last executing test programs: 6.148285814s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="000000006200001f050021"], 0x30}}, 0x0) 6.088777443s ago: executing program 1: r0 = socket(0x0, 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0/../file0\x00', 0x400) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x24000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x19538000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) 4.904683725s ago: executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x1e, {0x2, 0x0, @private=0xa010101}, 'lo\x00'}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a00000000009500004000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8000081004c0086dd"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x36) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061118d00000000002600000001000000950000000000ddff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x52}, 0x90) 4.674565411s ago: executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x1e, {0x2, 0x0, @private=0xa010101}, 'lo\x00'}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a00000000009500004000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x36) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) 4.598616343s ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="61636c2c6163746976655f6c6f67733d362c746573745f64756d6d795f656e6372797074696f6e2c746573745f64756d6d795f656e6372797074696f6e2c0074407acac6798ec06f397a85f45b946b241629bb91495fdbb6ff3040acadabb0936f3e98753906"], 0x1, 0x105a5, &(0x7f0000020c40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000001800)='./file0\x00', 0x0, 0x2904478, &(0x7f00000001c0)=ANY=[@ANYBLOB='fscontext=u']) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x200000100000011, 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f0000000200)={[{@i_version}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@nouid32}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x46b, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvTH/x01bAHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKoUaWhMhRKsHPBoS78a7f4DxpBeDnky86t2QEMMF9DRmdmZKKbt1tywsdD+fZHbfm3nd974z83bfzNttAF1rOH9IIrZExB8RMVhkby0wXDzduHZh8p9rFyaTyLJ3/k5q5a5fuzBZFa3+bnORybIyP1AVuLx96WUvvh8xMTs7fbbMjy6c/mh0/tz5l2ZOT5ycPjl9Zvzo0UMH9/QfGT/cljjzuK7v+nRu985j7116a/L4pQ9++S5v75Zy+/I4VrG3lTqHi71b17OtvNADYOuydNLbwYbQkp6IyA9XX63/D0ZPbFzaNhhvfNHRxgF3VZZl2UDjzYsZsI4l0ekWAJ1RfdDn17/Vco+GHveFq68WF0B53DfKpdjSG2mR2Nu34vq2nYYj4vjiv9/kSzR/HwIAYM1+zMc/L9Yb/6XxaJHozx8eKudQhiLi4YjYFhHbI2JHRDwSUSv7WEQ83mL9K2dIbh//pFfWHFwT8vHfK+Xc1q3jv7QqMtRT5rbW4u9LTszMTh8o98n+6Bs4MZNMj61Sx0+v//5Vo23Lx3/5ktdfjQXLdlzpXXGDbmpiYeJOYl7u6ucRu3rrxZ9ENY2TRMTOiNi1xjpmnm88IfT/8a+iDfNM2bcRzxXHfzFWxF9JGs5Pjr18ZPzw6IaYnT4wWp0Vt/v1t4tvN6r/juJvg/z4b6p7/i/FP5RsiJg/d/5Ubb52vvU6Lv75ZcNrmhbP/2Nby/O/P3m3tqK/3PDJxMLC2bGI/uTN29eP33y1Kl+Vz+Pfv69+/98WN/fEExGxOyL2RMST5URw3vanIuLpiNi3SvyXX3vmw9bjX+WufBvl8U+tPP4bbykylMd/8/i3nug59fMPjepv7vgfqqX2l2uaef9rtoFr33MAAADw4Ehr34FP0pGldJqOjBTf4d8Rm9LZufmFF07MfXxmqviu/FD0pdWdrsFl90PHynvDVX58Rf5ged/4656NtfzI5NzsVKeDhy63uUH/z/3V0+nWAXed32tB99L/oXvp/9CdEv0fupr+D92rXv//rGHpke/vamOAe8rnP3SvJvr/YvHUeFQAPJh8/kP30v+hKzX8bXx6Rz/5l1j3iUjvi2as70SWZVlv0//MooVENlj0/3zNQN0ynX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA///gquZ6") (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (rerun: 64) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x4018480c, &(0x7f0000000040)={0x1}) symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') (async) getpeername(r0, &(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000140)=0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r5, 0x4, 0x5, 0x2, 0x0, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x20, 0x10, 0x20, 0x4}}) 3.285224985s ago: executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0xa4b40, 0x0) inotify_init1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_buf(r0, 0x107, 0x1a, &(0x7f0000000280)="0d039b48a6d19c8476c4a4ded9a0ba9bf4cb701032a812385b4d7630c8b7dc86a50c6aa1e8504ffe83e64ebffa8f5fff4f97e815c9897e03f073b1b6388381a0972da52115067803b17c3f6692b8686f2123615bde63b4cc57eb4febe0a58c267bb1c21ebb1040623c8c0b68fb96", 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@gettaction={0x14}, 0x14}}, 0x0) r3 = socket(0x10, 0x2, 0xffff) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x302}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCL_SCROLLCONSOLE(r7, 0x541c, &(0x7f00000001c0)={0xd, 0x1}) getrandom(&(0x7f0000003800)=""/4088, 0xff8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000200)={0x2f, 0x33, 0x12, 0x1e, 0x3, 0x1200, 0x1, 0x152}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 3.11830188s ago: executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x1e, {0x2, 0x0, @private=0xa010101}, 'lo\x00'}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a00000000009500004000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8000081004c0086dd"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x36) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061118d00000000002600000001000000950000000000ddff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x52}, 0x90) 2.616609068s ago: executing program 3: pipe(0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @remote}, {0x0, @random="ca1597489704"}, 0x8, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0\x00'}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 2.586497642s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 2.418484698s ago: executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x1e, {0x2, 0x0, @private=0xa010101}, 'lo\x00'}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a00000000009500004000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x36) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) 2.40472895s ago: executing program 0: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="b8010000000f01d9c4c2c2f510f20f356726f30f09660f3880300f01df0fc71bf40f1ed40f21e1", 0x27}], 0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x40044591, 0x0) read(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x209b, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$packet(r1, 0x0, 0x2, 0x2000, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x4008550c, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x4, 0x8000}, 0x4) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x2, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 2.389305872s ago: executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0xa4b40, 0x0) inotify_init1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_buf(r0, 0x107, 0x1a, &(0x7f0000000280)="0d039b48a6d19c8476c4a4ded9a0ba9bf4cb701032a812385b4d7630c8b7dc86a50c6aa1e8504ffe83e64ebffa8f5fff4f97e815c9897e03f073b1b6388381a0972da52115067803b17c3f6692b8686f2123615bde63b4cc57eb4febe0a58c267bb1c21ebb1040623c8c0b68fb96", 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@gettaction={0x14}, 0x14}}, 0x0) r3 = socket(0x10, 0x2, 0xffff) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x302}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f00000001c0)={0xd, 0x1}) getrandom(&(0x7f0000003800)=""/4088, 0xff8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.122209573s ago: executing program 0: r0 = socket(0x0, 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0/../file0\x00', 0x400) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x24000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x19538000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) 1.667245504s ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x9, 0x10001, 0x7, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000640), &(0x7f0000000240)=""/109}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000002c0)="3115d05cc2ba7b5265b860a58cc6954e1d3431435682b4ca2ae75055e1831eda9ca94abf0bee99e029cfcf4ebfdefe4a84d2bd4fa943508d5cdfe899d8c42af8e06aaf61e2db071fe285e35104b9d15142cccdeb503a5f526f49a708467caa67c3ba3d5ceae5e49bdeb0fa33cda66e546be71896831f4036598f0e6b8f27a01ed2c4fce9020cb6c328c11d757faf6a6eb291b094713ca39a76f0272d97044c236a8a54d273b4b188438fb18166505aa188c61a25a262c613a2e0858c5537694a92beabfc9122bcab", &(0x7f0000000040)=""/33, &(0x7f0000000080), &(0x7f00000003c0)="8425508a21b2e8baf5f5feb58b1f215353aba18029f2da87c17c3b0227e8a499dd27bd8980357332b0293655074c8e2509ad9ea173cfce84bcc1db1eaa85d31c21ded3bbee6609853b2689c76285287cf24f6b27bb415dd799c39abbbb7c5856ca92b30b05f137d8f8728c3dc69d3e87f578f53c7fdaf7f42de6a3a5fff69aad98b3df8e686f855d0a15f2ed7adffa7c985c727fa3442633cf64360ba2df0a2516af461bb20994a2d2e3a0d711def01c4605f7584985e00f64374827cb66157d1b750ac3979e6f10aae7b880729af3007f", 0x692e, r2}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r2, &(0x7f0000000540), 0x0}, 0x20) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1b) ioctl$TCFLSH(r0, 0x540b, 0x0) 1.662378525s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x1e, {0x2, 0x0, @private=0xa010101}, 'lo\x00'}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a00000000009500004000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8000081004c0086dd"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x36) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061118d00000000002600000001000000950000000000ddff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x52}, 0x90) 1.556236311s ago: executing program 2: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file0/../file0\x00', 0x400) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x24000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x19538000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002380)={0x2020}, 0x2020) 1.214192453s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 727.573328ms ago: executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0xa4b40, 0x0) inotify_init1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_buf(r0, 0x107, 0x1a, &(0x7f0000000280)="0d039b48a6d19c8476c4a4ded9a0ba9bf4cb701032a812385b4d7630c8b7dc86a50c6aa1e8504ffe83e64ebffa8f5fff4f97e815c9897e03f073b1b6388381a0972da52115067803b17c3f6692b8686f2123615bde63b4cc57eb4febe0a58c267bb1c21ebb1040623c8c0b68fb96", 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@gettaction={0x14}, 0x14}}, 0x0) r3 = socket(0x10, 0x2, 0xffff) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x302}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCL_SCROLLCONSOLE(r7, 0x541c, &(0x7f00000001c0)={0xd, 0x1}) getrandom(&(0x7f0000003800)=""/4088, 0xff8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000200)={0x2f, 0x33, 0x12, 0x1e, 0x3, 0x1200, 0x1, 0x152}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 674.034986ms ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x3}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x1e, {0x2, 0x0, @private=0xa010101}, 'lo\x00'}) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a00000000009500004000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8000081004c0086dd"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[], 0x36) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061118d00000000002600000001000000950000000000ddff"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x52}, 0x90) 650.19489ms ago: executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0xa4b40, 0x0) inotify_init1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_buf(r0, 0x107, 0x1a, &(0x7f0000000280)="0d039b48a6d19c8476c4a4ded9a0ba9bf4cb701032a812385b4d7630c8b7dc86a50c6aa1e8504ffe83e64ebffa8f5fff4f97e815c9897e03f073b1b6388381a0972da52115067803b17c3f6692b8686f2123615bde63b4cc57eb4febe0a58c267bb1c21ebb1040623c8c0b68fb96", 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@gettaction={0x14}, 0x14}}, 0x0) r3 = socket(0x10, 0x2, 0xffff) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x302}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCL_SCROLLCONSOLE(r6, 0x541c, &(0x7f00000001c0)={0xd, 0x1}) getrandom(&(0x7f0000003800)=""/4088, 0xff8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 454.51324ms ago: executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0xa4b40, 0x0) inotify_init1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_buf(r0, 0x107, 0x1a, &(0x7f0000000280)="0d039b48a6d19c8476c4a4ded9a0ba9bf4cb701032a812385b4d7630c8b7dc86a50c6aa1e8504ffe83e64ebffa8f5fff4f97e815c9897e03f073b1b6388381a0972da52115067803b17c3f6692b8686f2123615bde63b4cc57eb4febe0a58c267bb1c21ebb1040623c8c0b68fb96", 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@gettaction={0x14}, 0x14}}, 0x0) r3 = socket(0x10, 0x2, 0xffff) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000480)=""/174, 0xae}], 0x1) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x302}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCL_SCROLLCONSOLE(r7, 0x541c, &(0x7f00000001c0)={0xd, 0x1}) getrandom(&(0x7f0000003800)=""/4088, 0xff8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000200)={0x2f, 0x33, 0x12, 0x1e, 0x3, 0x1200, 0x1, 0x152}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 442.145722ms ago: executing program 4: sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x9) 422.231535ms ago: executing program 4: pipe(&(0x7f00000003c0)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 397.347169ms ago: executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000300)={[{@init_itable}, {@noquota}, {@nouid32}, {@barrier}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@acl}, {@bh}]}, 0x10, 0x4e0, &(0x7f00000013c0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000a00)='./file1\x00', 0x0, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRES64=r1, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0x1, 0x37f, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8, 0x0) 377.806632ms ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @local, 0x803}, 0x1c) 304.103963ms ago: executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000300)={[{@init_itable}, {@noquota}, {@nouid32}, {@barrier}, {@resgid}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@acl}, {@bh}]}, 0x10, 0x4e0, &(0x7f00000013c0)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000000)) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000a00)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES64=r2, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB="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"/552, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0x1, 0x37f, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 184.504142ms ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5014d564b"]) getsockopt(r3, 0x0, 0xfc4, &(0x7f0000000780)=""/4096, &(0x7f0000000200)=0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000200b703000000000000850000000c000000b70000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r4, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x80004519, 0x0) 45.200333ms ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 33.437965ms ago: executing program 2: unshare(0x8000000) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/214) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f00000003c0)) 0s ago: executing program 4: socket(0x18, 0x0, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) linkat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0/../file0\x00', 0x400) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x24000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x19538000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 531][ T776] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 42.343895][ T776] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,norecovery, [ 42.473792][ T772] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 42.493775][ T772] EXT4-fs (loop0): Remounting filesystem read-only [ 42.569088][ T23] audit: type=1400 audit(1717338604.139:179): avc: denied { create } for pid=782 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.603884][ T23] audit: type=1400 audit(1717338604.139:180): avc: denied { write } for pid=782 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.710049][ T23] audit: type=1400 audit(1717338604.299:181): avc: denied { bind } for pid=801 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.748464][ T798] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 42.757213][ T798] ext4 filesystem being mounted at /root/syzkaller-testdir992980736/syzkaller.PVu36J/17/bus supports timestamps until 2038 (0x7fffffff) [ 42.779778][ T809] process 'syz-executor.2' launched './file0' with NULL argv: empty string added [ 42.798912][ T798] fuse: Unknown parameter 'smackfsdef' [ 43.785868][ T811] xt_hashlimit: overflow, try lower: 3/0 [ 43.793363][ T809] EXT4-fs (loop2): Unrecognized mount option "fsuuid=ca20bfc2-4bde-ee" or missing value [ 43.970236][ T23] audit: type=1400 audit(1717338605.559:182): avc: denied { create } for pid=832 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 43.990993][ T23] audit: type=1400 audit(1717338605.559:183): avc: denied { setopt } for pid=832 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 44.131265][ T23] audit: type=1400 audit(1717338605.559:184): avc: denied { bind } for pid=832 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 44.279330][ T812] proc: Unknown parameter 'no' [ 44.398653][ T23] audit: type=1400 audit(1717338605.869:185): avc: denied { unlink } for pid=808 comm="syz-executor.2" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.511228][ T23] audit: type=1400 audit(1717338605.869:186): avc: denied { unmount } for pid=509 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.522076][ T23] audit: type=1400 audit(1717338605.879:187): avc: denied { connect } for pid=832 comm="syz-executor.4" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.643223][ T854] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 45.674799][ T854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 45.685412][ T854] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 45.696395][ T854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 45.765343][ T874] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 45.778736][ T862] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 45.787456][ T862] ext4 filesystem being mounted at /root/syzkaller-testdir992980736/syzkaller.PVu36J/20/bus supports timestamps until 2038 (0x7fffffff) [ 45.843082][ T871] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 45.852379][ T862] fuse: Unknown parameter 'smackfsdef' [ 45.880597][ T871] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 45.921340][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 45.921350][ T23] audit: type=1400 audit(1717338607.459:193): avc: denied { ioctl } for pid=881 comm="syz-executor.3" path="socket:[14473]" dev="sockfs" ino=14473 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.941186][ T871] EXT4-fs (loop0): Remounting filesystem read-only [ 45.953215][ T23] audit: type=1400 audit(1717338607.459:194): avc: denied { create } for pid=881 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 45.992894][ T865] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 46.001695][ T865] ext4 filesystem being mounted at /root/syzkaller-testdir181860268/syzkaller.mtuY2K/17/bus supports timestamps until 2038 (0x7fffffff) [ 46.027852][ T871] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 46.629157][ T865] fuse: Unknown parameter 'smackfsdef' [ 46.715162][ T871] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,norecovery, [ 47.688955][ T905] FAT-fs (loop1): Unrecognized mount option "wg0" or missing value [ 47.695028][ T23] audit: type=1400 audit(1717338609.279:195): avc: denied { read } for pid=911 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=1223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.705079][ T914] [ 47.721647][ T914] ********************************************************** [ 47.727804][ T23] audit: type=1400 audit(1717338609.309:196): avc: denied { open } for pid=911 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=1223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.729018][ T914] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 47.753842][ T23] audit: type=1400 audit(1717338609.309:197): avc: denied { ioctl } for pid=911 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=1223 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.760695][ T914] ** ** [ 47.791842][ T914] ** trace_printk() being used. Allocating extra memory. ** [ 47.799295][ T914] ** ** [ 47.827808][ T914] ** This means that this is a DEBUG kernel and it is ** [ 47.864723][ T914] ** unsafe for production use. ** [ 47.883537][ T914] ** ** [ 47.894552][ T914] ** If you see this message and you are not debugging ** [ 47.903057][ T914] ** the kernel, report this immediately to your vendor! ** [ 47.911757][ T914] ** ** [ 47.920122][ T914] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 47.927505][ T914] ********************************************************** [ 47.962042][ T23] audit: type=1400 audit(1717338609.549:198): avc: denied { read } for pid=903 comm="syz-executor.1" name="usbmon7" dev="devtmpfs" ino=9895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 47.986121][ T23] audit: type=1400 audit(1717338609.549:199): avc: denied { open } for pid=903 comm="syz-executor.1" path="/dev/usbmon7" dev="devtmpfs" ino=9895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.011202][ T23] audit: type=1400 audit(1717338609.549:200): avc: denied { ioctl } for pid=903 comm="syz-executor.1" path="/dev/usbmon7" dev="devtmpfs" ino=9895 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.024883][ T919] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 48.050281][ T919] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,bsddf,barrier=0x0000000000000000,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000042,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,i_version,,errors=continue [ 48.102202][ T23] audit: type=1400 audit(1717338609.689:201): avc: denied { read write } for pid=928 comm="syz-executor.4" name="uhid" dev="devtmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.108765][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.125825][ T23] audit: type=1400 audit(1717338609.689:202): avc: denied { open } for pid=928 comm="syz-executor.4" path="/dev/uhid" dev="devtmpfs" ino=1252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.137852][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.165117][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.175175][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.175426][ T932] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 48.183042][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.191341][ T932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 48.198509][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.207589][ T932] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 48.214523][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.223020][ T932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 48.230094][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.246091][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.256553][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.263946][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.271217][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.278587][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.285781][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.293111][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.300292][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.307488][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.316025][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.323359][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.330588][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.331012][ T937] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 48.337754][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.337769][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.337783][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.337797][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.346820][ T937] FAT-fs (loop3): Filesystem has been set read-only [ 48.353322][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.353337][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.353356][ T719] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.404452][ T719] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 48.595538][ T942] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 48.604392][ T942] ext4 filesystem being mounted at /root/syzkaller-testdir992980736/syzkaller.PVu36J/25/bus supports timestamps until 2038 (0x7fffffff) [ 48.637647][ T943] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 48.643813][ T942] fuse: Unknown parameter 'smackfsdef' [ 48.646445][ T943] ext4 filesystem being mounted at /root/syzkaller-testdir181860268/syzkaller.mtuY2K/19/bus supports timestamps until 2038 (0x7fffffff) [ 50.266756][ T943] fuse: Unknown parameter 'smackfsdef' [ 50.369010][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.377960][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.385221][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.392762][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.400050][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.407163][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.414398][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.421683][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.428940][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.451219][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.459805][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.467251][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.474717][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.488146][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.497346][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.506843][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.724202][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.731502][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.738691][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.746049][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.753330][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.760523][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.767808][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.775035][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.783463][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.790760][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.797976][ T13] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 50.806379][ T13] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 50.846827][ T974] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 50.864749][ T974] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,bsddf,barrier=0x0000000000000000,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000042,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,i_version,,errors=continue [ 51.811314][ T1000] EXT4-fs (loop1): Unrecognized mount option "fsuuid=ca20bfc2-4bde-ee" or missing value [ 51.931016][ T1011] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 51.939990][ T1011] ext4 filesystem being mounted at /root/syzkaller-testdir181860268/syzkaller.mtuY2K/21/bus supports timestamps until 2038 (0x7fffffff) [ 51.968737][ T1021] proc: Unknown parameter 'no' [ 52.028871][ T1016] EXT4-fs (loop4): Unrecognized mount option "fsuuid=ca20bfc2-4bde-ee" or missing value [ 52.065119][ T1011] fuse: Unknown parameter 'smackfsdef' [ 52.937200][ T1034] proc: Unknown parameter 'no' [ 52.950060][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.957302][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 52.965187][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.191084][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.198523][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.205717][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.214281][ T1033] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 53.223056][ T1033] ext4 filesystem being mounted at /root/syzkaller-testdir1463519047/syzkaller.6ylhFJ/30/bus supports timestamps until 2038 (0x7fffffff) [ 53.237445][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.244851][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.261835][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.270621][ T1033] fuse: Unknown parameter 'smackfsdef' [ 53.338632][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.346202][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.353484][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.360627][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.368157][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.375793][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.383084][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.390278][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.397392][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.404775][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.409281][ T1057] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 53.412109][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.426372][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.434208][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.442442][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.450157][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.457417][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.465441][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.478095][ T1005] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 53.496103][ T1005] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 53.596218][ T1057] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,bsddf,barrier=0x0000000000000000,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000042,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,i_version,,errors=continue [ 53.669650][ T124] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 54.088399][ T398] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.127987][ T124] usb 4-1: Using ep0 maxpacket: 8 [ 54.134048][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 54.134057][ T23] audit: type=1400 audit(1717338615.719:207): avc: denied { write } for pid=1077 comm="syz-executor.1" name="event0" dev="devtmpfs" ino=9903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.248010][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.264195][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.281256][ T124] usb 4-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 54.297616][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.312820][ T124] usb 4-1: config 0 descriptor?? [ 54.491276][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.510758][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.585969][ T398] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 54.595303][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.618690][ T398] usb 5-1: config 0 descriptor?? [ 54.909548][ T124] wacom 0003:056A:033E.0006: Unknown device_type for 'HID 056a:033e'. Assuming pen. [ 54.919729][ T124] wacom 0003:056A:033E.0006: hidraw0: USB HID v0.00 Device [HID 056a:033e] on usb-dummy_hcd.3-1/input0 [ 54.944348][ T1069] F2FS-fs (loop0): invalid crc value [ 54.958511][ T124] input: Wacom Intuos PT M 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:033E.0006/input/input5 [ 54.973436][ T1069] F2FS-fs (loop0): Found nat_bits in checkpoint [ 54.979816][ T398] usbhid 5-1:0.0: can't add hid device: -71 [ 54.985590][ T398] usbhid: probe of 5-1:0.0 failed with error -71 [ 54.998641][ T398] usb 5-1: USB disconnect, device number 2 [ 55.011215][ T1069] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 55.042310][ T1097] EXT4-fs (loop1): Unrecognized mount option "fsuuid=ca20bfc2-4bde-ee" or missing value [ 55.090058][ T1095] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 55.102557][ T23] audit: type=1400 audit(1717338616.689:208): avc: denied { read write } for pid=1068 comm="syz-executor.0" name="file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.127425][ T366] usb 4-1: USB disconnect, device number 3 [ 55.143093][ T23] audit: type=1400 audit(1717338616.689:209): avc: denied { open } for pid=1068 comm="syz-executor.0" path="/root/syzkaller-testdir1894300516/syzkaller.ceYAil/33/file2/file1" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.175207][ T1105] proc: Unknown parameter 'no' [ 55.181998][ T23] audit: type=1400 audit(1717338616.769:210): avc: denied { write } for pid=1096 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.204948][ T1069] fscrypt (loop0, inode 8): Error -61 getting encryption context [ 55.209942][ T1095] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,dioread_lock,acl,noload,nodiscard,discard,init_itable=0x0000000000000001,max_batch_time=0x0000000000000020,resgid=0x0000000000000000,,errors=continue [ 55.236930][ T1095] ext4 filesystem being mounted at /root/syzkaller-testdir992980736/syzkaller.PVu36J/29/file0 supports timestamps until 2038 (0x7fffffff) [ 55.521429][ T23] audit: type=1400 audit(1717338617.109:211): avc: denied { remount } for pid=1091 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.628854][ T23] audit: type=1400 audit(1717338617.219:212): avc: denied { create } for pid=1091 comm="syz-executor.4" dev="anon_inodefs" ino=15122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.698670][ T23] audit: type=1400 audit(1717338617.279:213): avc: denied { write } for pid=1114 comm="syz-executor.4" name="ip6_tables_targets" dev="proc" ino=4026532422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 55.892806][ T23] audit: type=1400 audit(1717338617.479:214): avc: denied { create } for pid=1122 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.981067][ T1123] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 56.004054][ T1123] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,bsddf,barrier=0x0000000000000000,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000042,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,i_version,,errors=continue [ 56.062610][ T23] audit: type=1400 audit(1717338617.649:215): avc: denied { create } for pid=1132 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.088967][ T23] audit: type=1400 audit(1717338617.669:216): avc: denied { getopt } for pid=1132 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.126944][ T1127] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 56.137836][ T1127] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 56.211491][ T1127] F2FS-fs (loop3): Found nat_bits in checkpoint [ 56.515654][ T1127] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 56.539270][ T1127] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 56.886522][ T1158] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 56.901169][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 56.910438][ T1158] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 56.925001][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 57.057638][ T1165] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,,errors=continue [ 57.066851][ T1165] ext4 filesystem being mounted at /root/syzkaller-testdir1894300516/syzkaller.ceYAil/35/bus supports timestamps until 2038 (0x7fffffff) [ 57.115135][ T1165] EXT4-fs error (device loop0): ext4_get_first_dir_block:3593: inode #12: comm syz-executor.0: Directory hole found for htree leaf block [ 57.268807][ T1178] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 57.296900][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.306540][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.314313][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.322835][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.333339][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.340892][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.349853][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.357123][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.367975][ T546] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.371619][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.382937][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.393023][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.411180][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.418616][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.426534][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.435376][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.443277][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.450990][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.458532][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.465898][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.473322][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.480834][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.481330][ T1178] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 57.481330][ T1178] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 57.481330][ T1178] [ 57.506124][ T1178] EXT4-fs (loop0): Ignoring removed bh option [ 57.507123][ T1186] request_module fs-xœìÝïk#i succeeded, but still no fs? [ 57.519188][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.526608][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.540892][ T1178] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a8024018, mo2=0002] [ 57.541894][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.548998][ T1178] System zones: 0-1, 3-12 [ 57.559128][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.568054][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.576011][ T1178] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,debug,noacl,user_xattr,bh,,errors=continue [ 57.581844][ T366] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 57.606918][ T366] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 57.621068][ T546] usb 5-1: Using ep0 maxpacket: 8 [ 57.792959][ T546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.827992][ T546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.837553][ T546] usb 5-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 57.857936][ T546] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.869192][ T546] usb 5-1: config 0 descriptor?? [ 58.314274][ T1200] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.355446][ T1200] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.461066][ T546] wacom 0003:056A:033E.0008: Unknown device_type for 'HID 056a:033e'. Assuming pen. [ 58.488598][ T546] wacom 0003:056A:033E.0008: hidraw0: USB HID v0.00 Device [HID 056a:033e] on usb-dummy_hcd.4-1/input0 [ 58.538748][ T546] input: Wacom Intuos PT M 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:033E.0008/input/input8 [ 58.791109][ T546] usb 5-1: USB disconnect, device number 3 [ 58.872626][ T509] attempt to access beyond end of device [ 58.872626][ T509] loop3: rw=2049, want=45104, limit=40427 [ 59.004174][ T1232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.042449][ T1232] syz-executor.2 (1232) used greatest stack depth: 19160 bytes left [ 59.228476][ T1237] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 59.240709][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 59.240717][ T23] audit: type=1400 audit(1717338620.819:236): avc: denied { create } for pid=1236 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 59.372579][ T23] audit: type=1400 audit(1717338620.959:237): avc: denied { bind } for pid=1245 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.466269][ T1254] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 59.574170][ T1254] EXT4-fs (loop2): group descriptors corrupted! [ 59.591104][ T1262] device syzkaller0 entered promiscuous mode [ 60.800326][ T1282] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 60.809274][ T23] audit: type=1400 audit(1717338622.399:238): avc: denied { mount } for pid=1281 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.809297][ T1282] ext4 filesystem being mounted at /root/syzkaller-testdir1894300516/syzkaller.ceYAil/43/bus supports timestamps until 2038 (0x7fffffff) [ 60.861216][ T1274] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.867077][ T23] audit: type=1400 audit(1717338622.449:239): avc: denied { unmount } for pid=376 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.898795][ T1274] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 60.920885][ T1290] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 60.943230][ T1290] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 60.956245][ T1290] EXT4-fs (loop3): Remounting filesystem read-only [ 60.962827][ T1290] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 60.975270][ T1290] EXT4-fs (loop3): mounted filesystem without journal. Opts: prjquota,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,norecovery, [ 61.057993][ T719] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 61.141628][ T1319] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 61.166281][ T1319] EXT4-fs (loop0): group descriptors corrupted! [ 61.194098][ T1322] device syzkaller0 entered promiscuous mode [ 61.303264][ T719] usb 5-1: Using ep0 maxpacket: 8 [ 61.379118][ T378] attempt to access beyond end of device [ 61.379118][ T378] loop2: rw=2049, want=45104, limit=40427 [ 61.928238][ T719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.999108][ T719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.013511][ T719] usb 5-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 62.023236][ T719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.035603][ T719] usb 5-1: config 0 descriptor?? [ 62.145581][ T23] audit: type=1400 audit(1717338623.729:240): avc: denied { write } for pid=1336 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.222400][ T1337] kvm: emulating exchange as write [ 62.261967][ T1344] device syzkaller0 entered promiscuous mode [ 62.356559][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 62.432911][ T1348] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.503540][ T1357] device syzkaller0 entered promiscuous mode [ 62.591480][ T719] wacom 0003:056A:033E.0009: Unknown device_type for 'HID 056a:033e'. Assuming pen. [ 62.609825][ T719] wacom 0003:056A:033E.0009: hidraw0: USB HID v0.00 Device [HID 056a:033e] on usb-dummy_hcd.4-1/input0 [ 62.827477][ T719] input: Wacom Intuos PT M 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:033E.0009/input/input11 [ 62.884820][ T23] audit: type=1400 audit(1717338624.469:241): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=17815 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.907531][ T719] usb 5-1: USB disconnect, device number 4 [ 62.930602][ T23] audit: type=1400 audit(1717338624.469:242): avc: denied { open } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=17815 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.980592][ T23] audit: type=1400 audit(1717338624.539:243): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=17815 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.381856][ T1363] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.422124][ T1372] device syzkaller0 entered promiscuous mode [ 63.465206][ T1363] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.546419][ T1386] EXT4-fs (loop0): Ignoring removed bh option [ 63.560115][ T1386] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 63.579239][ T1386] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 16 (err -117) [ 63.795198][ T23] audit: type=1400 audit(1717338625.379:244): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=10007 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.819127][ T1386] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,delalloc,bh,,errors=continue [ 63.839321][ T1386] ext4 filesystem being mounted at /root/syzkaller-testdir1894300516/syzkaller.ceYAil/53/file1 supports timestamps until 2038 (0x7fffffff) [ 63.839819][ T23] audit: type=1400 audit(1717338625.419:245): avc: denied { rename } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=10007 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.908995][ T1390] EXT4-fs (loop3): Ignoring removed bh option [ 63.942286][ T1390] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 63.968232][ T1390] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 16 (err -117) [ 63.980764][ T1390] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,delalloc,bh,,errors=continue [ 63.999737][ T1390] ext4 filesystem being mounted at /root/syzkaller-testdir2312598545/syzkaller.Mk4NIi/45/file1 supports timestamps until 2038 (0x7fffffff) [ 64.067435][ T378] attempt to access beyond end of device [ 64.067435][ T378] loop2: rw=2049, want=45104, limit=40427 [ 64.188032][ T124] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.367880][ T1407] device syzkaller0 entered promiscuous mode [ 64.448115][ T366] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 64.537145][ T1412] device syzkaller0 entered promiscuous mode [ 64.568051][ T124] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 64.576995][ T124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.586474][ T124] usb 1-1: config 0 descriptor?? [ 64.628773][ T124] rndis_host 1-1:0.0: More than one union descriptor, skipping ... [ 64.638074][ T124] rndis_host: probe of 1-1:0.0 failed with error -22 [ 64.644866][ T124] cdc_acm 1-1:0.0: More than one union descriptor, skipping ... [ 64.654875][ T124] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 64.662828][ T124] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 64.671600][ T124] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 64.789013][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 64.789022][ T23] audit: type=1400 audit(1717338626.379:248): avc: denied { name_bind } for pid=1421 comm="syz-executor.4" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 64.826481][ T366] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 64.836055][ T366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.845150][ T366] usb 4-1: config 0 descriptor?? [ 64.857536][ T1386] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 64.869174][ T398] usb 1-1: USB disconnect, device number 2 [ 64.882920][ T1005] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.898639][ T366] rndis_host 4-1:0.0: More than one union descriptor, skipping ... [ 64.906439][ T366] rndis_host: probe of 4-1:0.0 failed with error -22 [ 64.914707][ T366] cdc_acm 4-1:0.0: More than one union descriptor, skipping ... [ 64.918302][ T1425] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 64.923406][ T366] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 64.933537][ T1425] EXT4-fs (loop1): group descriptors corrupted! [ 64.941325][ T366] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 64.953606][ T366] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 65.057959][ T124] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.085382][ T1428] device syzkaller0 entered promiscuous mode [ 65.126489][ T1390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.135507][ T1005] usb 3-1: Using ep0 maxpacket: 8 [ 65.149590][ T366] usb 4-1: USB disconnect, device number 4 [ 65.203752][ T1430] device syzkaller0 entered promiscuous mode [ 65.258054][ T1005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.269042][ T1005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.278904][ T1005] usb 3-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 65.287718][ T1005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.296990][ T1005] usb 3-1: config 0 descriptor?? [ 65.306058][ T124] usb 5-1: Using ep0 maxpacket: 16 [ 65.384264][ T376] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.0: lblock 0 mapped to illegal pblock 3 (length 1) [ 65.406748][ T7] EXT4-fs error (device loop0): __ext4_get_inode_loc:4710: comm kworker/u4:0: Invalid inode table block 34 in block_group 0 [ 65.438073][ T124] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 65.446487][ T124] usb 5-1: config 0 has no interface number 0 [ 65.457506][ T124] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.468831][ T124] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 65.618168][ T124] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 65.627014][ T124] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 65.647190][ T124] usb 5-1: Product: syz [ 65.661146][ T124] usb 5-1: SerialNumber: syz [ 65.666970][ T509] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.3: lblock 0 mapped to illegal pblock 3 (length 1) [ 65.685747][ T124] usb 5-1: config 0 descriptor?? [ 65.698078][ T464] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm kworker/u4:3: Invalid inode table block 34 in block_group 0 [ 65.760731][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.767648][ T1435] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.776556][ T1435] device bridge_slave_0 entered promiscuous mode [ 65.785489][ T1005] wacom 0003:056A:033E.000A: Unknown device_type for 'HID 056a:033e'. Assuming pen. [ 65.799193][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.804243][ T1005] wacom 0003:056A:033E.000A: hidraw0: USB HID v0.00 Device [HID 056a:033e] on usb-dummy_hcd.2-1/input0 [ 65.806796][ T1435] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.824506][ T1435] device bridge_slave_1 entered promiscuous mode [ 65.831864][ T1005] input: Wacom Intuos PT M 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:033E.000A/input/input14 [ 65.936394][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.943278][ T1435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.950558][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.957380][ T1435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.991273][ T719] usb 3-1: USB disconnect, device number 3 [ 66.005997][ T1432] F2FS-fs (loop1): invalid crc value [ 66.021546][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.030399][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.033349][ T1432] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.044448][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.082886][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.090783][ T1432] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 66.090983][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.104830][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.112206][ T23] audit: type=1400 audit(1717338627.689:249): avc: denied { rename } for pid=1431 comm="syz-executor.1" name="file1" dev="loop1" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.136023][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.143992][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.172390][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.204262][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.226659][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.238645][ T851] device bridge_slave_1 left promiscuous mode [ 66.244677][ T851] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.251937][ T851] device bridge_slave_0 left promiscuous mode [ 66.257854][ T851] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.401002][ T1441] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.408082][ T1441] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.415977][ T1441] device bridge_slave_0 entered promiscuous mode [ 66.428298][ T1005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.437035][ T1005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.449479][ T1441] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.456767][ T1441] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.464621][ T1441] device bridge_slave_1 entered promiscuous mode [ 66.536970][ T1456] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 66.562158][ T1456] EXT4-fs (loop0): group descriptors corrupted! [ 66.612992][ T107] cfg80211: failed to load regulatory.db [ 66.924227][ T1462] device syzkaller0 entered promiscuous mode [ 66.969162][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.977628][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.999479][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.024582][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.032824][ T719] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.039684][ T719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.048018][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.056187][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.064401][ T719] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.071253][ T719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.246796][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.274822][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.283621][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.291693][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.299796][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.314150][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.324365][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.341096][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.349476][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.361779][ T1472] 9pnet: Insufficient options for proto=fd [ 67.388302][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.396331][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.405506][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.439426][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.448409][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.505871][ T1478] device syzkaller0 entered promiscuous mode [ 67.640092][ T1488] EXT4-fs (loop2): Ignoring removed bh option [ 67.656383][ T1488] EXT4-fs error (device loop2): ext4_ext_check_inode:540: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 67.682402][ T366] usb 5-1: USB disconnect, device number 5 [ 67.700630][ T1488] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 16 (err -117) [ 67.713285][ T1488] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,delalloc,bh,,errors=continue [ 67.733920][ T1488] ext4 filesystem being mounted at /root/syzkaller-testdir181860268/syzkaller.mtuY2K/44/file1 supports timestamps until 2038 (0x7fffffff) [ 67.802956][ T23] audit: type=1400 audit(1717338629.389:250): avc: denied { map } for pid=1498 comm="syz-executor.1" path="socket:[19513]" dev="sockfs" ino=19513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 67.872575][ T1503] device syzkaller0 entered promiscuous mode [ 67.924349][ T851] device bridge_slave_1 left promiscuous mode [ 67.930436][ T851] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.937619][ T851] device bridge_slave_0 left promiscuous mode [ 67.943837][ T851] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.988142][ T550] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 68.058003][ T398] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 68.117947][ T366] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.143539][ T1505] device syzkaller0 entered promiscuous mode [ 68.283389][ T1509] device syzkaller0 entered promiscuous mode [ 68.396209][ T550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.431992][ T550] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.447458][ T550] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.456876][ T550] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.517669][ T550] usb 4-1: config 0 descriptor?? [ 68.528014][ T366] usb 5-1: Using ep0 maxpacket: 8 [ 68.598081][ T398] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 68.607271][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.616139][ T398] usb 3-1: config 0 descriptor?? [ 68.648015][ T366] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 68.661194][ T398] rndis_host 3-1:0.0: More than one union descriptor, skipping ... [ 68.669324][ T398] rndis_host: probe of 3-1:0.0 failed with error -22 [ 68.675895][ T398] cdc_acm 3-1:0.0: More than one union descriptor, skipping ... [ 68.683399][ T398] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 68.691197][ T398] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 68.697435][ T398] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 68.707990][ T366] usb 5-1: language id specifier not provided by device, defaulting to English [ 68.828325][ T366] usb 5-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.40 [ 68.837218][ T366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.845079][ T366] usb 5-1: Product: syz [ 68.849024][ T366] usb 5-1: Manufacturer: æ–›åºä·¬è›™ïºèˆ‡î»£ëŽ é™Ÿå›¤ê‡µêµ™æ±¶Æ²ï¿˜ëŒžæ®ªæ  çš´å´ ï†ºá¸œåŽ†ë„ªë˜ì¦å·¬å©·é¥µê—µåª£èŸ£ë¾î¢¬â³¿ëƒ±è§£ç©…ï¥Ï¯ï”娸ꒄ酙粘ࢤ鰞â£â¸ãˆ–䑹î î¨®ìŠ‡é©‡Â±åš…â¾é²‚륻쎊腀Ϻꕡ竀㰪㊺擑心覈焯꠴赨ᾎቼ鞼箤嶥忡㇙èƒì¬±î—˜î¤ïªšáˆçˆ«å©¤á£œî“™Ãœ [ 68.880302][ T366] usb 5-1: SerialNumber: syz [ 68.890510][ T1488] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 68.900679][ T107] usb 3-1: USB disconnect, device number 4 [ 68.918445][ T366] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 68.990175][ T23] audit: type=1400 audit(1717338630.579:251): avc: denied { setopt } for pid=1494 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.019888][ T550] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 69.032755][ T550] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 69.119974][ T107] usb 5-1: USB disconnect, device number 6 [ 69.390498][ T124] usb 4-1: USB disconnect, device number 5 [ 69.423470][ T378] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.2: lblock 0 mapped to illegal pblock 3 (length 1) [ 69.441433][ T851] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm kworker/u4:4: Invalid inode table block 34 in block_group 0 [ 69.920350][ T1539] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.928315][ T1539] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.936177][ T1539] device bridge_slave_0 entered promiscuous mode [ 69.956487][ T1550] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 69.967170][ T1550] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 69.977304][ T1550] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 70.011612][ T1539] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.019125][ T1539] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.026356][ T1539] device bridge_slave_1 entered promiscuous mode [ 70.076892][ T1539] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.083747][ T1539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.090970][ T1539] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.097700][ T1539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.216367][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.218119][ T1553] EXT4-fs (loop1): Ignoring removed bh option [ 70.231428][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.240753][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.259843][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.260001][ T1553] EXT4-fs error (device loop1): ext4_ext_check_inode:540: inode #16: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 70.269173][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.293280][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.980424][ T1553] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 70.994155][ T1553] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,delalloc,bh,,errors=continue [ 71.014428][ T1553] ext4 filesystem being mounted at /root/syzkaller-testdir1463519047/syzkaller.6ylhFJ/67/file1 supports timestamps until 2038 (0x7fffffff) [ 71.092866][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.100966][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.107801][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.115061][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.129057][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.179125][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.187074][ T1559] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.198689][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.212982][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.233714][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.241961][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.250251][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.259132][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.265342][ T1569] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 71.280361][ T1569] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 71.290490][ T1569] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 71.398724][ T7] device bridge_slave_1 left promiscuous mode [ 71.405016][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.412734][ T7] device bridge_slave_0 left promiscuous mode [ 71.418917][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.458241][ T398] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.483430][ T1574] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 71.571329][ T1580] device pim6reg1 entered promiscuous mode [ 71.579713][ T23] audit: type=1400 audit(1717338633.169:252): avc: denied { read } for pid=1578 comm="syz-executor.4" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.900075][ T1581] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.998116][ T398] usb 2-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 72.010804][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.031052][ T23] audit: type=1400 audit(1717338633.619:253): avc: denied { append } for pid=1573 comm="syz-executor.2" name="vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.106706][ T23] audit: type=1400 audit(1717338633.619:254): avc: denied { getopt } for pid=1573 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.120627][ T398] usb 2-1: config 0 descriptor?? [ 72.168539][ T398] rndis_host 2-1:0.0: More than one union descriptor, skipping ... [ 72.178631][ T398] rndis_host: probe of 2-1:0.0 failed with error -22 [ 72.190827][ T398] cdc_acm 2-1:0.0: More than one union descriptor, skipping ... [ 72.198960][ T398] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 72.206685][ T398] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 72.213016][ T398] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 72.229569][ T1596] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 72.964497][ T1553] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.974544][ T398] usb 2-1: USB disconnect, device number 2 [ 73.150798][ T23] audit: type=1326 audit(1717338634.739:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1619 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02a5d0ee9 code=0x0 [ 73.237744][ T1626] device pim6reg1 entered promiscuous mode [ 73.260868][ T23] audit: type=1400 audit(1717338634.849:256): avc: denied { connect } for pid=1619 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.282633][ T23] audit: type=1400 audit(1717338634.849:257): avc: denied { setopt } for pid=1619 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.489406][ T377] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1) [ 73.506303][ T7] EXT4-fs error (device loop1): __ext4_get_inode_loc:4710: comm kworker/u4:0: Invalid inode table block 34 in block_group 0 [ 73.688029][ T124] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 73.743747][ T1637] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.750838][ T1637] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.758206][ T1637] device bridge_slave_0 entered promiscuous mode [ 73.764924][ T1637] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.771773][ T1637] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.779045][ T1637] device bridge_slave_1 entered promiscuous mode [ 73.823817][ T1637] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.830768][ T1637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.837855][ T1637] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.844666][ T1637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.866710][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.874877][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.882491][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.892060][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.900269][ T550] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.907126][ T550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.928018][ T124] usb 4-1: Using ep0 maxpacket: 16 [ 73.934338][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.943271][ T550] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.950187][ T550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.957550][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.965505][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.021649][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.034983][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.048753][ T124] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 74.052072][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.161811][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.266111][ T124] usb 4-1: config 0 has no interface number 0 [ 74.272095][ T124] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 74.282828][ T124] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 74.298276][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.311217][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.338684][ T1650] device syzkaller0 entered promiscuous mode [ 74.436121][ T124] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 74.445421][ T124] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 74.453646][ T124] usb 4-1: Product: syz [ 74.457661][ T124] usb 4-1: SerialNumber: syz [ 74.462949][ T124] usb 4-1: config 0 descriptor?? [ 74.475864][ T1660] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 74.878391][ T7] device bridge_slave_1 left promiscuous mode [ 74.885190][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.908226][ T7] device bridge_slave_0 left promiscuous mode [ 74.914156][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.520042][ T1685] 9pnet: Insufficient options for proto=fd [ 75.544009][ T1685] FAT-fs (loop0): Unrecognized mount option " " or missing value [ 75.555689][ T23] audit: type=1400 audit(1717338637.139:258): avc: denied { map } for pid=1683 comm="syz-executor.0" path="socket:[20287]" dev="sockfs" ino=20287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.579654][ T23] audit: type=1400 audit(1717338637.139:259): avc: denied { read } for pid=1683 comm="syz-executor.0" path="socket:[20287]" dev="sockfs" ino=20287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.716620][ T1696] device syzkaller0 entered promiscuous mode [ 75.839879][ T1704] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 75.937613][ T1707] device syzkaller0 entered promiscuous mode [ 76.154906][ T1714] device syzkaller0 entered promiscuous mode [ 76.313557][ T1717] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 76.477087][ T1722] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 76.509191][ T124] usb 4-1: USB disconnect, device number 6 [ 76.532710][ T1722] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 76.551634][ T1726] device syzkaller0 entered promiscuous mode [ 76.568168][ T1722] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 77.123164][ T1740] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 77.448375][ T1736] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.560086][ T1750] device syzkaller0 entered promiscuous mode [ 77.660565][ T1748] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 77.878456][ T1761] device syzkaller0 entered promiscuous mode [ 78.083865][ T1768] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.097986][ T1768] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 78.128634][ T1768] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 78.154897][ T1768] System zones: 0-2, 18-18, 34-34 [ 78.168551][ T1766] device syzkaller0 entered promiscuous mode [ 78.175550][ T1768] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 78.190372][ T1768] EXT4-fs (loop3): 1 truncate cleaned up [ 78.195927][ T1768] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 78.265165][ T23] audit: type=1400 audit(1717338639.849:260): avc: denied { create } for pid=1767 comm="syz-executor.3" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 78.313054][ T1768] EXT4-fs error (device loop3): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 78.448788][ T1782] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 78.744937][ T1789] device syzkaller0 entered promiscuous mode [ 79.274688][ T1803] device syzkaller0 entered promiscuous mode [ 79.284096][ T1806] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 79.428198][ T1811] device syzkaller0 entered promiscuous mode [ 79.596242][ T1818] device syzkaller0 entered promiscuous mode [ 79.609943][ T23] audit: type=1400 audit(1717338641.199:261): avc: denied { read } for pid=1816 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.782440][ T1828] fuse: Bad value for 'fd' [ 80.132332][ T1836] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 80.214340][ T1834] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.262721][ T1834] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.344887][ T1814] F2FS-fs (loop2): invalid crc value [ 80.356080][ T23] audit: type=1400 audit(1717338641.939:262): avc: denied { setattr } for pid=1831 comm="syz-executor.4" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.392671][ T23] audit: type=1400 audit(1717338641.969:263): avc: denied { mounton } for pid=1831 comm="syz-executor.4" path="/root/syzkaller-testdir992980736/syzkaller.PVu36J/82/file2/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.392983][ T1814] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.479489][ T1814] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 80.657961][ T124] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 80.726531][ T1859] device syzkaller0 entered promiscuous mode [ 80.818734][ T1862] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 80.964792][ T1867] syz-executor.1[1867] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.088160][ T124] usb 5-1: unable to get BOS descriptor or descriptor too short [ 81.159281][ T1869] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.198187][ T124] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 81.351346][ T1877] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.368306][ T7] device bridge_slave_1 left promiscuous mode [ 81.384131][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.398604][ T7] device bridge_slave_0 left promiscuous mode [ 81.421504][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.458289][ T124] usb 5-1: string descriptor 0 read error: -22 [ 81.464363][ T124] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 81.493575][ T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.568707][ T124] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 81.682838][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.694269][ T1885] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.702886][ T1885] device bridge_slave_0 entered promiscuous mode [ 81.710599][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.717449][ T1885] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.759127][ T1885] device bridge_slave_1 entered promiscuous mode [ 81.774659][ T124] usb 5-1: USB disconnect, device number 7 [ 81.965070][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.983509][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.125744][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.176785][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.218499][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.225328][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.232593][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.240833][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.248963][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.255781][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.278923][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.287050][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.294566][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.302643][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.311617][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.319882][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.330690][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.349721][ T550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.375171][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.385619][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.396869][ T375] attempt to access beyond end of device [ 82.396869][ T375] loop4: rw=2049, want=45104, limit=40427 [ 82.426405][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.434967][ T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.478007][ T124] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 82.734008][ T396] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.893874][ T1918] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 82.901636][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.935363][ T124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.970419][ T124] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.979360][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.988499][ T124] usb 4-1: config 0 descriptor?? [ 83.188069][ T396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.198903][ T396] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.218048][ T396] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.226876][ T396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.248708][ T1926] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 83.259830][ T396] usb 3-1: config 0 descriptor?? [ 83.361527][ T1923] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.404422][ T1923] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.478294][ T23] audit: type=1400 audit(1717338645.069:264): avc: denied { ioctl } for pid=1922 comm="syz-executor.1" path="/root/syzkaller-testdir72401450/syzkaller.lhA58u/15/file0/file0" dev="loop1" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.478387][ T1936] attempt to access beyond end of device [ 83.478387][ T1936] loop1: rw=10241, want=53256, limit=40427 [ 83.573065][ T23] audit: type=1400 audit(1717338645.159:265): avc: denied { ioctl } for pid=1937 comm="syz-executor.4" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22670 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.599319][ T124] usbhid 4-1:0.0: can't add hid device: -71 [ 83.605263][ T124] usbhid: probe of 4-1:0.0 failed with error -71 [ 83.614001][ T124] usb 4-1: USB disconnect, device number 7 [ 83.700736][ T1939] FAT-fs (loop4): Directory bread(block 64) failed [ 83.709028][ T1939] FAT-fs (loop4): Directory bread(block 65) failed [ 83.715669][ T1939] FAT-fs (loop4): Directory bread(block 66) failed [ 83.722243][ T1939] FAT-fs (loop4): Directory bread(block 67) failed [ 83.729109][ T1939] FAT-fs (loop4): Directory bread(block 68) failed [ 83.735707][ T1939] FAT-fs (loop4): Directory bread(block 69) failed [ 83.742385][ T1939] FAT-fs (loop4): Directory bread(block 70) failed [ 83.749226][ T1939] FAT-fs (loop4): Directory bread(block 71) failed [ 83.755846][ T1939] FAT-fs (loop4): Directory bread(block 72) failed [ 83.762685][ T1939] FAT-fs (loop4): Directory bread(block 73) failed [ 83.858004][ T396] usbhid 3-1:0.0: can't add hid device: -71 [ 83.863994][ T396] usbhid: probe of 3-1:0.0 failed with error -71 [ 83.874660][ T396] usb 3-1: USB disconnect, device number 5 [ 83.928831][ T1637] attempt to access beyond end of device [ 83.928831][ T1637] loop1: rw=2049, want=45104, limit=40427 [ 84.004326][ T1942] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 85.344772][ T1955] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.590521][ T1955] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.611334][ T1980] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 85.627963][ T546] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 85.948669][ T107] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 85.988712][ T546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.022687][ T546] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.058293][ T546] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.067278][ T546] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.077811][ T546] usb 5-1: config 0 descriptor?? [ 86.538045][ T107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.622545][ T107] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 86.669823][ T2002] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 86.798303][ T546] usbhid 5-1:0.0: can't add hid device: -71 [ 86.804088][ T546] usbhid: probe of 5-1:0.0 failed with error -71 [ 86.813922][ T546] usb 5-1: USB disconnect, device number 8 [ 86.837981][ T550] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 86.888020][ T107] usb 4-1: string descriptor 0 read error: -22 [ 86.894135][ T107] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 86.903170][ T107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.946608][ T2006] FAT-fs (loop1): Directory bread(block 64) failed [ 86.953583][ T107] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 86.960941][ T2006] FAT-fs (loop1): Directory bread(block 65) failed [ 86.967280][ T2006] FAT-fs (loop1): Directory bread(block 66) failed [ 86.974399][ T2006] FAT-fs (loop1): Directory bread(block 67) failed [ 86.981067][ T2006] FAT-fs (loop1): Directory bread(block 68) failed [ 86.987385][ T2006] FAT-fs (loop1): Directory bread(block 69) failed [ 86.993963][ T2006] FAT-fs (loop1): Directory bread(block 70) failed [ 87.000249][ T2006] FAT-fs (loop1): Directory bread(block 71) failed [ 87.006601][ T2006] FAT-fs (loop1): Directory bread(block 72) failed [ 87.013336][ T2006] FAT-fs (loop1): Directory bread(block 73) failed [ 87.157096][ T546] usb 4-1: USB disconnect, device number 8 [ 87.388017][ T550] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.398856][ T550] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.411777][ T550] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.422847][ T550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.432379][ T550] usb 3-1: config 0 descriptor?? [ 87.440815][ T2015] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 87.449366][ T2015] EXT4-fs (loop4): 1 truncate cleaned up [ 87.454935][ T2015] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity, [ 87.483922][ T2015] syz-executor.4[2015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.484089][ T2015] syz-executor.4[2015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.499032][ T23] audit: type=1400 audit(1717338649.089:266): avc: denied { relabelfrom } for pid=2014 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 87.531599][ T23] audit: type=1400 audit(1717338649.089:267): avc: denied { relabelto } for pid=2014 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 87.669576][ T1441] attempt to access beyond end of device [ 87.669576][ T1441] loop3: rw=2049, want=45104, limit=40427 [ 87.997960][ T124] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.008700][ T550] usbhid 3-1:0.0: can't add hid device: -71 [ 88.014755][ T550] usbhid: probe of 3-1:0.0 failed with error -71 [ 88.038071][ T550] usb 3-1: USB disconnect, device number 6 [ 88.179552][ T2039] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 88.365461][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.376181][ T124] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.389650][ T124] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.398529][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.406870][ T124] usb 2-1: config 0 descriptor?? [ 88.568040][ T2050] FAT-fs (loop0): Directory bread(block 64) failed [ 88.648071][ T2050] FAT-fs (loop0): Directory bread(block 65) failed [ 88.655254][ T2050] FAT-fs (loop0): Directory bread(block 66) failed [ 88.662172][ T2050] FAT-fs (loop0): Directory bread(block 67) failed [ 88.669873][ T2050] FAT-fs (loop0): Directory bread(block 68) failed [ 88.676519][ T2050] FAT-fs (loop0): Directory bread(block 69) failed [ 88.683277][ T2050] FAT-fs (loop0): Directory bread(block 70) failed [ 88.690940][ T2050] FAT-fs (loop0): Directory bread(block 71) failed [ 88.697542][ T2050] FAT-fs (loop0): Directory bread(block 72) failed [ 88.704180][ T2050] FAT-fs (loop0): Directory bread(block 73) failed [ 88.710982][ T398] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 88.901287][ T2061] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.927216][ T2061] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.938086][ T124] usbhid 2-1:0.0: can't add hid device: -71 [ 88.943992][ T124] usbhid: probe of 2-1:0.0 failed with error -71 [ 88.952126][ T124] usb 2-1: USB disconnect, device number 3 [ 89.088023][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.098820][ T398] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.111603][ T398] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.120563][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.129202][ T398] usb 5-1: config 0 descriptor?? [ 89.216041][ T23] audit: type=1400 audit(1717338650.799:268): avc: denied { ioctl } for pid=2069 comm="syz-executor.0" path="socket:[23142]" dev="sockfs" ino=23142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 89.241879][ T396] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 89.245401][ T2071] PF_BRIDGE: br_mdb_parse() with invalid entry [ 89.408852][ T2077] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 89.658010][ T398] usbhid 5-1:0.0: can't add hid device: -71 [ 89.663796][ T396] usb 3-1: unable to get BOS descriptor or descriptor too short [ 89.671341][ T398] usbhid: probe of 5-1:0.0 failed with error -71 [ 89.678805][ T398] usb 5-1: USB disconnect, device number 9 [ 89.746937][ T2098] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.757335][ T23] audit: type=1400 audit(1717338651.339:269): avc: denied { create } for pid=2097 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.778757][ T396] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 89.797969][ T366] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.814050][ T2099] FAT-fs (loop3): Directory bread(block 64) failed [ 89.820559][ T2099] FAT-fs (loop3): Directory bread(block 65) failed [ 89.827571][ T2099] FAT-fs (loop3): Directory bread(block 66) failed [ 89.834967][ T2099] FAT-fs (loop3): Directory bread(block 67) failed [ 89.841629][ T2099] FAT-fs (loop3): Directory bread(block 68) failed [ 89.848213][ T2099] FAT-fs (loop3): Directory bread(block 69) failed [ 89.854935][ T2099] FAT-fs (loop3): Directory bread(block 70) failed [ 89.861600][ T2099] FAT-fs (loop3): Directory bread(block 71) failed [ 89.868126][ T2099] FAT-fs (loop3): Directory bread(block 72) failed [ 89.874653][ T2099] FAT-fs (loop3): Directory bread(block 73) failed [ 90.001512][ T2106] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 90.009111][ T2106] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 90.019135][ T2106] F2FS-fs (loop0): invalid crc value [ 90.024367][ T2106] F2FS-fs (loop0): invalid crc value [ 90.028127][ T396] usb 3-1: string descriptor 0 read error: -22 [ 90.029770][ T2106] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 90.035806][ T396] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 90.051474][ T396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.100142][ T396] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 90.178091][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.190215][ T366] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.204224][ T366] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.213684][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.225227][ T366] usb 2-1: config 0 descriptor?? [ 90.305563][ T550] usb 3-1: USB disconnect, device number 7 [ 90.381118][ T2116] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 90.388848][ T2118] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 90.388848][ T2118] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 90.388848][ T2118] [ 90.406681][ T2118] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.417013][ T2118] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 90.540190][ T2118] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 524288 (only 8 groups) [ 90.768010][ T366] usbhid 2-1:0.0: can't add hid device: -71 [ 90.773873][ T366] usbhid: probe of 2-1:0.0 failed with error -71 [ 90.781067][ T2122] EXT4-fs (loop0): Test dummy encryption mode enabled [ 90.782364][ T366] usb 2-1: USB disconnect, device number 4 [ 90.799486][ T2122] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 90.823023][ T2122] EXT4-fs (loop0): Remounting filesystem read-only [ 90.829844][ T1885] attempt to access beyond end of device [ 90.829844][ T1885] loop2: rw=2049, want=45104, limit=40427 [ 90.849514][ T2122] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 90.867650][ T2122] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,test_dummy_encryption,nombcache,jqfmt=vfsv0,lazytime,errors=remount-ro,auto_da_alloc, [ 90.885346][ T396] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 90.894921][ T2122] ext4 filesystem being mounted at /root/syzkaller-testdir3696906939/syzkaller.IMmsE5/50/file0 supports timestamps until 2038 (0x7fffffff) [ 91.128029][ T396] usb 5-1: Using ep0 maxpacket: 8 [ 91.140957][ T2140] fuse: Unknown parameter 'gid' [ 91.154414][ T23] audit: type=1400 audit(1717338652.739:270): avc: denied { create } for pid=2139 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 91.258071][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 91.278237][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.291007][ T396] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.310184][ T396] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 91.312375][ T2155] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 91.328552][ T396] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 91.358019][ T396] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 91.367044][ T396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.376959][ T396] usb 5-1: config 0 descriptor?? [ 91.398008][ T2124] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 91.457947][ T124] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 91.584770][ T23] audit: type=1400 audit(1717338653.169:271): avc: denied { create } for pid=2170 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 91.625309][ T23] audit: type=1400 audit(1717338653.209:272): avc: denied { write } for pid=2111 comm="syz-executor.4" name="001" dev="devtmpfs" ino=9900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.649242][ T23] audit: type=1400 audit(1717338653.209:273): avc: denied { read } for pid=2111 comm="syz-executor.4" dev="nsfs" ino=4026532289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 91.671115][ T23] audit: type=1400 audit(1717338653.209:274): avc: denied { open } for pid=2111 comm="syz-executor.4" path="net:[4026532289]" dev="nsfs" ino=4026532289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 91.695003][ T23] audit: type=1400 audit(1717338653.209:275): avc: denied { shutdown } for pid=2111 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.777147][ T2159] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.810488][ T2159] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.818183][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.828909][ T124] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.841717][ T124] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.863682][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.872680][ T2177] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 91.880790][ T124] usb 3-1: config 0 descriptor?? [ 92.148125][ T546] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 92.319606][ T2195] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 92.428001][ T124] usbhid 3-1:0.0: can't add hid device: -71 [ 92.433794][ T124] usbhid: probe of 3-1:0.0 failed with error -71 [ 92.443788][ T124] usb 3-1: USB disconnect, device number 8 [ 92.531392][ T2209] Zero length message leads to an empty skb [ 92.562280][ T546] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.648271][ T546] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 92.829266][ T2225] EXT4-fs error (device loop3): ext4_fill_super:4612: inode #2: comm syz-executor.3: casefold flag without casefold feature [ 92.844291][ T2225] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 92.854343][ T2225] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 93.091610][ T546] usb 1-1: string descriptor 0 read error: -22 [ 93.097673][ T546] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.40 [ 93.106719][ T546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.148615][ T546] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 93.196679][ T546] usb 5-1: USB disconnect, device number 10 [ 93.233029][ T23] audit: type=1400 audit(1717338654.819:276): avc: denied { write } for pid=2247 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.357838][ T124] usb 1-1: USB disconnect, device number 3 [ 93.557977][ T396] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 93.828258][ T396] usb 4-1: device descriptor read/64, error 18 [ 93.866552][ T1435] attempt to access beyond end of device [ 93.866552][ T1435] loop0: rw=2049, want=45104, limit=40427 [ 93.947956][ T398] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.130713][ T2265] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 94.184741][ T2269] overlayfs: unrecognized mount option "smackfsfloor=kmem_cache_free" or missing value [ 94.218407][ T396] usb 4-1: device descriptor read/64, error 18 [ 94.318095][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.329025][ T398] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.346064][ T398] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.355356][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.378679][ T398] usb 2-1: config 0 descriptor?? [ 94.384248][ T2271] EXT4-fs error (device loop2): ext4_fill_super:4612: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 94.387619][ T2276] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 94.405906][ T2276] EXT4-fs (loop4): 1 truncate cleaned up [ 94.411861][ T2276] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity, [ 94.430753][ T2271] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 94.447120][ T2271] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 94.463623][ T2284] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 4: comm syz-executor.4: path /root/syzkaller-testdir992980736/syzkaller.PVu36J/96/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 94.489486][ T2284] EXT4-fs (loop4): Remounting filesystem read-only [ 94.498042][ T396] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 94.500091][ T2288] syz-executor.4[2288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.500148][ T2288] syz-executor.4[2288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.788080][ T396] usb 4-1: device descriptor read/64, error 18 [ 95.008048][ T398] usbhid 2-1:0.0: can't add hid device: -71 [ 95.014002][ T398] usbhid: probe of 2-1:0.0 failed with error -71 [ 95.021824][ T398] usb 2-1: USB disconnect, device number 5 [ 95.060159][ T2306] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 95.090104][ T2306] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 95.237977][ T396] usb 4-1: device descriptor read/64, error 18 [ 95.358010][ T396] usb usb4-port1: attempt power cycle [ 95.464720][ T2316] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 95.564571][ T2320] EXT4-fs error (device loop4): ext4_fill_super:4612: inode #2: comm syz-executor.4: casefold flag without casefold feature [ 95.583473][ T2320] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 95.605380][ T2320] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 95.849878][ T396] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 97.038000][ T396] usb 4-1: device descriptor read/8, error -71 [ 97.127923][ T2358] device syzkaller0 entered promiscuous mode [ 97.248182][ T396] usb 4-1: device descriptor read/8, error -71 [ 97.479960][ T23] audit: type=1400 audit(1717338659.069:277): avc: denied { watch } for pid=2363 comm="syz-executor.4" path="/root/syzkaller-testdir992980736/syzkaller.PVu36J/99/file0" dev="tmpfs" ino=25162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 97.507982][ T124] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 97.898010][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.936812][ T2367] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.943123][ T124] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.978937][ T124] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.998029][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.016196][ T124] usb 2-1: config 0 descriptor?? [ 98.038167][ T2367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.127611][ T23] audit: type=1400 audit(1717338659.709:278): avc: denied { map } for pid=2384 comm="syz-executor.0" path="/proc/2384/gid_map" dev="proc" ino=25203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 98.237941][ T719] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 98.258919][ T2387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 98.267816][ T2387] ext4 filesystem being mounted at /root/syzkaller-testdir3696906939/syzkaller.IMmsE5/64/bus supports timestamps until 2038 (0x7fffffff) [ 98.291174][ T23] audit: type=1400 audit(1717338659.879:279): avc: denied { ioctl } for pid=2386 comm="syz-executor.0" path="/root/syzkaller-testdir3696906939/syzkaller.IMmsE5/64/bus/file0/file0" dev="loop0" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.291252][ T2387] fs-verity: sha512 using implementation "sha512-generic" [ 98.434189][ T1441] attempt to access beyond end of device [ 98.434189][ T1441] loop3: rw=2049, want=45112, limit=40427 [ 98.472254][ T2392] EXT4-fs error (device loop0): ext4_fill_super:4612: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 98.498135][ T2392] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 98.516687][ T2392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 98.598043][ T719] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 98.607133][ T719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.620471][ T719] usb 3-1: config 0 descriptor?? [ 98.658003][ T124] usbhid 2-1:0.0: can't add hid device: -71 [ 98.663812][ T124] usbhid: probe of 2-1:0.0 failed with error -71 [ 98.672696][ T124] usb 2-1: USB disconnect, device number 6 [ 98.963713][ T2405] device syzkaller0 entered promiscuous mode [ 99.076070][ T2412] device syzkaller0 entered promiscuous mode [ 99.192748][ T2420] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.210276][ T2420] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #17: comm syz-executor.0: iget: bad i_size value: -6917529027641081756 [ 99.223960][ T2420] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 99.236588][ T2420] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 99.245486][ T719] usb 3-1: Cannot read MAC address [ 99.250736][ T719] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -61 [ 99.252526][ T2420] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 65: padding at end of block bitmap is not set [ 99.273481][ T2420] Quota error (device loop0): write_blk: dquota write failed [ 99.281056][ T2420] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 99.373494][ T23] audit: type=1400 audit(1717338660.959:280): avc: denied { ioctl } for pid=2426 comm="syz-executor.0" path="socket:[25360]" dev="sockfs" ino=25360 ioctlcmd=0xae76 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.428009][ T124] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.787994][ T124] usb 2-1: config index 0 descriptor too short (expected 44, got 36) [ 99.795993][ T124] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 99.817916][ T124] usb 2-1: config 0 has no interface number 0 [ 99.823839][ T124] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.847927][ T124] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.857573][ T124] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 99.897926][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.907603][ T124] usb 2-1: config 0 descriptor?? [ 99.981343][ T2446] device syzkaller0 entered promiscuous mode [ 100.368792][ T2418] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 100.379796][ T396] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 100.406461][ T23] audit: type=1326 audit(1717338661.989:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2456 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff02a5d0ee9 code=0x0 [ 100.448031][ T124] usbhid 2-1:0.16: can't add hid device: -71 [ 100.453893][ T124] usbhid: probe of 2-1:0.16 failed with error -71 [ 100.464913][ T124] usb 2-1: USB disconnect, device number 7 [ 100.520448][ T23] audit: type=1400 audit(1717338662.109:282): avc: denied { bind } for pid=2456 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.551989][ T23] audit: type=1400 audit(1717338662.139:283): avc: denied { connect } for pid=2456 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.818094][ T396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.828830][ T719] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.836092][ T396] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.849205][ T396] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.858083][ T396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.866532][ T396] usb 4-1: config 0 descriptor?? [ 100.976534][ T2349] usb 3-1: USB disconnect, device number 9 [ 101.812389][ T2482] device syzkaller0 entered promiscuous mode [ 101.858507][ T719] usb 1-1: config index 0 descriptor too short (expected 146, got 18) [ 101.959442][ T396] usbhid 4-1:0.0: can't add hid device: -71 [ 101.966768][ T396] usbhid: probe of 4-1:0.0 failed with error -71 [ 101.991555][ T396] usb 4-1: USB disconnect, device number 13 [ 102.018057][ T719] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 102.026932][ T719] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 102.039873][ T719] usb 1-1: Product: syz [ 102.058376][ T719] usb 1-1: Manufacturer: syz [ 102.062840][ T719] usb 1-1: SerialNumber: syz [ 102.072534][ T719] usb 1-1: config 0 descriptor?? [ 102.227944][ T18] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 102.677927][ T396] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 102.767918][ T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 102.806420][ T23] audit: type=1400 audit(1717338664.389:284): avc: denied { mounton } for pid=2507 comm="syz-executor.1" path="/root/syzkaller-testdir72401450/syzkaller.lhA58u/58/file0" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 102.917977][ T396] usb 4-1: Using ep0 maxpacket: 8 [ 102.933326][ T2511] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 102.940358][ T2511] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 102.949552][ T2511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 102.957310][ T2511] System zones: 1-12 [ 102.968633][ T2511] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 102.985043][ T2511] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 102.998987][ T2511] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,max_batch_time=0x0000000000000004,init_itable=0x0000000000000601,grpquota,,errors=continue [ 103.158025][ T396] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.177921][ T396] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 103.187442][ T396] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 103.267969][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.287918][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.297433][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.310238][ T396] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 103.327915][ T396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.335869][ T396] usb 4-1: SerialNumber: syz [ 103.358296][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=0004, bcdDevice= 0.01 [ 103.367127][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.378017][ T2504] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 103.384756][ T2504] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 103.391866][ T13] usb 5-1: config 0 descriptor?? [ 103.409949][ T719] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 103.426564][ T719] asix: probe of 1-1:0.0 failed with error -71 [ 103.442040][ T719] usb 1-1: USB disconnect, device number 4 [ 103.599807][ T2504] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 103.625740][ T2504] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 104.009073][ T13] plantronics 0003:047F:0004.000C: unknown main item tag 0x0 [ 104.019582][ T13] plantronics 0003:047F:0004.000C: No inputs registered, leaving [ 104.038555][ T13] plantronics 0003:047F:0004.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:0004] on usb-dummy_hcd.4-1/input0 [ 104.119905][ T396] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 104.148526][ T23] audit: type=1400 audit(1717338665.739:285): avc: denied { read } for pid=201 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 104.191698][ T23] audit: type=1400 audit(1717338665.759:286): avc: denied { read } for pid=201 comm="dhcpcd" name="n15" dev="tmpfs" ino=25895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.237554][ T23] audit: type=1400 audit(1717338665.759:287): avc: denied { open } for pid=201 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=25895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.262473][ T23] audit: type=1400 audit(1717338665.759:288): avc: denied { getattr } for pid=201 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=25895 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 104.286375][ T23] audit: type=1326 audit(1717338665.819:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2505 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1445610ee9 code=0x0 [ 105.811146][ T18] usb 4-1: USB disconnect, device number 14 [ 105.824025][ T18] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 105.904853][ T546] usb 5-1: USB disconnect, device number 11 [ 105.958505][ T2545] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 105.966422][ T2545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.250935][ T23] audit: type=1400 audit(1717338667.839:290): avc: denied { create } for pid=2528 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.282091][ T23] audit: type=1400 audit(1717338667.859:291): avc: denied { write } for pid=2528 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=25999 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.315614][ T2557] FAT-fs (loop0): bogus logical sector size 0 [ 106.320137][ T2555] device syzkaller0 entered promiscuous mode [ 106.334058][ T2557] FAT-fs (loop0): Can't find a valid FAT filesystem [ 106.359080][ T23] audit: type=1400 audit(1717338667.859:292): avc: denied { append } for pid=2528 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=25999 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.401440][ T23] audit: type=1400 audit(1717338667.929:293): avc: denied { unlink } for pid=2566 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=25999 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.507583][ T2575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2575 comm=syz-executor.0 [ 106.517927][ T546] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 106.764081][ T2584] cgroup: syz-executor.1 (2584) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 106.789908][ T2584] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 106.876053][ T2575] F2FS-fs (loop0): Invalid log blocks per segment (5) [ 106.882733][ T2575] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 106.891054][ T2575] F2FS-fs (loop0): Unrecognized mount option "resgid=0x0000000000000000" or missing value [ 106.908110][ T546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 106.948758][ T546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 106.978008][ T546] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.005739][ T2601] device bridge0 entered promiscuous mode [ 107.007618][ T546] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.021146][ T2601] device bridge0 left promiscuous mode [ 107.027716][ T546] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.041108][ T546] usb 5-1: config 0 descriptor?? [ 107.277965][ T2551] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 107.353563][ T2608] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 107.361490][ T2608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.408551][ T2608] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 107.428803][ T2608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.438307][ T2608] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 107.446628][ T2608] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.491921][ T2608] FAT-fs (loop0): bogus logical sector size 0 [ 107.498524][ T2608] FAT-fs (loop0): Can't find a valid FAT filesystem [ 107.547949][ T2349] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 107.724650][ T2615] device syzkaller0 entered promiscuous mode [ 107.778163][ T546] usbhid 5-1:0.0: can't add hid device: -71 [ 107.783922][ T546] usbhid: probe of 5-1:0.0 failed with error -71 [ 107.803660][ T546] usb 5-1: USB disconnect, device number 12 [ 107.863768][ T2617] device syzkaller0 entered promiscuous mode [ 107.918064][ T2349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.129358][ T2349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.139003][ T2349] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.151659][ T2349] usb 2-1: New USB device found, idVendor=047f, idProduct=0004, bcdDevice= 0.01 [ 108.160492][ T2349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.176774][ T2349] usb 2-1: config 0 descriptor?? [ 108.222882][ T2628] device syzkaller0 entered promiscuous mode [ 108.315192][ T2630] device syzkaller0 entered promiscuous mode [ 108.419462][ T2632] device syzkaller0 entered promiscuous mode [ 108.498198][ T2634] device syzkaller0 entered promiscuous mode [ 108.659319][ T2349] plantronics 0003:047F:0004.000D: unknown main item tag 0x0 [ 108.666942][ T2349] plantronics 0003:047F:0004.000D: No inputs registered, leaving [ 108.708467][ T2349] plantronics 0003:047F:0004.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:0004] on usb-dummy_hcd.1-1/input0 [ 108.726965][ T2643] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 108.734884][ T2643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.764057][ T2643] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 108.777947][ T2643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.803007][ T2643] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 108.822186][ T2643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.873381][ T2645] FAT-fs (loop3): bogus logical sector size 0 [ 108.888161][ T2645] FAT-fs (loop3): Can't find a valid FAT filesystem [ 108.914027][ T2646] device syzkaller0 entered promiscuous mode [ 108.925244][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 108.925253][ T23] audit: type=1326 audit(1717338670.509:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d5a62ee9 code=0x0 [ 108.966016][ T2649] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 109.130717][ T2657] device syzkaller0 entered promiscuous mode [ 109.193598][ T2661] device syzkaller0 entered promiscuous mode [ 109.560896][ T2667] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 109.568403][ T2667] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.577957][ T2667] F2FS-fs (loop3): invalid crc value [ 109.601628][ T2667] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.645534][ T2667] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 109.652628][ T2667] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 109.666704][ T2678] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.677478][ T23] audit: type=1400 audit(1717338671.269:297): avc: denied { accept } for pid=2666 comm="syz-executor.3" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.918197][ T1900] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm kworker/u4:5: bg 0: block 234: padding at end of block bitmap is not set [ 109.947752][ T1900] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1613 with error 117 [ 109.975439][ T2684] tipc: Enabling of bearer rejected, failed to enable media [ 109.980912][ T1900] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.980912][ T1900] [ 109.988960][ T2684] fuse: Bad value for 'fd' [ 110.047008][ T2686] device bridge0 entered promiscuous mode [ 110.063504][ T2686] device bridge0 left promiscuous mode [ 110.202150][ T2690] device syzkaller0 entered promiscuous mode [ 110.282735][ T546] usb 2-1: USB disconnect, device number 9 [ 110.330550][ T2696] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 110.338481][ T2696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.376335][ T2696] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 110.396315][ T2696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.424169][ T2696] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 110.435776][ T2696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.455054][ T2701] FAT-fs (loop1): bogus logical sector size 0 [ 110.461326][ T2701] FAT-fs (loop1): Can't find a valid FAT filesystem [ 110.500115][ T2700] device syzkaller0 entered promiscuous mode [ 110.619216][ T2704] device syzkaller0 entered promiscuous mode [ 110.769802][ T2712] device syzkaller0 entered promiscuous mode [ 110.825615][ T2716] device syzkaller0 entered promiscuous mode [ 110.987918][ T2349] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 111.250994][ T2732] device syzkaller0 entered promiscuous mode [ 111.358031][ T2349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.375668][ T2349] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.396995][ T2349] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.407085][ T2349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.419602][ T2349] usb 2-1: config 0 descriptor?? [ 111.988561][ T2349] usbhid 2-1:0.0: can't add hid device: -71 [ 111.994882][ T2349] usbhid: probe of 2-1:0.0 failed with error -71 [ 112.099683][ T2349] usb 2-1: USB disconnect, device number 10 [ 112.694153][ T2759] device syzkaller0 entered promiscuous mode [ 112.817025][ T2772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.125873][ T2803] device syzkaller0 entered promiscuous mode [ 114.540719][ T2815] device syzkaller0 entered promiscuous mode [ 114.678138][ T5] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 115.306384][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.317341][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.330736][ T5] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.339994][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.349117][ T5] usb 3-1: config 0 descriptor?? [ 115.493651][ T2823] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.533587][ T2823] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.821690][ T1441] attempt to access beyond end of device [ 115.821690][ T1441] loop3: rw=2049, want=45104, limit=40427 [ 115.847313][ T2818] F2FS-fs (loop1): Test dummy encryption mode enabled [ 115.886826][ T2818] F2FS-fs (loop1): Test dummy encryption mode enabled [ 115.896802][ T23] audit: type=1400 audit(1717338677.479:298): avc: denied { execmem } for pid=2848 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 115.948080][ T5] usbhid 3-1:0.0: can't add hid device: -71 [ 115.953868][ T5] usbhid: probe of 3-1:0.0 failed with error -71 [ 115.968755][ T2818] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.980392][ T5] usb 3-1: USB disconnect, device number 10 [ 116.005897][ T2818] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.017549][ T23] audit: type=1400 audit(1717338677.599:299): avc: denied { mount } for pid=2816 comm="syz-executor.1" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 116.040428][ T2854] SELinux: security_context_str_to_sid(u) failed for (dev debugfs, type debugfs) errno=-22 [ 116.058098][ T23] audit: type=1400 audit(1717338677.629:300): avc: denied { remount } for pid=2816 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 116.250204][ T2860] device syzkaller0 entered promiscuous mode [ 116.327918][ T13] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 116.647942][ T18] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 116.677913][ T107] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 116.697974][ T13] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 116.717953][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.734972][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.744992][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.848001][ T13] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.862353][ T13] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.887716][ T13] usb 2-1: Manufacturer: syz [ 116.913987][ T13] usb 2-1: config 0 descriptor?? [ 117.108641][ T107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.108660][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.130269][ T18] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.143390][ T18] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.152590][ T107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.165532][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.176807][ T107] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.185956][ T18] usb 4-1: config 0 descriptor?? [ 117.191223][ T107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.231257][ T107] usb 5-1: config 0 descriptor?? [ 117.236172][ T13] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 117.257488][ T13] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 117.301048][ T13] appleir 0003:05AC:8243.000E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 117.318675][ T2893] device syzkaller0 entered promiscuous mode [ 117.638126][ T23] audit: type=1400 audit(1717338679.169:301): avc: denied { create } for pid=2816 comm="syz-executor.1" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 117.658974][ T23] audit: type=1400 audit(1717338679.219:302): avc: denied { bind } for pid=2816 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.708073][ T2856] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 117.777982][ T18] usbhid 4-1:0.0: can't add hid device: -71 [ 117.783762][ T107] usbhid 5-1:0.0: can't add hid device: -71 [ 117.789546][ T107] usbhid: probe of 5-1:0.0 failed with error -71 [ 117.795797][ T18] usbhid: probe of 4-1:0.0 failed with error -71 [ 117.803873][ T18] usb 4-1: USB disconnect, device number 15 [ 117.810081][ T107] usb 5-1: USB disconnect, device number 13 [ 117.997928][ T550] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.357067][ T2912] device syzkaller0 entered promiscuous mode [ 118.388291][ T550] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.406326][ T550] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.419647][ T550] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.433049][ T550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.449593][ T550] usb 1-1: config 0 descriptor?? [ 118.607827][ T23] audit: type=1400 audit(1717338680.189:303): avc: denied { name_bind } for pid=2927 comm="syz-executor.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 118.650125][ T2928] EXT4-fs (loop3): Ignoring removed bh option [ 118.680255][ T2928] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #16: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 118.699692][ T2928] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 16 (err -117) [ 118.711981][ T2928] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,acl,bh,,errors=continue [ 118.733289][ T2933] EXT4-fs (loop4): Ignoring removed bh option [ 118.738811][ T2928] ext4 filesystem being mounted at /root/syzkaller-testdir3860050543/syzkaller.t38sNy/86/file1 supports timestamps until 2038 (0x7fffffff) [ 118.755350][ T23] audit: type=1400 audit(1717338680.339:304): avc: denied { unmount } for pid=1637 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 118.778009][ T2349] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 118.790524][ T23] audit: type=1400 audit(1717338680.369:305): avc: denied { unlink } for pid=1637 comm="syz-executor.1" name=2E02 dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 118.791645][ T2933] EXT4-fs error (device loop4): ext4_ext_check_inode:540: inode #16: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 118.831898][ T2933] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 16 (err -117) [ 118.847323][ T2933] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,acl,bh,,errors=continue [ 118.873787][ T2933] ext4 filesystem being mounted at /root/syzkaller-testdir992980736/syzkaller.PVu36J/137/file1 supports timestamps until 2038 (0x7fffffff) [ 118.925301][ T1441] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Out of memory [ 118.939858][ T375] EXT4-fs warning (device loop4): ext4_empty_dir:2996: inode #12: lblock 0: comm syz-executor.4: error -12 reading directory block [ 118.954271][ T375] ------------[ cut here ]------------ [ 118.959534][ T375] kernel BUG at fs/ext4/ext4.h:2984! [ 118.965508][ T375] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 118.971463][ T375] CPU: 0 PID: 375 Comm: syz-executor.4 Not tainted 5.4.274-syzkaller-00014-g70fafe094510 #0 [ 118.981352][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 118.991273][ T375] RIP: 0010:ext4_free_blocks+0x2290/0x2310 [ 118.996888][ T375] Code: 08 48 89 df e8 31 fc c8 ff 49 83 7e 18 00 74 2a e8 35 17 99 ff 49 83 c6 18 e9 6b ff ff ff e8 27 17 99 ff 0f 0b e8 20 17 99 ff <0f> 0b e8 19 17 99 ff 0f 0b e8 12 17 99 ff 0f 0b e8 0b 17 99 ff eb [ 119.016416][ T375] RSP: 0018:ffff8881d65d7580 EFLAGS: 00010293 [ 119.022404][ T375] RAX: ffffffff81cb2500 RBX: 0000000000000001 RCX: ffff8881e0d5cec0 [ 119.030213][ T375] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000000001 [ 119.038027][ T375] RBP: ffff8881d65d77b0 R08: ffffffff81cb08b9 R09: 0000000000000000 [ 119.045837][ T375] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000070d [ 119.053648][ T375] R13: dffffc0000000000 R14: ffff8881db6b0000 R15: 0000000000000019 [ 119.061462][ T375] FS: 0000555555d44480(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 119.070228][ T375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.076656][ T375] CR2: 0000001b2d62b000 CR3: 00000001d652f000 CR4: 00000000003406b0 [ 119.084464][ T375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.092369][ T375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.100170][ T375] Call Trace: [ 119.103310][ T375] ? __die+0xb4/0x100 [ 119.107117][ T375] ? die+0x26/0x50 [ 119.110676][ T375] ? do_trap+0x1e7/0x340 [ 119.114758][ T375] ? ext4_free_blocks+0x2290/0x2310 [ 119.119788][ T375] ? ext4_free_blocks+0x2290/0x2310 [ 119.124938][ T375] ? do_invalid_op+0xfb/0x110 [ 119.129441][ T375] ? ext4_free_blocks+0x2290/0x2310 [ 119.134474][ T375] ? invalid_op+0x1e/0x30 [ 119.138639][ T375] ? ext4_free_blocks+0x649/0x2310 [ 119.143590][ T375] ? ext4_free_blocks+0x2290/0x2310 [ 119.148617][ T375] ? ext4_free_blocks+0x2290/0x2310 [ 119.153650][ T375] ? ext4_truncate+0xb23/0x1290 [ 119.158347][ T375] ? ext4_mb_discard_preallocations+0x250/0x250 [ 119.164415][ T375] ? get_default_free_blocks_flags+0x6d/0x4c0 [ 119.170324][ T375] ? ext4_ext_remove_space+0xc46/0x4ba0 [ 119.175696][ T375] ext4_ext_remove_space+0x2758/0x4ba0 [ 119.181015][ T375] ? ext4_mark_inode_dirty+0x4e7/0x7a0 [ 119.186294][ T375] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 119.192107][ T375] ? ext4_es_lookup_extent+0x9d0/0x9d0 [ 119.197396][ T375] ? ext4_ext_truncate+0x136/0x180 [ 119.202340][ T375] ext4_truncate+0xb23/0x1290 [ 119.206856][ T375] ? ext4_mark_inode_dirty+0x4e7/0x7a0 [ 119.212149][ T375] ? ext4_mark_inode_dirty+0x7a0/0x7a0 [ 119.217470][ T375] ? __ext4_journal_start_sb+0x295/0x460 [ 119.222916][ T375] ext4_evict_inode+0x126a/0x1ac0 [ 119.227787][ T375] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 119.233416][ T375] ? __fsnotify_parent+0x310/0x310 [ 119.238361][ T375] ? fsnotify_destroy_marks+0x1de/0x5a0 [ 119.243741][ T375] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 119.249385][ T375] evict+0x29b/0x6a0 [ 119.253116][ T375] vfs_rmdir+0x24b/0x3c0 [ 119.257199][ T375] do_rmdir+0x2c1/0x580 [ 119.261276][ T375] ? d_delete_notify+0xc0/0xc0 [ 119.265872][ T375] ? _raw_spin_unlock_irq+0x4a/0x60 [ 119.270909][ T375] do_syscall_64+0xca/0x1c0 [ 119.275248][ T375] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 119.280977][ T375] RIP: 0033:0x7f14456106c7 [ 119.285230][ T375] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 119.304754][ T375] RSP: 002b:00007ffd46aced78 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 119.313009][ T375] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f14456106c7 2024/06/02 14:31:20 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 119.320812][ T375] RDX: 0000000000000200 RSI: 00007ffd46acff20 RDI: 00000000ffffff9c [ 119.328633][ T375] RBP: 00007f144565c336 R08: 0000000000000000 R09: 0000000000000000 [ 119.336803][ T375] R10: 0000000000001000 R11: 0000000000000207 R12: 00007ffd46acff20 [ 119.344619][ T375] R13: 00007f144565c336 R14: 000000000001cf75 R15: 0000000000000008 [ 119.352433][ T375] Modules linked in: [ 119.364653][ T23] audit: type=1400 audit(1717338680.949:306): avc: denied { write } for pid=348 comm="syz-fuzzer" path="pipe:[1868]" dev="pipefs" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 119.392808][ T550] usbhid 1-1:0.0: can't add hid device: -71 [ 119.398624][ T550] usbhid: probe of 1-1:0.0 failed with error -71 [ 119.406158][ T550] usb 1-1: USB disconnect, device number 5 [ 119.412816][ T375] ---[ end trace 5c5d795d31da942e ]--- [ 119.423704][ T375] RIP: 0010:ext4_free_blocks+0x2290/0x2310 [ 119.433170][ T375] Code: 08 48 89 df e8 31 fc c8 ff 49 83 7e 18 00 74 2a e8 35 17 99 ff 49 83 c6 18 e9 6b ff ff ff e8 27 17 99 ff 0f 0b e8 20 17 99 ff <0f> 0b e8 19 17 99 ff 0f 0b e8 12 17 99 ff 0f 0b e8 0b 17 99 ff eb [ 119.478143][ T375] RSP: 0018:ffff8881d65d7580 EFLAGS: 00010293 [ 119.484046][ T375] RAX: ffffffff81cb2500 RBX: 0000000000000001 RCX: ffff8881e0d5cec0 [ 119.492004][ T375] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000000001 [ 119.499864][ T375] RBP: ffff8881d65d77b0 R08: ffffffff81cb08b9 R09: 0000000000000000 [ 119.507605][ T375] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000070d [ 119.515547][ T375] R13: dffffc0000000000 R14: ffff8881db6b0000 R15: 0000000000000019 [ 119.523399][ T375] FS: 0000555555d44480(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 119.532132][ T375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.538568][ T375] CR2: 0000555555d5d898 CR3: 00000001d652f000 CR4: 00000000003406a0 [ 119.546341][ T375] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.554185][ T375] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.563119][ T375] Kernel panic - not syncing: Fatal exception [ 119.569217][ T375] Kernel Offset: disabled [ 119.573345][ T375] Rebooting in 86400 seconds..