last executing test programs: 6.084145804s ago: executing program 3 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000002940)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xce, '\x00', @loopback}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, 0x0}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="5800000000000000000004ffe45b693950c9df00", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) 6.049930177s ago: executing program 3 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2e, 0x7, 0x8, 0x10001, 0x540, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x0, [{@remote}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0x7fffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000004c0), &(0x7f0000000640)=r5}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfffe}]}}}]}, 0x3c}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) syz_usb_control_io$hid(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@link_local, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x2f, 0x1, 0x0, 0x0, "4c54758e5ee36a5e0b7cd845e8257f7f3c43cbd7af144faaaaeceb1cc7ef9085a01e5afeffdf0fd1c8d5bd233217f0e0eea535a26b42a2a06cb1bb241c500f75"}}}}, &(0x7f00000002c0)={0x1, 0x3, [0xbb4, 0x4, 0xc4f, 0x171]}) syz_usb_control_io(r9, 0x0, 0x0) r10 = openat$incfs(r8, &(0x7f0000000100)='.log\x00', 0x0, 0x0) read$FUSE(r10, 0x0, 0x0) 4.699114807s ago: executing program 4 (id=648): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x3, &(0x7f0000001480)=@framed, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180900000000000000000000ca00000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 4.688597898s ago: executing program 4 (id=649): prctl$PR_MCE_KILL(0x35, 0x0, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dbd95bf5bd267c0ae1c553b1fc0ab8a141f53b81b486a84a033202ee90b2544de00d55924d65901878e44b6e5510d55ae2f12b5aca14e29dd7bef7c014d27aad8ee5ab3f061af7d2db9708ba98770a4d3c407", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002067650000100002800c002e0003000000030000000800"/40], 0x40}}, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1, 0x0, 0x0) 3.92496765s ago: executing program 1 (id=661): remap_file_pages(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) getcwd(0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f00000000c0)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) 3.613198006s ago: executing program 4 (id=662): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TIOCSTI(r3, 0x5437, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000052a1900580001c0"]) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.582800088s ago: executing program 2 (id=656): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1886484d7dc0398062f2405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 3.574328559s ago: executing program 2 (id=663): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200), 0x4) bind$inet6(r0, &(0x7f0000000100), 0x1c) getpid() r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000000000224e0000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x3, 0x4, 0x8}, 0x48) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x5, 0x8, 0x8, 0x105}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r5}, 0x10) write$cgroup_type(r3, &(0x7f0000000140), 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x4, 0x9, 0x6, 0x6, r2, 0x3, '\x00', 0x0, r3, 0x0, 0x3, 0x2, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10}, 0x48) 3.56252195s ago: executing program 2 (id=664): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000002340)=[&(0x7f0000000080)={0x0, 0x300, 0x0, 0x5, 0x0, r3, 0x0}]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 3.259128694s ago: executing program 2 (id=665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000006c000000e00000020000000000004000007ae80000755eee826be590a8b23fbfb3833e1500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ffffff"], 0xf8}}, 0x0) 1.571757862s ago: executing program 1 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) 1.568660092s ago: executing program 1 (id=669): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x3, &(0x7f0000001480)=@framed, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180900000000000000000000ca00000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.566609852s ago: executing program 1 (id=671): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r8, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8919, &(0x7f0000000040)={'veth1\x00', {0x2, 0x0, @empty=0xac141419}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r11 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000880)='bpf_lsm_inode_setattr\x00') r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0x12, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf6}, [@ldst={0x0, 0x3, 0x596163120a992104, 0x0, 0x0, 0x18, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @jmp={0x5, 0x0, 0x2, 0x4, 0xb, 0xfffffffffffffffc, 0x8}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x6, 0x8c, &(0x7f00000004c0)=""/140, 0x40e00, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x6, 0x3, 0x80000002}, 0x10, r11, r4, 0x0, &(0x7f0000000940)=[r12, r1, r1], 0x0, 0x10, 0x6}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r10, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) 1.552961084s ago: executing program 3 (id=673): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1886484d7dc0398062f2405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1.541510125s ago: executing program 3 (id=674): mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') pivot_root(&(0x7f0000000880)='./file0/file0\x00', &(0x7f0000000840)='./file0\x00') 1.493893748s ago: executing program 3 (id=675): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0), 0xb) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.362657319s ago: executing program 1 (id=677): remap_file_pages(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) getcwd(0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f00000000c0)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) 766.818758ms ago: executing program 4 (id=678): eventfd2(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000540)={0x1, 0x0, [{0x48e}]}) 591.593842ms ago: executing program 4 (id=680): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000}}}}}, 0x0) 486.687711ms ago: executing program 1 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2e, 0x7, 0x8, 0x10001, 0x540, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x1, 0x0, [{@remote}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000300)=r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000440)=0x7fffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000004c0), &(0x7f0000000640)=r5}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xfffe}]}}}]}, 0x3c}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x10001}, 0x48) syz_usb_control_io$hid(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@link_local, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x1, 0x1}, 0x2f, 0x1, 0x0, 0x0, "4c54758e5ee36a5e0b7cd845e8257f7f3c43cbd7af144faaaaeceb1cc7ef9085a01e5afeffdf0fd1c8d5bd233217f0e0eea535a26b42a2a06cb1bb241c500f75"}}}}, &(0x7f00000002c0)={0x1, 0x3, [0xbb4, 0x4, 0xc4f, 0x171]}) syz_usb_control_io(r9, 0x0, 0x0) r10 = openat$incfs(r8, &(0x7f0000000100)='.log\x00', 0x0, 0x0) read$FUSE(r10, 0x0, 0x0) 475.667842ms ago: executing program 4 (id=684): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000001000040000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="00000200e1ff8044"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 475.024262ms ago: executing program 0 (id=685): mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') pivot_root(&(0x7f0000000880)='./file0/file0\x00', &(0x7f0000000840)='./file0\x00') 445.322804ms ago: executing program 0 (id=686): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) setuid(0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x148, 0x0, 0x0, [{{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x0, 0x9, 0x5, 0x0, 'fuse\x00'}}, {}]}, 0x0, 0x0}) getpid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000055c0)) getgid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000005600)) geteuid() fstat(r1, &(0x7f0000005640)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000056c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005700), &(0x7f0000005740)=0xc) getpid() lstat(&(0x7f0000005780)='./file0\x00', &(0x7f00000057c0)) r3 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\'}\\[\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r5, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r8, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r8, 0x4002410) keyctl$chown(0x4, r8, 0x0, 0x0) keyctl$setperm(0x5, r8, 0x50a0628) keyctl$chown(0x4, r8, r6, r7) keyctl$setperm(0x5, r3, 0x2000200) keyctl$chown(0x4, r3, r4, r7) 394.183348ms ago: executing program 0 (id=687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x401c5820, &(0x7f0000000100)=@v1={0x8, @aes256, 0x0, @desc3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000600)={0xa}) 170.932216ms ago: executing program 0 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r2}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) 82.827844ms ago: executing program 0 (id=689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x68}}, 0x0) 82.414094ms ago: executing program 0 (id=690): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x404a, &(0x7f0000000300), 0x1, 0x751, &(0x7f0000002880)="$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") gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/fscaps', 0x202, 0x3e) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) write$P9_RXATTRWALK(r4, &(0x7f0000000300)={0xf}, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 18.298279ms ago: executing program 2 (id=667): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=0x1, r0, 0x1d, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) 9.28726ms ago: executing program 2 (id=691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000b00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=692): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.60: corrupted in-inode xattr [ 30.158116][ T517] EXT4-fs (loop4): Remounting filesystem read-only [ 30.164741][ T517] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.60: couldn't read orphan inode 15 (err -117) [ 30.183492][ T517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.336893][ T517] EXT4-fs (loop4): unmounting filesystem. [ 30.690430][ T6] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 30.699365][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.707287][ T6] usb 3-1: Product: syz [ 30.711399][ T6] usb 3-1: Manufacturer: syz [ 30.715091][ T517] loop4: detected capacity change from 0 to 512 [ 30.715853][ T6] usb 3-1: SerialNumber: syz [ 30.727405][ T6] usb 3-1: config 0 descriptor?? [ 30.742211][ T517] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.761748][ T517] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.60: casefold flag without casefold feature [ 30.774981][ T517] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.60: casefold flag without casefold feature [ 30.788614][ T517] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.60: ea_inode with extended attributes [ 30.801245][ T517] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.60: error while reading EA inode 12 err=-117 [ 30.813533][ T517] EXT4-fs (loop4): 1 orphan inode deleted [ 30.819113][ T517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 30.849170][ T292] EXT4-fs (loop4): unmounting filesystem. [ 30.893788][ T296] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.141022][ T555] netlink: 'syz.0.73': attribute type 3 has an invalid length. [ 31.160501][ T296] usb 2-1: Using ep0 maxpacket: 8 [ 31.183050][ T557] device syzkaller0 entered promiscuous mode [ 31.212641][ T563] loop3: detected capacity change from 0 to 512 [ 31.233656][ T563] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 31.262454][ T572] xt_bpf: check failed: parse error [ 31.440491][ T296] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 31.449830][ T296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.772951][ T296] usb 2-1: Product: syz [ 32.836707][ T6] (unnamed net_device) (uninitialized): Assigned a random MAC address: be:25:ad:8d:c2:f0 [ 32.892951][ T296] usb 2-1: Manufacturer: syz [ 32.897386][ T296] usb 2-1: SerialNumber: syz [ 32.920826][ T6] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 32.940085][ T296] r8152-cfgselector 2-1: config 0 descriptor?? [ 32.963266][ T6] usb 3-1: USB disconnect, device number 3 [ 33.000466][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 33.000486][ T28] audit: type=1400 audit(1721189314.331:191): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.319275][ T596] netlink: 'syz.3.88': attribute type 3 has an invalid length. [ 33.450569][ T296] r8152-cfgselector 2-1: Unknown version 0x0000 [ 33.456751][ T296] r8152-cfgselector 2-1: bad CDC descriptors [ 33.512312][ T620] loop2: detected capacity change from 0 to 512 [ 33.520437][ T296] r8152-cfgselector 2-1: Unknown version 0x0000 [ 33.539458][ T620] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 33.544697][ T296] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 33.572122][ T28] audit: type=1400 audit(1721189314.951:192): avc: denied { watch watch_reads } for pid=603 comm="syz.3.90" path="/22/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.178301][ T650] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 34.234071][ T657] netlink: 'syz.1.101': attribute type 3 has an invalid length. [ 34.265480][ T659] loop1: detected capacity change from 0 to 16 [ 34.272334][ T659] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.291862][ T28] audit: type=1400 audit(1721189315.671:193): avc: denied { create } for pid=660 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.360401][ T28] audit: type=1400 audit(1721189315.691:194): avc: denied { write } for pid=660 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.410743][ T667] loop2: detected capacity change from 0 to 512 [ 34.441890][ T28] audit: type=1400 audit(1721189315.691:195): avc: denied { read } for pid=660 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.451550][ T667] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.475455][ T28] audit: type=1400 audit(1721189315.701:196): avc: denied { create } for pid=660 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 34.480526][ T296] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.504154][ T667] EXT4-fs (loop2): 1 truncate cleaned up [ 34.509614][ T667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.522120][ T28] audit: type=1400 audit(1721189315.901:197): avc: denied { nlmsg_read } for pid=666 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 34.558357][ T28] audit: type=1400 audit(1721189315.931:198): avc: denied { link } for pid=666 comm="syz.2.105" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.601545][ T28] audit: type=1400 audit(1721189315.931:199): avc: denied { rename } for pid=666 comm="syz.2.105" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.645739][ T28] audit: type=1326 audit(1721189315.931:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=666 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc926b75a19 code=0x7ffc0000 [ 34.648182][ T294] EXT4-fs (loop2): unmounting filesystem. [ 34.692736][ T686] netlink: 'syz.2.113': attribute type 3 has an invalid length. [ 34.760409][ T296] usb 4-1: Using ep0 maxpacket: 32 [ 34.830539][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 35.146158][ T702] loop2: detected capacity change from 0 to 1024 [ 35.152703][ T702] EXT4-fs: Ignoring removed orlov option [ 35.158177][ T702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.170426][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 35.182956][ T702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 35.217955][ T702] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.118: Invalid inode table block 5 in block_group 0 [ 35.234215][ T702] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz.2.118: Invalid inode table block 5 in block_group 0 [ 35.246986][ T702] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 35.256717][ T702] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #12: comm syz.2.118: mark_inode_dirty error [ 35.279903][ T294] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 35.295096][ T294] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 35.296991][ T716] loop1: detected capacity change from 0 to 512 [ 35.308367][ T294] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 35.317433][ T716] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.328031][ T294] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 35.334113][ T716] EXT4-fs (loop1): 1 truncate cleaned up [ 35.343881][ T296] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 35.343906][ T296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.343923][ T296] usb 4-1: Product: syz [ 35.343935][ T296] usb 4-1: Manufacturer: syz [ 35.343948][ T296] usb 4-1: SerialNumber: syz [ 35.345547][ T296] usb 4-1: config 0 descriptor?? [ 35.349600][ T716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.392197][ T696] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm kworker/u4:5: Invalid inode table block 5 in block_group 0 [ 35.407810][ T696] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm kworker/u4:5: Invalid inode table block 5 in block_group 0 [ 35.421852][ T294] EXT4-fs (loop2): unmounting filesystem. [ 35.443055][ T446] EXT4-fs (loop1): unmounting filesystem. [ 35.585243][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 35.607693][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.623091][ T24] usb 5-1: Product: syz [ 35.627335][ T24] usb 5-1: Manufacturer: syz [ 35.638909][ T24] usb 5-1: SerialNumber: syz [ 35.652281][ T725] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.659130][ T725] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.666677][ T725] device bridge_slave_0 entered promiscuous mode [ 35.673634][ T725] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.680721][ T725] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.688502][ T725] device bridge_slave_1 entered promiscuous mode [ 35.728230][ T24] r8152-cfgselector 5-1: config 0 descriptor?? [ 35.756649][ T725] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.763688][ T725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.770802][ T725] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.777563][ T725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.864341][ T737] xt_CONNSECMARK: invalid mode: 0 [ 35.937382][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.947491][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.956906][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.023826][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.032857][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.039744][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.047366][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.055418][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.062297][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.075191][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.089728][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.098017][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.110541][ T725] device veth0_vlan entered promiscuous mode [ 36.116575][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.124998][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.132301][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.146609][ T725] device veth1_macvtap entered promiscuous mode [ 36.153737][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.166872][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.175165][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.221400][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 36.228636][ T24] r8152-cfgselector 5-1: bad CDC descriptors [ 36.250446][ T24] r8152-cfgselector 5-1: Unknown version 0x0000 [ 36.258994][ T24] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 36.273392][ T749] loop2: detected capacity change from 0 to 512 [ 36.280204][ T749] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.291318][ T696] device bridge_slave_1 left promiscuous mode [ 36.291512][ T749] EXT4-fs (loop2): 1 truncate cleaned up [ 36.297391][ T696] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.310507][ T696] device bridge_slave_0 left promiscuous mode [ 36.313203][ T749] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.319901][ T696] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.325043][ T296] (unnamed net_device) (uninitialized): Assigned a random MAC address: 46:fc:83:de:ed:0f [ 36.342069][ T696] device veth1_macvtap left promiscuous mode [ 36.347969][ T696] device veth0_vlan left promiscuous mode [ 36.388562][ T725] EXT4-fs (loop2): unmounting filesystem. [ 36.454110][ T296] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 36.463614][ T296] usb 4-1: USB disconnect, device number 2 [ 36.623886][ T776] loop0: detected capacity change from 0 to 2048 [ 36.647046][ T776] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.442514][ T817] loop2: detected capacity change from 0 to 512 [ 37.448883][ T376] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.479094][ T817] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.482040][ T376] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.490967][ T817] EXT4-fs (loop2): 1 truncate cleaned up [ 37.506546][ T817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.528905][ T376] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.528905][ T376] [ 37.550261][ T376] EXT4-fs (loop0): Total free blocks count 0 [ 37.562910][ T376] EXT4-fs (loop0): Free/Dirty block details [ 37.569498][ T376] EXT4-fs (loop0): free_blocks=2415919104 [ 37.573127][ T725] EXT4-fs (loop2): unmounting filesystem. [ 37.581131][ T376] EXT4-fs (loop0): dirty_blocks=16 [ 37.586065][ T376] EXT4-fs (loop0): Block reservation details [ 37.606136][ T376] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 37.613546][ T376] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 37.821603][ T825] xt_CONNSECMARK: invalid mode: 0 [ 38.102818][ T811] syz.4.147 (811) used greatest stack depth: 20624 bytes left [ 38.148597][ T836] loop3: detected capacity change from 0 to 256 [ 38.180279][ T839] loop4: detected capacity change from 0 to 1024 [ 38.189236][ T839] EXT4-fs: Ignoring removed orlov option [ 38.195690][ T839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.204312][ T836] FAT-fs (loop3): Directory bread(block 64) failed [ 38.213107][ T836] FAT-fs (loop3): Directory bread(block 65) failed [ 38.219523][ T836] FAT-fs (loop3): Directory bread(block 66) failed [ 38.226231][ T836] FAT-fs (loop3): Directory bread(block 67) failed [ 38.232987][ T836] FAT-fs (loop3): Directory bread(block 68) failed [ 38.239412][ T836] FAT-fs (loop3): Directory bread(block 69) failed [ 38.251456][ T836] FAT-fs (loop3): Directory bread(block 70) failed [ 38.251685][ T839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.257785][ T836] FAT-fs (loop3): Directory bread(block 71) failed [ 38.257827][ T836] FAT-fs (loop3): Directory bread(block 72) failed [ 38.279774][ T836] FAT-fs (loop3): Directory bread(block 73) failed [ 38.280968][ T844] loop0: detected capacity change from 0 to 128 [ 38.298101][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 38.298116][ T28] audit: type=1400 audit(1721189319.671:229): avc: denied { mount } for pid=835 comm="syz.3.157" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.335070][ T839] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.158: Invalid inode table block 5 in block_group 0 [ 38.348539][ T839] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz.4.158: Invalid inode table block 5 in block_group 0 [ 38.409060][ T839] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 38.419014][ T839] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #12: comm syz.4.158: mark_inode_dirty error [ 38.435627][ T292] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 38.456170][ T292] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 38.532085][ T848] tipc: Started in network mode [ 38.536897][ T848] tipc: Node identity ac1414aa, cluster identity 4711 [ 38.543997][ T848] tipc: New replicast peer: 100.1.1.1 [ 38.549702][ T848] tipc: Enabled bearer , priority 10 [ 38.614026][ T292] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 38.675841][ T850] loop2: detected capacity change from 0 to 256 [ 38.698394][ T292] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 38.698641][ T850] ======================================================= [ 38.698641][ T850] WARNING: The mand mount option has been deprecated and [ 38.698641][ T850] and is ignored by this kernel. Remove the mand [ 38.698641][ T850] option from the mount to silence this warning. [ 38.698641][ T850] ======================================================= [ 38.744492][ T8] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm kworker/u4:0: Invalid inode table block 5 in block_group 0 [ 38.747094][ T850] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 38.757724][ T8] EXT4-fs error (device loop4): __ext4_get_inode_loc:4497: comm kworker/u4:0: Invalid inode table block 5 in block_group 0 [ 38.785989][ T850] 9pnet_fd: p9_fd_create_unix (850): problem connecting socket: ./file0: -13 [ 38.786143][ T292] EXT4-fs (loop4): unmounting filesystem. [ 38.800236][ T28] audit: type=1400 audit(1721189320.161:230): avc: denied { mounton } for pid=849 comm="syz.2.161" path="/10/file0/file0" dev="loop2" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.837275][ T28] audit: type=1400 audit(1721189320.211:231): avc: denied { write } for pid=852 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.868039][ T855] loop2: detected capacity change from 0 to 512 [ 38.875588][ T855] EXT4-fs: Ignoring removed oldalloc option [ 38.887549][ T855] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.163: Parent and EA inode have the same ino 15 [ 38.899828][ T855] EXT4-fs (loop2): Remounting filesystem read-only [ 38.906445][ T855] EXT4-fs (loop2): 1 orphan inode deleted [ 38.912076][ T855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.934784][ T855] netlink: 'syz.2.163': attribute type 4 has an invalid length. [ 38.952171][ T855] netlink: 'syz.2.163': attribute type 11 has an invalid length. [ 38.964843][ T725] EXT4-fs (loop2): unmounting filesystem. [ 38.994821][ T28] audit: type=1400 audit(1721189320.371:232): avc: denied { unmount } for pid=365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.065260][ T864] device syzkaller0 entered promiscuous mode [ 39.080156][ T858] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.087116][ T858] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.094285][ T858] device bridge_slave_0 entered promiscuous mode [ 39.101335][ T858] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.112950][ T858] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.120569][ T858] device bridge_slave_1 entered promiscuous mode [ 39.145621][ T863] wireguard: wireguard0: Could not create IPv6 socket [ 39.152415][ T863] device wireguard0 entered promiscuous mode [ 39.215410][ T874] syz.3.170[874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.215489][ T874] syz.3.170[874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.235721][ T28] audit: type=1400 audit(1721189320.611:233): avc: denied { write } for pid=873 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.275464][ T28] audit: type=1400 audit(1721189320.621:234): avc: denied { read } for pid=873 comm="syz.3.170" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 39.315085][ T28] audit: type=1400 audit(1721189320.621:235): avc: denied { open } for pid=873 comm="syz.3.170" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 39.346038][ T880] loop0: detected capacity change from 0 to 256 [ 39.346404][ T28] audit: type=1400 audit(1721189320.621:236): avc: denied { ioctl } for pid=873 comm="syz.3.170" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 39.364149][ T858] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.383121][ T874] syz.3.170[874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.384679][ T858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.384713][ T874] syz.3.170[874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.395723][ T858] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.420532][ T858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.432488][ T880] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 39.435793][ T28] audit: type=1326 audit(1721189320.681:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=873 comm="syz.3.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5663375a19 code=0x0 [ 39.478355][ T880] 9pnet_fd: p9_fd_create_unix (880): problem connecting socket: ./file0: -13 [ 39.497851][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.509261][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.512491][ T874] loop3: detected capacity change from 0 to 2048 [ 39.527141][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.553488][ T891] loop1: detected capacity change from 0 to 256 [ 39.560443][ T394] tipc: Node number set to 2886997162 [ 39.566899][ T874] Alternate GPT is invalid, using primary GPT. [ 39.576487][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.579984][ T891] FAT-fs (loop1): Directory bread(block 64) failed [ 39.590766][ T874] loop3: p1 p2 p3 [ 39.593980][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.601362][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.606041][ T101] Alternate GPT is invalid, using primary GPT. [ 39.619527][ T891] FAT-fs (loop1): Directory bread(block 65) failed [ 39.627056][ T101] loop3: p1 p2 p3 [ 39.631431][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.632362][ T891] FAT-fs (loop1): Directory bread(block 66) failed [ 39.649570][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.656563][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.664755][ T456] udevd[456]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.666332][ T425] udevd[425]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.680282][ T891] FAT-fs (loop1): Directory bread(block 67) failed [ 39.684854][ T462] udevd[462]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 39.690495][ T891] FAT-fs (loop1): Directory bread(block 68) failed [ 39.726517][ T456] udevd[456]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 39.726818][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.737535][ T317] udevd[317]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.756913][ T425] udevd[425]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.759394][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.777364][ T891] FAT-fs (loop1): Directory bread(block 69) failed [ 39.785155][ T891] FAT-fs (loop1): Directory bread(block 70) failed [ 39.790474][ T28] audit: type=1400 audit(1721189321.161:238): avc: denied { map } for pid=901 comm="syz.3.180" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.798170][ T891] FAT-fs (loop1): Directory bread(block 71) failed [ 39.819904][ T900] loop0: detected capacity change from 0 to 2048 [ 39.839854][ T696] device bridge_slave_1 left promiscuous mode [ 39.846255][ T696] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.854960][ T891] FAT-fs (loop1): Directory bread(block 72) failed [ 39.856877][ T696] device bridge_slave_0 left promiscuous mode [ 39.862689][ T891] FAT-fs (loop1): Directory bread(block 73) failed [ 39.873983][ T696] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.883565][ T696] device veth1_macvtap left promiscuous mode [ 39.883691][ T900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.905593][ T696] device veth0_vlan left promiscuous mode [ 40.130984][ T912] loop3: detected capacity change from 0 to 1024 [ 40.201929][ T912] EXT4-fs: Ignoring removed orlov option [ 40.220770][ T912] EXT4-fs (loop3): Test dummy encryption mode enabled [ 40.227411][ T912] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 40.425898][ T919] loop2: detected capacity change from 0 to 512 [ 40.434113][ T919] EXT4-fs: Ignoring removed nobh option [ 40.445456][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.455103][ T919] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 40.465533][ T919] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.184: attempt to clear invalid blocks 2 len 1 [ 40.468675][ T858] device veth0_vlan entered promiscuous mode [ 40.478437][ T919] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 40.488432][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.502146][ T919] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.184: invalid indirect mapped block 1819239214 (level 0) [ 40.512366][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.520620][ T919] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.184: invalid indirect mapped block 1819239214 (level 1) [ 40.535094][ T858] device veth1_macvtap entered promiscuous mode [ 40.541090][ T919] EXT4-fs (loop2): 1 truncate cleaned up [ 40.547602][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.552141][ T919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.559232][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.575687][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.583771][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.591892][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.615144][ T43] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.631136][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 40.643297][ T43] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.643297][ T43] [ 40.653208][ T43] EXT4-fs (loop0): Total free blocks count 0 [ 40.659181][ T43] EXT4-fs (loop0): Free/Dirty block details [ 40.665655][ T43] EXT4-fs (loop0): free_blocks=2415919104 [ 40.671480][ T43] EXT4-fs (loop0): dirty_blocks=16 [ 40.676470][ T43] EXT4-fs (loop0): Block reservation details [ 40.682623][ T43] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 40.688779][ T43] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 40.693268][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.709309][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.718012][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.726528][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.078452][ T506] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 41.306155][ T725] EXT4-fs (loop2): unmounting filesystem. [ 41.320543][ T506] usb 2-1: Using ep0 maxpacket: 8 [ 41.332763][ T951] loop2: detected capacity change from 0 to 256 [ 41.361072][ T951] FAT-fs (loop2): Directory bread(block 64) failed [ 41.367526][ T951] FAT-fs (loop2): Directory bread(block 65) failed [ 41.374168][ T951] FAT-fs (loop2): Directory bread(block 66) failed [ 41.380613][ T951] FAT-fs (loop2): Directory bread(block 67) failed [ 41.387166][ T951] FAT-fs (loop2): Directory bread(block 68) failed [ 41.393714][ T951] FAT-fs (loop2): Directory bread(block 69) failed [ 41.400132][ T951] FAT-fs (loop2): Directory bread(block 70) failed [ 41.406847][ T951] FAT-fs (loop2): Directory bread(block 71) failed [ 41.413373][ T394] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.414815][ T951] FAT-fs (loop2): Directory bread(block 72) failed [ 41.427040][ T951] FAT-fs (loop2): Directory bread(block 73) failed [ 41.610526][ T506] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 41.619444][ T506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.627610][ T506] usb 2-1: Product: syz [ 41.861040][ T394] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.885774][ T394] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.896289][ T506] usb 2-1: Manufacturer: syz [ 41.900749][ T506] usb 2-1: SerialNumber: syz [ 41.905820][ T506] r8152-cfgselector 2-1: config 0 descriptor?? [ 42.190270][ T966] loop2: detected capacity change from 0 to 512 [ 42.208313][ T966] EXT4-fs: Ignoring removed oldalloc option [ 42.219233][ T966] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.199: Parent and EA inode have the same ino 15 [ 42.233712][ T966] EXT4-fs (loop2): Remounting filesystem read-only [ 42.240121][ T966] EXT4-fs (loop2): 1 orphan inode deleted [ 42.246411][ T966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 42.272346][ T966] netlink: 'syz.2.199': attribute type 4 has an invalid length. [ 42.279920][ T966] netlink: 'syz.2.199': attribute type 11 has an invalid length. [ 42.293158][ T725] EXT4-fs (loop2): unmounting filesystem. [ 42.450448][ T506] r8152-cfgselector 2-1: Unknown version 0x0000 [ 42.456605][ T506] r8152-cfgselector 2-1: bad CDC descriptors [ 42.490448][ T506] r8152-cfgselector 2-1: Unknown version 0x0000 [ 42.507054][ T506] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 42.586972][ T981] loop0: detected capacity change from 0 to 512 [ 42.608726][ T981] EXT4-fs: Ignoring removed nobh option [ 42.615826][ T981] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 42.624772][ T981] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.206: attempt to clear invalid blocks 2 len 1 [ 42.637806][ T981] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 42.654711][ T981] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.206: invalid indirect mapped block 1819239214 (level 0) [ 42.668647][ T981] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.206: invalid indirect mapped block 1819239214 (level 1) [ 42.683203][ T981] EXT4-fs (loop0): 1 truncate cleaned up [ 42.688755][ T981] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.784776][ T964] loop4: detected capacity change from 0 to 1024 [ 42.791307][ T964] EXT4-fs: Ignoring removed orlov option [ 42.797284][ T964] EXT4-fs (loop4): Test dummy encryption mode enabled [ 42.803911][ T964] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 42.818221][ T394] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 42.837397][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 42.849990][ T394] usb 4-1: SerialNumber: syz [ 43.317086][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 43.317100][ T28] audit: type=1400 audit(1721189324.691:241): avc: denied { read } for pid=988 comm="syz.4.207" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.347618][ T28] audit: type=1400 audit(1721189324.721:242): avc: denied { open } for pid=988 comm="syz.4.207" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.432372][ T28] audit: type=1400 audit(1721189324.801:243): avc: denied { ioctl } for pid=988 comm="syz.4.207" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.457373][ T28] audit: type=1400 audit(1721189324.801:244): avc: denied { bind } for pid=988 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.552074][ T995] device pim6reg1 entered promiscuous mode [ 43.619352][ T293] EXT4-fs (loop0): unmounting filesystem. [ 43.642288][ T394] usb 4-1: 0:2 : does not exist [ 43.703092][ T394] usb 4-1: USB disconnect, device number 3 [ 43.792461][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.866002][ T1000] loop0: detected capacity change from 0 to 128 [ 43.887669][ T1000] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.896215][ T1000] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 43.940627][ T293] EXT4-fs (loop0): unmounting filesystem. [ 43.960219][ T1004] loop0: detected capacity change from 0 to 512 [ 43.994704][ T1004] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.018308][ T1004] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038 (0x7fffffff) [ 44.045342][ T293] EXT4-fs (loop0): unmounting filesystem. [ 44.177188][ T1019] loop4: detected capacity change from 0 to 128 [ 44.187547][ T1021] syz.3.217[1021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.187622][ T1021] syz.3.217[1021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.351786][ T1025] loop0: detected capacity change from 0 to 1024 [ 44.369364][ T1025] EXT4-fs: Ignoring removed orlov option [ 44.390970][ T1025] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.606147][ T1025] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 44.760425][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.785857][ T1034] loop1: detected capacity change from 0 to 512 [ 44.851482][ T1034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.860240][ T1034] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 44.935621][ T446] EXT4-fs (loop1): unmounting filesystem. [ 45.010429][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 45.248235][ T1026] tipc: Started in network mode [ 45.252940][ T1026] tipc: Node identity ac1414aa, cluster identity 4711 [ 45.259681][ T1026] tipc: New replicast peer: 100.1.1.1 [ 45.264950][ T1026] tipc: Enabled bearer , priority 10 [ 45.282592][ T1052] syz.3.231[1052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.282668][ T1052] syz.3.231[1052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.290555][ T6] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 45.344533][ T1059] loop3: detected capacity change from 0 to 512 [ 45.351647][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.362593][ T6] usb 3-1: Product: syz [ 45.366586][ T6] usb 3-1: Manufacturer: syz [ 45.367391][ T1059] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.371495][ T6] usb 3-1: SerialNumber: syz [ 45.385180][ T1059] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038 (0x7fffffff) [ 45.401556][ T1059] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.232: corrupted inode contents [ 45.413413][ T1059] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.232: mark_inode_dirty error [ 45.424951][ T1059] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.232: corrupted inode contents [ 45.436741][ T28] audit: type=1400 audit(1721189326.768:245): avc: denied { create } for pid=1055 comm="syz.3.232" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.436899][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 45.480875][ T1059] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.232: mark_inode_dirty error [ 45.528775][ T365] EXT4-fs (loop3): unmounting filesystem. [ 45.590864][ T1075] loop4: detected capacity change from 0 to 512 [ 45.628341][ T1075] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.644927][ T1075] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 45.710953][ T858] EXT4-fs (loop4): unmounting filesystem. [ 45.879206][ T28] audit: type=1400 audit(1721189327.248:246): avc: denied { write } for pid=1092 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.930797][ T28] audit: type=1400 audit(1721189327.278:247): avc: denied { read } for pid=1092 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.970432][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 45.976567][ T6] r8152-cfgselector 3-1: bad CDC descriptors [ 46.010435][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 46.021421][ T6] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 46.400516][ T222] tipc: Node number set to 2886997162 [ 46.435462][ T1078] syz.1.238 (1078) used greatest stack depth: 20488 bytes left [ 46.754542][ T1105] loop1: detected capacity change from 0 to 1024 [ 46.765722][ T1105] EXT4-fs: Ignoring removed orlov option [ 47.020485][ T1105] EXT4-fs (loop1): Test dummy encryption mode enabled [ 47.027128][ T1105] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 47.045907][ T1110] loop4: detected capacity change from 0 to 512 [ 47.107507][ T1110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.108031][ T28] audit: type=1400 audit(1721189328.478:248): avc: denied { read } for pid=1115 comm="syz.3.250" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.120460][ T1110] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 47.165549][ T1110] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.247: corrupted inode contents [ 47.177131][ T28] audit: type=1400 audit(1721189328.518:249): avc: denied { open } for pid=1115 comm="syz.3.250" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.201024][ T28] audit: type=1400 audit(1721189328.538:250): avc: denied { ioctl } for pid=1115 comm="syz.3.250" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 47.226176][ T1110] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.247: mark_inode_dirty error [ 47.240481][ T1110] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.247: corrupted inode contents [ 47.268793][ T1110] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.247: mark_inode_dirty error [ 47.282776][ T1122] loop3: detected capacity change from 0 to 512 [ 47.306958][ T858] EXT4-fs (loop4): unmounting filesystem. [ 47.313622][ T1124] netlink: 'syz.0.254': attribute type 6 has an invalid length. [ 47.326286][ T1122] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 47.350898][ T1122] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038 (0x7fffffff) [ 47.365869][ T1130] loop0: detected capacity change from 0 to 128 [ 47.395742][ T1130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.428179][ T1130] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 47.523158][ T365] EXT4-fs (loop3): unmounting filesystem. [ 47.531813][ T293] EXT4-fs (loop0): unmounting filesystem. [ 47.810574][ T393] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.896438][ T1158] loop0: detected capacity change from 0 to 512 [ 47.912151][ T1158] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.921126][ T1158] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 47.940630][ T1158] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #2: comm syz.0.266: corrupted inode contents [ 47.952385][ T1158] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #2: comm syz.0.266: mark_inode_dirty error [ 47.963613][ T1158] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #2: comm syz.0.266: corrupted inode contents [ 47.975291][ T1158] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.266: mark_inode_dirty error [ 48.010064][ T293] EXT4-fs (loop0): unmounting filesystem. [ 48.016679][ T1165] netlink: 'syz.2.268': attribute type 6 has an invalid length. [ 48.120411][ T393] usb 4-1: Using ep0 maxpacket: 8 [ 49.434158][ T393] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.479390][ T393] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 49.491589][ T393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.510632][ T393] usb 4-1: config 0 descriptor?? [ 49.535020][ T1183] loop1: detected capacity change from 0 to 512 [ 49.571006][ T393] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 49.578634][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 49.578646][ T28] audit: type=1400 audit(1721189330.948:258): avc: denied { execute } for pid=1184 comm="syz.0.275" path="/63/bus" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.586041][ T1183] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.645673][ T1183] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 49.677806][ T393] usb 4-1: No valid video chain found. [ 49.729021][ T446] EXT4-fs (loop1): unmounting filesystem. [ 49.909117][ T393] usb 4-1: USB disconnect, device number 4 [ 50.349012][ T1185] loop0: detected capacity change from 0 to 128 [ 50.402586][ T1204] syz.1.278[1204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.402665][ T1204] syz.1.278[1204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.406853][ T1185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 50.475089][ T1185] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 50.483147][ T28] audit: type=1400 audit(1721189331.848:259): avc: denied { ioctl } for pid=1209 comm="syz.2.280" path="socket:[19550]" dev="sockfs" ino=19550 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.602666][ T1215] netlink: 'syz.4.282': attribute type 6 has an invalid length. [ 50.623348][ T1212] loop2: detected capacity change from 0 to 512 [ 50.629597][ T1212] tmpfs: Unknown parameter 'errors' [ 50.652990][ T1217] loop4: detected capacity change from 0 to 128 [ 50.688695][ T1217] FAT-fs (loop4): bogus number of reserved sectors [ 50.702106][ T1217] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 50.715183][ T1217] FAT-fs (loop4): Can't find a valid FAT filesystem [ 50.729969][ T1192] syz.0.275 (1192) used greatest stack depth: 19136 bytes left [ 50.775851][ T293] EXT4-fs (loop0): unmounting filesystem. [ 50.824508][ T1230] loop4: detected capacity change from 0 to 256 [ 50.844488][ T506] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 50.849719][ T1232] fuse: Bad value for 'fd' [ 52.005439][ T1243] loop3: detected capacity change from 0 to 256 [ 52.022758][ T1243] FAT-fs (loop3): Directory bread(block 64) failed [ 52.029105][ T1243] FAT-fs (loop3): Directory bread(block 65) failed [ 52.036163][ T1243] FAT-fs (loop3): Directory bread(block 66) failed [ 52.043116][ T1243] FAT-fs (loop3): Directory bread(block 67) failed [ 52.049491][ T1243] FAT-fs (loop3): Directory bread(block 68) failed [ 52.056116][ T1243] FAT-fs (loop3): Directory bread(block 69) failed [ 52.062620][ T1243] FAT-fs (loop3): Directory bread(block 70) failed [ 52.072121][ T1243] FAT-fs (loop3): Directory bread(block 71) failed [ 52.078486][ T1243] FAT-fs (loop3): Directory bread(block 72) failed [ 52.084915][ T1243] FAT-fs (loop3): Directory bread(block 73) failed [ 52.169764][ T28] audit: type=1326 audit(1721189333.538:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.3.296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5663375a19 code=0x0 [ 52.208656][ T28] audit: type=1400 audit(1721189333.578:261): avc: denied { compute_member } for pid=1256 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 52.267385][ T28] audit: type=1400 audit(1721189333.638:262): avc: denied { unlink } for pid=1262 comm="syz.0.301" name="#1" dev="tmpfs" ino=414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.310553][ T506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.321334][ T506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.331476][ T506] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 52.340592][ T506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.353228][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 52.360988][ T506] usb 2-1: config 0 descriptor?? [ 52.368396][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 52.391922][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 52.400082][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.410403][ T393] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 52.411080][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 52.426176][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.434450][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.442653][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.450856][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.458839][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.591474][ T1275] fuse: Bad value for 'fd' [ 54.412134][ T393] usb 5-1: Using ep0 maxpacket: 8 [ 54.440547][ T28] audit: type=1326 audit(1721189335.818:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5663375a19 code=0x7fc00000 [ 54.500408][ T506] usbhid 2-1:0.0: can't add hid device: -71 [ 54.506368][ T506] usbhid: probe of 2-1:0.0 failed with error -71 [ 54.524017][ T1287] loop1: detected capacity change from 0 to 256 [ 54.531080][ T506] usb 2-1: USB disconnect, device number 4 [ 54.620547][ T393] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.630950][ T393] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 54.639981][ T393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.738751][ T393] usb 5-1: config 0 descriptor?? [ 54.852509][ T393] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 54.938964][ T393] usb 5-1: No valid video chain found. [ 54.971619][ T28] audit: type=1400 audit(1721189336.348:264): avc: denied { read } for pid=1302 comm="syz.1.311" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.995209][ T28] audit: type=1400 audit(1721189336.348:265): avc: denied { open } for pid=1302 comm="syz.1.311" path="/42/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.069503][ T393] usb 5-1: USB disconnect, device number 4 [ 55.090393][ T296] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 55.651432][ T1311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 55.790427][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.801182][ T296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.861181][ T296] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 55.871608][ T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.882851][ T296] usb 4-1: config 0 descriptor?? [ 55.900572][ T1317] capability: warning: `syz.1.316' uses 32-bit capabilities (legacy support in use) [ 55.947032][ T1319] loop1: detected capacity change from 0 to 512 [ 55.972486][ T1319] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.317: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 55.990735][ T1319] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.317: couldn't read orphan inode 15 (err -117) [ 56.002527][ T1319] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.011009][ T1319] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038 (0x7fffffff) [ 56.022666][ T28] audit: type=1400 audit(1721189337.398:266): avc: denied { setattr } for pid=1318 comm="syz.1.317" path="/45/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.079185][ T28] audit: type=1326 audit(1721189337.448:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1326 comm="syz.4.319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f615b575a19 code=0x0 [ 56.296305][ T1336] loop2: detected capacity change from 0 to 1024 [ 56.303280][ T1336] EXT4-fs: Ignoring removed orlov option [ 56.544383][ T1337] xt_CONNSECMARK: invalid mode: 0 [ 56.568501][ T1336] EXT4-fs (loop2): Test dummy encryption mode enabled [ 56.575236][ T1336] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 56.840454][ T506] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 56.913165][ T28] audit: type=1326 audit(1721189338.288:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1326 comm="syz.4.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615b575a19 code=0x7fc00000 [ 56.954266][ T28] audit: type=1400 audit(1721189338.328:269): avc: denied { setattr } for pid=1342 comm="syz.4.323" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.110594][ T506] usb 2-1: Using ep0 maxpacket: 16 [ 57.240417][ T506] usb 2-1: config index 0 descriptor too short (expected 24929, got 18) [ 57.248740][ T506] usb 2-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 57.258114][ T506] usb 2-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 57.268883][ T506] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 57.400477][ T506] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 57.409951][ T506] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 57.418120][ T506] usb 2-1: Product: syz [ 57.422368][ T506] usb 2-1: Manufacturer: syz [ 57.476837][ T28] audit: type=1400 audit(1721189338.848:270): avc: denied { map } for pid=1362 comm="syz.0.332" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 57.510464][ T296] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 57.519080][ T296] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 57.527005][ T296] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 57.534905][ T296] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 57.542278][ T296] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 57.550549][ T296] usb 4-1: USB disconnect, device number 5 [ 57.772728][ T393] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.001897][ T28] audit: type=1400 audit(1721189339.378:271): avc: denied { read write } for pid=1367 comm="syz.4.333" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.025751][ T393] usb 1-1: Using ep0 maxpacket: 16 [ 58.120526][ T28] audit: type=1400 audit(1721189339.448:272): avc: denied { open } for pid=1367 comm="syz.4.333" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.161112][ T1371] fuse: Invalid rootmode [ 58.422248][ T1377] xt_CONNSECMARK: invalid mode: 0 [ 58.450547][ T393] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 58.461208][ T393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.469187][ T393] usb 1-1: Product: syz [ 58.475112][ T393] usb 1-1: Manufacturer: syz [ 58.479653][ T393] usb 1-1: SerialNumber: syz [ 58.512161][ T393] usb 1-1: config 0 descriptor?? [ 58.714718][ T1356] loop2: detected capacity change from 0 to 262144 [ 58.726221][ T1356] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.765511][ T1356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.194695][ T446] EXT4-fs (loop1): unmounting filesystem. [ 59.252098][ T1400] netlink: 'syz.4.345': attribute type 1 has an invalid length. [ 59.530561][ T506] r8152-cfgselector 2-1: Unknown version 0x0000 [ 59.537479][ T506] r8152-cfgselector 2-1: USB disconnect, device number 5 [ 59.550463][ T1407] fuse: Invalid rootmode [ 59.892041][ T28] audit: type=1400 audit(1721189341.268:273): avc: denied { write } for pid=1362 comm="syz.0.332" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.968325][ T1422] loop4: detected capacity change from 0 to 16 [ 59.978857][ T1422] erofs: (device loop4): mounted with root inode @ nid 36. [ 59.987516][ T1422] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 59.997361][ T1422] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 60.016296][ T1422] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 60.047779][ T1431] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 60.059045][ T1431] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 60.079653][ T1431] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 60.223808][ T1436] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 60.317041][ T1439] fuse: Invalid rootmode [ 60.346137][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 60.346153][ T28] audit: type=1326 audit(1721189341.718:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615b575a19 code=0x7ffc0000 [ 60.358396][ T1422] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 60.387361][ T1422] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 60.402843][ T1447] device pim6reg1 entered promiscuous mode [ 60.403184][ T28] audit: type=1326 audit(1721189341.718:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615b575a19 code=0x7ffc0000 [ 60.431903][ T28] audit: type=1326 audit(1721189341.718:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f615b574357 code=0x7ffc0000 [ 60.455846][ T28] audit: type=1326 audit(1721189341.718:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615b575a19 code=0x7ffc0000 [ 60.479277][ T28] audit: type=1326 audit(1721189341.718:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615b575a19 code=0x7ffc0000 [ 60.502741][ T28] audit: type=1326 audit(1721189341.718:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f615b575a19 code=0x7ffc0000 [ 60.526261][ T28] audit: type=1326 audit(1721189341.718:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615b575a19 code=0x7ffc0000 [ 60.550179][ T28] audit: type=1326 audit(1721189341.718:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f615b575a19 code=0x7ffc0000 [ 60.573284][ T28] audit: type=1326 audit(1721189341.718:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f615b575a19 code=0x7ffc0000 [ 60.596243][ T28] audit: type=1326 audit(1721189341.718:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1421 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f615b575a53 code=0x7ffc0000 [ 60.619075][ T314] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 60.635247][ T1422] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 60.644974][ T1431] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 60.655045][ T1431] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 60.668109][ T1450] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 60.678101][ T1431] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 60.686510][ T1450] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 60.698919][ T1450] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 60.960494][ T394] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 61.000148][ T393] usb 1-1: USB disconnect, device number 2 [ 61.250437][ T314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.312920][ T1476] syz.0.372 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.380504][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 61.390153][ T394] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 61.399800][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16384, setting to 1024 [ 61.410753][ T394] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 61.420807][ T314] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 61.429837][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.437661][ T314] usb 3-1: Product: syz [ 61.441626][ T314] usb 3-1: Manufacturer: syz [ 61.446039][ T314] usb 3-1: SerialNumber: syz [ 61.451636][ T314] usb 3-1: config 0 descriptor?? [ 61.491110][ T314] usb_ehset_test: probe of 3-1:0.0 failed with error -32 [ 61.650454][ T394] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 61.659407][ T394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.667146][ T394] usb 5-1: Product: syz [ 61.671171][ T394] usb 5-1: Manufacturer: syz [ 61.675529][ T394] usb 5-1: SerialNumber: syz [ 61.680617][ T394] usb 5-1: config 0 descriptor?? [ 61.693653][ T6] usb 3-1: USB disconnect, device number 5 [ 61.720864][ T394] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 61.830428][ T393] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 62.000771][ T394] scsi host1: usb-storage 5-1:0.0 [ 62.009576][ T394] usb 5-1: USB disconnect, device number 5 [ 62.090423][ T393] usb 2-1: Using ep0 maxpacket: 16 [ 62.430460][ T393] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 62.439576][ T393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.447468][ T393] usb 2-1: Product: syz [ 62.459530][ T393] usb 2-1: Manufacturer: syz [ 62.464123][ T393] usb 2-1: SerialNumber: syz [ 62.469267][ T393] usb 2-1: config 0 descriptor?? [ 62.575701][ T1514] device pim6reg1 entered promiscuous mode [ 62.808252][ T1518] kernel profiling enabled (shift: 17) [ 63.160426][ T394] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 63.280421][ T393] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.520479][ T394] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.530524][ T393] usb 1-1: Using ep0 maxpacket: 8 [ 63.650578][ T393] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 63.659610][ T393] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 63.668127][ T393] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 63.677135][ T393] usb 1-1: config 250 has no interface number 0 [ 63.683404][ T393] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 63.694927][ T394] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 63.699075][ T1542] loop2: detected capacity change from 0 to 16 [ 63.704058][ T393] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 63.720194][ T394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.722095][ T1542] erofs: (device loop2): mounted with root inode @ nid 36. [ 63.728348][ T394] usb 5-1: Product: syz [ 63.739296][ T393] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.748697][ T1542] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 63.749653][ T394] usb 5-1: Manufacturer: syz [ 63.758998][ T1542] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 63.763041][ T393] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 63.763070][ T393] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 63.783877][ T394] usb 5-1: SerialNumber: syz [ 63.801581][ T393] usb 1-1: config 250 interface 228 has no altsetting 0 [ 63.809199][ T394] usb 5-1: config 0 descriptor?? [ 63.816745][ T1542] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 63.825124][ T1543] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 63.834345][ T1543] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 63.846684][ T1543] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 63.855683][ T394] usb_ehset_test: probe of 5-1:0.0 failed with error -32 [ 63.883159][ T1542] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 63.892373][ T1542] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 63.904708][ T1542] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 63.919788][ T1542] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 63.929013][ T393] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 63.930396][ T1542] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 63.938207][ T393] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 63.956755][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 63.966258][ T1542] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 63.971622][ T393] usb 1-1: Product: syz [ 63.978439][ T393] usb 1-1: SerialNumber: syz [ 63.988232][ T1542] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 63.997505][ T1542] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 64.009835][ T1542] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 64.021100][ T393] hub 1-1:250.228: bad descriptor, ignoring hub [ 64.027168][ T393] hub: probe of 1-1:250.228 failed with error -5 [ 64.063298][ T39] usb 5-1: USB disconnect, device number 6 [ 64.210450][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 64.231402][ T393] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 64.300436][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 64.330426][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 64.420503][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.429529][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 64.437324][ T24] usb 4-1: SerialNumber: syz [ 64.626505][ T1548] netlink: 104 bytes leftover after parsing attributes in process `syz.4.398'. [ 64.645362][ T1550] loop4: detected capacity change from 0 to 512 [ 64.654830][ T1550] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.694702][ T24] usb 4-1: USB disconnect, device number 6 [ 64.765458][ T1553] input: syz0 as /devices/virtual/input/input4 [ 64.805063][ T1550] EXT4-fs (loop4): 1 orphan inode deleted [ 64.810917][ T1550] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.820035][ T1550] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038 (0x7fffffff) [ 64.843711][ T506] usb 2-1: USB disconnect, device number 6 [ 64.861161][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 64.874184][ T6] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 64.884271][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 16384, setting to 1024 [ 64.938189][ T6] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 65.240448][ T6] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 65.249605][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.257707][ T6] usb 3-1: Product: syz [ 65.262013][ T6] usb 3-1: Manufacturer: syz [ 65.268184][ T6] usb 3-1: SerialNumber: syz [ 65.299296][ T6] usb 3-1: config 0 descriptor?? [ 65.341232][ T6] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 65.396268][ T1564] loop3: detected capacity change from 0 to 512 [ 65.419373][ T1564] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.401: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 65.437853][ T1564] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.401: couldn't read orphan inode 15 (err -117) [ 65.450023][ T1564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.458674][ T1564] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038 (0x7fffffff) [ 65.497144][ T28] kauditd_printk_skb: 127 callbacks suppressed [ 65.497161][ T28] audit: type=1400 audit(1721189346.868:413): avc: denied { unmount } for pid=365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.524347][ T365] EXT4-fs (loop3): unmounting filesystem. [ 65.548512][ T28] audit: type=1326 audit(1721189346.918:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1541 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7491b75a19 code=0x7ffc0000 [ 65.571765][ T28] audit: type=1326 audit(1721189346.918:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1541 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7491b75a19 code=0x7ffc0000 [ 65.595581][ T28] audit: type=1326 audit(1721189346.918:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1541 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7491b75a19 code=0x7ffc0000 [ 65.619729][ T28] audit: type=1326 audit(1721189346.918:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1541 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7491b75a19 code=0x7ffc0000 [ 65.643376][ T6] scsi host1: usb-storage 3-1:0.0 [ 65.658762][ T6] usb 3-1: USB disconnect, device number 6 [ 65.666840][ T28] audit: type=1326 audit(1721189346.918:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1541 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7491b75a19 code=0x7ffc0000 [ 65.690581][ T28] audit: type=1326 audit(1721189346.918:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1541 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7491b75a19 code=0x7ffc0000 [ 65.716877][ T28] audit: type=1326 audit(1721189346.918:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1541 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7491b75a19 code=0x7ffc0000 [ 65.748445][ T28] audit: type=1326 audit(1721189346.918:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1541 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7491b75a19 code=0x7ffc0000 [ 65.772127][ T28] audit: type=1326 audit(1721189346.918:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1541 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7491b75a19 code=0x7ffc0000 [ 68.660613][ T39] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 68.687501][ T858] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 68.699314][ T858] EXT4-fs (loop4): Remounting filesystem read-only [ 68.705793][ T858] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 68.717283][ T39] usb 1-1: device reset changed ep0 maxpacket size! [ 68.723816][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 68.733721][ T39] usb 1-1: USB disconnect, device number 3 [ 68.742659][ T39] usblp0: removed [ 68.772517][ T10] tipc: Disabling bearer [ 68.772835][ T858] EXT4-fs (loop4): unmounting filesystem. [ 68.777737][ T10] tipc: Left network mode [ 68.893668][ T1594] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.900661][ T1594] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.907877][ T1594] device bridge_slave_0 entered promiscuous mode [ 68.916948][ T1594] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.923865][ T1594] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.931122][ T1594] device bridge_slave_1 entered promiscuous mode [ 68.970413][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 68.990487][ T1594] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.997370][ T1594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.004482][ T1594] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.011254][ T1594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.033331][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.040742][ T222] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.047805][ T222] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.071857][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.079968][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.088022][ T222] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.094885][ T222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.102335][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.112426][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 69.119811][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.128591][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.135461][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.142693][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.150570][ T222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.164322][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.172181][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.179391][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.187491][ T1594] device veth0_vlan entered promiscuous mode [ 69.198463][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.200702][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 69.215366][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 69.223410][ T24] usb 4-1: SerialNumber: syz [ 69.228800][ T24] usb 4-1: config 0 descriptor?? [ 69.234163][ T1594] device veth1_macvtap entered promiscuous mode [ 69.244238][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.255910][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.281128][ T1600] loop4: detected capacity change from 0 to 512 [ 69.287519][ T1600] journal_path: Lookup failure for './bus' [ 69.293420][ T1600] EXT4-fs: error: could not find journal device path [ 69.353488][ T1600] loop4: detected capacity change from 0 to 2048 [ 69.380429][ T1600] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.412: casefold flag without casefold feature [ 69.393704][ T10] device bridge_slave_1 left promiscuous mode [ 69.399803][ T1600] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 69.399863][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.416695][ T10] device bridge_slave_0 left promiscuous mode [ 69.422829][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.430260][ T1600] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 69.437898][ T1600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.446881][ T10] device veth1_macvtap left promiscuous mode [ 69.453022][ T10] device veth0_vlan left promiscuous mode [ 69.535532][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.560457][ T24] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 69.574941][ T1602] loop2: detected capacity change from 0 to 40427 [ 69.577323][ T24] usb 4-1: No valid video chain found. [ 69.599293][ T1602] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.650461][ T1602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.685823][ T725] syz-executor: attempt to access beyond end of device [ 69.685823][ T725] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.068392][ T1630] syz.3.423[1630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.068461][ T1630] syz.3.423[1630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.570561][ T24] usb 4-1: USB disconnect, device number 7 [ 70.632014][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 70.632053][ T28] audit: type=1400 audit(1721189351.998:438): avc: denied { mounton } for pid=1599 comm="syz.4.412" path="/0/file2/bus" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.711541][ T39] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 70.764223][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.773613][ T28] audit: type=1400 audit(1721189351.998:439): avc: denied { write } for pid=1599 comm="syz.4.412" name="bus" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.795255][ T28] audit: type=1400 audit(1721189351.998:440): avc: denied { add_name } for pid=1599 comm="syz.4.412" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.815241][ T28] audit: type=1400 audit(1721189352.038:441): avc: denied { setattr } for pid=1599 comm="syz.4.412" name="work" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.834879][ T39] usb 1-1: Product: syz [ 70.841690][ T39] usb 1-1: Manufacturer: syz [ 70.841712][ T28] audit: type=1400 audit(1721189352.038:442): avc: denied { remove_name } for pid=1599 comm="syz.4.412" name="#5" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.847538][ T28] audit: type=1400 audit(1721189352.038:443): avc: denied { unlink } for pid=1599 comm="syz.4.412" name="#5" dev="loop4" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 70.867915][ T39] usb 1-1: SerialNumber: syz [ 70.872808][ T39] usb 1-1: config 0 descriptor?? [ 70.890266][ T28] audit: type=1400 audit(1721189352.208:444): avc: denied { rmdir } for pid=1594 comm="syz-executor" name="file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.895109][ T1594] EXT4-fs (loop4): unmounting filesystem. [ 70.974445][ T39] usb_ehset_test: probe of 1-1:0.0 failed with error -32 [ 70.989909][ T1644] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off. [ 71.007507][ T1646] geneve1: tun_chr_ioctl cmd 1074025681 [ 71.179695][ T39] usb 1-1: USB disconnect, device number 4 [ 71.665813][ T1654] loop4: detected capacity change from 0 to 40427 [ 71.708563][ T1654] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.760757][ T1679] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off. [ 71.761916][ T1654] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 71.798122][ T28] audit: type=1400 audit(1721189353.168:445): avc: denied { write } for pid=1653 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.816952][ T506] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 71.836599][ T1594] syz-executor: attempt to access beyond end of device [ 71.836599][ T1594] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.893771][ T1688] loop1: detected capacity change from 0 to 512 [ 71.912841][ T1688] EXT4-fs (loop1): orphan cleanup on readonly fs [ 71.919462][ T1688] EXT4-fs warning (device loop1): ext4_enable_quotas:6987: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 71.934404][ T1688] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 71.941595][ T1688] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.446: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 71.959668][ T1688] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.446: couldn't read orphan inode 13 (err -117) [ 72.001914][ T1688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.051489][ T1695] syz.4.447[1695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.051563][ T1695] syz.4.447[1695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.065422][ T1697] loop2: detected capacity change from 0 to 256 [ 72.141617][ T1700] loop0: detected capacity change from 0 to 2048 [ 72.154180][ T446] EXT4-fs (loop1): unmounting filesystem. [ 72.172215][ T1700] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.196688][ T293] EXT4-fs (loop0): unmounting filesystem. [ 72.219804][ T1712] overlayfs: null uuid detected in lower fs '/', falling back to xino=off,index=off,nfs_export=off. [ 72.557574][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.568425][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.577972][ T506] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.586915][ T506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.596285][ T506] usb 4-1: config 0 descriptor?? [ 72.773917][ T1718] loop4: detected capacity change from 0 to 40427 [ 72.840490][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 72.932178][ T1718] F2FS-fs (loop4): Found nat_bits in checkpoint [ 73.134710][ T1718] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 73.150413][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 73.270679][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 73.280112][ T24] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 73.289732][ T24] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 73.299612][ T24] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 73.311000][ T24] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 73.321336][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 73.329229][ T24] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 73.343246][ T1594] syz-executor: attempt to access beyond end of device [ 73.343246][ T1594] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.358699][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.421089][ T24] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 73.563251][ T1744] loop1: detected capacity change from 0 to 512 [ 73.571912][ T1744] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.578479][ T1744] EXT4-fs warning (device loop1): ext4_enable_quotas:6987: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.593545][ T1744] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 73.600142][ T1744] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.462: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 73.618160][ T1744] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.462: couldn't read orphan inode 13 (err -117) [ 73.630028][ T1744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.651110][ T24] scsi host1: usb-storage 1-1:1.0 [ 73.671887][ T446] EXT4-fs (loop1): unmounting filesystem. [ 73.689942][ T1748] loop1: detected capacity change from 0 to 2048 [ 73.712422][ T1748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 73.720419][ T393] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 73.735242][ T446] EXT4-fs (loop1): unmounting filesystem. [ 73.766933][ T1755] syz.1.465[1755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.766981][ T1755] syz.1.465[1755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.895728][ T1759] loop2: detected capacity change from 0 to 512 [ 73.924573][ T1759] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz.2.466: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 73.945466][ T1759] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.466: couldn't read orphan inode 15 (err -117) [ 73.958907][ T1759] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.967315][ T1759] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038 (0x7fffffff) [ 73.993641][ T725] EXT4-fs (loop2): unmounting filesystem. [ 74.006854][ T1767] syz.2.469[1767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.006906][ T1767] syz.2.469[1767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.010565][ T506] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 74.018221][ T393] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 74.029491][ T506] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 74.053725][ T506] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 74.068780][ T506] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 74.076529][ T506] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 74.088962][ T506] usb 4-1: USB disconnect, device number 8 [ 74.208521][ T1776] xt_bpf: check failed: parse error [ 74.702728][ T24] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 74.770523][ T393] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 74.789807][ T393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.964496][ T506] usb 1-1: USB disconnect, device number 5 [ 74.982154][ T1746] sddr09: could not read card info [ 74.987191][ T696] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 75.009671][ T696] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 75.017843][ T696] sd 1:0:0:0: [sdb] Write Protect is off [ 75.024647][ T696] sd 1:0:0:0: [sdb] Asking for cache data failed [ 75.032872][ T696] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 75.045026][ T696] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 75.071703][ T1789] geneve1: tun_chr_ioctl cmd 1074025681 [ 75.074326][ T462] udevd[462]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 75.129495][ T425] udevd[425]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 75.270686][ T393] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 75.280267][ T393] usb 5-1: No valid video chain found. [ 75.594820][ T39] usb 5-1: USB disconnect, device number 7 [ 75.816797][ T1807] capability: warning: `syz.3.482' uses deprecated v2 capabilities in a way that may be insecure [ 75.850370][ T393] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 75.988533][ T28] audit: type=1400 audit(1721189357.358:446): avc: denied { create } for pid=1812 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.008109][ T28] audit: type=1400 audit(1721189357.358:447): avc: denied { connect } for pid=1812 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.022236][ T1811] loop0: detected capacity change from 0 to 40427 [ 76.049227][ T1811] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 76.056830][ T1811] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 76.073505][ T1811] F2FS-fs (loop0): invalid crc value [ 76.080049][ T1811] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.121104][ T1811] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 76.127963][ T1811] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 76.150493][ T506] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 76.190006][ T1828] netlink: 'syz.2.490': attribute type 12 has an invalid length. [ 76.198467][ T1828] netlink: 'syz.2.490': attribute type 10 has an invalid length. [ 76.353514][ T393] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 76.372919][ T393] usb 2-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 76.410862][ T393] usb 2-1: Manufacturer: syz [ 76.492105][ T393] usb 2-1: config 0 descriptor?? [ 76.531923][ T393] hub 2-1:0.0: bad descriptor, ignoring hub [ 76.537696][ T393] hub: probe of 2-1:0.0 failed with error -5 [ 76.547852][ T393] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 76.581547][ T393] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 76.599007][ T28] audit: type=1400 audit(1721189357.968:448): avc: denied { write } for pid=1841 comm="syz.2.496" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.620148][ T28] audit: type=1400 audit(1721189357.988:449): avc: denied { add_name } for pid=1841 comm="syz.2.496" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.640817][ T28] audit: type=1400 audit(1721189357.988:450): avc: denied { associate } for pid=1841 comm="syz.2.496" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.686013][ T1846] loop2: detected capacity change from 0 to 2048 [ 76.717841][ T1846] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.770451][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.786579][ T506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.796674][ T506] usb 4-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 4.00 [ 76.820372][ T506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.828946][ T506] usb 4-1: config 0 descriptor?? [ 76.854889][ T725] EXT4-fs (loop2): unmounting filesystem. [ 76.920487][ T393] usb 2-1: USB disconnect, device number 7 [ 76.926579][ T393] ftdi_sio 2-1:0.0: device disconnected [ 76.981834][ T1859] loop0: detected capacity change from 0 to 512 [ 76.988270][ T1859] journal_path: Lookup failure for './bus' [ 76.994220][ T1859] EXT4-fs: error: could not find journal device path [ 77.063193][ T1859] loop0: detected capacity change from 0 to 2048 [ 77.070746][ T1859] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.501: casefold flag without casefold feature [ 77.084590][ T1859] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 77.095151][ T1859] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 77.102816][ T1859] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 77.150411][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 77.460515][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.511886][ T506] wacom 0003:056A:00F8.0003: unbalanced collection at end of report description [ 77.521079][ T506] wacom 0003:056A:00F8.0003: parse failed [ 77.526633][ T506] wacom: probe of 0003:056A:00F8.0003 failed with error -22 [ 77.534636][ T506] usb 4-1: USB disconnect, device number 9 [ 77.573004][ T1875] loop1: detected capacity change from 0 to 1024 [ 77.579388][ T1875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.591821][ T1875] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 77.602828][ T28] audit: type=1400 audit(1721189358.978:451): avc: denied { remount } for pid=1874 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.604091][ T1875] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 77.640671][ T1875] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 77.651676][ T446] EXT4-fs error (device loop1): ext4_lookup:1855: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 77.664484][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 77.665064][ T446] EXT4-fs error (device loop1): ext4_lookup:1855: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 77.722244][ T446] EXT4-fs (loop1): unmounting filesystem. [ 77.770431][ T39] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 77.844105][ T1880] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.851058][ T1880] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.858286][ T1880] device bridge_slave_0 entered promiscuous mode [ 77.868457][ T1880] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.875456][ T1880] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.876360][ T293] EXT4-fs (loop0): unmounting filesystem. [ 77.882961][ T1880] device bridge_slave_1 entered promiscuous mode [ 77.909515][ T1885] loop0: detected capacity change from 0 to 16 [ 77.959056][ T1880] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.965940][ T1880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.973045][ T1880] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.979812][ T1880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.987076][ T6] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 78.010831][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.018651][ T6] usb 3-1: Product: syz [ 78.026037][ T6] usb 3-1: Manufacturer: syz [ 78.030633][ T6] usb 3-1: SerialNumber: syz [ 78.035705][ T6] usb 3-1: config 0 descriptor?? [ 78.039481][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.048087][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.062106][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.080027][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.088425][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.095306][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.096210][ T6] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 78.102642][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.110151][ T6] usb 3-1: Detected FT232H [ 78.118012][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.128534][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.143590][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.152229][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.200597][ T1880] device veth0_vlan entered promiscuous mode [ 78.266780][ T1880] device veth1_macvtap entered promiscuous mode [ 78.450792][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 78.460022][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.610746][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 78.635550][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 78.643953][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.652309][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.660714][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.668872][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.676546][ T6] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 78.683381][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.690933][ T6] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 78.699830][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.707046][ T6] usb 3-1: USB disconnect, device number 7 [ 78.713319][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.721297][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 78.732454][ T6] ftdi_sio 3-1:0.0: device disconnected [ 78.778446][ T28] audit: type=1400 audit(1721189360.148:452): avc: denied { watch } for pid=1896 comm="syz.0.513" path="/104/bus/file0" dev="overlay" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.823570][ T1903] loop0: detected capacity change from 0 to 128 [ 78.831286][ T1903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.839779][ T1903] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 78.873414][ T28] audit: type=1400 audit(1721189360.248:453): avc: denied { setattr } for pid=1902 comm="syz.0.516" path="/107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.917697][ T313] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 78.926094][ T43] device bridge_slave_1 left promiscuous mode [ 78.932369][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.944247][ T43] device bridge_slave_0 left promiscuous mode [ 78.950785][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.959196][ T43] device veth1_macvtap left promiscuous mode [ 78.965567][ T39] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 78.968622][ T1908] input: syz1 as /devices/virtual/input/input5 [ 78.976970][ T43] device veth0_vlan left promiscuous mode [ 78.983881][ T28] audit: type=1400 audit(1721189360.348:454): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=524 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.990351][ T293] EXT4-fs (loop0): unmounting filesystem. [ 79.006060][ T39] usb 5-1: No valid video chain found. [ 79.011918][ T28] audit: type=1400 audit(1721189360.348:455): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=524 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.073715][ T1916] loop2: detected capacity change from 0 to 128 [ 79.078672][ T1918] loop0: detected capacity change from 0 to 128 [ 79.106525][ T1916] syz.2.521: attempt to access beyond end of device [ 79.106525][ T1916] loop2: rw=2049, sector=153, nr_sectors = 88 limit=128 [ 79.145358][ T1913] syz.2.521: attempt to access beyond end of device [ 79.145358][ T1913] loop2: rw=524288, sector=153, nr_sectors = 40 limit=128 [ 79.180533][ T24] usb 5-1: USB disconnect, device number 8 [ 79.190595][ T1913] syz.2.521: attempt to access beyond end of device [ 79.190595][ T1913] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 79.203828][ T1913] syz.2.521: attempt to access beyond end of device [ 79.203828][ T1913] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 79.270857][ T1913] syz.2.521: attempt to access beyond end of device [ 79.270857][ T1913] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 79.290538][ T313] usb 2-1: config 0 has no interfaces? [ 79.296070][ T313] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.404189][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.436632][ T1913] syz.2.521: attempt to access beyond end of device [ 79.436632][ T1913] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 79.493496][ T313] usb 2-1: config 0 descriptor?? [ 79.523915][ T1913] syz.2.521: attempt to access beyond end of device [ 79.523915][ T1913] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 79.537283][ T1913] syz.2.521: attempt to access beyond end of device [ 79.537283][ T1913] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 79.550626][ T1913] syz.2.521: attempt to access beyond end of device [ 79.550626][ T1913] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 79.563850][ T1913] syz.2.521: attempt to access beyond end of device [ 79.563850][ T1913] loop2: rw=0, sector=169, nr_sectors = 8 limit=128 [ 79.752188][ T1957] loop3: detected capacity change from 0 to 128 [ 79.766387][ T24] usb 2-1: USB disconnect, device number 8 [ 79.803189][ T1966] loop3: detected capacity change from 0 to 16 [ 79.809601][ T1966] erofs: (device loop3): mounted with root inode @ nid 36. [ 79.817689][ T1966] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 79.826897][ T1966] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 79.836297][ T1966] erofs: (device loop3): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 79.845247][ T1966] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 79.900890][ T506] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 79.938295][ T1984] loop4: detected capacity change from 0 to 128 [ 79.966646][ T1986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 79.975533][ T1986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.548'. [ 80.078868][ T1996] loop0: detected capacity change from 0 to 16 [ 80.085439][ T1996] erofs: (device loop0): mounted with root inode @ nid 36. [ 80.093927][ T1996] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 80.103323][ T1996] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 80.112282][ T1996] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 80.121217][ T1996] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 80.160397][ T506] usb 3-1: Using ep0 maxpacket: 16 [ 80.288017][ T2007] netlink: 'syz.1.555': attribute type 12 has an invalid length. [ 80.295734][ T2007] netlink: 'syz.1.555': attribute type 10 has an invalid length. [ 80.460589][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 80.740758][ T24] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 80.780440][ T506] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 80.789389][ T506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.797206][ T506] usb 3-1: Product: syz [ 80.801389][ T506] usb 3-1: Manufacturer: syz [ 80.805848][ T506] usb 3-1: SerialNumber: syz [ 80.811668][ T506] usb 3-1: config 0 descriptor?? [ 80.851176][ T506] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 80.858794][ T506] usb 3-1: Detected FT232H [ 81.245754][ T2025] loop0: detected capacity change from 0 to 40427 [ 81.254693][ T2025] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.302374][ T2025] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.663996][ T506] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 81.758518][ T2036] loop0: detected capacity change from 0 to 256 [ 81.764934][ T2036] exfat: Deprecated parameter 'namecase' [ 81.770656][ T2036] exfat: Deprecated parameter 'utf8' [ 81.778434][ T2036] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x43dffc04, utbl_chksum : 0xe619d30d) [ 81.880426][ T506] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 81.911450][ T506] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 81.918520][ T506] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 81.927574][ T506] usb 3-1: USB disconnect, device number 8 [ 81.933806][ T506] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 81.943292][ T506] ftdi_sio 3-1:0.0: device disconnected [ 82.404098][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 82.404114][ T28] audit: type=1400 audit(1721189363.778:460): avc: denied { mount } for pid=2052 comm="syz.2.569" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.465360][ T2056] loop2: detected capacity change from 0 to 2048 [ 82.483187][ T2056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.625709][ T725] EXT4-fs (loop2): unmounting filesystem. [ 82.642874][ T2077] loop2: detected capacity change from 0 to 256 [ 82.649289][ T2077] exfat: Deprecated parameter 'namecase' [ 82.650498][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 82.663866][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.663886][ T2077] exfat: Deprecated parameter 'utf8' [ 82.677299][ T2080] loop0: detected capacity change from 0 to 256 [ 82.681457][ T2077] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x43dffc04, utbl_chksum : 0xe619d30d) [ 82.687718][ T2080] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 83.150400][ T506] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 83.160458][ T24] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 83.167154][ T24] usb 4-1: No valid video chain found. [ 83.202831][ T2108] loop4: detected capacity change from 0 to 256 [ 83.209196][ T2108] exfat: Deprecated parameter 'namecase' [ 83.215047][ T2108] exfat: Deprecated parameter 'utf8' [ 83.223035][ T2108] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x43dffc04, utbl_chksum : 0xe619d30d) [ 83.296821][ T2123] loop4: detected capacity change from 0 to 16 [ 83.304512][ T2123] erofs: (device loop4): mounted with root inode @ nid 36. [ 83.312809][ T2123] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 83.321921][ T2123] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 83.330740][ T2123] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 83.339675][ T2123] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 83.366392][ T6] usb 4-1: USB disconnect, device number 10 [ 83.400492][ T506] usb 3-1: Using ep0 maxpacket: 16 [ 83.420196][ T2134] loop4: detected capacity change from 0 to 256 [ 83.426617][ T2134] exfat: Deprecated parameter 'namecase' [ 83.432199][ T2134] exfat: Deprecated parameter 'utf8' [ 83.440145][ T2134] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x43dffc04, utbl_chksum : 0xe619d30d) [ 83.554928][ T2146] loop0: detected capacity change from 0 to 1024 [ 83.561817][ T2146] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.564739][ T2149] fuse: Bad value for 'fd' [ 83.571588][ T2146] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 83.583156][ T2146] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.589626][ T2146] EXT4-fs error (device loop0): ext4_free_blocks:6208: comm syz.0.608: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.603184][ T2146] EXT4-fs (loop0): 1 orphan inode deleted [ 83.608748][ T2146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.621934][ T28] audit: type=1400 audit(1721189364.998:461): avc: denied { read } for pid=2144 comm="syz.0.608" path="socket:[23887]" dev="sockfs" ino=23887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.675987][ T28] audit: type=1400 audit(1721189365.048:462): avc: denied { bind } for pid=2157 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.706040][ T293] EXT4-fs (loop0): unmounting filesystem. [ 83.706311][ T2158] tipc: Failed to remove unknown binding: 66,1,1/0:4130198944/4130198946 [ 83.711940][ T28] audit: type=1400 audit(1721189365.048:463): avc: denied { setopt } for pid=2157 comm="syz.4.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.724877][ T2158] tipc: Failed to remove unknown binding: 66,1,1/0:4130198944/4130198946 [ 83.740167][ T506] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 83.756609][ T506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.769212][ T506] usb 3-1: Product: syz [ 83.773179][ T506] usb 3-1: Manufacturer: syz [ 83.777164][ T2162] loop4: detected capacity change from 0 to 256 [ 83.777529][ T506] usb 3-1: SerialNumber: syz [ 83.786464][ T2162] exfat: Deprecated parameter 'namecase' [ 83.788922][ T506] usb 3-1: config 0 descriptor?? [ 83.794494][ T2162] exfat: Deprecated parameter 'utf8' [ 83.823450][ T2162] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x43dffc04, utbl_chksum : 0xe619d30d) [ 83.841366][ T506] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 83.849088][ T506] usb 3-1: Detected FT232H [ 83.932032][ T2177] fuse: Bad value for 'fd' [ 84.021411][ T28] audit: type=1400 audit(1721189365.398:464): avc: denied { mount } for pid=2187 comm="syz.4.626" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.050446][ T506] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 84.104528][ T28] audit: type=1400 audit(1721189365.478:465): avc: denied { unmount } for pid=1594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 84.153089][ T2199] loop4: detected capacity change from 0 to 1024 [ 84.173999][ T28] audit: type=1400 audit(1721189365.548:466): avc: denied { create } for pid=2198 comm="syz.4.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.193700][ T28] audit: type=1400 audit(1721189365.548:467): avc: denied { setopt } for pid=2198 comm="syz.4.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.212861][ T28] audit: type=1400 audit(1721189365.548:468): avc: denied { map } for pid=2198 comm="syz.4.631" path="socket:[23108]" dev="sockfs" ino=23108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.235730][ T28] audit: type=1400 audit(1721189365.548:469): avc: denied { read } for pid=2198 comm="syz.4.631" path="socket:[23108]" dev="sockfs" ino=23108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.270449][ T506] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 84.290436][ T506] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 84.297320][ T506] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 84.301287][ T2211] fuse: Bad value for 'fd' [ 84.306725][ T506] usb 3-1: USB disconnect, device number 9 [ 84.315993][ T506] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.325362][ T506] ftdi_sio 3-1:0.0: device disconnected [ 84.340409][ T6] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 84.430840][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.590460][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 84.710461][ T24] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 84.710472][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 84.710503][ T6] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 84.736285][ T6] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 84.745744][ T6] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 84.756680][ T6] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 84.766494][ T6] usb 4-1: config 1 interface 0 has no altsetting 0 [ 84.772985][ T6] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 84.782157][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.805941][ T2226] syz.2.643[2226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.805994][ T2226] syz.2.643[2226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.850873][ T6] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 84.916260][ T2236] mmap: syz.2.647 (2236) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 85.411276][ T6] scsi host1: usb-storage 4-1:1.0 [ 85.591214][ T2249] 9pnet_fd: Insufficient options for proto=fd [ 85.610098][ T2249] overlayfs: missing 'workdir' [ 85.790511][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 85.804860][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.900756][ T2255] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 85.941114][ T2258] syz.1.655[2258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.941191][ T2258] syz.1.655[2258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.033622][ T2259] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.052696][ T2259] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.060157][ T2259] device bridge_slave_0 entered promiscuous mode [ 86.070935][ T2259] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.074713][ T2267] Invalid ELF section header size [ 86.084302][ T2259] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.092926][ T2259] device bridge_slave_1 entered promiscuous mode [ 86.124450][ T2271] tipc: Failed to remove unknown binding: 66,1,1/0:125676679/125676681 [ 86.149421][ T2271] tipc: Failed to remove unknown binding: 66,1,1/0:125676679/125676681 [ 86.192423][ T2259] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.199325][ T2259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.206446][ T2259] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.213315][ T2259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.245760][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.254180][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.282035][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.300517][ T24] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 86.309203][ T24] usb 1-1: No valid video chain found. [ 86.315360][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.323632][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.330504][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.338431][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.347270][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.354159][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.361730][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.369624][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.392010][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.404936][ T2259] device veth0_vlan entered promiscuous mode [ 86.412203][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.420117][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.428638][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.445634][ T2259] device veth1_macvtap entered promiscuous mode [ 86.453153][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.470204][ T6] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 86.483460][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.492192][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.503645][ T39] usb 1-1: USB disconnect, device number 6 [ 86.542986][ T43] device bridge_slave_1 left promiscuous mode [ 86.548988][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.556727][ T43] device bridge_slave_0 left promiscuous mode [ 86.562904][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.571386][ T43] device veth1_macvtap left promiscuous mode [ 86.577284][ T43] device veth0_vlan left promiscuous mode [ 86.738512][ T296] usb 4-1: USB disconnect, device number 11 [ 86.744419][ T2245] sddr09: could not read card info [ 86.751057][ T932] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 86.764107][ T932] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 86.769927][ T932] sd 1:0:0:0: [sdb] Write Protect is off [ 86.775919][ T932] sd 1:0:0:0: [sdb] Asking for cache data failed [ 86.782585][ T932] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 86.792736][ T932] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 87.133264][ T2287] Invalid ELF section header size [ 87.193127][ T2291] loop0: detected capacity change from 0 to 1024 [ 88.706472][ T2294] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.730521][ T2294] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.739476][ T2294] device bridge_slave_0 entered promiscuous mode [ 88.749122][ T2294] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.756193][ T2294] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.763994][ T2294] device bridge_slave_1 entered promiscuous mode [ 89.332762][ T2294] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.339756][ T2294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.346852][ T2294] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.353625][ T2294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.387930][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.391378][ T2309] loop3: detected capacity change from 0 to 40427 [ 89.402582][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.403585][ T2309] F2FS-fs (loop3): invalid crc value [ 89.414671][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.416318][ T2309] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.436350][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.444685][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.451569][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.459134][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.492965][ T2309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 89.510831][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.517742][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.540951][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.614599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.641125][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.649564][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.664965][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.672969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.682482][ T2294] device veth0_vlan entered promiscuous mode [ 89.710878][ T2294] device veth1_macvtap entered promiscuous mode [ 89.726628][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.737190][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.751455][ T2348] loop0: detected capacity change from 0 to 512 [ 89.758211][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.768563][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.780792][ T2348] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.790244][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.807227][ T43] device bridge_slave_1 left promiscuous mode [ 89.814265][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.825971][ T43] device bridge_slave_0 left promiscuous mode [ 89.832589][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.842533][ T43] device veth1_macvtap left promiscuous mode [ 89.848509][ T43] device veth0_vlan left promiscuous mode [ 89.854652][ T2348] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz.0.687: iget: bad i_size value: -6917529027641081756 [ 89.875722][ T2348] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.687: couldn't read orphan inode 17 (err -117) [ 89.901500][ T2348] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.912371][ T316] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 89.933967][ T293] EXT4-fs (loop0): unmounting filesystem. [ 89.940358][ T393] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.004173][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.020703][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.031839][ T2358] loop0: detected capacity change from 0 to 512 [ 90.038377][ T2358] journal_path: Lookup failure for './bus' [ 90.044761][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.056330][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.065172][ T2358] EXT4-fs: error: could not find journal device path [ 90.095816][ T2362] ================================================================== [ 90.098233][ T365] bio_check_eod: 30 callbacks suppressed [ 90.098248][ T365] syz-executor: attempt to access beyond end of device [ 90.098248][ T365] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 90.103710][ T2362] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb4/0x370 [ 90.103746][ T2362] Read of size 8 at addr ffff888129e02208 by task syz.2.691/2362 [ 90.103762][ T2362] [ 90.103771][ T2362] CPU: 0 PID: 2362 Comm: syz.2.691 Not tainted 6.1.84-syzkaller-00008-g7de5ae52b126 #0 [ 90.103792][ T2362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.103807][ T2362] Call Trace: [ 90.103813][ T2362] [ 90.103821][ T2362] dump_stack_lvl+0x151/0x1b7 [ 90.110806][ T365] syz-executor: attempt to access beyond end of device [ 90.110806][ T365] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 90.123073][ T2362] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 90.123108][ T2362] ? _printk+0xd1/0x111 [ 90.123127][ T2362] ? __virt_addr_valid+0x242/0x2f0 [ 90.180407][ T393] usb 5-1: Using ep0 maxpacket: 16 [ 90.183046][ T2362] print_report+0x158/0x4e0 [ 90.207082][ T2362] ? __virt_addr_valid+0x242/0x2f0 [ 90.212031][ T2362] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 90.218107][ T2362] ? cpu_map_enqueue+0xb4/0x370 [ 90.222795][ T2362] kasan_report+0x13c/0x170 [ 90.227392][ T2362] ? cpu_map_enqueue+0xb4/0x370 [ 90.232086][ T2362] __asan_report_load8_noabort+0x14/0x20 [ 90.237547][ T2362] cpu_map_enqueue+0xb4/0x370 [ 90.242060][ T2362] xdp_do_redirect_frame+0x232/0x750 [ 90.247193][ T2362] bpf_test_run_xdp_live+0xc30/0x1f70 [ 90.252395][ T2362] ? __kasan_kmalloc+0x9c/0xb0 [ 90.256989][ T2362] ? bpf_test_run_xdp_live+0x7ae/0x1f70 [ 90.262370][ T2362] ? xdp_convert_md_to_buff+0x360/0x360 [ 90.267760][ T2362] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 90.273917][ T2362] ? __kasan_check_write+0x14/0x20 [ 90.278859][ T2362] ? _copy_from_user+0x90/0xc0 [ 90.283462][ T2362] ? bpf_test_init+0x169/0x190 [ 90.288060][ T2362] ? xdp_convert_md_to_buff+0x5d/0x360 [ 90.293356][ T2362] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 90.298567][ T2362] ? dev_put+0x80/0x80 [ 90.302475][ T2362] ? __kasan_check_write+0x14/0x20 [ 90.307418][ T2362] ? fput+0x15b/0x1b0 [ 90.311236][ T2362] ? dev_put+0x80/0x80 [ 90.315146][ T2362] bpf_prog_test_run+0x3b0/0x630 [ 90.319917][ T2362] ? bpf_prog_query+0x260/0x260 [ 90.324601][ T2362] ? selinux_bpf+0xd2/0x100 [ 90.328943][ T2362] ? security_bpf+0x82/0xb0 [ 90.333283][ T2362] __sys_bpf+0x59f/0x7f0 [ 90.337358][ T2362] ? __this_cpu_preempt_check+0x13/0x20 [ 90.342743][ T2362] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 90.347953][ T2362] ? __kasan_check_write+0x14/0x20 [ 90.352895][ T2362] ? fpregs_restore_userregs+0x130/0x290 [ 90.358366][ T2362] __x64_sys_bpf+0x7c/0x90 [ 90.362618][ T2362] do_syscall_64+0x3d/0xb0 [ 90.366872][ T2362] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 90.372597][ T2362] RIP: 0033:0x7f302d775a19 [ 90.376850][ T2362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.396297][ T2362] RSP: 002b:00007f302e611048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 90.404539][ T2362] RAX: ffffffffffffffda RBX: 00007f302d903f60 RCX: 00007f302d775a19 [ 90.412358][ T2362] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 90.420168][ T2362] RBP: 00007f302d7e4e49 R08: 0000000000000000 R09: 0000000000000000 [ 90.427973][ T2362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.435793][ T2362] R13: 000000000000000b R14: 00007f302d903f60 R15: 00007ffeb284d9d8 [ 90.443600][ T2362] [ 90.446458][ T2362] [ 90.448628][ T2362] Allocated by task 1954: [ 90.452797][ T2362] kasan_set_track+0x4b/0x70 [ 90.457223][ T2362] kasan_save_alloc_info+0x1f/0x30 [ 90.460502][ T393] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 90.462179][ T2362] __kasan_kmalloc+0x9c/0xb0 [ 90.471212][ T393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.475452][ T2362] __kmalloc_node+0xb4/0x1e0 [ 90.486442][ T393] usb 5-1: Product: syz [ 90.487687][ T2362] bpf_map_kmalloc_node+0xd0/0x2c0 [ 90.491923][ T393] usb 5-1: Manufacturer: syz [ 90.496628][ T2362] cpu_map_update_elem+0x28f/0xf50 [ 90.496653][ T2362] bpf_map_update_value+0x1a3/0x410 [ 90.501392][ T393] usb 5-1: SerialNumber: syz [ 90.506002][ T2362] map_update_elem+0x500/0x680 [ 90.506039][ T2362] __sys_bpf+0x460/0x7f0 [ 90.512237][ T393] usb 5-1: config 0 descriptor?? [ 90.515461][ T2362] __x64_sys_bpf+0x7c/0x90 [ 90.533169][ T2362] do_syscall_64+0x3d/0xb0 [ 90.537422][ T2362] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 90.543165][ T2362] [ 90.545319][ T2362] Freed by task 1955: [ 90.549140][ T2362] kasan_set_track+0x4b/0x70 [ 90.551165][ T393] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 90.553572][ T2362] kasan_save_free_info+0x2b/0x40 [ 90.561309][ T393] usb 5-1: Detected FT232H [ 90.565717][ T2362] ____kasan_slab_free+0x131/0x180 [ 90.574952][ T2362] __kasan_slab_free+0x11/0x20 [ 90.579514][ T2362] __kmem_cache_free+0x218/0x3b0 [ 90.584293][ T2362] kfree+0x7a/0xf0 [ 90.587845][ T2362] put_cpu_map_entry+0x6e2/0x760 [ 90.592622][ T2362] cpu_map_kthread_run+0x2463/0x2520 [ 90.597756][ T2362] kthread+0x26d/0x300 [ 90.601648][ T2362] ret_from_fork+0x1f/0x30 [ 90.605902][ T2362] [ 90.608070][ T2362] Last potentially related work creation: [ 90.613655][ T2362] kasan_save_stack+0x3b/0x60 [ 90.618140][ T2362] __kasan_record_aux_stack+0xb4/0xc0 [ 90.623347][ T2362] kasan_record_aux_stack_noalloc+0xb/0x10 [ 90.628992][ T2362] insert_work+0x56/0x310 [ 90.633156][ T2362] __queue_work+0x9b6/0xd70 [ 90.637492][ T2362] queue_work_on+0x105/0x170 [ 90.641920][ T2362] cpu_map_free+0x1e7/0x2c0 [ 90.646259][ T2362] bpf_map_free_deferred+0xf7/0x1b0 [ 90.651293][ T2362] process_one_work+0x73d/0xcb0 [ 90.655979][ T2362] worker_thread+0xa60/0x1260 [ 90.660585][ T2362] kthread+0x26d/0x300 [ 90.664490][ T2362] ret_from_fork+0x1f/0x30 [ 90.668741][ T2362] [ 90.670909][ T2362] Second to last potentially related work creation: [ 90.677332][ T2362] kasan_save_stack+0x3b/0x60 [ 90.681847][ T2362] __kasan_record_aux_stack+0xb4/0xc0 [ 90.687053][ T2362] kasan_record_aux_stack_noalloc+0xb/0x10 [ 90.692693][ T2362] call_rcu+0xee/0x1340 [ 90.696685][ T2362] cpu_map_free+0x109/0x2c0 [ 90.701030][ T2362] bpf_map_free_deferred+0xf7/0x1b0 [ 90.706062][ T2362] process_one_work+0x73d/0xcb0 [ 90.710748][ T2362] worker_thread+0xa60/0x1260 [ 90.715263][ T2362] kthread+0x26d/0x300 [ 90.719170][ T2362] ret_from_fork+0x1f/0x30 [ 90.723427][ T2362] [ 90.725590][ T2362] The buggy address belongs to the object at ffff888129e02200 [ 90.725590][ T2362] which belongs to the cache kmalloc-192 of size 192 [ 90.739486][ T2362] The buggy address is located 8 bytes inside of [ 90.739486][ T2362] 192-byte region [ffff888129e02200, ffff888129e022c0) [ 90.752416][ T2362] [ 90.754582][ T2362] The buggy address belongs to the physical page: [ 90.760475][ T393] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 90.760828][ T2362] page:ffffea0004a78080 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x129e02 [ 90.777582][ T2362] flags: 0x4000000000000200(slab|zone=1) [ 90.783179][ T2362] raw: 4000000000000200 0000000000000000 dead000000000001 ffff888100042c00 [ 90.791561][ T2362] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 90.799972][ T2362] page dumped because: kasan: bad access detected [ 90.806234][ T2362] page_owner tracks the page as allocated [ 90.811778][ T2362] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 293, tgid 293 (syz-executor), ts 22613515190, free_ts 0 [ 90.828877][ T2362] post_alloc_hook+0x213/0x220 [ 90.833476][ T2362] prep_new_page+0x1b/0x110 [ 90.837812][ T2362] get_page_from_freelist+0x27ea/0x2870 [ 90.843196][ T2362] __alloc_pages+0x3a1/0x780 [ 90.847621][ T2362] alloc_slab_page+0x6c/0xf0 [ 90.852048][ T2362] new_slab+0x90/0x3e0 [ 90.855954][ T2362] ___slab_alloc+0x6f9/0xb80 [ 90.860390][ T2362] __slab_alloc+0x5d/0xa0 [ 90.864547][ T2362] __kmem_cache_alloc_node+0x1af/0x250 [ 90.869842][ T2362] __kmalloc_node_track_caller+0xa2/0x1e0 [ 90.875397][ T2362] kmemdup+0x29/0x60 [ 90.879132][ T2362] neigh_parms_alloc+0x81/0x530 [ 90.883816][ T2362] inetdev_init+0x146/0x4e0 [ 90.888362][ T2362] inetdev_event+0x205/0x1110 [ 90.892997][ T2362] raw_notifier_call_chain+0x8c/0xf0 [ 90.898118][ T2362] call_netdevice_notifiers+0x145/0x1b0 [ 90.903501][ T2362] page_owner free stack trace missing [ 90.908715][ T2362] [ 90.910875][ T2362] Memory state around the buggy address: [ 90.916352][ T2362] ffff888129e02100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.924248][ T2362] ffff888129e02180: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 90.932233][ T2362] >ffff888129e02200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.940128][ T2362] ^ [ 90.944295][ T2362] ffff888129e02280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 90.952196][ T2362] ffff888129e02300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.960106][ T2362] ================================================================== [ 90.968038][ T2362] Disabling lock debugging due to kernel taint [ 90.974048][ T2362] general protection fault, probably for non-canonical address 0xe09bcd513ee000ff: 0000 [#1] PREEMPT SMP KASAN [ 90.980577][ T393] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 90.985522][ T2362] KASAN: maybe wild-memory-access in range [0x04de8a89f70007f8-0x04de8a89f70007ff] [ 90.985543][ T2362] CPU: 0 PID: 2362 Comm: syz.2.691 Tainted: G B 6.1.84-syzkaller-00008-g7de5ae52b126 #0 [ 91.010414][ T393] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 91.012426][ T2362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 91.012441][ T2362] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 91.019482][ T393] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 91.028746][ T2362] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 66 a5 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 91.028771][ T2362] RSP: 0018:ffffc90000c37650 EFLAGS: 00010206 [ 91.028791][ T2362] RAX: dffffc0000000000 RBX: ffffffff86510870 RCX: 0000000000040000 [ 91.028808][ T2362] RDX: ffffc90004d29000 RSI: 000000000003ffff RDI: 0000000000040000 [ 91.028821][ T2362] RBP: ffffc90000c37688 R08: ffffffff8197ecee R09: fffffbfff0f264fd [ 91.028837][ T2362] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7000000 [ 91.036613][ T393] usb 5-1: USB disconnect, device number 9 [ 91.041944][ T2362] R13: 009bd1513ee000ff R14: 04de8a89f70007fb R15: 04df0208000007a3 [ 91.041965][ T2362] FS: 00007f302e6116c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 91.041984][ T2362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.041998][ T2362] CR2: 000000110c2416d7 CR3: 000000012544c000 CR4: 00000000003506b0 [ 91.042016][ T2362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.042027][ T2362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.080478][ T393] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 91.082903][ T2362] Call Trace: [ 91.082911][ T2362] [ 91.082921][ T2362] ? __die_body+0x62/0xb0 [ 91.090990][ T393] ftdi_sio 5-1:0.0: device disconnected [ 91.098533][ T2362] ? die_addr+0x9f/0xd0 [ 91.179166][ T2362] ? exc_general_protection+0x317/0x4c0 [ 91.184564][ T2362] ? asm_exc_general_protection+0x27/0x30 [ 91.190101][ T2362] ? cpu_map_enqueue+0xce/0x370 [ 91.194787][ T2362] ? cpu_map_enqueue+0x113/0x370 [ 91.199560][ T2362] xdp_do_redirect_frame+0x232/0x750 [ 91.204682][ T2362] bpf_test_run_xdp_live+0xc30/0x1f70 [ 91.209928][ T2362] ? __kasan_kmalloc+0x9c/0xb0 [ 91.214484][ T2362] ? bpf_test_run_xdp_live+0x7ae/0x1f70 [ 91.219872][ T2362] ? xdp_convert_md_to_buff+0x360/0x360 [ 91.225254][ T2362] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 91.231328][ T2362] ? __kasan_check_write+0x14/0x20 [ 91.236272][ T2362] ? _copy_from_user+0x90/0xc0 [ 91.240870][ T2362] ? bpf_test_init+0x169/0x190 [ 91.245470][ T2362] ? xdp_convert_md_to_buff+0x5d/0x360 [ 91.250763][ T2362] bpf_prog_test_run_xdp+0x7d1/0x1130 [ 91.255978][ T2362] ? dev_put+0x80/0x80 [ 91.259883][ T2362] ? __kasan_check_write+0x14/0x20 [ 91.264825][ T2362] ? fput+0x15b/0x1b0 [ 91.268645][ T2362] ? dev_put+0x80/0x80 [ 91.272548][ T2362] bpf_prog_test_run+0x3b0/0x630 [ 91.277323][ T2362] ? bpf_prog_query+0x260/0x260 [ 91.282011][ T2362] ? selinux_bpf+0xd2/0x100 [ 91.286349][ T2362] ? security_bpf+0x82/0xb0 [ 91.290696][ T2362] __sys_bpf+0x59f/0x7f0 [ 91.294864][ T2362] ? __this_cpu_preempt_check+0x13/0x20 [ 91.300247][ T2362] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 91.305455][ T2362] ? __kasan_check_write+0x14/0x20 [ 91.310399][ T2362] ? fpregs_restore_userregs+0x130/0x290 [ 91.315860][ T2362] __x64_sys_bpf+0x7c/0x90 [ 91.320113][ T2362] do_syscall_64+0x3d/0xb0 [ 91.324365][ T2362] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 91.330093][ T2362] RIP: 0033:0x7f302d775a19 [ 91.334350][ T2362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.353789][ T2362] RSP: 002b:00007f302e611048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 91.362036][ T2362] RAX: ffffffffffffffda RBX: 00007f302d903f60 RCX: 00007f302d775a19 [ 91.369848][ T2362] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 91.377743][ T2362] RBP: 00007f302d7e4e49 R08: 0000000000000000 R09: 0000000000000000 [ 91.385641][ T2362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.393461][ T2362] R13: 000000000000000b R14: 00007f302d903f60 R15: 00007ffeb284d9d8 [ 91.401277][ T2362] [ 91.404141][ T2362] Modules linked in: [ 91.407907][ T2362] ---[ end trace 0000000000000000 ]--- [ 91.413195][ T2362] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 91.418633][ T2362] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 66 a5 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 91.438241][ T2362] RSP: 0018:ffffc90000c37650 EFLAGS: 00010206 [ 91.444130][ T2362] RAX: dffffc0000000000 RBX: ffffffff86510870 RCX: 0000000000040000 [ 91.451956][ T2362] RDX: ffffc90004d29000 RSI: 000000000003ffff RDI: 0000000000040000 [ 91.459824][ T2362] RBP: ffffc90000c37688 R08: ffffffff8197ecee R09: fffffbfff0f264fd [ 91.467659][ T2362] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f7000000 [ 91.475461][ T2362] R13: 009bd1513ee000ff R14: 04de8a89f70007fb R15: 04df0208000007a3 [ 91.483281][ T2362] FS: 00007f302e6116c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 91.492042][ T2362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.498444][ T2362] CR2: 000000110c2416d7 CR3: 000000012544c000 CR4: 00000000003506b0 [ 91.506297][ T2362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.514232][ T2362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.522048][ T2362] Kernel panic - not syncing: Fatal exception in interrupt [ 91.529288][ T2362] Kernel Offset: disabled [ 91.533550][ T2362] Rebooting in 86400 seconds..