last executing test programs: 4.820711944s ago: executing program 1: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", 0x0}, 0x38) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="11000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014"], 0x44}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x10200}], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.806041126s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000100)=0x85, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='objagg_obj_parent_unassign\x00'}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="720ac9ff002100007110a10000000000950000000000080069c80a5e5d2065c69cd8dd8b77401fb2bd140642e234330569bfdd7fd743d8b7bccfabfa8241313df2eef11651c14099189407badd91b1ddc6f8b7"], &(0x7f0000000480)='GPL\x00'}, 0x80) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) 2.561726474s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000100)=0x85, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='objagg_obj_parent_unassign\x00'}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="720ac9ff002100007110a10000000000950000000000080069c80a5e5d2065c69cd8dd8b77401fb2bd140642e234330569bfdd7fd743d8b7bccfabfa8241313df2eef11651c14099189407badd91b1ddc6f8b7"], &(0x7f0000000480)='GPL\x00'}, 0x80) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}]}}) 2.526566829s ago: executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00'}) 1.535386592s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000080)='./bus\x00', 0xa942, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newtaction={0xe68, 0x30, 0x0, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r2, 0x7ff, 0x0) getdents64(r2, 0x0, 0x10) 1.48544731s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) 1.481471621s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000120000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) 1.371321508s ago: executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000380)) 1.150664472s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.148890132s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000a00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff}]}) 1.09893963s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0016801800018014000a00000007834133860d032b000000000000080004"], 0x44}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x22}}]}, 0x78}}, 0x0) 1.066821734s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001bc0)=@newneigh={0x24, 0x1c, 0x1, 0x0, 0x0, {}, [@NDA_DST_IPV4={0x8, 0xe, @multicast2}]}, 0x24}}, 0x0) 914.842488ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000070000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='jbd2_checkpoint_stats\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x20001412) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000f5110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup2(r6, r5) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40001) 709.17825ms ago: executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0) 693.287543ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syncfs(r1) 680.999765ms ago: executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00'}) 383.52861ms ago: executing program 3: sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'vlan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) pwrite64(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) symlink(0x0, &(0x7f00000000c0)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 380.000581ms ago: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 378.299251ms ago: executing program 4: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) epoll_create1(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 337.902078ms ago: executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000380)) 326.498959ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000120000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mballoc_alloc\x00', r2}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) 316.514201ms ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x35a, &(0x7f0000000b00)="$eJzs3c9rI2UYwPEnaTa/lm1yEEVB+qAXvQxt9KwG2QUx4NLdiLuCMLudaMiYlEyoRMTWk1fx5j8guOxxbwX1H+jFWwXx4q2XgqBFxJH51ebHJGnSlLTb7wdKnsn7PpP3TUJ43oF5e/DBN582ao5RMzuSzKokRESORIqSlEgifEz6cVp67cir1//cf/HOvfvvliuVm+uqt8p3Xyup6vLKj599kQu77WZkr/jRwWHpj71n954/+O/uJ3VH6442Wx019UHr9475wLZ0o+40DNXbtmU6ltabjtUO2ltBe81ubW521Wxu3Mhvti3HUbPZ1YbV1U5LO+2umh+b9aYahqE38nK1ZGfIqT5aXzfLM77gwxnzMG//uK47prndLptLIkZuqKX66FzHBQAALqSB+v+7qEYoSvK4oEz0rQWG6/8o9ut/b7FwUv8/funnzvX3nyyH9f9uOq7+f/3XIL+v/vdefe71/w8Dx8MV0aW3PU3nM9X/uBhW0kNPJfqOvPo/H67ffV99+HjVD6j/AQAAAAAAAAAAAAAAAAAAAAC4DI5ct+C6biF6jP5ObiEIj6OjcTca49IZ9flnwh0Fjr8PeCrduXdfsv6Ne6llEfvrrepWNXgM26OOq1KQf/3vQyjYcGLHb1RPUX6yt8P87a3qkt9SFlGxxZI1KUixL9+Pb71Tubmmgf78RCrv5dek7ueXpCDPxOeXYvPT8srLPfmGFOSXh9ISWzbC37Eo/8s11bffqwzk5/x+cd48/48FAAAAAIC5MlSz4fI5dv1uGKpx7d5aXnrX58PXB47X16ux6/NU4YXUYucOAAAAAMBV4aQ/b5i2bbWd7sggJ5P6ZMKzjT9PfJCaprMX7PvBtXF9lnpm2NsU7ZQal5UO/4PGFIMPziNHwQWP02T9lZHYNzN2YNkzvKumHc3/FJ2z034EbScZ+x5OCla88ehM0+kJostGo/rI7VnPPCqIds79bULn5779/u/ZXiIR7trb2/TGk+yEmfpBYuCZnQlf2kPXnTiea+f1ewMAAABgcaKiP+dEz7y12AEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAFzXWbtBHBoucIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXBT/BwAA//8L3Pjk") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'syz_tun\x00', 0x400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4}, 0x50) read$FUSE(r2, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r7}, 0x10) syz_fuse_handle_req(r2, &(0x7f00000070c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x24}}) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 282.882266ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet6(0xa, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) 250.632091ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) 249.905421ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000080)='./bus\x00', 0xa942, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newtaction={0xe68, 0x30, 0x0, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r2, 0x7ff, 0x0) getdents64(r2, 0x0, 0x10) 241.850012ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 214.716607ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$eJzs28tvG8UfAPDvrpP019cvoZRHH0CgICIeSZMW6IEDIJA4FAkJDnCMkrQqdRvUBIlWFRSEygkhJO6II/8CJ7ggxAmJK9xRpQr10paT0dq7ie3YbuLaNcWfj7TtzO5sZr7eHXtmxw5gaE1m/yQRuyLi94gYr2UbC0zW/rtx7eLCzWsXF5KoVN76K6mWu37t4kJRtDhvZ56ZSiPSz5I40KLelfMXTs+Xy0vn8vzM6pn3Z1bOX3j21Jn5k0snl87OHTt29MjsC8/PPdeTOLM2Xd//0fLBfa+/+9Ubx79oiL8pjh6Z7HTwiUqlx9UN1u66dDIywIawJaWIyC7XaLX/j0cp1i/eeLz26UAbB/RVpVKp7Gx/+FIF+A9LojGvy8OwKD7os/lvsTUPAl7q3/Bj4K6+XJsAZXHfyLfakZFI8zKjTfPbXpqMiHcu/f1NtkV/nkMAADT4IRv/PNNq/JfG/XXl/p+vDU1ExD0RsSci7o2IvRFxX0S17AMR8eAW629eJNk4/kmvdBXYJmXjvxfzta3G8V8x+ouJUp7bXY1/NDlxqrx0OH9NpmJ0W5af7VDHj6/+9mW7Y/Xjv2zL6i/Ggnk7roxsazxncX51/nZirnf1k4j9I63iT9ZWApKI2BcR+7us49RT3x1sd+zW8XfQg3WmyrcRT9au/6Voir+QdF6fnPlflJcOzxR3xUa//Hr5zXb131b8PZBd/x0t7/+1+CeS+vXala3XcfmPz9vOabq9/8eSt6vpsXzfh/Orq+dmI8aS47VG1++fWz+3yBfls/inDrXu/3ti/ZU4EBHZTfxQRDwcEY/kbX80Ih6LiEMd4v/5lcff6z7+/sriX9zS9V9PjEXzntaJ0umfvm+odGJD/Dc7X/+j1dRUvmcz73+baVd3dzMAAADcfdKI2BVJOr2WTtPp6dr35ffGjrS8vLL69InlD84u1n4jMBGjafGka7zueehsPq0v8nNR+2pBkT+SPzf+urS9mp9eWC4vDjp4GHI72/T/zJ+lQbcO6Du/14Lhpf/D8NL/YXjp/zC8WvT/7YNoB3Dntfr8/3gA7QDuvKb+b9kPhoj5Pwwv/R+Gl/4PQ2lle9z6R/IdE8Vf6vJ0ibs0Eem/ohkSfUoM9n0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/4JAAD//3sE4iY=") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 77.484558ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syncfs(r1) 1.052879ms ago: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0016801800018014000a00000007834133860d032b000000000000080004"], 0x44}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x22}}]}, 0x78}}, 0x0) 0s ago: executing program 4: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'vlan0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts. 2024/06/14 16:47:23 fuzzer started 2024/06/14 16:47:23 dialing manager at 10.128.0.163:30008 [ 20.352697][ T30] audit: type=1400 audit(1718383643.601:66): avc: denied { node_bind } for pid=282 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.372983][ T30] audit: type=1400 audit(1718383643.601:67): avc: denied { name_bind } for pid=282 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 106.933051][ T30] audit: type=1400 audit(1718383730.181:68): avc: denied { integrity } for pid=379 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 106.937587][ T379] cgroup: Unknown subsys name 'net' [ 106.969064][ T379] cgroup: Unknown subsys name 'devices' [ 106.978793][ T30] audit: type=1400 audit(1718383730.181:69): avc: denied { mounton } for pid=379 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 107.001303][ T30] audit: type=1400 audit(1718383730.181:70): avc: denied { mount } for pid=379 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.023793][ T30] audit: type=1400 audit(1718383730.211:71): avc: denied { setattr } for pid=380 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.046961][ T30] audit: type=1400 audit(1718383730.211:72): avc: denied { unmount } for pid=379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.053496][ T387] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 107.067107][ T30] audit: type=1400 audit(1718383730.211:73): avc: denied { mounton } for pid=382 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 107.099544][ T30] audit: type=1400 audit(1718383730.211:74): avc: denied { mount } for pid=382 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 107.122732][ T30] audit: type=1400 audit(1718383730.331:75): avc: denied { relabelto } for pid=387 comm="mkswap" name="swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 107.141375][ T386] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.147880][ T30] audit: type=1400 audit(1718383730.331:76): avc: denied { write } for pid=387 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 107.181840][ T30] audit: type=1400 audit(1718383730.371:77): avc: denied { read } for pid=386 comm="syz-executor" name="swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 107.261897][ T379] cgroup: Unknown subsys name 'hugetlb' [ 107.267347][ T379] cgroup: Unknown subsys name 'rlimit' 2024/06/14 16:48:50 starting 5 executor processes [ 107.558836][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.565807][ T395] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.573185][ T395] device bridge_slave_0 entered promiscuous mode [ 107.584417][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.591277][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.598489][ T396] device bridge_slave_0 entered promiscuous mode [ 107.606217][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.613113][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.620372][ T396] device bridge_slave_1 entered promiscuous mode [ 107.631383][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.638220][ T395] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.645481][ T395] device bridge_slave_1 entered promiscuous mode [ 107.702983][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.709860][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.717019][ T397] device bridge_slave_0 entered promiscuous mode [ 107.725105][ T397] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.732081][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.739212][ T397] device bridge_slave_1 entered promiscuous mode [ 107.776413][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.783346][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.790641][ T399] device bridge_slave_0 entered promiscuous mode [ 107.797232][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.804197][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.811409][ T399] device bridge_slave_1 entered promiscuous mode [ 107.868258][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.875142][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.882351][ T398] device bridge_slave_0 entered promiscuous mode [ 107.902111][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.908954][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.916208][ T398] device bridge_slave_1 entered promiscuous mode [ 108.042617][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.049583][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.056657][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.063461][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.087162][ T397] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.094031][ T397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.101212][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.107984][ T397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.117396][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.124259][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.131378][ T395] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.138135][ T395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.146575][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.153435][ T398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.160543][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.167310][ T398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.178923][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.185825][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.192908][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.199674][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.255524][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.262733][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.270308][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.277346][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.284325][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.292363][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.299665][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.306723][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.313809][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.321245][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.328464][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.340110][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.348203][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.355084][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.362412][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.370439][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.377262][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.402986][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.410741][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.418536][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.425943][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.433881][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.440725][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.447866][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.455045][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.462240][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.470224][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.477057][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.484281][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.492266][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.499088][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.522856][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.530853][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.537676][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.545293][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.553242][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.560122][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.567206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.575295][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.582130][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.589353][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.597117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.604837][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.619567][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.627469][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.635463][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.643522][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.660074][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.668229][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.676422][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.683270][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.690445][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.698544][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.706906][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.713752][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.721065][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.728756][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.736540][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.744417][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.752212][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.760159][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.786300][ T398] device veth0_vlan entered promiscuous mode [ 108.795159][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.803129][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.810416][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.817653][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.825671][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.833569][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.841434][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.849226][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.857536][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.865709][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.873931][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.891910][ T396] device veth0_vlan entered promiscuous mode [ 108.903013][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.911267][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.919352][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.927749][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.935961][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.944046][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.952135][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.959360][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.971894][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.979867][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.987636][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.995646][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.003688][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.011048][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.021074][ T397] device veth0_vlan entered promiscuous mode [ 109.027724][ T395] device veth0_vlan entered promiscuous mode [ 109.038149][ T398] device veth1_macvtap entered promiscuous mode [ 109.045354][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.053561][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.061329][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.069315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.076773][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.086768][ T396] device veth1_macvtap entered promiscuous mode [ 109.099837][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.107323][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.115713][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.128227][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.136763][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.152046][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.160030][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.168052][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.176174][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.184599][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.192662][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.202666][ T399] device veth0_vlan entered promiscuous mode [ 109.212009][ T397] device veth1_macvtap entered promiscuous mode [ 109.226423][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.234304][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.242118][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.250108][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.257984][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.265786][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.273237][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.303794][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.305847][ T423] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 109.314006][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.354534][ T395] device veth1_macvtap entered promiscuous mode [ 109.371868][ T399] device veth1_macvtap entered promiscuous mode [ 109.380285][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.387747][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.396511][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.404791][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.414243][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.422571][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.440213][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.448610][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.456956][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.465281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.487316][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.502692][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.511081][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.519121][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.527802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.535982][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.710532][ T433] syz-executor.3 (433) used greatest stack depth: 22112 bytes left [ 110.398207][ T501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.414941][ T498] syz-executor.3 (498) used greatest stack depth: 21048 bytes left [ 110.428921][ T501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.462165][ T507] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.622222][ T528] device syzkaller0 entered promiscuous mode [ 110.629107][ T533] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 110.649376][ T533] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 110.707306][ T539] device batadv_slave_0 entered promiscuous mode [ 110.742476][ T538] device batadv_slave_0 left promiscuous mode [ 111.045788][ T563] incfs: Can't find or create .index dir in ./file0 [ 111.053131][ T563] incfs: mount failed -14 [ 111.080088][ T570] device syzkaller0 entered promiscuous mode [ 111.147563][ T579] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 111.190316][ T589] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.244932][ T589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=589 comm=syz-executor.2 [ 111.310848][ T605] ======================================================= [ 111.310848][ T605] WARNING: The mand mount option has been deprecated and [ 111.310848][ T605] and is ignored by this kernel. Remove the mand [ 111.310848][ T605] option from the mount to silence this warning. [ 111.310848][ T605] ======================================================= [ 111.354937][ T608] tipc: Started in network mode [ 111.360070][ T608] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 111.369338][ T608] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 111.377902][ T608] tipc: Enabled bearer , priority 10 [ 111.395200][ T616] ICMPv6: NA: 8b:8e:ff:bd:a5:07 advertised our address fe80::aa on syz_tun! [ 111.524505][ T640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.534957][ T640] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.719612][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.755483][ T674] incfs: Can't find or create .index dir in ./file0 [ 111.762058][ T674] incfs: mount failed -14 [ 111.810452][ T679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=679 comm=syz-executor.0 [ 111.892671][ T687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.902066][ T687] tipc: Started in network mode [ 111.906799][ T687] tipc: Node identity memory.en, cluster identity 8 [ 111.924989][ T690] device batadv_slave_0 entered promiscuous mode [ 111.931831][ T689] device batadv_slave_0 left promiscuous mode [ 111.959575][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 112.042690][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 112.042706][ T30] audit: type=1400 audit(1718383735.291:207): avc: denied { create } for pid=694 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.068887][ T30] audit: type=1400 audit(1718383735.291:208): avc: denied { setopt } for pid=694 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.079801][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.100342][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.110151][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 112.125137][ T20] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 112.127943][ T30] audit: type=1400 audit(1718383735.371:209): avc: denied { ioctl } for pid=696 comm="syz-executor.4" path="socket:[14931]" dev="sockfs" ino=14931 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.134292][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.185511][ T20] usb 4-1: config 0 descriptor?? [ 112.307095][ T30] audit: type=1400 audit(1718383735.551:210): avc: denied { create } for pid=708 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.328678][ T30] audit: type=1400 audit(1718383735.571:211): avc: denied { write } for pid=708 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.377127][ T30] audit: type=1400 audit(1718383735.621:212): avc: denied { setopt } for pid=708 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.418567][ T30] audit: type=1326 audit(1718383735.661:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5e168ea9 code=0x7ffc0000 [ 112.448754][ T30] audit: type=1326 audit(1718383735.661:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efc5e168ea9 code=0x7ffc0000 [ 112.465009][ T721] device syzkaller0 entered promiscuous mode [ 112.478779][ T30] audit: type=1326 audit(1718383735.661:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5e168ea9 code=0x7ffc0000 [ 112.503903][ T611] tipc: Node number set to 1 [ 112.511067][ T30] audit: type=1326 audit(1718383735.661:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=718 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7efc5e168ea9 code=0x7ffc0000 [ 112.561496][ T725] ICMPv6: NA: 8b:8e:ff:bd:a5:07 advertised our address fe80::aa on syz_tun! [ 112.616220][ T733] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 112.670800][ T20] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 112.677537][ T20] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 112.696444][ T20] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 112.722284][ T750] tipc: Enabling of bearer rejected, already enabled [ 112.731595][ T20] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 112.739364][ T20] ntrig 0003:1B96:000A.0001: unknown main item tag 0x0 [ 112.752006][ T20] ntrig 0003:1B96:000A.0001: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 112.838761][ T764] device syzkaller0 entered promiscuous mode [ 112.903914][ T771] tipc: Failed to remove unknown binding: 66,1,1/0:3668674836/3668674838 [ 112.912421][ T771] tipc: Failed to remove unknown binding: 66,1,1/0:3668674836/3668674838 [ 112.921038][ T773] loop0: detected capacity change from 0 to 256 [ 112.945483][ T773] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 112.954447][ T773] FAT-fs (loop0): Filesystem has been set read-only [ 112.972948][ T20] usb 4-1: USB disconnect, device number 2 [ 113.089553][ T388] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.118458][ T792] device syzkaller0 entered promiscuous mode [ 113.195993][ T799] device syzkaller0 entered promiscuous mode [ 113.291985][ T804] device pim6reg1 entered promiscuous mode [ 113.359535][ T388] usb 3-1: Using ep0 maxpacket: 32 [ 113.430807][ T822] SELinux: security_context_str_to_sid(ramfs) failed for (dev ?, type ?) errno=-22 [ 113.440219][ T822] SELinux: security_context_str_to_sid(ramfs) failed for (dev debugfs, type debugfs) errno=-22 [ 113.489702][ T388] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.505297][ T388] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.537972][ T388] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.548047][ T828] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 113.560920][ T828] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 113.565183][ T388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.641021][ T388] hub 3-1:4.0: USB hub found [ 113.665157][ T822] loop4: detected capacity change from 0 to 40427 [ 113.676982][ T832] loop3: detected capacity change from 0 to 256 [ 113.684322][ T822] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 113.692058][ T822] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.700794][ T822] F2FS-fs (loop4): Corrupted extension count (1573 + 1 > 64) [ 113.708132][ T822] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 113.749988][ T611] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.849604][ T388] hub 3-1:4.0: 2 ports detected [ 113.989654][ T611] usb 1-1: Using ep0 maxpacket: 16 [ 114.129855][ T611] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 114.140082][ T611] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 114.149738][ T611] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 114.159300][ T611] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.173799][ T611] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 114.241616][ T841] tipc: Failed to remove unknown binding: 66,1,1/0:3093320519/3093320521 [ 114.250077][ T841] tipc: Failed to remove unknown binding: 66,1,1/0:3093320519/3093320521 [ 114.269608][ T611] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.288834][ T611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.298917][ T611] usb 1-1: SerialNumber: syz [ 114.329622][ T816] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.349974][ T611] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 114.362500][ T843] device pim6reg1 entered promiscuous mode [ 114.389988][ T388] hub 3-1:4.0: set hub depth failed [ 114.442805][ T388] usb 3-1: USB disconnect, device number 2 [ 114.501996][ T853] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 114.537389][ T856] incfs: Can't find or create .index dir in ./file0 [ 114.544545][ T856] incfs: mount failed -14 [ 114.551263][ T39] usb 1-1: USB disconnect, device number 2 [ 114.601158][ T864] syz-executor.3 (pid 864) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 114.627081][ T864] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 114.987787][ T889] device veth0_vlan left promiscuous mode [ 114.996166][ T889] device veth0_vlan entered promiscuous mode [ 115.162311][ T895] tipc: Failed to remove unknown binding: 66,1,1/0:732138021/732138023 [ 115.170671][ T895] tipc: Failed to remove unknown binding: 66,1,1/0:732138021/732138023 [ 115.208559][ T899] syz-executor.2 (899) used greatest stack depth: 20096 bytes left [ 115.427594][ T916] loop2: detected capacity change from 0 to 512 [ 115.520181][ T916] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.529722][ T916] EXT4-fs (loop2): group descriptors corrupted! [ 115.687699][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.064931][ T944] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 116.077425][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.093968][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.160111][ T39] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 116.169167][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.178199][ T39] usb 1-1: config 0 descriptor?? [ 116.656313][ T959] device veth0_vlan left promiscuous mode [ 116.664049][ T959] device veth0_vlan entered promiscuous mode [ 117.070363][ T978] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 117.103673][ T982] tipc: Failed to remove unknown binding: 66,1,1/0:3395891851/3395891853 [ 117.112321][ T982] tipc: Failed to remove unknown binding: 66,1,1/0:3395891851/3395891853 [ 117.185513][ T992] syz-executor.1[992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.185587][ T992] syz-executor.1[992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.369518][ T940] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.517285][ T1001] device veth0_vlan left promiscuous mode [ 117.525820][ T1001] device veth0_vlan entered promiscuous mode [ 117.709757][ T39] usb 1-1: string descriptor 0 read error: -71 [ 117.739721][ T39] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 117.748506][ T39] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 117.756915][ T39] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 117.765083][ T39] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 117.772552][ T39] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 117.781376][ T39] usb 1-1: USB disconnect, device number 3 [ 117.874655][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 117.874671][ T30] audit: type=1400 audit(1718383741.121:261): avc: denied { mount } for pid=1011 comm="syz-executor.2" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.909834][ T30] audit: type=1400 audit(1718383741.121:262): avc: denied { remount } for pid=1011 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.940924][ T30] audit: type=1400 audit(1718383741.131:263): avc: denied { unmount } for pid=398 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 117.945641][ T1014] loop2: detected capacity change from 0 to 512 [ 117.967156][ T940] usb 4-1: config 0 has no interfaces? [ 117.972906][ T940] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.982346][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.990923][ T940] usb 4-1: config 0 descriptor?? [ 117.993278][ T1016] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 118.004806][ T1016] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 118.041792][ T1014] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 118.051921][ T1014] EXT4-fs (loop2): group descriptors corrupted! [ 118.276956][ T1034] tipc: Failed to remove unknown binding: 66,1,1/0:2082714473/2082714475 [ 118.285371][ T1034] tipc: Failed to remove unknown binding: 66,1,1/0:2082714473/2082714475 [ 118.310442][ T20] usb 4-1: USB disconnect, device number 3 [ 118.492327][ T1037] loop1: detected capacity change from 0 to 40427 [ 118.552789][ T1037] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 6 [ 118.558973][ T1037] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 119.009719][ T1061] process 'syz-executor.4' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 119.124415][ T1072] SELinux: security_context_str_to_sid(ramfs) failed for (dev ?, type ?) errno=-22 [ 119.149878][ T1072] SELinux: security_context_str_to_sid(ramfs) failed for (dev debugfs, type debugfs) errno=-22 [ 119.167750][ T30] audit: type=1107 audit(1718383742.411:264): pid=1071 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 119.322171][ T1077] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 119.349649][ T1077] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 119.365274][ T1076] loop2: detected capacity change from 0 to 512 [ 119.414216][ T1072] loop1: detected capacity change from 0 to 40427 [ 119.421022][ T1070] loop0: detected capacity change from 0 to 40427 [ 119.460551][ T1072] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.460708][ T1076] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 119.469529][ T1072] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.480490][ T1076] EXT4-fs (loop2): group descriptors corrupted! [ 119.492652][ T1070] F2FS-fs (loop0): Mismatch valid blocks 0 vs. 6 [ 119.498836][ T1070] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 119.507165][ T1072] F2FS-fs (loop1): Corrupted extension count (1573 + 1 > 64) [ 119.519769][ T1072] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 119.869520][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.993388][ T1084] loop3: detected capacity change from 0 to 40427 [ 120.044962][ T30] audit: type=1400 audit(1718383743.291:265): avc: denied { block_suspend } for pid=1094 comm="syz-executor.4" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.070559][ T1084] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 120.078229][ T1084] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 120.087495][ T1084] F2FS-fs (loop3): invalid crc value [ 120.207524][ T1084] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.289740][ T39] usb 3-1: config 0 has no interfaces? [ 120.295497][ T39] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 120.360601][ T1084] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 120.375422][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.391654][ T1084] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.424155][ T39] usb 3-1: config 0 descriptor?? [ 120.583556][ T30] audit: type=1400 audit(1718383743.831:266): avc: denied { write } for pid=1083 comm="syz-executor.3" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.619551][ T30] audit: type=1400 audit(1718383743.831:267): avc: denied { add_name } for pid=1083 comm="syz-executor.3" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.649553][ T30] audit: type=1400 audit(1718383743.831:268): avc: denied { create } for pid=1083 comm="syz-executor.3" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.696351][ T30] audit: type=1400 audit(1718383743.831:269): avc: denied { read append open } for pid=1083 comm="syz-executor.3" path="/root/syzkaller-testdir973623180/syzkaller.CzEXlC/43/bus/memory.events" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.742305][ T416] usb 3-1: USB disconnect, device number 3 [ 120.957764][ T1121] syz-executor.3[1121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.957836][ T1121] syz-executor.3[1121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.025180][ T1126] SELinux: security_context_str_to_sid(ramfs) failed for (dev ?, type ?) errno=-22 [ 121.048072][ T1126] SELinux: security_context_str_to_sid(ramfs) failed for (dev debugfs, type debugfs) errno=-22 [ 121.063114][ T30] audit: type=1107 audit(1718383744.311:270): pid=1124 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 121.198064][ T1126] loop4: detected capacity change from 0 to 40427 [ 121.254428][ T1126] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 121.269251][ T1126] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 121.284581][ T1126] F2FS-fs (loop4): Corrupted extension count (1573 + 1 > 64) [ 121.292904][ T1126] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 123.446047][ T1184] SELinux: security_context_str_to_sid(ramfs) failed for (dev ?, type ?) errno=-22 [ 123.461500][ T1184] SELinux: security_context_str_to_sid(ramfs) failed for (dev debugfs, type debugfs) errno=-22 [ 123.482241][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 123.482285][ T30] audit: type=1107 audit(1718383746.731:281): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 123.627445][ T1182] loop0: detected capacity change from 0 to 40427 [ 123.667717][ T30] audit: type=1400 audit(1718383746.911:282): avc: denied { read } for pid=1190 comm="syz-executor.3" name="file0" dev="incremental-fs" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.691036][ T30] audit: type=1400 audit(1718383746.911:283): avc: denied { open } for pid=1190 comm="syz-executor.3" path="/root/syzkaller-testdir973623180/syzkaller.CzEXlC/54/file0/file0" dev="incremental-fs" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.720478][ T30] audit: type=1400 audit(1718383746.911:284): avc: denied { write } for pid=1190 comm="syz-executor.3" path="/root/syzkaller-testdir973623180/syzkaller.CzEXlC/54/file0/file0" dev="incremental-fs" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.112804][ T1182] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.134498][ T30] audit: type=1326 audit(1718383747.381:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2d23ecea9 code=0x0 [ 124.144868][ T1184] loop4: detected capacity change from 0 to 40427 [ 124.196501][ T1182] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.214281][ T1184] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 124.222180][ T1184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.230779][ T1184] F2FS-fs (loop4): Corrupted extension count (1573 + 1 > 64) [ 124.238689][ T1184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 124.251720][ T30] audit: type=1400 audit(1718383747.501:286): avc: denied { ioctl } for pid=1181 comm="syz-executor.0" path="/root/syzkaller-testdir2572226313/syzkaller.PtKVXz/46/file2/cgroup.controllers" dev="loop0" ino=10 ioctlcmd=0xf519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.289205][ T397] attempt to access beyond end of device [ 124.289205][ T397] loop0: rw=2049, want=45104, limit=40427 [ 124.298738][ T30] audit: type=1400 audit(1718383747.531:287): avc: denied { write } for pid=1181 comm="syz-executor.0" name="cgroup.controllers" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.479854][ T1218] loop4: detected capacity change from 0 to 256 [ 124.515303][ T1221] device syzkaller0 entered promiscuous mode [ 124.769561][ T1147] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.219870][ T1243] loop4: detected capacity change from 0 to 512 [ 125.249548][ T1147] usb 1-1: Using ep0 maxpacket: 32 [ 125.320925][ T1243] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.338355][ T1243] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.428987][ T1147] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.580483][ T1243] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz-executor.4: invalid indirect mapped block 83886080 (level 1) [ 125.595863][ T1243] EXT4-fs (loop4): Remounting filesystem read-only [ 125.604975][ T1243] EXT4-fs (loop4): 1 orphan inode deleted [ 125.611386][ T1243] EXT4-fs (loop4): 1 truncate cleaned up [ 125.616954][ T1243] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,grpquota,inode_readahead_blks=0x0000000000010000,minixdf,noinit_itable,. Quota mode: writeback. [ 125.711871][ T1147] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.721508][ T1147] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.734047][ T30] audit: type=1400 audit(1718383748.981:288): avc: denied { mounton } for pid=1242 comm="syz-executor.4" path="/root/syzkaller-testdir948669428/syzkaller.AXJ2VR/87/bus/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.764155][ T1250] device syzkaller0 entered promiscuous mode [ 125.772038][ T1147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.785656][ T395] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 125.788219][ T30] audit: type=1400 audit(1718383749.031:289): avc: denied { listen } for pid=1256 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.833664][ T395] EXT4-fs (loop4): Remounting filesystem read-only [ 125.836378][ T30] audit: type=1400 audit(1718383749.031:290): avc: denied { accept } for pid=1256 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.843546][ T1147] hub 1-1:4.0: USB hub found [ 125.933388][ T45] tipc: Left network mode [ 126.029956][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.036989][ T1266] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.045309][ T1266] device bridge_slave_0 entered promiscuous mode [ 126.051944][ T1147] hub 1-1:4.0: 2 ports detected [ 126.057873][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.069513][ T1266] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.077412][ T1266] device bridge_slave_1 entered promiscuous mode [ 126.209210][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.216114][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.223211][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.230167][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.285860][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.288254][ T1279] loop1: detected capacity change from 0 to 512 [ 126.299156][ T646] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.306679][ T646] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.318713][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.326826][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.333691][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.341460][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.350061][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.356907][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.375611][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.383837][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.393298][ T1279] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 126.402963][ T1279] EXT4-fs (loop1): group descriptors corrupted! [ 126.403331][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.423895][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.431818][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.439143][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.447953][ T1266] device veth0_vlan entered promiscuous mode [ 126.479623][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.490654][ T1266] device veth1_macvtap entered promiscuous mode [ 126.501445][ T45] device bridge_slave_1 left promiscuous mode [ 126.508311][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.516689][ T45] device bridge_slave_0 left promiscuous mode [ 126.523452][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.532104][ T45] device veth1_macvtap left promiscuous mode [ 126.538317][ T45] device veth0_vlan left promiscuous mode [ 126.569563][ T1147] hub 1-1:4.0: set hub depth failed [ 126.612410][ T1147] usb 1-1: USB disconnect, device number 4 [ 126.698657][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.707287][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.715719][ T1283] loop1: detected capacity change from 0 to 40427 [ 126.784209][ T1294] SELinux: security_context_str_to_sid(ramfs) failed for (dev ?, type ?) errno=-22 [ 126.794966][ T1294] SELinux: security_context_str_to_sid(ramfs) failed for (dev debugfs, type debugfs) errno=-22 [ 126.809602][ T1283] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 6 [ 126.819058][ T1283] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 126.951897][ T1306] loop3: detected capacity change from 0 to 256 [ 127.043452][ T1294] loop2: detected capacity change from 0 to 40427 [ 127.161313][ T1294] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 127.180078][ T1294] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 127.208373][ T1294] F2FS-fs (loop2): Corrupted extension count (1573 + 1 > 64) [ 127.250979][ T1294] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 128.491562][ T1346] loop0: detected capacity change from 0 to 256 [ 128.587166][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 128.587181][ T30] audit: type=1400 audit(1718383751.831:299): avc: denied { write } for pid=1347 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.123492][ T30] audit: type=1400 audit(1718383752.371:300): avc: denied { read } for pid=1361 comm="syz-executor.4" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.147301][ T30] audit: type=1400 audit(1718383752.381:301): avc: denied { open } for pid=1361 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.147466][ T1363] binder: BINDER_SET_CONTEXT_MGR already set [ 129.171657][ T30] audit: type=1400 audit(1718383752.381:302): avc: denied { ioctl } for pid=1361 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.204835][ T30] audit: type=1400 audit(1718383752.381:303): avc: denied { set_context_mgr } for pid=1361 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 129.229323][ T30] audit: type=1400 audit(1718383752.391:304): avc: denied { map } for pid=1361 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.232954][ T1363] binder: 1361:1363 ioctl 4018620d 200001c0 returned -16 [ 129.726104][ T1376] loop3: detected capacity change from 0 to 16 [ 129.810128][ T1376] erofs: (device loop3): mounted with root inode @ nid 36. [ 129.818235][ T1376] attempt to access beyond end of device [ 129.818235][ T1376] loop3: rw=0, want=48, limit=16 [ 129.977373][ T1381] overlayfs: statfs failed on './file0' [ 130.283730][ T1398] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 130.354081][ T30] audit: type=1400 audit(1718383753.601:305): avc: denied { read write } for pid=1403 comm="syz-executor.2" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 130.356123][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.387432][ T1398] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 130.424335][ T30] audit: type=1400 audit(1718383753.601:306): avc: denied { open } for pid=1403 comm="syz-executor.2" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 130.440645][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.461887][ T30] audit: type=1326 audit(1718383753.671:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1407 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2d23ecea9 code=0x0 [ 130.482434][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.511722][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.533094][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 130.556523][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.578063][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.599584][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.620981][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.642538][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.664125][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.686031][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 130.707649][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.728980][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.742358][ T30] audit: type=1400 audit(1718383753.991:308): avc: denied { call } for pid=1412 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 130.753233][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.784828][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.806876][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.831251][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.852201][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.873220][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.894491][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.920331][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.941475][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.962155][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.982786][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.003490][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.023545][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.041782][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.057536][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.073069][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.088372][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.103266][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.113789][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.119567][ T388] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.121093][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.135576][ T644] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.145677][ T644] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 131.241384][ T1424] loop4: detected capacity change from 0 to 2048 [ 131.310864][ T1424] EXT4-fs error (device loop4): ext4_fill_super:4831: inode #2: comm syz-executor.4: casefold flag without casefold feature [ 131.323802][ T1424] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 131.334224][ T1424] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 131.341839][ T1424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.539576][ T388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.550522][ T388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.560371][ T388] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 131.569376][ T388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.581382][ T388] usb 4-1: config 0 descriptor?? [ 132.121793][ T1457] Invalid ELF header magic: != ELF [ 132.139389][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.146952][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.159607][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.166810][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.174469][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x4 [ 132.181757][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.188967][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.196218][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.203404][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.210608][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.217782][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.225158][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 132.232368][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.239572][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.246842][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.254068][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.261292][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.268546][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.275740][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.282966][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.290429][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.299103][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.306730][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.314201][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.321424][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.328606][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.336174][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.343616][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.350858][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.358034][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.365307][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.369557][ T388] usb 4-1: string descriptor 0 read error: -71 [ 132.372441][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.385849][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.393053][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.399553][ T940] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.400229][ T1147] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 132.407572][ T388] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 132.416667][ T1147] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 132.425773][ T388] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 132.442751][ T388] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 132.451180][ T388] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 132.458782][ T388] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 132.470061][ T388] usb 4-1: USB disconnect, device number 4 [ 132.649534][ T940] usb 5-1: Using ep0 maxpacket: 32 [ 132.776464][ T1469] loop2: detected capacity change from 0 to 2048 [ 132.789724][ T940] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.800513][ T940] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.810421][ T940] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.819374][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.878828][ T940] hub 5-1:4.0: USB hub found [ 132.884322][ T1469] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.894838][ T1469] ext4 filesystem being mounted at /root/syzkaller-testdir932547354/syzkaller.F34SQa/87/file0 supports timestamps until 2038 (0x7fffffff) [ 132.915596][ T1469] fs-verity: sha512 using implementation "sha512-avx2" [ 132.985742][ T1479] overlayfs: statfs failed on './file0' [ 133.111953][ T940] hub 5-1:4.0: 2 ports detected [ 134.180418][ T940] hub 5-1:4.0: set hub depth failed [ 134.220698][ T940] usb 5-1: USB disconnect, device number 2 [ 134.517519][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.525031][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.532270][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.539445][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.546645][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x4 [ 134.553982][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.561243][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.568372][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.576009][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.583247][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.590432][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.597603][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x2 [ 134.604832][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.612028][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.619214][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.626484][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.633649][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.640865][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.648042][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.655272][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.662455][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.669691][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.676848][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.684104][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.691288][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.698467][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.705921][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.713240][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.720577][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.729114][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.736948][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.744283][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.751555][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.758712][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.767862][ T646] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 134.775767][ T646] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 134.786883][ T1519] loop4: detected capacity change from 0 to 512 [ 134.842707][ T1519] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.854142][ T1519] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz-executor.4: invalid indirect mapped block 83886080 (level 1) [ 134.868532][ T1519] EXT4-fs (loop4): Remounting filesystem read-only [ 134.875372][ T1519] EXT4-fs (loop4): 1 orphan inode deleted [ 134.880980][ T1519] EXT4-fs (loop4): 1 truncate cleaned up [ 134.886582][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 134.886595][ T30] audit: type=1400 audit(1718383758.131:323): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.887042][ T1519] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,grpquota,inode_readahead_blks=0x0000000000010000,minixdf,noinit_itable,. Quota mode: writeback. [ 134.892862][ T30] audit: type=1400 audit(1718383758.131:324): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.984498][ T1266] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 135.005246][ T1266] EXT4-fs (loop4): Remounting filesystem read-only [ 135.029862][ T30] audit: type=1400 audit(1718383758.131:325): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.070142][ T1524] overlayfs: statfs failed on './file0' [ 135.784529][ T1543] loop1: detected capacity change from 0 to 128 [ 135.846095][ T30] audit: type=1400 audit(1718383759.091:326): avc: denied { remount } for pid=1542 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 135.925242][ T1544] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.932121][ T1544] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.939358][ T1544] device bridge_slave_0 entered promiscuous mode [ 135.966151][ T1544] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.973109][ T1544] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.980670][ T1544] device bridge_slave_1 entered promiscuous mode [ 136.042870][ T1544] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.049756][ T1544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.056803][ T1544] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.063627][ T1544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.089694][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.097548][ T646] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.105032][ T646] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.122206][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.130450][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.137290][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.160739][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.168694][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.175548][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.192492][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.200635][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.209574][ T388] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.224640][ T45] device bridge_slave_1 left promiscuous mode [ 136.234016][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.245869][ T45] device bridge_slave_0 left promiscuous mode [ 136.253046][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.467089][ T45] device veth1_macvtap left promiscuous mode [ 136.488549][ T45] device veth0_vlan left promiscuous mode [ 136.578664][ T1544] device veth0_vlan entered promiscuous mode [ 136.584947][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.599866][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.607953][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.615942][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.623823][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.631169][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.644073][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.652127][ T940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.660995][ T1544] device veth1_macvtap entered promiscuous mode [ 136.670978][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.678527][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.686913][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.706522][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.715743][ T646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.729962][ T388] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.740153][ T388] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 136.741084][ T1568] loop4: detected capacity change from 0 to 256 [ 136.749054][ T388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.766905][ T388] usb 1-1: config 0 descriptor?? [ 136.841908][ T388] usb 1-1: bad CDC descriptors [ 137.039862][ T388] usb 1-1: USB disconnect, device number 5 [ 137.061497][ T1571] loop1: detected capacity change from 0 to 256 [ 137.735420][ T1597] overlayfs: statfs failed on './file0' [ 137.818528][ T1603] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 138.266540][ T1616] loop0: detected capacity change from 0 to 16 [ 138.297243][ T1616] erofs: (device loop0): mounted with root inode @ nid 36. [ 138.323320][ T1616] attempt to access beyond end of device [ 138.323320][ T1616] loop0: rw=0, want=48, limit=16 [ 140.917149][ T1698] overlayfs: statfs failed on './file0' [ 141.173091][ T1716] loop2: detected capacity change from 0 to 512 [ 141.241160][ T1716] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 141.249529][ T1716] EXT4-fs (loop2): orphan cleanup on readonly fs [ 141.256348][ T1716] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #16: comm syz-executor.2: iget: immutable or append flags not allowed on symlinks [ 141.270920][ T1716] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 16 (err -117) [ 141.284582][ T1716] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.349522][ T611] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.412212][ T30] audit: type=1400 audit(1718383764.661:327): avc: denied { mounton } for pid=1723 comm="syz-executor.2" path="/root/syzkaller-testdir932547354/syzkaller.F34SQa/104/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 141.441102][ T30] audit: type=1400 audit(1718383764.691:328): avc: denied { unmount } for pid=398 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 141.579981][ T1726] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.586852][ T1726] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.597005][ T1726] device bridge_slave_0 entered promiscuous mode [ 141.606111][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.613011][ T1726] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.620737][ T1726] device bridge_slave_1 entered promiscuous mode [ 141.679171][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.686027][ T1726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.693142][ T1726] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.699917][ T1726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.724915][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.732846][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.740268][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.749531][ T643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.757548][ T643] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.764408][ T643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.769604][ T611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.774297][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.781856][ T611] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 141.798923][ T611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.807166][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.808121][ T611] usb 1-1: config 0 descriptor?? [ 141.814208][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.830755][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.845548][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.860063][ T611] usb 1-1: bad CDC descriptors [ 141.875793][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.893238][ T1726] device veth0_vlan entered promiscuous mode [ 141.900430][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.908244][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.915713][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.933013][ T1726] device veth1_macvtap entered promiscuous mode [ 141.941808][ T643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.955536][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.964706][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.034973][ T1748] loop2: detected capacity change from 0 to 2048 [ 142.050748][ T483] device bridge_slave_1 left promiscuous mode [ 142.056669][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.064554][ T483] device bridge_slave_0 left promiscuous mode [ 142.071152][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.076646][ T1147] usb 1-1: USB disconnect, device number 6 [ 142.085010][ T483] device veth1_macvtap left promiscuous mode [ 142.090950][ T483] device veth0_vlan left promiscuous mode [ 142.104012][ T1748] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 142.117308][ T1748] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 142.127821][ T1748] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 142.135246][ T1748] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 142.209577][ T611] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.829624][ T611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.840454][ T611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.850029][ T611] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 142.859076][ T611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.871692][ T611] usb 4-1: config 0 descriptor?? [ 143.178100][ T1781] loop1: detected capacity change from 0 to 128 [ 143.729783][ T611] hid (null): bogus close delimiter [ 144.097556][ T611] usb 4-1: language id specifier not provided by device, defaulting to English [ 144.107377][ T30] audit: type=1400 audit(1718383767.331:329): avc: denied { mounton } for pid=1780 comm="syz-executor.1" path="/root/syzkaller-testdir2259162083/syzkaller.Jesb71/99/bus/file0" dev="loop1" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 144.196542][ T396] VFS: Lookup of '. ' in vfat loop1 would have caused loop [ 144.203900][ T396] VFS: Lookup of '. ' in vfat loop1 would have caused loop [ 144.239530][ T940] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.283899][ T1801] loop2: detected capacity change from 0 to 2048 [ 144.359939][ T1801] EXT4-fs error (device loop2): ext4_fill_super:4831: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 144.390900][ T1801] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 144.412100][ T1801] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 144.428067][ T1801] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.448584][ T30] audit: type=1400 audit(1718383767.691:330): avc: denied { rmdir } for pid=1800 comm="syz-executor.2" name="control" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.503083][ T1809] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.529538][ T1809] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.536899][ T1809] device bridge_slave_0 entered promiscuous mode [ 144.544794][ T611] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0007/input/input6 [ 144.557544][ T1809] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.565017][ T1809] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.572911][ T611] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0007/input/input7 [ 144.584958][ T1809] device bridge_slave_1 entered promiscuous mode [ 144.600640][ T611] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 144.643111][ T30] audit: type=1400 audit(1718383767.891:331): avc: denied { connect } for pid=1827 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.663021][ T940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.667751][ T30] audit: type=1400 audit(1718383767.901:332): avc: denied { write } for pid=1827 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 144.673029][ T940] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 144.701419][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.710175][ T940] usb 5-1: config 0 descriptor?? [ 144.749317][ T611] usb 4-1: USB disconnect, device number 5 [ 144.758704][ T940] usb 5-1: bad CDC descriptors [ 144.846066][ T1809] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.852960][ T1809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.860057][ T1809] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.866810][ T1809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.916908][ T644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.924738][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.933778][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.950266][ T1843] loop0: detected capacity change from 0 to 512 [ 144.956768][ T644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.968367][ T940] usb 5-1: USB disconnect, device number 3 [ 144.974486][ T644] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.981459][ T644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.993200][ T644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.002978][ T644] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.009847][ T644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.018471][ T483] device bridge_slave_1 left promiscuous mode [ 145.025515][ T1843] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.035333][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.043762][ T483] device bridge_slave_0 left promiscuous mode [ 145.055100][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.056561][ T1843] EXT4-fs (loop0): 1 truncate cleaned up [ 145.067659][ T1843] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.079317][ T483] device veth1_macvtap left promiscuous mode [ 145.086191][ T30] audit: type=1400 audit(1718383768.331:333): avc: denied { rename } for pid=1842 comm="syz-executor.0" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.120476][ T483] device veth0_vlan left promiscuous mode [ 145.124503][ T30] audit: type=1400 audit(1718383768.331:334): avc: denied { write } for pid=1842 comm="syz-executor.0" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 145.161694][ T30] audit: type=1400 audit(1718383768.331:335): avc: denied { add_name } for pid=1842 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 145.189846][ T30] audit: type=1400 audit(1718383768.331:336): avc: denied { remove_name } for pid=1842 comm="syz-executor.0" name="file0" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 145.440085][ T1866] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) [ 145.475886][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.484242][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.492470][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.500585][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.521044][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.539754][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.550037][ T1809] device veth0_vlan entered promiscuous mode [ 145.562925][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.570839][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.582645][ T1809] device veth1_macvtap entered promiscuous mode [ 145.598926][ T644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.608900][ T1874] loop3: detected capacity change from 0 to 512 [ 145.631865][ T644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.643538][ T644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.651862][ T644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.651929][ T1874] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.660124][ T644] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.083801][ T1874] EXT4-fs (loop3): 1 truncate cleaned up [ 146.089349][ T1874] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.405254][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.455995][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.537767][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.548472][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.627725][ T1909] loop1: detected capacity change from 0 to 128 [ 147.678577][ T1921] syz-executor.3[1921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.678646][ T1921] syz-executor.3[1921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.710692][ T1921] syz-executor.3[1921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.776600][ T1921] syz-executor.3[1921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.788594][ T1909] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.819959][ T1909] ext4 filesystem being mounted at /root/syzkaller-testdir2117353893/syzkaller.PHzeyt/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 148.084989][ T1936] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 148.122469][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 148.122484][ T30] audit: type=1400 audit(1718383771.371:341): avc: denied { link } for pid=1908 comm="syz-executor.1" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.183750][ T1909] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 0 != root limit 124 [ 148.233343][ T1909] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 148.267160][ T30] audit: type=1400 audit(1718383771.421:342): avc: denied { mounton } for pid=1908 comm="syz-executor.1" path="/root/syzkaller-testdir2117353893/syzkaller.PHzeyt/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.315841][ T1909] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 61: comm syz-executor.1: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=1023, inode=86, rec_len=0, size=1024 fake=0 [ 148.353295][ T30] audit: type=1400 audit(1718383771.421:343): avc: denied { map } for pid=1908 comm="syz-executor.1" path="/root/syzkaller-testdir2117353893/syzkaller.PHzeyt/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.404214][ T1942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.418728][ T1809] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 0 != root limit 124 [ 148.436180][ T1809] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 148.486120][ T1944] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.689899][ T1809] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 4: comm syz-executor.1: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 148.758835][ T1809] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 0 != root limit 124 [ 148.778031][ T1809] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 148.814144][ T1965] syz-executor.4[1965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.814229][ T1965] syz-executor.4[1965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.820940][ T1967] loop2: detected capacity change from 0 to 128 [ 148.860142][ T1965] syz-executor.4[1965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.860213][ T1965] syz-executor.4[1965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.904987][ T1973] loop3: detected capacity change from 0 to 128 [ 148.934788][ T1977] loop4: detected capacity change from 0 to 512 [ 148.971494][ T1977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 148.988400][ T1973] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.999738][ T1977] EXT4-fs (loop4): 1 truncate cleaned up [ 149.000304][ T1973] ext4 filesystem being mounted at /root/syzkaller-testdir973623180/syzkaller.CzEXlC/129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 149.016070][ T1977] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.054522][ T1726] VFS: Lookup of '. ' in vfat loop2 would have caused loop [ 149.063285][ T1726] VFS: Lookup of '. ' in vfat loop2 would have caused loop [ 149.118081][ T1973] EXT4-fs warning (device loop3): dx_probe:892: inode #2: comm syz-executor.3: dx entry: limit 0 != root limit 124 [ 149.135951][ T1973] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 149.149562][ T1973] ================================================================== [ 149.157442][ T1973] BUG: KASAN: use-after-free in __ext4_check_dir_entry+0x700/0x880 [ 149.165168][ T1973] Read of size 2 at addr ffff88812d402003 by task syz-executor.3/1973 [ 149.173151][ T1973] [ 149.175318][ T1973] CPU: 1 PID: 1973 Comm: syz-executor.3 Not tainted 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 149.185381][ T1973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 149.195307][ T1973] Call Trace: [ 149.198403][ T1973] [ 149.201189][ T1973] dump_stack_lvl+0x151/0x1b7 [ 149.205695][ T1973] ? io_uring_drop_tctx_refs+0x190/0x190 [ 149.211160][ T1973] ? panic+0x751/0x751 [ 149.215067][ T1973] print_address_description+0x87/0x3b0 [ 149.220449][ T1973] kasan_report+0x179/0x1c0 [ 149.224803][ T1973] ? __ext4_check_dir_entry+0x700/0x880 [ 149.230268][ T1973] ? __ext4_check_dir_entry+0x700/0x880 [ 149.235637][ T1973] __asan_report_load2_noabort+0x14/0x20 [ 149.241103][ T1973] __ext4_check_dir_entry+0x700/0x880 [ 149.246314][ T1973] ext4_readdir+0x1490/0x38d0 [ 149.250835][ T1973] ? ext4_dir_llseek+0x540/0x540 [ 149.255599][ T1973] ? slab_free_freelist_hook+0xbd/0x190 [ 149.261087][ T1973] ? putname+0xfa/0x150 [ 149.265080][ T1973] ? __kasan_check_read+0x11/0x20 [ 149.269942][ T1973] ? fsnotify_perm+0x470/0x5d0 [ 149.274548][ T1973] ? security_file_permission+0x86/0xb0 [ 149.280089][ T1973] iterate_dir+0x265/0x610 [ 149.284349][ T1973] ? ext4_dir_llseek+0x540/0x540 [ 149.289231][ T1973] __se_sys_getdents64+0x1c1/0x460 [ 149.294183][ T1973] ? __x64_sys_getdents64+0x90/0x90 [ 149.299215][ T1973] ? filldir+0x680/0x680 [ 149.303289][ T1973] ? __kasan_check_read+0x11/0x20 [ 149.308148][ T1973] __x64_sys_getdents64+0x7b/0x90 [ 149.313015][ T1973] do_syscall_64+0x3d/0xb0 [ 149.317263][ T1973] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 149.323011][ T1973] RIP: 0033:0x7f874c441ea9 [ 149.327267][ T1973] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 149.346687][ T1973] RSP: 002b:00007f874b7bc0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 149.354942][ T1973] RAX: ffffffffffffffda RBX: 00007f874c578f80 RCX: 00007f874c441ea9 [ 149.362746][ T1973] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000008 [ 149.370557][ T1973] RBP: 00007f874c4b0ff4 R08: 0000000000000000 R09: 0000000000000000 [ 149.378375][ T1973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.386196][ T1973] R13: 000000000000000b R14: 00007f874c578f80 R15: 00007ffe21f10f98 [ 149.394001][ T1973] [ 149.396851][ T1973] [ 149.399023][ T1973] The buggy address belongs to the page: [ 149.404504][ T1973] page:ffffea0004b50080 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x12d402 [ 149.414560][ T1973] flags: 0x4000000000000000(zone=1) [ 149.419700][ T1973] raw: 4000000000000000 ffffea0004b57108 ffffea0004b4e248 0000000000000000 [ 149.428238][ T1973] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 149.436652][ T1973] page dumped because: kasan: bad access detected [ 149.442909][ T1973] page_owner tracks the page as freed [ 149.448107][ T1973] page last allocated via order 0, migratetype Movable, gfp_mask 0x100cca(GFP_HIGHUSER_MOVABLE), pid 1919, ts 147680130355, free_ts 148039518598 [ 149.462610][ T1973] post_alloc_hook+0x1a3/0x1b0 [ 149.467202][ T1973] prep_new_page+0x1b/0x110 [ 149.471540][ T1973] get_page_from_freelist+0x3550/0x35d0 [ 149.476923][ T1973] __alloc_pages+0x27e/0x8f0 [ 149.481348][ T1973] shmem_alloc_and_acct_page+0x4bd/0xa80 [ 149.486815][ T1973] shmem_getpage_gfp+0x1388/0x23c0 [ 149.491763][ T1973] shmem_fault+0x1b8/0x6c0 [ 149.496018][ T1973] __do_fault+0x273/0x300 [ 149.500187][ T1973] handle_pte_fault+0x167b/0x24d0 [ 149.505042][ T1973] do_handle_mm_fault+0x1ea9/0x23a0 [ 149.510079][ T1973] __get_user_pages+0x379/0xee0 [ 149.514764][ T1973] __mm_populate+0x38d/0x560 [ 149.519189][ T1973] vm_mmap_pgoff+0x271/0x450 [ 149.523615][ T1973] ksys_mmap_pgoff+0xed/0x1e0 [ 149.528303][ T1973] __x64_sys_mmap+0x103/0x120 [ 149.532815][ T1973] do_syscall_64+0x3d/0xb0 [ 149.537097][ T1973] page last free stack trace: [ 149.541583][ T1973] free_unref_page_prepare+0x7c8/0x7d0 [ 149.546879][ T1973] free_unref_page_list+0x14b/0xa60 [ 149.551909][ T1973] release_pages+0x1310/0x1370 [ 149.556510][ T1973] __pagevec_release+0x84/0x100 [ 149.561198][ T1973] shmem_undo_range+0x604/0x1560 [ 149.565974][ T1973] shmem_evict_inode+0x215/0x9d0 [ 149.570744][ T1973] evict+0x2a3/0x630 [ 149.574477][ T1973] iput+0x63b/0x7e0 [ 149.578121][ T1973] dentry_unlink_inode+0x34f/0x440 [ 149.583071][ T1973] __dentry_kill+0x447/0x660 [ 149.587494][ T1973] dentry_kill+0xc0/0x2a0 [ 149.591661][ T1973] dput+0x45/0x80 [ 149.595132][ T1973] __fput+0x662/0x910 [ 149.598952][ T1973] ____fput+0x15/0x20 [ 149.602772][ T1973] task_work_run+0x129/0x190 [ 149.607198][ T1973] do_exit+0xc48/0x2ca0 [ 149.611192][ T1973] [ 149.613360][ T1973] Memory state around the buggy address: [ 149.618916][ T1973] ffff88812d401f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 149.626820][ T1973] ffff88812d401f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 149.634717][ T1973] >ffff88812d402000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.642730][ T1973] ^ [ 149.646642][ T1973] ffff88812d402080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.654541][ T1973] ffff88812d402100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 149.662431][ T1973] ================================================================== 2024/06/14 16:49:32 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 149.670339][ T1973] Disabling lock debugging due to kernel taint [ 149.684747][ T1973] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 59: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=1023, inode=86, rec_len=0, size=1024 fake=0 [ 149.706940][ T1984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.729259][ T1988] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.