ T372] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 378.418025][ T5032] usb 1-1: device descriptor read/8, error -61 [ 378.557876][ T372] usb 5-1: Using ep0 maxpacket: 16 [ 378.757934][ T372] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 378.775781][ T372] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 378.798667][ T372] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.808211][ T372] usb 5-1: config 0 descriptor?? [ 378.967882][ T374] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 379.051157][ T6975] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 379.072663][ T6975] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 379.094236][ T6975] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 379.337910][ T374] usb 4-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 379.353497][ T374] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 379.362591][ T374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.371510][ T374] usb 4-1: config 0 descriptor?? [ 379.408369][ T6975] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 379.408891][ T374] rndis_host: probe of 4-1:0.0 failed with error -22 [ 379.425974][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 379.427207][ T374] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 379.436158][ T372] hid (null): invalid report_size 1684763247 [ 379.450341][ T372] hid-generic 0003:0158:0100.00B5: unknown main item tag 0x1 [ 379.457636][ T372] hid-generic 0003:0158:0100.00B5: unexpected long global item [ 379.465582][ T372] hid-generic: probe of 0003:0158:0100.00B5 failed with error -22 [ 379.481196][ T374] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 379.487594][ T374] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 379.534667][ T23] audit: type=1400 audit(1719576088.219:351): avc: denied { create } for pid=7001 comm="syz.2.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.554373][ T23] audit: type=1400 audit(1719576088.229:352): avc: denied { ioctl } for pid=7001 comm="syz.2.1705" path="socket:[49693]" dev="sockfs" ino=49693 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.611664][ T374] usb 4-1: USB disconnect, device number 90 [ 379.648097][ T13] usb 5-1: USB disconnect, device number 85 [ 379.807920][ T5032] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 379.815376][ T372] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 379.987918][ T385] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 380.047919][ T5032] usb 1-1: Using ep0 maxpacket: 16 [ 380.087948][ T372] usb 3-1: device descriptor read/64, error 18 [ 380.167995][ T5032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.184829][ T5032] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.194651][ T5032] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.208607][ T5032] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.217442][ T5032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.366751][ T385] usb 2-1: Using ep0 maxpacket: 16 [ 380.897746][ T5032] usb 1-1: config 0 descriptor?? [ 381.067969][ T385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.079114][ T385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.089285][ T385] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.101899][ T385] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.110811][ T385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.119290][ T385] usb 2-1: config 0 descriptor?? [ 381.178033][ T372] usb 3-1: device descriptor read/64, error 18 [ 381.317941][ T374] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 381.347895][ T124] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 381.379299][ T5032] microsoft 0003:045E:07DA.00B6: unbalanced collection at end of report description [ 381.388910][ T5032] microsoft 0003:045E:07DA.00B6: parse failed [ 381.394810][ T5032] microsoft: probe of 0003:045E:07DA.00B6 failed with error -22 [ 381.457942][ T372] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 381.467978][ T385] usbhid 2-1:0.0: can't add hid device: -71 [ 381.473764][ T385] usbhid: probe of 2-1:0.0 failed with error -71 [ 381.481007][ T385] usb 2-1: USB disconnect, device number 100 [ 381.583087][ T5032] usb 1-1: USB disconnect, device number 99 [ 381.587923][ T124] usb 5-1: Using ep0 maxpacket: 16 [ 381.598035][ T374] usb 4-1: device descriptor read/64, error 18 [ 381.708024][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 381.719068][ T124] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 381.727793][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.727929][ T372] usb 3-1: device descriptor read/64, error 18 [ 381.736977][ T124] usb 5-1: config 0 descriptor?? [ 381.980982][ T7018] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 381.987890][ T374] usb 4-1: device descriptor read/64, error 18 [ 381.991834][ T7018] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 382.004728][ T7018] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 382.137900][ T372] usb 3-1: device descriptor read/64, error 18 [ 382.144232][ T5032] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 382.259082][ T7026] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16922 sclass=netlink_xfrm_socket pid=7026 comm=syz.0.1712 [ 382.385507][ T374] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 382.390146][ T372] usb usb3-port1: attempt power cycle [ 382.518057][ T5032] usb 2-1: Using ep0 maxpacket: 16 [ 382.657974][ T124] usbhid 5-1:0.0: can't add hid device: -71 [ 382.663890][ T124] usbhid: probe of 5-1:0.0 failed with error -71 [ 382.670244][ T374] usb 4-1: device descriptor read/64, error 18 [ 382.682794][ T124] usb 5-1: USB disconnect, device number 86 [ 382.778015][ T5032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 382.789031][ T5032] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 382.797800][ T5032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.806422][ T5032] usb 2-1: config 0 descriptor?? [ 383.010964][ T23] audit: type=1400 audit(1719576091.699:353): avc: denied { getopt } for pid=7032 comm="syz.0.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 383.077610][ T374] usb 4-1: device descriptor read/64, error 18 [ 383.198289][ T374] usb usb4-port1: attempt power cycle [ 383.348265][ T7021] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 383.392697][ T5032] hid-generic 0003:0158:0100.00B7: unknown main item tag 0x1 [ 383.409034][ T5032] hid-generic 0003:0158:0100.00B7: unexpected long global item [ 383.420028][ T5032] hid-generic: probe of 0003:0158:0100.00B7 failed with error -22 [ 383.429238][ T7046] binder: BINDER_SET_CONTEXT_MGR already set [ 383.435022][ T7046] binder: 7045:7046 ioctl 4018620d 20000040 returned -16 [ 383.590330][ T435] usb 2-1: USB disconnect, device number 101 [ 383.597919][ T124] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 383.617991][ T374] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 383.788157][ T374] usb 4-1: device descriptor read/8, error -61 [ 383.837898][ T124] usb 5-1: Using ep0 maxpacket: 16 [ 383.857961][ T372] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 383.968005][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 383.979399][ T124] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 383.988269][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.997544][ T124] usb 5-1: config 0 descriptor?? [ 384.057932][ T374] usb 4-1: device descriptor read/8, error -71 [ 384.177942][ T435] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 384.228016][ T372] usb 3-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 384.238087][ T372] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 384.246873][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.250021][ T7043] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 384.255750][ T372] usb 3-1: config 0 descriptor?? [ 384.264578][ T7043] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 384.277270][ T7043] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 384.310091][ T372] rndis_host: probe of 3-1:0.0 failed with error -22 [ 384.316803][ T372] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 384.324527][ T372] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 384.331085][ T372] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 384.387973][ T74] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 384.417914][ T435] usb 1-1: Using ep0 maxpacket: 16 [ 384.511697][ T372] usb 3-1: USB disconnect, device number 96 [ 384.538070][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 384.549071][ T374] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 384.556411][ T435] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 384.558302][ T7043] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 384.565558][ T435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.582629][ T124] hid (null): invalid report_size 1684763247 [ 384.589586][ T124] hid-generic 0003:0158:0100.00B8: unknown main item tag 0x1 [ 384.596870][ T124] hid-generic 0003:0158:0100.00B8: unexpected long global item [ 384.605196][ T435] usb 1-1: config 0 descriptor?? [ 384.610186][ T124] hid-generic: probe of 0003:0158:0100.00B8 failed with error -22 [ 384.637927][ T74] usb 2-1: Using ep0 maxpacket: 16 [ 384.647971][ T374] usb 4-1: Using ep0 maxpacket: 16 [ 384.688032][ T374] usb 4-1: too many configurations: 19, using maximum allowed: 8 [ 384.757978][ T74] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.768883][ T74] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.778549][ T74] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.783000][ T372] usb 5-1: USB disconnect, device number 87 [ 384.791236][ T74] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 384.805807][ T74] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.814314][ T74] usb 2-1: config 0 descriptor?? [ 384.850377][ T7048] overlayfs: missing 'lowerdir' [ 385.073805][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1722'. [ 385.128343][ T7048] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 385.149249][ T435] hid (null): invalid report_size 1684763247 [ 385.157259][ T435] hid-generic 0003:0158:0100.00B9: unknown main item tag 0x1 [ 385.164885][ T74] usbhid 2-1:0.0: can't add hid device: -71 [ 385.171194][ T435] hid-generic 0003:0158:0100.00B9: unexpected long global item [ 385.178818][ T74] usbhid: probe of 2-1:0.0 failed with error -71 [ 385.186039][ T74] usb 2-1: USB disconnect, device number 102 [ 385.192581][ T435] hid-generic: probe of 0003:0158:0100.00B9 failed with error -22 [ 385.352138][ T385] usb 1-1: USB disconnect, device number 100 [ 385.358320][ T372] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 385.480915][ T7060] F2FS-fs (loop4): invalid crc value [ 385.488249][ T374] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 385.497469][ T7060] F2FS-fs (loop4): Found nat_bits in checkpoint [ 385.507944][ T374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.515741][ T374] usb 4-1: Product: syz [ 385.519957][ T374] usb 4-1: Manufacturer: syz [ 385.524345][ T374] usb 4-1: SerialNumber: syz [ 385.530113][ T374] usb 4-1: config 0 descriptor?? [ 385.536731][ T7060] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 385.543590][ T7060] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 385.583482][ T3267] attempt to access beyond end of device [ 385.583482][ T3267] loop4: rw=2049, want=45104, limit=40427 [ 385.599251][ T23] audit: type=1400 audit(1719576094.289:354): avc: denied { read } for pid=7067 comm="syz.1.1725" name="event0" dev="devtmpfs" ino=9242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.622557][ T372] usb 3-1: Using ep0 maxpacket: 16 [ 385.638294][ T23] audit: type=1400 audit(1719576094.289:355): avc: denied { open } for pid=7067 comm="syz.1.1725" path="/dev/input/event0" dev="devtmpfs" ino=9242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.666166][ T23] audit: type=1400 audit(1719576094.289:356): avc: denied { ioctl } for pid=7067 comm="syz.1.1725" path="/dev/input/event0" dev="devtmpfs" ino=9242 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 385.692072][ T23] audit: type=1400 audit(1719576094.289:357): avc: denied { ioctl } for pid=7067 comm="syz.1.1725" path="/dev/fuse" dev="devtmpfs" ino=9170 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 385.778156][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.789038][ T372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.798638][ T372] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 385.811311][ T372] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 385.820236][ T372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.831784][ T7071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.834451][ T372] usb 3-1: config 0 descriptor?? [ 385.937886][ T385] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 386.014365][ T74] usb 4-1: USB disconnect, device number 94 [ 386.095742][ T7077] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=16922 sclass=netlink_xfrm_socket pid=7077 comm=syz.4.1724 [ 386.367912][ T385] usb 2-1: Using ep0 maxpacket: 16 [ 386.387986][ T13] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 386.460046][ T372] microsoft 0003:045E:07DA.00BA: unbalanced collection at end of report description [ 386.469693][ T372] microsoft 0003:045E:07DA.00BA: parse failed [ 386.475635][ T372] microsoft: probe of 0003:045E:07DA.00BA failed with error -22 [ 386.487954][ T385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 386.499191][ T385] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 386.508302][ T385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.516790][ T385] usb 2-1: config 0 descriptor?? [ 386.627943][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 386.664508][ T372] usb 3-1: USB disconnect, device number 97 [ 386.838513][ T7070] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 386.847569][ T7070] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 386.856597][ T7070] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 386.868056][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 386.881989][ T13] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 386.891267][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.903679][ T13] usb 1-1: config 0 descriptor?? [ 387.150640][ T7075] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 387.160689][ T7075] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 387.169695][ T7075] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 387.236384][ T7075] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 387.437981][ T385] usbhid 2-1:0.0: can't add hid device: -71 [ 387.443804][ T385] usbhid: probe of 2-1:0.0 failed with error -71 [ 387.451515][ T385] usb 2-1: USB disconnect, device number 103 [ 387.494589][ T7093] binder_alloc: 7092: pid 7092 spamming oneway? 1 buffers allocated for a total size of 4200 [ 387.527919][ T435] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 387.528080][ T13] usbhid 1-1:0.0: can't add hid device: -71 [ 387.541150][ T13] usbhid: probe of 1-1:0.0 failed with error -71 [ 387.548610][ T13] usb 1-1: USB disconnect, device number 101 [ 387.680686][ T7095] binder_alloc: 7094: binder_alloc_buf, no vma [ 387.767944][ T435] usb 3-1: Using ep0 maxpacket: 16 [ 387.778069][ T5] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 387.808044][ T435] usb 3-1: no configurations [ 387.812448][ T435] usb 3-1: can't read configurations, error -22 [ 387.967928][ T435] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 387.977994][ T385] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 388.071304][ T7097] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 388.084908][ T7097] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 388.098240][ T7097] F2FS-fs (loop1): Found nat_bits in checkpoint [ 388.119498][ T7097] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 388.130636][ T7097] F2FS-fs (loop1): recover fsync data on readonly fs [ 388.137340][ T7097] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 388.144412][ T7097] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 388.212779][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.227337][ T5] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 388.237696][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.307634][ T5] usb 4-1: config 0 descriptor?? [ 388.373343][ T385] usb 5-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 388.385480][ T5] rndis_host: probe of 4-1:0.0 failed with error -22 [ 388.387905][ T435] usb 3-1: Using ep0 maxpacket: 16 [ 388.392303][ T385] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 388.406134][ T5] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 388.413871][ T5] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 388.420106][ T385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.427948][ T5] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 388.437383][ T385] usb 5-1: config 0 descriptor?? [ 388.481753][ T385] rndis_host: probe of 5-1:0.0 failed with error -22 [ 388.497418][ T385] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 388.506283][ T385] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 388.513632][ T385] cdc_acm: probe of 5-1:0.0 failed with error -22 [ 388.536626][ T435] usb 3-1: no configurations [ 388.599500][ T435] usb 3-1: can't read configurations, error -22 [ 388.605639][ T435] usb usb3-port1: attempt power cycle [ 388.611262][ T374] usb 4-1: USB disconnect, device number 95 [ 388.680530][ T18] usb 5-1: USB disconnect, device number 88 [ 389.017894][ T435] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 389.068158][ T23] audit: type=1400 audit(1719576097.759:358): avc: denied { name_bind } for pid=7116 comm="syz.0.1737" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 389.111890][ T435] usb 3-1: Using ep0 maxpacket: 16 [ 389.148016][ T435] usb 3-1: no configurations [ 389.152518][ T435] usb 3-1: can't read configurations, error -22 [ 389.330572][ T18] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 389.573041][ T435] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 389.677984][ T435] usb 3-1: Using ep0 maxpacket: 16 [ 389.707876][ T18] usb 2-1: Using ep0 maxpacket: 16 [ 389.718130][ T435] usb 3-1: no configurations [ 389.722565][ T435] usb 3-1: can't read configurations, error -22 [ 389.729133][ T435] usb usb3-port1: unable to enumerate USB device [ 389.834535][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.845299][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.854896][ T18] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.867702][ T18] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 389.876863][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.885638][ T18] usb 2-1: config 0 descriptor?? [ 390.247972][ T18] usbhid 2-1:0.0: can't add hid device: -71 [ 390.253824][ T18] usbhid: probe of 2-1:0.0 failed with error -71 [ 390.264775][ T18] usb 2-1: USB disconnect, device number 104 [ 391.007865][ T18] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 391.073596][ T23] audit: type=1400 audit(1719576099.759:359): avc: denied { read write } for pid=7156 comm="syz.3.1749" name="uhid" dev="devtmpfs" ino=9248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 391.128490][ T23] audit: type=1400 audit(1719576099.759:360): avc: denied { open } for pid=7156 comm="syz.3.1749" path="/dev/uhid" dev="devtmpfs" ino=9248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 391.166292][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.177704][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.194254][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.210052][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.230231][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.252520][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.267859][ T18] usb 1-1: Using ep0 maxpacket: 16 [ 391.273574][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.281637][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.290340][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.303284][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.317974][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.325468][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.332933][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.340357][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.353467][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.361468][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.368731][ T23] audit: type=1400 audit(1719576100.049:361): avc: denied { create } for pid=7173 comm="syz.4.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 391.388513][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.399811][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.407014][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.414484][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 391.429387][ T18] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 391.440719][ T7176] PF_BRIDGE: br_mdb_parse() with invalid ifindex [ 391.443531][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.456629][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.464356][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.484663][ T18] usb 1-1: config 0 descriptor?? [ 391.492645][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.493750][ T7181] netlink: 'syz.4.1759': attribute type 3 has an invalid length. [ 391.500024][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.514646][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.522123][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.529587][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.536783][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.548044][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.555412][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.567786][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.576775][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.589657][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.609914][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.617113][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.653100][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.677282][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.701371][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.713208][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.724005][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.735857][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.743383][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.751223][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.759295][ T374] hid-generic 0000:0000:0000.00BB: unknown main item tag 0x0 [ 391.772830][ T374] hid-generic 0000:0000:0000.00BB: hidraw0: HID v0.00 Device [syz0] on syz0 [ 391.779664][ T7147] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 391.822736][ T7147] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 391.847978][ T7147] overlayfs: failed to create directory ./bus/work (errno: 126); mounting read-only [ 391.916693][ T7147] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 392.156110][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 392.197964][ T18] usbhid 1-1:0.0: can't add hid device: -71 [ 392.203969][ T18] usbhid: probe of 1-1:0.0 failed with error -71 [ 392.212004][ T18] usb 1-1: USB disconnect, device number 102 [ 392.941455][ T7283] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 393.003592][ T7286] tmpfs: Unknown parameter 'nr_ino1' [ 393.055336][ T23] audit: type=1326 audit(1719576101.739:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 393.097278][ T7296] EXT4-fs warning (device loop0): ext4_multi_mount_protect:312: fsck is running on the filesystem [ 393.117253][ T23] audit: type=1326 audit(1719576101.739:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 393.165131][ T23] audit: type=1326 audit(1719576101.769:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 393.167214][ T7296] EXT4-fs warning (device loop0): ext4_multi_mount_protect:312: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 393.207947][ T23] audit: type=1326 audit(1719576101.769:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 393.231800][ T23] audit: type=1326 audit(1719576101.769:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 393.255146][ T23] audit: type=1326 audit(1719576101.769:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7295 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 393.454769][ T7314] syz.2.1813[7314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.454830][ T7314] syz.2.1813[7314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.564752][ T7327] tmpfs: Unknown parameter 'nr_ino1' [ 393.780777][ T7343] device pim6reg1 entered promiscuous mode [ 393.791312][ T7342] EXT4-fs warning (device loop1): ext4_multi_mount_protect:312: fsck is running on the filesystem [ 393.807189][ T7342] EXT4-fs warning (device loop1): ext4_multi_mount_protect:312: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 393.867494][ T7351] devtmpfs: Unknown parameter 'dirsyncÐ' [ 393.904683][ T7361] tmpfs: Unknown parameter 'nr_ino1' [ 394.050593][ T7380] EXT4-fs warning (device loop2): ext4_multi_mount_protect:312: fsck is running on the filesystem [ 394.064045][ T7380] EXT4-fs warning (device loop2): ext4_multi_mount_protect:312: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 394.108408][ T23] kauditd_printk_skb: 73 callbacks suppressed [ 394.108416][ T23] audit: type=1326 audit(1719576102.799:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.2.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66765b3590 code=0x7ffc0000 [ 394.138010][ T23] audit: type=1326 audit(1719576102.799:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.2.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f66765b472b code=0x7ffc0000 [ 394.186748][ T23] audit: type=1326 audit(1719576102.859:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.2.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f66765b388a code=0x7ffc0000 [ 394.223063][ T7401] mmap: syz.4.1849 (7401) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 394.238254][ T23] audit: type=1326 audit(1719576102.859:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.2.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66765b4b29 code=0x7ffc0000 [ 394.261816][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.267232][ T23] audit: type=1326 audit(1719576102.859:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.2.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66765b4b29 code=0x7ffc0000 [ 394.268773][ T7403] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.292263][ T23] audit: type=1326 audit(1719576102.859:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.2.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f66765b4b29 code=0x7ffc0000 [ 394.325934][ T7407] tmpfs: Unknown parameter '' [ 394.337812][ T23] audit: type=1326 audit(1719576102.859:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.2.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66765b4b29 code=0x7ffc0000 [ 394.361211][ T23] audit: type=1326 audit(1719576102.859:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.2.1841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66765b4b29 code=0x7ffc0000 [ 394.367419][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.391154][ T7396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.398736][ T7396] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.405577][ T7396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.413584][ T7396] device bridge0 entered promiscuous mode [ 394.483771][ T23] audit: type=1400 audit(1719576103.169:449): avc: denied { mounton } for pid=7415 comm="syz.4.1856" path="/root/syzkaller.P0ustT/234/file0/bus" dev="loop4" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 394.556219][ T7425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=118 sclass=netlink_route_socket pid=7425 comm=syz.1.1860 [ 394.578074][ T23] audit: type=1400 audit(1719576103.269:450): avc: denied { read } for pid=7426 comm="syz.2.1862" dev="sockfs" ino=52647 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 394.661311][ C1] blk_update_request: I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.672220][ T3267] FAT-fs (loop4): Directory bread(block 3) failed [ 394.694126][ C1] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 394.704961][ T3267] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 395.091986][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.138134][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.145581][ T7472] device bridge_slave_0 entered promiscuous mode [ 395.196771][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.218082][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.258530][ T7472] device bridge_slave_1 entered promiscuous mode [ 395.458644][ T7495] attempt to access beyond end of device [ 395.458644][ T7495] loop2: rw=2049, want=129, limit=128 [ 395.497949][ T7495] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 395.530770][ T384] device bridge_slave_1 left promiscuous mode [ 395.546989][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.585786][ T384] device bridge_slave_0 left promiscuous mode [ 395.614967][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.696115][ T7513] capability: warning: `syz.0.1900' uses 32-bit capabilities (legacy support in use) [ 395.705988][ T7511] syz.2.1901[7511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.706037][ T7511] syz.2.1901[7511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.829073][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.847107][ T7472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.854279][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.861209][ T7472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.877934][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.886419][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.926742][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 395.934440][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 395.952031][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 395.960675][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.973703][ T7537] EXT4-fs (sda1): Ignoring removed bh option [ 395.985508][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.992374][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.008561][ T7537] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 396.018346][ T7537] EXT4-fs (sda1): re-mounted. Opts: nojournal_checksum,grpjquota=grpid,block_validity,sysvgroups,bh,noblock_validity,nojournal_checksum,jqfmt=vfsold,resuid=0x0000000000000000,debug,jqfmt=vfsv0,debug,,errors=continue [ 396.042823][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.051254][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.059780][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.066602][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.085508][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.094528][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.102843][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.111558][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.136276][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.145101][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.170020][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 396.178903][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 396.186883][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 396.195822][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 396.220042][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.229078][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.237753][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.246491][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.402262][ T7554] request_module fs-autofs succeeded, but still no fs? [ 396.620583][ T7563] attempt to access beyond end of device [ 396.620583][ T7563] loop4: rw=0, want=1041, limit=128 [ 396.839034][ T7575] EXT4-fs (sda1): Ignoring removed bh option [ 396.846086][ T7575] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 396.855709][ T7575] EXT4-fs (sda1): re-mounted. Opts: nojournal_checksum,grpjquota=grpid,block_validity,sysvgroups,bh,noblock_validity,nojournal_checksum,jqfmt=vfsold,resuid=0x0000000000000000,debug,jqfmt=vfsv0,debug,,errors=continue [ 397.043926][ T7584] device syzkaller0 entered promiscuous mode [ 397.218680][ T7595] fuse: Unknown parameter '‹' [ 397.469185][ T7601] attempt to access beyond end of device [ 397.469185][ T7601] loop4: rw=0, want=1041, limit=128 [ 397.481543][ T7606] EXT4-fs (sda1): Ignoring removed bh option [ 397.487603][ T7606] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 397.497151][ T7606] EXT4-fs (sda1): re-mounted. Opts: nojournal_checksum,grpjquota=grpid,block_validity,sysvgroups,bh,noblock_validity,nojournal_checksum,jqfmt=vfsold,resuid=0x0000000000000000,debug,jqfmt=vfsv0,debug,,errors=continue [ 398.834359][ T7641] attempt to access beyond end of device [ 398.834359][ T7641] loop0: rw=0, want=1041, limit=128 [ 399.265424][ T7677] syz.1.1971[7677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.265457][ T7677] syz.1.1971[7677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.279911][ T7677] syz.1.1971[7677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.291300][ T7677] syz.1.1971[7677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.347775][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 399.347784][ T23] audit: type=1326 audit(1719576108.029:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d378cb29 code=0x7ffc0000 [ 399.388849][ T23] audit: type=1326 audit(1719576108.029:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d378cb29 code=0x7ffc0000 [ 399.412950][ T23] audit: type=1326 audit(1719576108.049:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f52d378cb29 code=0x7ffc0000 [ 399.436598][ T23] audit: type=1326 audit(1719576108.049:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d378cb29 code=0x7ffc0000 [ 399.460183][ T23] audit: type=1326 audit(1719576108.049:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.3.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d378cb29 code=0x7ffc0000 [ 399.679829][ T7682] overlayfs: failed to resolve './file0': -2 [ 399.911682][ T7698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1979'. [ 400.156583][ T7708] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 400.165827][ T7708] ext4 filesystem being mounted at /root/syzkaller.xrZyeP/148/file0 supports timestamps until 2038 (0x7fffffff) [ 400.197540][ T7708] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 400.206086][ T7708] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 400.214666][ T7708] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #19: comm syz.1.1984: mark inode dirty (error -27) [ 400.227504][ T7708] EXT4-fs warning (device loop1): ext4_evict_inode:321: xattr delete (err -27) [ 401.421458][ T7768] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 401.809685][ T7775] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 402.048106][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 402.754779][ T7814] device pim6reg1 entered promiscuous mode [ 403.109008][ T7823] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 403.289056][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2038'. [ 403.299418][ T7834] device bridge_slave_1 left promiscuous mode [ 403.305471][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.313248][ T7834] device bridge_slave_0 left promiscuous mode [ 403.319383][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.647480][ T7840] overlayfs: './file0' not a directory [ 404.086192][ T7856] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.161530][ T23] audit: type=1400 audit(1719576112.849:462): avc: denied { setopt } for pid=7866 comm="syz.4.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 404.305101][ T23] audit: type=1400 audit(1719576112.989:463): avc: denied { write } for pid=7872 comm="syz.3.2055" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 404.556738][ T23] audit: type=1400 audit(1719576113.239:464): avc: denied { relabelfrom } for pid=7879 comm="syz.2.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 404.577244][ T23] audit: type=1400 audit(1719576113.239:465): avc: denied { relabelto } for pid=7879 comm="syz.2.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 404.952639][ T7894] overlayfs: workdir and upperdir must be separate subtrees [ 407.099410][ T8007] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 407.109066][ T8007] ext4 filesystem being mounted at /root/syzkaller.vNLhDw/39/file0 supports timestamps until 2038 (0x7fffffff) [ 407.147236][ T8007] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 407.156275][ T8007] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 407.222140][ T7472] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /root/syzkaller.vNLhDw/39/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 407.245309][ T7472] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /root/syzkaller.vNLhDw/39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 407.269212][ T7472] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /root/syzkaller.vNLhDw/39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 407.293054][ T7472] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /root/syzkaller.vNLhDw/39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 407.316030][ T7472] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /root/syzkaller.vNLhDw/39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 407.339002][ T7472] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /root/syzkaller.vNLhDw/39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 407.363074][ T7472] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /root/syzkaller.vNLhDw/39/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 407.385683][ T7472] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 407.806608][ T8030] overlayfs: failed to resolve './file0': -2 [ 407.858272][ T8034] EXT4-fs: 3 callbacks suppressed [ 408.067720][ T8037] attempt to access beyond end of device [ 408.067720][ T8037] loop3: rw=2049, want=1041, limit=128 [ 408.437626][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.444658][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.452079][ T8056] device bridge_slave_0 entered promiscuous mode [ 408.460758][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.467631][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.475066][ T8056] device bridge_slave_1 entered promiscuous mode [ 408.519229][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.526063][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.533213][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.539962][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.563109][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.570777][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.578679][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.588048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.596460][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.603307][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.614282][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.625239][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.632094][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.646711][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 408.656921][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 408.678938][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.698810][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.713482][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.725835][ T23] audit: type=1326 audit(1719576117.419:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.0.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 408.751601][ T23] audit: type=1326 audit(1719576117.419:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.0.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 408.777927][ T23] audit: type=1326 audit(1719576117.419:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.0.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 408.802887][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 408.803462][ T23] audit: type=1326 audit(1719576117.419:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.0.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 408.812786][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.834488][ T23] audit: type=1326 audit(1719576117.419:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8063 comm="syz.0.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 408.888244][ T9] device bridge_slave_1 left promiscuous mode [ 408.894269][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.901858][ T9] device bridge_slave_0 left promiscuous mode [ 408.908186][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.628744][ T23] audit: type=1400 audit(1719576118.319:471): avc: denied { write } for pid=8104 comm="syz.2.2164" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 409.930306][ T23] audit: type=1400 audit(1719576118.619:472): avc: denied { block_suspend } for pid=8124 comm="syz.1.2173" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 410.152636][ T23] audit: type=1400 audit(1719576118.839:473): avc: denied { unmount } for pid=3140 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 410.543798][ T23] audit: type=1326 audit(1719576119.229:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66765b4b29 code=0x7ffc0000 [ 410.567360][ T23] audit: type=1326 audit(1719576119.229:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66765b4b29 code=0x7ffc0000 [ 410.591281][ T23] audit: type=1326 audit(1719576119.259:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f66765b4b29 code=0x7ffc0000 [ 410.614886][ T23] audit: type=1326 audit(1719576119.259:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66765b4b29 code=0x7ffc0000 [ 410.638096][ T23] audit: type=1326 audit(1719576119.259:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8151 comm="syz.2.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66765b4b29 code=0x7ffc0000 [ 410.926119][ T23] audit: type=1400 audit(1719576119.609:479): avc: denied { map } for pid=8167 comm="syz.0.2192" path="socket:[56863]" dev="sockfs" ino=56863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 411.573556][ T8202] device sit0 entered promiscuous mode [ 411.580311][ T8202] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 411.588102][ T8202] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2206'. [ 411.664497][ T8204] EXT4-fs (loop4): bad geometry: block count 3098423767073024 exceeds size of device (256 blocks) [ 412.175750][ T23] audit: type=1400 audit(1719576120.859:480): avc: denied { setopt } for pid=8231 comm="syz.2.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 412.253190][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 412.439002][ T8251] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8251 comm=syz.2.2230 [ 412.563511][ T8260] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 412.972677][ T8283] syz.4.2245[8283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.972709][ T8283] syz.4.2245[8283] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 413.290287][ T5244] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 413.309669][ T5244] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 413.500366][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.507524][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.516656][ T8305] device bridge_slave_0 entered promiscuous mode [ 413.524378][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.531655][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.539828][ T8305] device bridge_slave_1 entered promiscuous mode [ 413.634053][ T8305] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.641007][ T8305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.648232][ T8305] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.655046][ T8305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.703979][ T8314] FAT-fs (loop3): Directory bread(block 64) failed [ 413.706354][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 413.715773][ T8314] FAT-fs (loop3): Directory bread(block 65) failed [ 413.724878][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.725215][ T8314] FAT-fs (loop3): Directory bread(block 66) failed [ 413.738931][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.746142][ T8314] FAT-fs (loop3): Directory bread(block 67) failed [ 413.754224][ T8314] FAT-fs (loop3): Directory bread(block 68) failed [ 413.760865][ T8314] FAT-fs (loop3): Directory bread(block 69) failed [ 413.768238][ T8314] FAT-fs (loop3): Directory bread(block 70) failed [ 413.774754][ T8314] FAT-fs (loop3): Directory bread(block 71) failed [ 413.781815][ T8314] FAT-fs (loop3): Directory bread(block 72) failed [ 413.782006][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 413.796379][ T8314] FAT-fs (loop3): Directory bread(block 73) failed [ 413.799230][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.809576][ T435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.817260][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 413.831612][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.834636][ T8314] attempt to access beyond end of device [ 413.834636][ T8314] loop3: rw=2049, want=1344, limit=256 [ 413.838487][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.852234][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 413.866608][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 413.888157][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 413.896722][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 413.913492][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 413.936468][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 413.945970][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.251907][ T8335] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 414.268983][ T8335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 414.277407][ T8335] System zones: 0-1, 3-12 [ 414.283323][ T8335] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,bsddf,auto_da_alloc=0x0000000000000000,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,acl,debug,,errors=continue [ 414.306825][ T8335] EXT4-fs (loop1): re-mounted. Opts: (null) [ 414.336980][ T8344] tmpfs: Unknown parameter '/dev/net/tun' [ 415.059794][ T8380] FAT-fs (loop0): Directory bread(block 64) failed [ 415.066224][ T8380] FAT-fs (loop0): Directory bread(block 65) failed [ 415.072744][ T8380] FAT-fs (loop0): Directory bread(block 66) failed [ 415.079872][ T8380] FAT-fs (loop0): Directory bread(block 67) failed [ 415.086470][ T8380] FAT-fs (loop0): Directory bread(block 68) failed [ 415.093784][ T8380] FAT-fs (loop0): Directory bread(block 69) failed [ 415.100786][ T8380] FAT-fs (loop0): Directory bread(block 70) failed [ 415.107344][ T8380] FAT-fs (loop0): Directory bread(block 71) failed [ 415.122469][ T8380] FAT-fs (loop0): Directory bread(block 72) failed [ 415.130364][ T8380] FAT-fs (loop0): Directory bread(block 73) failed [ 415.165891][ T8380] attempt to access beyond end of device [ 415.165891][ T8380] loop0: rw=2049, want=1344, limit=256 [ 415.511149][ T8403] syz.0.2298[8403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.511200][ T8403] syz.0.2298[8403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.523897][ T8403] bridge0: port 3(ip6gretap0) entered blocking state [ 415.541790][ T8403] bridge0: port 3(ip6gretap0) entered disabled state [ 415.548985][ T8403] device ip6gretap0 entered promiscuous mode [ 415.554984][ T8403] bridge0: port 3(ip6gretap0) entered blocking state [ 415.561499][ T8403] bridge0: port 3(ip6gretap0) entered forwarding state [ 415.757564][ T8414] syz.0.2303[8414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.757616][ T8414] syz.0.2303[8414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.906695][ T8422] FAT-fs (loop1): Directory bread(block 64) failed [ 415.924323][ T8422] FAT-fs (loop1): Directory bread(block 65) failed [ 415.930893][ T8422] FAT-fs (loop1): Directory bread(block 66) failed [ 415.937395][ T8422] FAT-fs (loop1): Directory bread(block 67) failed [ 415.943824][ T8422] FAT-fs (loop1): Directory bread(block 68) failed [ 415.950298][ T8422] FAT-fs (loop1): Directory bread(block 69) failed [ 415.956683][ T8422] FAT-fs (loop1): Directory bread(block 70) failed [ 415.964735][ T8422] FAT-fs (loop1): Directory bread(block 71) failed [ 415.971248][ T8422] FAT-fs (loop1): Directory bread(block 72) failed [ 415.977746][ T8422] FAT-fs (loop1): Directory bread(block 73) failed [ 416.009666][ T8422] attempt to access beyond end of device [ 416.009666][ T8422] loop1: rw=2049, want=1344, limit=256 [ 416.179070][ T23] kauditd_printk_skb: 42 callbacks suppressed [ 416.179078][ T23] audit: type=1400 audit(1719576124.869:523): avc: denied { audit_write } for pid=8432 comm="syz.4.2311" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 416.207532][ T23] audit: type=1107 audit(1719576124.869:524): pid=8432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 416.244529][ T8438] syz.0.2314[8438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.244565][ T8438] syz.0.2314[8438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.393815][ T8446] syz.2.2318[8446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.409103][ T8446] syz.2.2318[8446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.670186][ T23] audit: type=1400 audit(1719576125.359:525): avc: denied { read } for pid=8458 comm="syz.4.2326" name="msr" dev="devtmpfs" ino=9168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 416.704090][ T23] audit: type=1400 audit(1719576125.359:526): avc: denied { open } for pid=8458 comm="syz.4.2326" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 416.785954][ T8460] FAT-fs (loop1): Directory bread(block 64) failed [ 416.793065][ T8460] FAT-fs (loop1): Directory bread(block 65) failed [ 416.799533][ T8460] FAT-fs (loop1): Directory bread(block 66) failed [ 416.808410][ T8460] FAT-fs (loop1): Directory bread(block 67) failed [ 416.814934][ T23] audit: type=1400 audit(1719576125.499:527): avc: denied { remount } for pid=8458 comm="syz.4.2326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 416.818224][ T8460] FAT-fs (loop1): Directory bread(block 68) failed [ 416.841338][ T8460] FAT-fs (loop1): Directory bread(block 69) failed [ 416.848051][ T8460] FAT-fs (loop1): Directory bread(block 70) failed [ 416.854395][ T8460] FAT-fs (loop1): Directory bread(block 71) failed [ 416.861474][ T8460] FAT-fs (loop1): Directory bread(block 72) failed [ 416.867995][ T8460] FAT-fs (loop1): Directory bread(block 73) failed [ 416.951558][ T8460] attempt to access beyond end of device [ 416.951558][ T8460] loop1: rw=2049, want=1344, limit=256 [ 417.153665][ T8477] bridge0: port 3(ip6gretap0) entered blocking state [ 417.167174][ T8477] bridge0: port 3(ip6gretap0) entered disabled state [ 417.178574][ T8477] device ip6gretap0 entered promiscuous mode [ 417.189127][ T8477] bridge0: port 3(ip6gretap0) entered blocking state [ 417.195761][ T8477] bridge0: port 3(ip6gretap0) entered forwarding state [ 417.886744][ T8497] FAT-fs (loop0): Directory bread(block 64) failed [ 417.893805][ T8497] FAT-fs (loop0): Directory bread(block 65) failed [ 417.900804][ T8497] FAT-fs (loop0): Directory bread(block 66) failed [ 417.907518][ T8497] FAT-fs (loop0): Directory bread(block 67) failed [ 417.909204][ T8496] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 417.914598][ T8497] FAT-fs (loop0): Directory bread(block 68) failed [ 417.923839][ T8496] ext4 filesystem being mounted at /root/syzkaller.qibGNU/349/file0 supports timestamps until 2038 (0x7fffffff) [ 417.929484][ T8497] FAT-fs (loop0): Directory bread(block 69) failed [ 417.947343][ T8497] FAT-fs (loop0): Directory bread(block 70) failed [ 417.953924][ T8497] FAT-fs (loop0): Directory bread(block 71) failed [ 417.960766][ T8497] FAT-fs (loop0): Directory bread(block 72) failed [ 417.967185][ T8497] FAT-fs (loop0): Directory bread(block 73) failed [ 418.014162][ T8497] attempt to access beyond end of device [ 418.014162][ T8497] loop0: rw=2049, want=1344, limit=256 [ 418.089604][ T8509] bpf_get_probe_write_proto: 4 callbacks suppressed [ 418.089609][ T8509] syz.4.2343[8509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.089640][ T8509] syz.4.2343[8509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 418.110541][ T8509] bridge0: port 3(ip6gretap0) entered blocking state [ 418.128776][ T8509] bridge0: port 3(ip6gretap0) entered disabled state [ 418.136060][ T8509] device ip6gretap0 entered promiscuous mode [ 418.143032][ T8509] bridge0: port 3(ip6gretap0) entered blocking state [ 418.149769][ T8509] bridge0: port 3(ip6gretap0) entered forwarding state [ 419.356921][ T23] audit: type=1400 audit(1719576128.039:528): avc: denied { ioctl } for pid=8551 comm="syz.3.2361" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 419.588631][ T23] audit: type=1400 audit(1719576128.279:529): avc: denied { mounton } for pid=8551 comm="syz.3.2361" path="/root/syzkaller.na06HQ/324/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 419.664318][ T8563] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 419.671639][ T8563] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 420.119621][ T23] audit: type=1326 audit(1719576128.809:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 420.145669][ T23] audit: type=1326 audit(1719576128.809:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 420.169516][ T23] audit: type=1326 audit(1719576128.819:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8594 comm="syz.0.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 421.183682][ T8626] syz.3.2390[8626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.183734][ T8626] syz.3.2390[8626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.301179][ T8631] serio: Serial port pts0 [ 421.984740][ T23] kauditd_printk_skb: 10 callbacks suppressed [ 421.984748][ T23] audit: type=1400 audit(1719576130.669:543): avc: denied { getopt } for pid=8656 comm="syz.0.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 422.066877][ T23] audit: type=1107 audit(1719576130.749:544): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 422.888669][ T23] audit: type=1400 audit(1719576131.579:545): avc: denied { nlmsg_write } for pid=8685 comm="syz.0.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.125216][ T23] audit: type=1326 audit(1719576131.809:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 423.151459][ T23] audit: type=1326 audit(1719576131.809:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 423.175220][ T23] audit: type=1326 audit(1719576131.839:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 423.198551][ T23] audit: type=1326 audit(1719576131.839:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 423.223685][ T23] audit: type=1326 audit(1719576131.839:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 423.248146][ T23] audit: type=1326 audit(1719576131.839:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 423.273222][ T23] audit: type=1326 audit(1719576131.839:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3127aceb29 code=0x7ffc0000 [ 424.012154][ T8724] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ü·M6°' [ 424.744586][ T8756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2440'. [ 424.753782][ T8756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2440'. [ 424.806458][ T8757] attempt to access beyond end of device [ 424.806458][ T8757] loop4: rw=0, want=241, limit=128 [ 424.848856][ T7003] attempt to access beyond end of device [ 424.848856][ T7003] loop4: rw=1, want=1041, limit=128 [ 425.353533][ T8788] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8788 comm=syz.4.2456 [ 425.372959][ T8788] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2456'. [ 425.546163][ T8797] syz.3.2461[8797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.546212][ T8797] syz.3.2461[8797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.645251][ T8802] syz.2.2464 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 426.180392][ T8830] device wireguard0 entered promiscuous mode [ 426.192083][ T8830] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2475'. [ 426.201359][ T8830] PF_BRIDGE: br_mdb_parse() with unknown ifindex [ 426.520909][ T8851] bridge0: port 4(veth0_to_bridge) entered blocking state [ 426.527966][ T8851] bridge0: port 4(veth0_to_bridge) entered disabled state [ 426.535351][ T8851] device veth0_to_bridge entered promiscuous mode [ 426.545540][ T8851] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 426.558152][ T8851] bridge0: port 4(veth0_to_bridge) entered blocking state [ 426.565071][ T8851] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 426.598738][ T8848] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 427.115596][ T8876] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 427.125515][ T8876] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 427.135272][ T8876] EXT4-fs (loop2): Ignoring removed nobh option [ 427.141679][ T8876] EXT4-fs (loop2): Ignoring removed nobh option [ 427.150233][ T8876] EXT4-fs (loop2): orphan cleanup on readonly fs [ 427.156824][ T8876] EXT4-fs error (device loop2): ext4_find_extent:963: inode #4: comm syz.2.2497: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 427.174190][ T8876] EXT4-fs (loop2): Remounting filesystem read-only [ 427.180887][ T8876] __quota_error: 24 callbacks suppressed [ 427.180895][ T8876] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 427.195899][ T8876] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 427.210475][ T8876] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 427.216952][ T8876] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,jqfmt=vfsv1,errors=remount-ro,jqfmt=vfsold,nolazytime,auto_da_alloc,nobh,nobh,sb=0x0000000000000006, [ 427.499360][ T8896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2506'. [ 427.609495][ T23] audit: type=1326 audit(1719576136.299:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.1.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce55fb29 code=0x7ffc0000 [ 427.633158][ T23] audit: type=1326 audit(1719576136.299:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.1.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce55fb29 code=0x7ffc0000 [ 427.657176][ T23] audit: type=1326 audit(1719576136.309:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.1.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7effce55fb29 code=0x7ffc0000 [ 427.680267][ T23] audit: type=1326 audit(1719576136.309:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.1.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce55fb29 code=0x7ffc0000 [ 427.703696][ T23] audit: type=1326 audit(1719576136.309:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.1.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce55fb29 code=0x7ffc0000 [ 427.726893][ T23] audit: type=1326 audit(1719576136.309:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.1.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7effce55fb29 code=0x7ffc0000 [ 427.750061][ T23] audit: type=1326 audit(1719576136.309:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.1.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce55fb29 code=0x7ffc0000 [ 427.773131][ T23] audit: type=1326 audit(1719576136.309:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.1.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effce55fb29 code=0x7ffc0000 [ 427.784498][ T8907] serio: Serial port pts0 [ 427.797322][ T23] audit: type=1326 audit(1719576136.309:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.1.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7effce55fb29 code=0x7ffc0000 [ 428.128579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:a7:be:93:a9:e8, vlan:0) [ 428.140663][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.152744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.164624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.176828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:a7:be:93:a9:e8, vlan:0) [ 428.189020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.201004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.212869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 428.224775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:a7:be:93:a9:e8, vlan:0) [ 428.236877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.261152][ T8914] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 428.271752][ T8914] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 428.282627][ T8914] EXT4-fs (loop4): Ignoring removed nobh option [ 428.289809][ T8914] EXT4-fs (loop4): Ignoring removed nobh option [ 428.306524][ T8914] EXT4-fs (loop4): orphan cleanup on readonly fs [ 428.313180][ T8914] EXT4-fs error (device loop4): ext4_find_extent:963: inode #4: comm syz.4.2512: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 428.331144][ T8914] EXT4-fs (loop4): Remounting filesystem read-only [ 428.338680][ T8914] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 428.353889][ T8914] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 428.360564][ T8914] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,jqfmt=vfsv1,errors=remount-ro,jqfmt=vfsold,nolazytime,auto_da_alloc,nobh,nobh,sb=0x0000000000000006, [ 430.023676][ T8952] device pim6reg1 entered promiscuous mode [ 430.248880][ T8957] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 430.258647][ T8957] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 430.268407][ T8957] EXT4-fs (loop4): Ignoring removed nobh option [ 430.274545][ T8957] EXT4-fs (loop4): Ignoring removed nobh option [ 430.283397][ T8957] EXT4-fs (loop4): orphan cleanup on readonly fs [ 430.289972][ T8957] EXT4-fs error (device loop4): ext4_find_extent:963: inode #4: comm syz.4.2529: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 430.307473][ T8957] EXT4-fs (loop4): Remounting filesystem read-only [ 430.314280][ T8957] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 430.330423][ T8957] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 430.336829][ T8957] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,jqfmt=vfsv1,errors=remount-ro,jqfmt=vfsold,nolazytime,auto_da_alloc,nobh,nobh,sb=0x0000000000000006, [ 430.699571][ T8964] EXT4-fs error (device loop2): ext4_orphan_get:1260: comm syz.2.2531: bad orphan inode 8192 [ 430.710376][ T8964] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 430.784324][ T8964] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 430.794858][ T8964] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 430.805050][ T8960] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 430.815653][ T8960] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 430.825927][ T8960] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 430.835750][ T8960] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 430.846779][ T8960] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 430.864821][ T8960] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 430.875044][ T8960] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 430.884982][ T8960] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 431.337157][ T8979] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.346279][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.354127][ T8979] device bridge_slave_0 entered promiscuous mode [ 431.362538][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.369996][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.377521][ T8979] device bridge_slave_1 entered promiscuous mode [ 431.482468][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.489341][ T8979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.496453][ T8979] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.503308][ T8979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.551028][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.561907][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.570294][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.594011][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.610251][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.617112][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.631002][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.640858][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.647685][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.677748][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.690271][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.703324][ T384] device bridge_slave_1 left promiscuous mode [ 431.710267][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.727703][ T384] device bridge_slave_0 left promiscuous mode [ 431.734270][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.178814][ T8996] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 432.189224][ T8996] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 432.198990][ T8996] EXT4-fs (loop4): Ignoring removed nobh option [ 432.205079][ T8996] EXT4-fs (loop4): Ignoring removed nobh option [ 432.217625][ T8996] EXT4-fs (loop4): orphan cleanup on readonly fs [ 432.224294][ T8996] EXT4-fs error (device loop4): ext4_find_extent:963: inode #4: comm syz.4.2546: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 432.242894][ T8996] EXT4-fs (loop4): Remounting filesystem read-only [ 432.251595][ T8996] __quota_error: 12 callbacks suppressed [ 432.251606][ T8996] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 432.275885][ T8996] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 432.291396][ T8996] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 432.308046][ T8996] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,jqfmt=vfsv1,errors=remount-ro,jqfmt=vfsold,nolazytime,auto_da_alloc,nobh,nobh,sb=0x0000000000000006, [ 432.404740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.414510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.433222][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.442703][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.458747][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.467685][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.484150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.493343][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.502071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.512966][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.137951][ C1] net_ratelimit: 65995 callbacks suppressed [ 433.137958][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.155799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.167906][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.179775][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:a7:be:93:a9:e8, vlan:0) [ 433.191843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.203623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.215571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.227456][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:a7:be:93:a9:e8, vlan:0) [ 433.239616][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 433.251532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 433.645406][ T9020] syz.4.2555[9020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.645500][ T9020] syz.4.2555[9020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.724534][ T9039] loop3: p1 < > p4 [ 434.742272][ T9039] loop3: p4 size 8388608 extends beyond EOD, truncated [ 434.831694][ T162] loop3: p1 < > p4 [ 434.836089][ T162] loop3: p4 size 8388608 extends beyond EOD, truncated [ 434.851030][ T23] audit: type=1400 audit(1719576143.539:596): avc: denied { write } for pid=9035 comm="syz.3.2563" name="loop3p1" dev="devtmpfs" ino=62153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 435.047477][ T9043] overlayfs: failed to resolve './file0': -2 [ 437.712332][ T9098] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2588'. [ 438.007495][ T23] audit: type=1400 audit(1719576146.689:597): avc: denied { mounton } for pid=9100 comm="syz.0.2591" path="/root/syzkaller.EZVuKD/520/file0/file2" dev="tmpfs" ino=62491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 438.034190][ T9105] overlayfs: upper fs does not support tmpfile. [ 438.139595][ T9107] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 438.147849][ C1] net_ratelimit: 68003 callbacks suppressed [ 438.147858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.166294][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.178189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:a7:be:93:a9:e8, vlan:0) [ 438.190161][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.202121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.214063][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.225957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:a6:a7:be:93:a9:e8, vlan:0) [ 438.238226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 438.250040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.261811][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 438.302046][ T9109] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 438.320101][ T23] audit: type=1400 audit(1719576147.009:598): avc: denied { map } for pid=9101 comm="syz.2.2592" path="/root/syzkaller.1bYL21/8/file0/bus" dev="devtmpfs" ino=9191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.506980][ T23] audit: type=1400 audit(1719576147.189:599): avc: denied { name_bind } for pid=9103 comm="syz.1.2590" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 438.607930][ T8979] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 438.638334][ T8979] EXT4-fs error (device loop2): __ext4_iget:5217: inode #13: block 127754: comm syz-executor: invalid block [ 438.667597][ T8979] EXT4-fs error (device loop2): __ext4_iget:5217: inode #13: block 127754: comm syz-executor: invalid block [ 438.781789][ T9111] ------------[ cut here ]------------ [ 438.787067][ T9111] kernel BUG at fs/buffer.c:3027! [ 438.798398][ T9111] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 438.804388][ T9111] CPU: 0 PID: 9111 Comm: kmmpd-loop2 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 438.815478][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 438.825410][ T9111] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 438.830593][ T9111] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 f6 a7 ba ff 0f 0b e8 ef a7 ba ff <0f> 0b e8 e8 a7 ba ff 0f 0b e8 e1 a7 ba ff 0f 0b e8 da a7 ba ff 0f [ 438.850120][ T9111] RSP: 0018:ffff8881b7367bf0 EFLAGS: 00010293 [ 438.856017][ T9111] RAX: ffffffff81a99431 RBX: 0000000000000000 RCX: ffff8881e69b4ec0 [ 438.863823][ T9111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 438.871819][ T9111] RBP: 0000000000003800 R08: ffffffff81a98ca4 R09: ffffed10376678be [ 438.879671][ T9111] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 438.887608][ T9111] R13: ffff8881bb33c5e8 R14: 0000000000000001 R15: 0000000000000000 [ 438.895423][ T9111] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 438.904185][ T9111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.910652][ T9111] CR2: 00007f2828949453 CR3: 00000001da172000 CR4: 00000000003406b0 [ 438.918420][ T9111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 438.926231][ T9111] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 438.934038][ T9111] Call Trace: [ 438.937176][ T9111] ? __die+0xb4/0x100 [ 438.940992][ T9111] ? die+0x26/0x50 [ 438.944550][ T9111] ? do_trap+0x1e7/0x340 [ 438.948725][ T9111] ? submit_bh_wbc+0x831/0x850 [ 438.953322][ T9111] ? submit_bh_wbc+0x831/0x850 [ 438.957915][ T9111] ? do_invalid_op+0xfb/0x110 [ 438.962428][ T9111] ? submit_bh_wbc+0x831/0x850 [ 438.967115][ T9111] ? invalid_op+0x1e/0x30 [ 438.971285][ T9111] ? submit_bh_wbc+0xa4/0x850 [ 438.975804][ T9111] ? submit_bh_wbc+0x831/0x850 [ 438.980482][ T9111] ? submit_bh_wbc+0x831/0x850 [ 438.985083][ T9111] ? debug_smp_processor_id+0x20/0x20 [ 438.990295][ T9111] submit_bh+0x21/0x30 [ 438.994208][ T9111] write_mmp_block+0x3ff/0x5b0 [ 438.998800][ T9111] ? console_conditional_schedule+0x10/0x10 [ 439.004541][ T9111] ? check_preemption_disabled+0x9f/0x320 [ 439.010081][ T9111] ? read_mmp_block+0x8a0/0x8a0 [ 439.014768][ T9111] kmmpd+0x7de/0xa10 [ 439.018504][ T9111] ? write_mmp_block+0x5b0/0x5b0 [ 439.023274][ T9111] ? __wake_up_locked+0xb7/0x110 [ 439.028044][ T9111] ? __kthread_parkme+0xb0/0x1b0 [ 439.032948][ T9111] kthread+0x2da/0x360 [ 439.036848][ T9111] ? write_mmp_block+0x5b0/0x5b0 [ 439.041718][ T9111] ? kthread_blkcg+0xd0/0xd0 [ 439.046137][ T9111] ret_from_fork+0x1f/0x30 [ 439.050385][ T9111] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 439.063831][ T23] audit: type=1400 audit(1719576147.749:600): avc: denied { write } for pid=342 comm="syz-executor" path="pipe:[10511]" dev="pipefs" ino=10511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 439.064022][ T9111] ---[ end trace 381f6ce104c0be47 ]--- [ 439.095869][ T9111] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 439.108855][ T9111] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 f6 a7 ba ff 0f 0b e8 ef a7 ba ff <0f> 0b e8 e8 a7 ba ff 0f 0b e8 e1 a7 ba ff 0f 0b e8 da a7 ba ff 0f [ 439.132831][ T9111] RSP: 0018:ffff8881b7367bf0 EFLAGS: 00010293 [ 439.141111][ T9111] RAX: ffffffff81a99431 RBX: 0000000000000000 RCX: ffff8881e69b4ec0 [ 439.149887][ T9111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 439.157758][ T9111] RBP: 0000000000003800 R08: ffffffff81a98ca4 R09: ffffed10376678be [ 439.166104][ T9111] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 439.174864][ T9111] R13: ffff8881bb33c5e8 R14: 0000000000000001 R15: 0000000000000000 [ 439.184041][ T9111] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 439.193073][ T9111] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 439.200744][ T9111] CR2: 00007f52d382efa3 CR3: 00000001de9b8000 CR4: 00000000003406b0 [ 439.209013][ T9111] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 439.216971][ T9111] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 439.226830][ T9111] Kernel panic - not syncing: Fatal exception [ 439.233018][ T9111] Kernel Offset: disabled [ 439.237137][ T9111] Rebooting in 86400 seconds..