last executing test programs: 11.703030117s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() getsockopt$inet_opts(0xffffffffffffffff, 0x6, 0x9, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$packet(0x11, 0x0, 0x300) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100a, 0x2) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, &(0x7f0000000540), 0x6c, r0}, 0x38) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'full'}, 0x2f) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) 7.173829586s ago: executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 6.249588318s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") statfs(&(0x7f0000000080)='./file0\x00', 0x0) 5.660161849s ago: executing program 1: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) nanosleep(0x0, &(0x7f0000000380)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_emit_ethernet(0x92, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {}, {@remote}, {@broadcast}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x0, [@multicast2, @remote, @broadcast, @multicast1]}]}}}}}}}, 0x0) 5.549947056s ago: executing program 3: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x6a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) 5.339511279s ago: executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 5.072233458s ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/213, 0xd5}], 0x1}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 5.02790656s ago: executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000004140)=ANY=[@ANYBLOB="00a3d9feb86e02e3b0bd5e574a822aa033060829d9f570706daaf7e64385f4c757c8c1509cbd06003c6d03000000ffdde116534a3e539068b679d93c646500b71c53966a788a93af70a9e8378a4dff15e4a14b5a4b6c14d2feff8ec15164ffffba586557115ae1b2470a06d956cae4ea3b76e646ef7b00f8bcbad4030fa2f87bae1c91858fdee78fd19866212b8aedf818fea039932b8d5f454cf4fa9f9c1c0bd1c3f8c02f1bc702d7359eb8be446f88b77ce92c3d943828ece9eef54e10c2b4d66fb887ed9e56e2fbf982ea3443c9c30d40c4dd067682187e224173e49a3d0700efeb8fc6570ce5feb7d4c9ab5c4cc09ba9ae6276845ff55c7fdaab25776edddef50000000064dadb122182564d38cae5597ef4d5a2bf63415fdfe0867dee339da4a49e99fcf977e3be588fb6a8e4ee0d5395982f374f3802e1cf12c5849a07af1ad1e9f1f52725eab00af283cbfbd18fdc8e1951ba26508eb3781117b3a5263e3671d0b9e5aedd4e9261654e7cd5213600a77f55f0ab706a787ac204fff298dc72be1e80389d8f55f42c3b92acaee0df6b6bea8459d98d7bdc8e99b33022a2474d5527b68ba085ce52bf894f86c0f0f2f76c1ffe1e7ecbf2f1d7f8de553ebd38a1ad1f67e43da56f853f594b16be3822b97389b248dd3079e41ce185206267e9f174fd6ba01f9cc52c465608000048d0ad524a70f1688d1f30ca729963f14d140bf06f606065187fef9b44e884699a5bda981b07000000000000009a74a84388dc82ed1ba29aba106b9f6e11ea249e4870494ede40f7bc48dc2a14669c1b94b32209f16b423a9274740b8f4e641d46a6f14f44e26c4b7d5422322a2f8d967532b133014da9c571ffc2664e0838391e0242bcacaa0c00358bdefaf2bc51dcf4a7673703b89cf213c3325c64493f3ed9866c4994c119363dec364813d2a1f3732323d6fde44b8178d35f936200a96118889bc34d1800779c82b877ba24d7aadec4abe72a3b5e9280cc12d3f3b60fa0163fc3ccdce18ced9a8ccf33122055f8870f804fb91d9f91ba8db505d020c01f532c9307117f34693dd535e1df52ccc94ba178aaf524117c214fa858d6da2f91c14ab5ea3080500366075694cf317cdad3e61d17bfa4490124e3616a0d581cf05cf2cecc0a9b83fe000000000000000000000000ed9111e3396fea123d15ff825b66e25945cb3fd6d31773af0634a155fe85159a643b064fba1135ff23d713431f3cf8587d8778f7eb1a02d155fb6185d105d26844d111c85fd6321fc4a9a368c04cd3f29a8badfb8a0152e7bb8b10a8e680292eb9ab00d3efd86111ca430dcfbf1910b235e636e99b615163989a3779e520b59d2e7db309a3710d5b11ae9c21ad7e4c7d000000000000000000000024aafb0479e8ea1ab8bfd97c2186a3a784ce996d63c42c31e3a211c284f7c0187429d7f01748d6f04519921b9d81a510de2ff2f21e7423328036d45adf7df57a0572a6dfba1e0e7dbed9aeebb7cd806f3685459be46dc69d314fd3ea633b1539f466c8d32a2e9392d1620656958900ffbf0c3f5139c03580f83516f02c1adbb6e16040f273456e982741fe40b3f6a3e9c8237f9da13572c209968b40dd6bf4fbb056d303698c74cdbd4c38c54e945e8e93ff946aa2a1fc940646fc7dbcb3455221cf6192c986eb7a087af45e68868f8495"], 0x1, 0x1cf, &(0x7f0000000780)="$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") mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x4b, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x15, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x15, 0x0, @gue={{0x2}, "30b00afe4e"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000280)=""/4096, 0x9005) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4), 0xc) write(r6, &(0x7f0000000140)="26000000220047010500", 0xa) 4.56273079s ago: executing program 0: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 4.309932253s ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x2, 0x0, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0xfffffffffffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xd}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.829505271s ago: executing program 0: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7ab, &(0x7f00000000c0)={{@host}, 0x0, 0x1}) 2.683838045s ago: executing program 0: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0) 2.482272323s ago: executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 2.47180047s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.939078517s ago: executing program 4: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r2]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 1.598600687s ago: executing program 4: socket(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000100), 0x356f}) 1.205535205s ago: executing program 4: open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="b0fef28adda655a00a8ce0bb7d504206000000000000001abe0a88f67472c3cd975c9884ae01084df2b7f556e2a043b74efe85a30267", 0x36}], 0x1}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac010000170000000000000000000000000000000000000000000000000000000000000000000000fc010000000000000000000000000000fc020000000000000000000000000000e00000010000000000000000000000000000000000000000000000000c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000800000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000528800000000000000000000000000000000000000000000000000000000000000000000000084000500ac1414aa000000000000000000000000000000000000000000000000fe880000000000000000000000000001000000000000000000000000000000000000000020010000000000000000000000000002000000000000000000000000000000000000000000000000000000010000000000000000"], 0x1ac}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x1}) 1.188148488s ago: executing program 3: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x6a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) 1.046436059s ago: executing program 2: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7ab, &(0x7f00000000c0)={{@host}, 0x0, 0x1}) 875.124234ms ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 868.270662ms ago: executing program 2: openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0) 629.168879ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x0, 0x265, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001400)={r2, &(0x7f0000000000), &(0x7f0000001440)}, 0x20) 612.601575ms ago: executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) recvmmsg(r0, &(0x7f0000002b80), 0x0, 0x0, 0x0) 495.707661ms ago: executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x15, &(0x7f00000002c0)="b9425b446512d23236973599b76c4705397f00466e") r1 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r1, 0x40305829, &(0x7f00000002c0)={0xd, "3a82000000130000000000009d"}) ioctl$EVIOCGKEYCODE(r0, 0x2, 0xfffffffffffffffc) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b14, 0x0) r3 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)) r4 = syz_open_dev$hidraw(&(0x7f0000002300), 0x243c2917, 0x14a042) syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) write$hidraw(r4, &(0x7f00000009c0)='\x00\x00', 0x2) write$hidraw(r4, &(0x7f0000003000)="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", 0xfff) syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x28203) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000100)=""/175) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(0x0, 0x400, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) 375.782312ms ago: executing program 2: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 359.745756ms ago: executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e) 258.953341ms ago: executing program 4: socket(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000100), 0x356f}) 188.306058ms ago: executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x20) r1 = bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000180)}, 0x10) 51.117347ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e40800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x6a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) kernel console output (not intermixed with test programs): corrupted directory (invalid entries) [ 373.531155][ T8357] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.932373][ T8364] bridge0: port 3(erspan0) entered blocking state [ 373.952129][ T8364] bridge0: port 3(erspan0) entered disabled state [ 373.971942][ T8364] erspan0: entered allmulticast mode [ 373.993970][ T8364] erspan0: entered promiscuous mode [ 374.027964][ T8364] bridge0: port 3(erspan0) entered blocking state [ 374.034798][ T8364] bridge0: port 3(erspan0) entered forwarding state [ 374.062037][ T8349] loop3: detected capacity change from 0 to 32768 [ 374.107346][ T8349] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (8349) [ 374.220623][ T8349] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 374.236204][ T8349] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 374.253656][ T8349] BTRFS info (device loop3): using free-space-tree [ 374.272360][ T8355] loop0: detected capacity change from 0 to 32768 [ 377.129748][ T29] audit: type=1800 audit(1718733001.606:502): pid=8389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="loop0" ino=7 res=0 errno=0 [ 377.293700][ T8349] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 377.508302][ T5111] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.677791][ T784] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 378.903041][ T784] usb 5-1: Using ep0 maxpacket: 32 [ 378.958757][ T784] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 378.967398][ T784] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 379.006741][ T784] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 379.007658][ T8406] loop3: detected capacity change from 0 to 256 [ 379.037604][ T784] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 379.057393][ T784] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 379.077820][ T784] usb 5-1: Product: syz [ 379.089774][ T784] usb 5-1: Manufacturer: syz [ 379.094447][ T784] usb 5-1: SerialNumber: syz [ 379.127303][ T8406] exfat: Deprecated parameter 'utf8' [ 379.134812][ T784] usb 5-1: config 0 descriptor?? [ 379.477266][ T8406] exFAT-fs (loop3): IO charset none not found [ 379.533530][ T8409] loop1: detected capacity change from 0 to 40427 [ 379.543480][ T8409] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 379.551428][ T8409] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 379.599284][ T8409] F2FS-fs (loop1): Found nat_bits in checkpoint [ 379.641782][ T29] audit: type=1400 audit(1718733004.146:503): avc: denied { ioctl } for pid=8405 comm="syz-executor.3" path="socket:[17978]" dev="sockfs" ino=17978 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.708346][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.717737][ T8409] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 379.725436][ T8409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 380.037868][ T8420] loop3: detected capacity change from 0 to 256 [ 380.159506][ T8420] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 380.382179][ T784] usb 5-1: USB disconnect, device number 11 [ 381.415955][ T29] audit: type=1400 audit(1718733005.916:504): avc: denied { write } for pid=8422 comm="syz-executor.4" path="socket:[17997]" dev="sockfs" ino=17997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 381.831618][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 382.028107][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 382.047808][ T25] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 382.056464][ T25] usb 4-1: config 0 has no interface number 0 [ 382.077244][ T25] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 382.092862][ T8417] loop0: detected capacity change from 0 to 40427 [ 382.105461][ T25] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 382.123541][ T8417] F2FS-fs (loop0): heap/no_heap options were deprecated [ 382.150513][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 382.170280][ T25] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 382.181636][ T8417] F2FS-fs (loop0): invalid crc value [ 382.193434][ T25] usb 4-1: Product: syz [ 382.197687][ T25] usb 4-1: SerialNumber: syz [ 382.221489][ T8417] F2FS-fs (loop0): Found nat_bits in checkpoint [ 382.231291][ T25] usb 4-1: config 0 descriptor?? [ 382.457172][ T8417] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 382.468993][ T8434] overlayfs: failed to resolve './file0': -2 [ 382.641979][ T5114] syz-executor.0: attempt to access beyond end of device [ 382.641979][ T5114] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 382.702242][ T5114] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 383.686500][ T25] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -12 [ 383.738555][ T25] usb 4-1: USB disconnect, device number 7 [ 384.563231][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.578135][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.387587][ T8449] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 385.508235][ T784] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 385.708716][ T784] usb 2-1: Using ep0 maxpacket: 32 [ 385.746268][ T784] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 385.773961][ T784] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 385.814768][ T784] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 385.874400][ T784] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 385.908797][ T784] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 385.917279][ T784] usb 2-1: Product: syz [ 385.948205][ T784] usb 2-1: Manufacturer: syz [ 385.965318][ T784] usb 2-1: SerialNumber: syz [ 386.009086][ T784] usb 2-1: config 0 descriptor?? [ 386.669368][ T8460] loop0: detected capacity change from 0 to 40427 [ 386.681221][ T8460] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 386.689207][ T8460] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 386.716629][ T8460] F2FS-fs (loop0): Found nat_bits in checkpoint [ 386.829015][ T8460] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 386.836137][ T8460] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 387.058307][ T5185] usb 2-1: USB disconnect, device number 7 [ 389.296279][ T8475] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 389.368256][ T8475] fscrypt (sda1, inode 1953): Unsupported encryption flags (0x10) [ 390.566737][ T8487] loop4: detected capacity change from 0 to 2048 [ 390.601684][ T8487] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 390.648468][ T8487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.134615][ T784] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 392.752073][ T784] usb 3-1: Using ep0 maxpacket: 32 [ 392.769507][ T784] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 392.777791][ T784] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 392.832066][ T784] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.878755][ T784] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 392.899032][ T784] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 392.942326][ T784] usb 3-1: Product: syz [ 392.960680][ T784] usb 3-1: Manufacturer: syz [ 392.991366][ T784] usb 3-1: SerialNumber: syz [ 393.019795][ T784] usb 3-1: config 0 descriptor?? [ 393.408701][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 394.131145][ T25] usb 3-1: USB disconnect, device number 5 [ 394.443094][ T8509] loop1: detected capacity change from 0 to 32768 [ 394.585003][ T8529] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 396.474956][ T8561] loop3: detected capacity change from 0 to 2048 [ 396.518388][ T8564] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 396.619699][ T8561] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 396.689668][ T8561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 396.960142][ T8570] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 397.011294][ T29] audit: type=1400 audit(1718733021.516:505): avc: denied { write } for pid=8568 comm="syz-executor.4" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 398.601050][ T8596] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.649319][ T29] audit: type=1400 audit(1718733023.156:506): avc: denied { setopt } for pid=8595 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 399.360693][ T29] audit: type=1400 audit(1718733023.156:507): avc: denied { bind } for pid=8595 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 399.398290][ T29] audit: type=1400 audit(1718733023.156:508): avc: denied { node_bind } for pid=8595 comm="syz-executor.2" saddr=fe88::3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 399.537710][ T8573] loop0: detected capacity change from 0 to 32768 [ 399.616214][ T8573] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 399.939759][ T8573] XFS (loop0): Ending clean mount [ 400.168060][ T5114] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 400.321961][ T29] audit: type=1400 audit(1718733024.826:509): avc: denied { watch } for pid=8619 comm="syz-executor.2" path="/root/syzkaller-testdir3161960614/syzkaller.3Inomy/189/net_prio.prioidx" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 403.557082][ T8643] veth1_macvtap: left promiscuous mode [ 403.658249][ T8646] veth1_macvtap: entered promiscuous mode [ 403.664212][ T8646] macsec0: entered allmulticast mode [ 403.669615][ T8646] veth1_macvtap: entered allmulticast mode [ 404.079623][ T29] audit: type=1400 audit(1718733028.586:510): avc: denied { listen } for pid=8652 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 404.153997][ T29] audit: type=1400 audit(1718733028.606:511): avc: denied { connect } for pid=8652 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 404.399281][ T8663] loop3: detected capacity change from 0 to 2048 [ 404.438694][ T8663] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 404.490916][ T8663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.190922][ T29] audit: type=1400 audit(1718733031.686:512): avc: denied { nlmsg_write } for pid=8694 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 408.024942][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.088103][ T29] audit: type=1400 audit(1718733032.356:513): avc: denied { getopt } for pid=8699 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 408.320478][ T8704] 9pnet_virtio: no channels available for device [ 408.586690][ T29] audit: type=1400 audit(1718733033.086:514): avc: denied { mounton } for pid=8707 comm="syz-executor.4" path="/root/syzkaller-testdir1704149241/syzkaller.yUKLTV/238/file0" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 408.865681][ T29] audit: type=1800 audit(1718733033.366:515): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz-executor.4" name="/root/syzkaller-testdir1704149241/syzkaller.yUKLTV/238/file0" dev="sda1" ino=1944 res=0 errno=0 [ 409.920844][ T29] audit: type=1400 audit(1718733034.416:516): avc: denied { watch watch_reads } for pid=8723 comm="syz-executor.1" path="/root/syzkaller-testdir940413438/syzkaller.FWMoZr/199/file0/file1" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 411.342139][ T8737] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 411.356196][ T29] audit: type=1400 audit(1718733035.846:517): avc: denied { bind } for pid=8733 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.468389][ T8743] 9pnet_virtio: no channels available for device [ 411.529750][ T8744] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 411.987228][ T29] audit: type=1326 audit(1718733036.486:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 412.036780][ T29] audit: type=1326 audit(1718733036.486:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 412.095260][ T29] audit: type=1326 audit(1718733036.486:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f430b47bb20 code=0x7ffc0000 [ 412.208316][ T29] audit: type=1326 audit(1718733036.486:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f430b47bb20 code=0x7ffc0000 [ 412.356736][ T29] audit: type=1326 audit(1718733036.516:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 414.158006][ T29] audit: type=1326 audit(1718733036.516:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 414.305150][ T29] audit: type=1326 audit(1718733036.516:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 414.464127][ T29] audit: type=1326 audit(1718733036.516:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8754 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 414.627506][ T8778] 9pnet_virtio: no channels available for device [ 415.036004][ T8787] loop3: detected capacity change from 0 to 2048 [ 415.061007][ T8787] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 415.111230][ T8787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.216033][ T8803] loop4: detected capacity change from 0 to 2048 [ 416.786594][ T8816] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.4'. [ 417.412285][ T8821] 9pnet_fd: Insufficient options for proto=fd [ 417.506408][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 417.506436][ T29] audit: type=1326 audit(1718733042.006:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dae47cf29 code=0x0 [ 417.803837][ T8831] veth1_macvtap: left allmulticast mode [ 417.810686][ T8831] veth1_macvtap: left promiscuous mode [ 417.816265][ T8831] macsec0: left allmulticast mode [ 417.855302][ T8831] veth1_macvtap: entered promiscuous mode [ 417.861423][ T8831] macsec0: entered allmulticast mode [ 417.866841][ T8831] veth1_macvtap: entered allmulticast mode [ 418.975001][ T8840] loop4: detected capacity change from 0 to 2048 [ 419.106826][ T8840] Dev loop4: RDB in block 2 has bad checksum [ 419.587419][ T8845] loop2: detected capacity change from 0 to 2048 [ 419.666322][ T8845] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 419.740551][ T8845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.051252][ T8858] loop4: detected capacity change from 0 to 32768 [ 424.187408][ T8858] read_mapping_page failed! [ 424.192502][ T8858] jfs_mount: Failed to read AGGREGATE_I [ 424.198406][ T8858] Mount JFS Failure: -5 [ 424.202570][ T8858] jfs_mount failed w/return code = -5 [ 424.379434][ T8861] loop1: detected capacity change from 0 to 2048 [ 424.403201][ T8862] process 'syz-executor.0' launched './file0' with NULL argv: empty string added [ 425.280004][ T8877] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.334889][ T8877] 0·: renamed from hsr0 (while UP) [ 425.513922][ T8877] 0·: entered allmulticast mode [ 425.550657][ T8877] hsr_slave_0: entered allmulticast mode [ 425.556429][ T8877] hsr_slave_1: entered allmulticast mode [ 425.637693][ T8877] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 426.202322][ T29] audit: type=1804 audit(1718733050.706:529): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1704149241/syzkaller.yUKLTV/253/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 426.282679][ T8899] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 426.491681][ T8904] loop3: detected capacity change from 0 to 2048 [ 426.799674][ T8901] loop2: detected capacity change from 0 to 40427 [ 426.812757][ T8901] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 426.823241][ T8901] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 426.907123][ T8901] F2FS-fs (loop2): Found nat_bits in checkpoint [ 426.908971][ T8899] team0: Port device netdevsim0 added [ 426.991863][ T8901] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 426.999936][ T8901] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 427.071105][ T29] audit: type=1400 audit(1718733051.566:530): avc: denied { wake_alarm } for pid=8914 comm="syz-executor.3" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 427.711122][ T29] audit: type=1400 audit(1718733052.156:531): avc: denied { connect } for pid=8919 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 428.477652][ T29] audit: type=1400 audit(1718733052.166:532): avc: denied { write } for pid=8919 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 428.701160][ T8926] loop3: detected capacity change from 0 to 2048 [ 428.816943][ T8926] loop3: p1 p3 < > p4 < p5 > [ 428.827685][ T8926] loop3: partition table partially beyond EOD, truncated [ 428.845592][ T8926] loop3: p1 size 33024 extends beyond EOD, truncated [ 428.882238][ T8926] loop3: p3 start 4284289 is beyond EOD, truncated [ 428.931156][ T8926] loop3: p5 size 33024 extends beyond EOD, truncated [ 428.935873][ T8934] loop0: detected capacity change from 0 to 8 [ 429.507458][ T8937] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 429.576177][ T8937] 0·: renamed from hsr0 (while UP) [ 429.635149][ T8937] 0·: entered allmulticast mode [ 429.679836][ T8937] hsr_slave_0: entered allmulticast mode [ 429.743588][ T8937] hsr_slave_1: entered allmulticast mode [ 429.767809][ T8937] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 429.784139][ T29] audit: type=1804 audit(1718733054.286:533): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1704149241/syzkaller.yUKLTV/255/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 430.268754][ T8943] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 431.148132][ T29] audit: type=1400 audit(1718733055.376:534): avc: denied { nlmsg_write } for pid=8951 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 431.833075][ T5110] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 431.851872][ T5110] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 431.892170][ T5110] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 432.455404][ T8984] overlay: Bad value for 'lowerdir' [ 433.156804][ T8986] loop4: detected capacity change from 0 to 32768 [ 433.382191][ C1] sd 0:0:1:0: [sda] tag#3567 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 433.392880][ C1] sd 0:0:1:0: [sda] tag#3567 CDB: Write(6) 0a 1e 03 88 61 60 [ 433.640884][ T8986] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 433.654851][ T8986] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 433.728571][ T8986] bcachefs (loop4): alloc_read... done [ 433.734286][ T8986] bcachefs (loop4): stripes_read... done [ 433.740186][ T8986] bcachefs (loop4): snapshots_read... done [ 433.752290][ T8986] bcachefs (loop4): journal_replay... done [ 433.758319][ T8986] bcachefs (loop4): resume_logged_ops... done [ 433.764658][ T8986] bcachefs (loop4): going read-write [ 433.780932][ T8986] bcachefs (loop4): done starting filesystem [ 434.004988][ T9003] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 434.005268][ T9003] 0·: renamed from hsr0 (while UP) [ 434.439970][ T9003] 0·: entered allmulticast mode [ 434.524967][ T9003] hsr_slave_0: entered allmulticast mode [ 434.531055][ T5115] bcachefs (loop4): shutting down [ 434.536141][ T5115] bcachefs (loop4): going read-only [ 434.538419][ T9003] hsr_slave_1: entered allmulticast mode [ 434.547776][ T9003] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 434.577489][ T5115] bcachefs (loop4): finished waiting for writes to stop [ 434.606583][ T5115] bcachefs (loop4): flushing journal and stopping allocators, journal seq 8 [ 434.616400][ T5115] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 8 [ 434.654221][ T5115] bcachefs (loop4): shutdown complete, journal seq 9 [ 434.664088][ T5115] bcachefs (loop4): marking filesystem clean [ 435.570039][ T5115] bcachefs (loop4): shutdown complete [ 436.413622][ T9034] kvm: emulating exchange as write [ 438.192376][ T9050] loop0: detected capacity change from 0 to 32768 [ 438.495487][ T9050] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 438.509506][ T9050] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 438.604855][ T9050] bcachefs (loop0): alloc_read... done [ 438.610615][ T9050] bcachefs (loop0): stripes_read... done [ 438.616391][ T9050] bcachefs (loop0): snapshots_read... done [ 438.628742][ T9050] bcachefs (loop0): journal_replay... done [ 438.634709][ T9050] bcachefs (loop0): resume_logged_ops... done [ 438.641307][ T9050] bcachefs (loop0): going read-write [ 438.670323][ T9050] bcachefs (loop0): done starting filesystem [ 439.480523][ T5114] bcachefs (loop0): shutting down [ 439.485633][ T5114] bcachefs (loop0): going read-only [ 439.498115][ T5114] bcachefs (loop0): finished waiting for writes to stop [ 439.508420][ T5114] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 439.517378][ T5114] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8 [ 439.579252][ T5114] bcachefs (loop0): shutdown complete, journal seq 9 [ 439.587256][ T5114] bcachefs (loop0): marking filesystem clean [ 439.870109][ T9070] veth1_macvtap: left allmulticast mode [ 439.876020][ T9070] veth1_macvtap: left promiscuous mode [ 439.881815][ T9070] macsec0: left allmulticast mode [ 439.910181][ T9071] veth1_macvtap: entered promiscuous mode [ 439.916151][ T9071] macsec0: entered allmulticast mode [ 439.921950][ T9071] veth1_macvtap: entered allmulticast mode [ 440.511365][ T5114] bcachefs (loop0): shutdown complete [ 442.536153][ T9101] loop1: detected capacity change from 0 to 32768 [ 442.712118][ T9101] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 442.731984][ T9101] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 442.811284][ T9101] bcachefs (loop1): alloc_read... done [ 442.816994][ T9101] bcachefs (loop1): stripes_read... done [ 442.822834][ T9101] bcachefs (loop1): snapshots_read... done [ 442.833398][ T9101] bcachefs (loop1): journal_replay... done [ 442.840509][ T9101] bcachefs (loop1): resume_logged_ops... done [ 442.846817][ T9101] bcachefs (loop1): going read-write [ 442.898317][ T9101] bcachefs (loop1): done starting filesystem [ 443.682841][ T5107] bcachefs (loop1): shutting down [ 443.716008][ T5107] bcachefs (loop1): going read-only [ 443.728008][ T5107] bcachefs (loop1): finished waiting for writes to stop [ 443.767402][ T5107] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 443.790679][ T5107] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8 [ 443.874193][ T5107] bcachefs (loop1): shutdown complete, journal seq 9 [ 444.797270][ T5107] bcachefs (loop1): marking filesystem clean [ 444.974398][ T5107] bcachefs (loop1): shutdown complete [ 445.732034][ T9128] loop0: detected capacity change from 0 to 8 [ 445.808648][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.815111][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.141220][ T9130] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 446.829608][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.232055][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 447.252586][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 447.266573][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 447.275764][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 447.288014][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 447.295682][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.343747][ T29] audit: type=1400 audit(1718733071.846:535): avc: denied { mounton } for pid=9137 comm="syz-executor.3" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 447.621465][ T2845] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.865031][ T29] audit: type=1804 audit(1718733072.356:536): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir940413438/syzkaller.FWMoZr/231/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 447.954332][ T2845] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.997727][ T29] audit: type=1400 audit(1718733072.496:537): avc: denied { write } for pid=9147 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 448.296384][ T2845] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.606665][ T2845] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.136246][ T9161] overlayfs: overlapping lowerdir path [ 449.319348][ T5121] Bluetooth: hci2: command tx timeout [ 449.500449][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 451.049165][ T9172] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 451.505301][ T5121] Bluetooth: hci2: command tx timeout [ 451.680839][ T2845] bridge_slave_1: left allmulticast mode [ 451.928139][ T2845] bridge_slave_1: left promiscuous mode [ 451.991719][ T2845] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.130135][ T2845] bridge_slave_0: left allmulticast mode [ 452.176746][ T2845] bridge_slave_0: left promiscuous mode [ 452.216191][ T2845] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.573015][ T9185] loop1: detected capacity change from 0 to 32768 [ 453.618164][ T5109] Bluetooth: hci2: command tx timeout [ 454.597053][ T9196] loop4: detected capacity change from 0 to 8 [ 454.651943][ T9198] overlayfs: overlapping lowerdir path [ 454.981047][ T9202] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 455.436921][ T2845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.471984][ T2845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.489469][ T2845] bond0 (unregistering): Released all slaves [ 455.590420][ T9205] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 455.648206][ T5109] Bluetooth: hci2: command tx timeout [ 456.192803][ T9137] chnl_net:caif_netlink_parms(): no params data found [ 456.217438][ T2845] tipc: Left network mode [ 457.596519][ T9215] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 459.671222][ T9137] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.694323][ T9137] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.718700][ T9137] bridge_slave_0: entered allmulticast mode [ 459.737730][ T9137] bridge_slave_0: entered promiscuous mode [ 459.929519][ T9240] overlayfs: overlapping lowerdir path [ 460.995291][ T9137] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.028518][ T9137] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.046151][ T9137] bridge_slave_1: entered allmulticast mode [ 461.073908][ T9137] bridge_slave_1: entered promiscuous mode [ 462.146196][ T9257] loop0: detected capacity change from 0 to 32768 [ 462.944394][ T9137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.048530][ T2845] hsr_slave_0: left promiscuous mode [ 463.948290][ T2845] hsr_slave_1: left promiscuous mode [ 463.991193][ T9270] loop0: detected capacity change from 0 to 8 [ 464.086037][ T2845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.111161][ T2845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.152591][ T2845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.184443][ T2845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.280019][ T2845] veth1_macvtap: left allmulticast mode [ 464.285828][ T2845] veth1_macvtap: left promiscuous mode [ 464.293237][ T2845] veth0_macvtap: left promiscuous mode [ 464.309250][ T2845] veth1_vlan: left promiscuous mode [ 464.318784][ T2845] veth0_vlan: left promiscuous mode [ 465.027116][ T2845] pim6reg (unregistering): left allmulticast mode [ 465.805752][ T9295] overlayfs: overlapping lowerdir path [ 466.774951][ T9304] loop0: detected capacity change from 0 to 2048 [ 466.839965][ T9304] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 466.877598][ T9304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.155604][ T2845] team0 (unregistering): Port device team_slave_1 removed [ 468.377157][ T2845] team0 (unregistering): Port device team_slave_0 removed [ 469.050082][ T29] audit: type=1400 audit(1718733093.556:538): avc: denied { create } for pid=9321 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 469.144546][ T29] audit: type=1400 audit(1718733093.646:539): avc: denied { connect } for pid=9321 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 469.268024][ T29] audit: type=1400 audit(1718733093.756:540): avc: denied { create } for pid=9321 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 470.723010][ T9137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.112617][ T9137] team0: Port device team_slave_0 added [ 471.146089][ T9137] team0: Port device team_slave_1 added [ 471.224964][ T9336] loop1: detected capacity change from 0 to 8 [ 471.487673][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.495240][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.524575][ T9137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.642944][ T9137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.668286][ T9137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.928230][ T9137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.087134][ T29] audit: type=1400 audit(1718733096.576:541): avc: denied { setattr } for pid=9337 comm="syz-executor.2" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 472.411937][ T9137] hsr_slave_0: entered promiscuous mode [ 472.466540][ T9137] hsr_slave_1: entered promiscuous mode [ 473.828297][ T29] audit: type=1800 audit(1718733098.326:542): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1950 res=0 errno=0 [ 474.801473][ T9365] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 475.353508][ T9374] cgroup: Need name or subsystem set [ 475.822643][ T9137] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 476.097638][ T9137] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 476.272951][ T9137] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 476.332587][ T9137] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 476.897217][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.966054][ T9137] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.047380][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.054769][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.075359][ T29] audit: type=1400 audit(1718733101.556:543): avc: denied { ioctl } for pid=9395 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 477.150805][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.158155][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.217391][ T9401] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 477.916228][ T9137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.131887][ T9137] veth0_vlan: entered promiscuous mode [ 478.175822][ T9137] veth1_vlan: entered promiscuous mode [ 478.327825][ T9137] veth0_macvtap: entered promiscuous mode [ 478.353748][ T9137] veth1_macvtap: entered promiscuous mode [ 478.422395][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.461043][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.494064][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.518871][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.538112][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.560575][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.610380][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.691069][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.725337][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.748167][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.778790][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.835408][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.886987][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.947845][ T9137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.998037][ T9137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.057421][ T9430] loop4: detected capacity change from 0 to 8 [ 479.070751][ T9137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.370519][ T9137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.483903][ T9137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.799138][ T9137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.838115][ T9137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.502257][ T2845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.529361][ T2845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.673967][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.701309][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.764306][ T9455] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 483.454337][ T9484] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 483.783882][ T9482] loop4: detected capacity change from 0 to 8 [ 487.914920][ T9556] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 487.928310][ T9556] fscrypt (sda1, inode 1967): Unsupported encryption flags (0x10) [ 488.563186][ T9560] tipc: Started in network mode [ 488.604024][ T9560] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 488.658096][ T9560] tipc: Enabling of bearer rejected, failed to enable media [ 488.849596][ T29] audit: type=1326 audit(1718733113.356:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 488.878104][ T9566] loop3: detected capacity change from 0 to 164 [ 488.925482][ T29] audit: type=1326 audit(1718733113.356:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 488.984899][ T29] audit: type=1326 audit(1718733113.366:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 489.019503][ T9565] loop1: detected capacity change from 0 to 1024 [ 489.050308][ T29] audit: type=1326 audit(1718733113.556:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 489.089795][ T29] audit: type=1326 audit(1718733113.556:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 489.189471][ T9565] hfsplus: bad catalog file entry [ 489.205178][ T9565] hfsplus: failed to load root directory [ 489.271092][ T29] audit: type=1326 audit(1718733113.776:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 489.396193][ T29] audit: type=1326 audit(1718733113.776:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 489.433404][ T29] audit: type=1326 audit(1718733113.776:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 489.511805][ T29] audit: type=1326 audit(1718733113.776:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 489.556527][ T29] audit: type=1326 audit(1718733113.816:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430b47cf29 code=0x7ffc0000 [ 489.698097][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.711240][ T9565] loop1: detected capacity change from 0 to 2048 [ 491.068214][ T5173] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 491.259120][ T5173] usb 2-1: Using ep0 maxpacket: 32 [ 491.281529][ T5173] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.317514][ T5173] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.334309][ T5173] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 491.345773][ T5173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.371281][ T5173] hub 2-1:4.0: USB hub found [ 491.573373][ T5173] hub 2-1:4.0: 2 ports detected [ 493.135696][ T5173] hub 2-1:4.0: activate --> -90 [ 493.732908][ T9618] loop2: detected capacity change from 0 to 32768 [ 493.755978][ T5173] usb 2-1-port1: cannot reset (err = -71) [ 493.757587][ T25] usb 2-1: USB disconnect, device number 8 [ 493.771771][ T5173] usb 2-1-port1: attempt power cycle [ 493.782651][ T9618] btrfs: Deprecated parameter 'usebackuproot' [ 493.798708][ T9618] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 493.824647][ T9618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9618) [ 493.869505][ T9618] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 493.887000][ T9618] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 494.036681][ T9618] BTRFS info (device loop2): rebuilding free space tree [ 494.150206][ T9618] BTRFS info (device loop2): disabling free space tree [ 494.183206][ T9618] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 494.207961][ T9618] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 494.292413][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 494.292438][ T29] audit: type=1804 audit(1718733118.796:574): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3161960614/syzkaller.3Inomy/254/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 494.511173][ T5110] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 497.774234][ T9709] bridge0: entered allmulticast mode [ 497.805739][ T9709] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 497.837619][ T9709] erspan0: left allmulticast mode [ 497.857354][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 497.868069][ T9709] erspan0: left promiscuous mode [ 497.868615][ T9709] bridge0: port 3(erspan0) entered disabled state [ 497.897087][ T9711] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 497.936190][ T9709] bridge_slave_1: left allmulticast mode [ 497.958569][ T9709] bridge_slave_1: left promiscuous mode [ 497.964737][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.999083][ T9709] bridge_slave_0: left allmulticast mode [ 498.007934][ T9709] bridge_slave_0: left promiscuous mode [ 498.025597][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.117353][ T9718] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 498.139648][ T9718] fscrypt (sda1, inode 1966): Unsupported encryption flags (0x10) [ 498.158930][ T9709] bridge0 (unregistering): left allmulticast mode [ 498.208597][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 498.216527][ T5158] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 498.333505][ T9688] loop0: detected capacity change from 0 to 32768 [ 498.349464][ T9688] btrfs: Deprecated parameter 'usebackuproot' [ 498.366254][ T9688] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 498.377123][ T9688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9688) [ 498.403643][ T9688] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 498.413232][ T9720] tipc: Enabling of bearer rejected, failed to enable media [ 498.420979][ T9688] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 498.442777][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 498.451158][ T5158] usb 5-1: Using ep0 maxpacket: 8 [ 498.467638][ T5158] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.480861][ T5158] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.490690][ T45] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 498.499437][ T45] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 498.514736][ T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.530980][ T5158] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.543668][ T5158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.552552][ T5158] usb 5-1: Product: syz [ 498.556938][ T5158] usb 5-1: Manufacturer: syz [ 498.568761][ T5158] usb 5-1: SerialNumber: syz [ 498.575440][ T45] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 498.586736][ T45] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 498.608321][ T45] usb 2-1: Product: syz [ 498.612620][ T45] usb 2-1: Manufacturer: syz [ 498.623380][ T45] usb 2-1: SerialNumber: syz [ 498.625820][ T9688] BTRFS info (device loop0): rebuilding free space tree [ 498.641184][ T45] usb 2-1: config 0 descriptor?? [ 498.680637][ T9688] BTRFS info (device loop0): disabling free space tree [ 498.687787][ T9688] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 498.711833][ T9740] loop3: detected capacity change from 0 to 512 [ 498.712703][ T9688] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 498.736467][ T9740] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 498.751724][ T9740] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 498.780203][ T29] audit: type=1804 audit(1718733123.286:575): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3010824018/syzkaller.R0f9re/291/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 498.785210][ T9740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.900607][ T9740] EXT4-fs error (device loop3): ext4_find_dest_de:2110: inode #2: block 13: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 498.923742][ T5158] usb 5-1: 0:2 : does not exist [ 498.997445][ T29] audit: type=1400 audit(1718733123.496:576): avc: denied { setopt } for pid=9739 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 499.000278][ T5158] usb 5-1: USB disconnect, device number 12 [ 499.084361][ T9743] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 499.099072][ T5114] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 499.141474][ T9743] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 499.511915][ T5173] usb 2-1: USB disconnect, device number 13 [ 499.781847][ T9137] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.598359][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 500.706068][ T29] audit: type=1326 audit(1718733125.206:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dae47cf29 code=0x0 [ 501.221431][ T9773] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 501.348674][ T9773] fscrypt (sda1, inode 1966): Unsupported encryption flags (0x10) [ 501.596322][ T9783] tipc: Started in network mode [ 501.606936][ T9783] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 501.607352][ T9782] loop2: detected capacity change from 0 to 128 [ 501.622920][ T9783] tipc: Enabling of bearer rejected, failed to enable media [ 501.697982][ T29] audit: type=1400 audit(1718733126.196:578): avc: denied { create } for pid=9781 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 501.754693][ T9791] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 501.768152][ T9782] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 501.788264][ T29] audit: type=1400 audit(1718733126.236:579): avc: denied { getopt } for pid=9781 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 501.831216][ T9782] x_tables: ip_tables: osf match: only valid for protocol 6 [ 501.871263][ T29] audit: type=1400 audit(1718733126.236:580): avc: denied { ioctl } for pid=9781 comm="syz-executor.2" path="socket:[23674]" dev="sockfs" ino=23674 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 501.896961][ T9782] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 501.898142][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 502.098031][ T784] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 502.118609][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 502.127608][ T8] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 502.150144][ T8] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 502.167965][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 502.191219][ T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 502.210824][ T8] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 502.231543][ T8] usb 1-1: Product: syz [ 502.235795][ T8] usb 1-1: Manufacturer: syz [ 502.257944][ T8] usb 1-1: SerialNumber: syz [ 502.266663][ T8] usb 1-1: config 0 descriptor?? [ 502.308050][ T784] usb 5-1: Using ep0 maxpacket: 8 [ 502.318425][ T784] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.351324][ T784] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.386673][ T784] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.412343][ T784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.441283][ T784] usb 5-1: Product: syz [ 502.465590][ T784] usb 5-1: Manufacturer: syz [ 502.492081][ T784] usb 5-1: SerialNumber: syz [ 502.927458][ T784] usb 5-1: 0:2 : does not exist [ 503.041152][ T784] usb 5-1: USB disconnect, device number 13 [ 503.117250][ T5173] usb 1-1: USB disconnect, device number 10 [ 503.176638][ T9809] loop1: detected capacity change from 0 to 2048 [ 503.233250][ T9809] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 503.246062][ T9812] fuse: Bad value for 'fd' [ 503.263047][ T9809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 503.445572][ T9808] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 503.731646][ T29] audit: type=1400 audit(1718733128.236:581): avc: denied { create } for pid=9822 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 503.819640][ T9821] loop3: detected capacity change from 0 to 8 [ 505.185387][ T9836] loop4: detected capacity change from 0 to 128 [ 505.365736][ T9836] x_tables: ip_tables: osf match: only valid for protocol 6 [ 505.388300][ T9839] mmap: syz-executor.2 (9839) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 505.400685][ T9836] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 505.847169][ T9845] syzkaller0: entered promiscuous mode [ 505.856152][ T9845] syzkaller0: entered allmulticast mode [ 506.765493][ T9854] loop1: detected capacity change from 0 to 8 [ 507.247400][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.259772][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.046984][ T9875] loop2: detected capacity change from 0 to 2048 [ 510.140213][ T9875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.164229][ T9875] ext4 filesystem being mounted at /root/syzkaller-testdir3161960614/syzkaller.3Inomy/269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.510593][ T9875] fs-verity: sha512 using implementation "sha512-avx2" [ 511.303505][ T9885] loop0: detected capacity change from 0 to 128 [ 511.418386][ T9886] x_tables: ip_tables: osf match: only valid for protocol 6 [ 511.428466][ T9886] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 512.848424][ T9882] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.014516][ T5110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.370511][ T9888] loop4: detected capacity change from 0 to 40427 [ 513.404621][ T9888] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 513.413540][ T9888] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 513.434941][ T9888] F2FS-fs (loop4): Found nat_bits in checkpoint [ 513.507985][ T9888] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 513.516371][ T9888] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 514.856159][ T9894] loop0: detected capacity change from 0 to 4096 [ 515.917995][ T29] audit: type=1400 audit(1718733140.416:582): avc: denied { append } for pid=9892 comm="syz-executor.0" path=2F726F6F742F73797A6B616C6C65722D74657374646972333031303832343031382F73797A6B616C6C65722E5230663972652F3330342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F6370757365742E6566666563746976655F63707573 dev="loop0" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 516.068038][ T5158] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 516.287993][ T5158] usb 2-1: Using ep0 maxpacket: 32 [ 516.300682][ T5158] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 516.328657][ T5158] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 516.363814][ T5158] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 516.387927][ T5158] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 516.396204][ T5158] usb 2-1: Product: syz [ 516.407966][ T5158] usb 2-1: Manufacturer: syz [ 516.412759][ T5158] usb 2-1: SerialNumber: syz [ 516.454454][ T5158] usb 2-1: config 0 descriptor?? [ 516.630440][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.690962][ T5121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 516.693883][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.726236][ T5121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 516.728406][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.741787][ T5121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 516.760994][ T5121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 516.772482][ T5121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 516.782129][ T5121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 516.782192][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.828020][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.930103][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.050920][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.084684][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.121304][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.181991][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.336303][ T5158] usb 2-1: USB disconnect, device number 14 [ 517.713801][ T11] bridge_slave_1: left allmulticast mode [ 517.738188][ T11] bridge_slave_1: left promiscuous mode [ 517.754650][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.800299][ T11] bridge_slave_0: left allmulticast mode [ 517.806294][ T11] bridge_slave_0: left promiscuous mode [ 517.828967][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.986790][ T9931] loop0: detected capacity change from 0 to 128 [ 518.108717][ T9934] x_tables: ip_tables: osf match: only valid for protocol 6 [ 518.121948][ T9934] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 518.822742][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.838483][ T5109] Bluetooth: hci1: command tx timeout [ 518.856414][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.876023][ T11] bond0 (unregistering): Released all slaves [ 519.118693][ T11] tipc: Left network mode [ 519.253064][ T11] IPVS: stopping backup sync thread 8744 ... [ 519.359789][ T9921] chnl_net:caif_netlink_parms(): no params data found [ 519.836229][ T9951] loop4: detected capacity change from 0 to 40427 [ 519.888441][ T9951] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 519.896348][ T9951] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 520.015684][ T9951] F2FS-fs (loop4): Found nat_bits in checkpoint [ 520.130360][ T9951] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 520.137585][ T9951] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 520.920211][ T5109] Bluetooth: hci1: command tx timeout [ 522.367319][ T11] hsr_slave_0: left promiscuous mode [ 522.396911][ T11] hsr_slave_1: left promiscuous mode [ 522.433343][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.462993][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.502771][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.550031][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.694764][ T11] veth1_macvtap: left allmulticast mode [ 522.746055][ T11] veth1_macvtap: left promiscuous mode [ 522.758025][ T11] veth0_macvtap: left promiscuous mode [ 522.763868][ T11] veth1_vlan: left promiscuous mode [ 522.819066][ T11] veth0_vlan: left promiscuous mode [ 523.164159][ T5109] Bluetooth: hci1: command tx timeout [ 523.617354][ T11] pim6reg (unregistering): left allmulticast mode [ 525.062316][ T11] team0 (unregistering): Port device team_slave_1 removed [ 525.192665][ T11] team0 (unregistering): Port device team_slave_0 removed [ 525.246014][ T5109] Bluetooth: hci1: command tx timeout [ 526.477789][T10014] loop1: detected capacity change from 0 to 512 [ 526.540147][T10014] EXT4-fs (loop1): 1 truncate cleaned up [ 526.547404][T10014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.695265][ T9921] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.706623][ T9921] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.726493][ T9921] bridge_slave_0: entered allmulticast mode [ 527.753389][ T9921] bridge_slave_0: entered promiscuous mode [ 527.781003][ T9921] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.781287][ T5107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.816329][ T9921] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.828225][ T9921] bridge_slave_1: entered allmulticast mode [ 527.836594][ T9921] bridge_slave_1: entered promiscuous mode [ 528.071348][ T9921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.103618][ T9921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.314125][ T9921] team0: Port device team_slave_0 added [ 528.345802][ T9921] team0: Port device team_slave_1 added [ 528.432006][ T2530] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 528.479179][ T9921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.496449][ T9921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.534665][ T9921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.566638][ T9921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.581979][ T9921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.630558][ T9921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.649936][ T2530] usb 5-1: Using ep0 maxpacket: 32 [ 528.661332][ T2530] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.676690][ T2530] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.686877][ T2530] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 528.696083][ T2530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.712141][ T2530] hub 5-1:4.0: USB hub found [ 528.863716][ T9921] hsr_slave_0: entered promiscuous mode [ 528.887295][ T9921] hsr_slave_1: entered promiscuous mode [ 528.913148][ T9921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.928090][ T2530] hub 5-1:4.0: 2 ports detected [ 528.933153][ T9921] Cannot create hsr debugfs directory [ 530.101390][ T29] audit: type=1400 audit(1718733154.606:583): avc: denied { getopt } for pid=10043 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 530.197452][ T2530] hub 5-1:4.0: activate --> -90 [ 530.602705][ T2530] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 530.626008][ T2530] usb 5-1-port1: cannot reset (err = -71) [ 530.633585][ T9715] usb 5-1: USB disconnect, device number 14 [ 530.642665][ T2530] usb 5-1-port1: attempt power cycle [ 530.911201][ T9921] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 530.937560][ T9921] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 530.961406][ T9921] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 530.985894][ T9921] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.417630][ T9921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.545013][ T9921] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.581173][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.590273][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.620651][ T2530] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.627962][ T2530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.040037][T10074] ALSA: mixer_oss: invalid index -1404626105 [ 533.145303][ T9921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.435872][ T9921] veth0_vlan: entered promiscuous mode [ 533.463399][ T9921] veth1_vlan: entered promiscuous mode [ 533.578695][ T2530] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 533.596566][ T9921] veth0_macvtap: entered promiscuous mode [ 533.633058][ T9921] veth1_macvtap: entered promiscuous mode [ 533.709227][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.731085][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.751319][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.775270][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.778026][ T2530] usb 2-1: Using ep0 maxpacket: 32 [ 533.811435][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.820593][ T2530] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.847933][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.852011][ T2530] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.880913][ T9921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.890587][ T2530] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 533.910063][ T2530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.932567][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.950291][ T2530] hub 2-1:4.0: USB hub found [ 533.974146][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.991438][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.022411][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.055446][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.090741][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.119347][ T9921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.151088][ T9921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.168232][ T2530] hub 2-1:4.0: 2 ports detected [ 534.184342][ T9921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.246643][ T9921] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.276162][ T9921] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.318186][ T9921] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.326984][ T9921] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.687648][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 534.702612][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 534.715401][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 534.732084][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 534.745000][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 534.757478][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 534.806282][ T947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.857581][ T947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.032602][ T947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.057918][ T947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.394889][ T45] hub 2-1:4.0: activate --> -90 [ 535.800218][ T45] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 535.807586][ T2530] usb 2-1: USB disconnect, device number 15 [ 535.819780][ T45] usb 2-1-port1: attempt power cycle [ 535.877529][T10097] loop4: detected capacity change from 0 to 4096 [ 535.913532][T10090] chnl_net:caif_netlink_parms(): no params data found [ 536.267628][T10102] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 536.276687][T10102] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 536.287242][T10102] team0: entered promiscuous mode [ 536.295036][T10102] team_slave_0: entered promiscuous mode [ 536.311896][T10102] team_slave_1: entered promiscuous mode [ 536.344906][T10090] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.375346][T10090] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.396749][T10090] bridge_slave_0: entered allmulticast mode [ 536.406701][T10090] bridge_slave_0: entered promiscuous mode [ 536.424713][T10090] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.432199][T10090] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.446655][T10090] bridge_slave_1: entered allmulticast mode [ 536.473916][T10090] bridge_slave_1: entered promiscuous mode [ 536.515698][ T29] audit: type=1400 audit(1718733161.016:584): avc: denied { ioctl } for pid=10096 comm="syz-executor.4" path=2F726F6F742F73797A6B616C6C65722D74657374646972313730343134393234312F73797A6B616C6C65722E79554B4C54562F3331382F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F6370757365742E6566666563746976655F63707573 dev="loop4" ino=33 ioctlcmd=0xaa01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 536.838193][ T5121] Bluetooth: hci2: command tx timeout [ 536.895550][T10090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.915532][T10090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.052000][T10090] team0: Port device team_slave_0 added [ 537.068185][T10090] team0: Port device team_slave_1 added [ 537.166989][T10124] ALSA: mixer_oss: invalid index -1404626105 [ 537.177954][ T5173] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 537.422087][ T5173] usb 1-1: Using ep0 maxpacket: 32 [ 537.490715][ T5173] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 537.551003][T10090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.622028][ T5173] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 537.637631][T10090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.694544][ T5173] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 537.743292][ T5173] usb 1-1: Product: syz [ 537.770193][ T5173] usb 1-1: Manufacturer: syz [ 537.796846][ T5173] usb 1-1: SerialNumber: syz [ 537.805024][T10090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.872080][ T5173] usb 1-1: config 0 descriptor?? [ 537.909440][T10090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.919017][T10118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 537.944679][T10090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.057952][T10090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.151912][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.163935][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.231947][T10090] hsr_slave_0: entered promiscuous mode [ 538.247622][T10090] hsr_slave_1: entered promiscuous mode [ 538.254999][T10090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.272795][T10090] Cannot create hsr debugfs directory [ 538.389858][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.418766][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.510898][T10139] loop2: detected capacity change from 0 to 8 [ 538.858233][ T784] usb 1-1: USB disconnect, device number 11 [ 538.926848][ T5121] Bluetooth: hci2: command tx timeout [ 539.806216][T10090] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.142055][T10090] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.268507][ T45] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 540.507969][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 540.542765][T10090] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.572050][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.624500][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.680976][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 540.715152][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.764966][T10149] loop2: detected capacity change from 0 to 40427 [ 540.774438][T10149] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 540.782320][T10149] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 540.806293][ T45] hub 1-1:4.0: USB hub found [ 540.826771][T10149] F2FS-fs (loop2): Found nat_bits in checkpoint [ 540.960385][T10149] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 540.967580][T10149] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 540.998761][ T5121] Bluetooth: hci2: command tx timeout [ 541.025044][ T45] hub 1-1:4.0: 2 ports detected [ 541.039460][T10090] bond0: (slave netdevsim0): Releasing backup interface [ 541.108680][T10090] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.041568][T10090] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 542.073141][T10090] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 542.136324][T10090] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 542.190734][T10090] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 542.336348][ T45] hub 1-1:4.0: activate --> -90 [ 542.738626][ T45] hub 1-1:4.0: hub_ext_port_status failed (err = -71) [ 542.756231][ T5185] usb 1-1: USB disconnect, device number 12 [ 542.760851][ T45] usb 1-1-port1: attempt power cycle [ 542.806315][T10090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.879334][T10090] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.919001][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.926309][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.971123][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.978442][ T5184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.083101][ T5121] Bluetooth: hci2: command tx timeout [ 543.995849][T10090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 544.068058][T10090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 544.478796][T10173] veth1_macvtap: left allmulticast mode [ 544.484534][T10173] veth1_macvtap: left promiscuous mode [ 544.493046][T10173] macsec0: left allmulticast mode [ 544.540131][T10173] veth1_macvtap: entered promiscuous mode [ 544.545963][T10173] macsec0: entered allmulticast mode [ 544.551669][T10173] veth1_macvtap: entered allmulticast mode [ 545.756674][T10187] loop1: detected capacity change from 0 to 17 [ 545.798102][ T29] audit: type=1400 audit(1718733170.286:585): avc: denied { remount } for pid=10185 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 545.843471][ T29] audit: type=1400 audit(1718733170.296:586): avc: denied { read } for pid=10185 comm="syz-executor.1" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 545.920015][ T29] audit: type=1400 audit(1718733170.296:587): avc: denied { open } for pid=10185 comm="syz-executor.1" path="/root/syzkaller-testdir940413438/syzkaller.FWMoZr/305/file0" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 546.028148][ T29] audit: type=1400 audit(1718733170.296:588): avc: denied { search } for pid=10185 comm="syz-executor.1" name="/" dev="configfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 546.048205][ T5158] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 546.065359][T10090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.122310][T10195] loop2: detected capacity change from 0 to 8 [ 546.268148][ T5158] usb 1-1: Using ep0 maxpacket: 32 [ 546.276669][ T5158] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 546.342013][ T5158] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 546.371630][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 546.391666][ T5158] usb 1-1: Product: syz [ 546.401690][ T5158] usb 1-1: Manufacturer: syz [ 546.414976][ T5158] usb 1-1: SerialNumber: syz [ 546.424919][T10090] veth0_vlan: entered promiscuous mode [ 546.461223][ T5158] usb 1-1: config 0 descriptor?? [ 546.479006][T10186] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 546.527059][T10090] veth1_vlan: entered promiscuous mode [ 546.720287][T10186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.751418][T10090] veth0_macvtap: entered promiscuous mode [ 546.765740][T10186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.849687][T10090] veth1_macvtap: entered promiscuous mode [ 546.923610][T10090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.954711][T10090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.005618][T10090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.060577][T10186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.070101][T10090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.143225][T10186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.154217][T10090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.218705][T10090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.272684][T10090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.320321][T10090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.350462][T10090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.418780][ T8] usb 1-1: USB disconnect, device number 17 [ 547.429547][T10090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.492852][T10090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.534013][T10090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.598273][T10090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.621259][T10090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.668245][T10090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.708273][T10090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.748085][T10090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.771309][T10090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.786170][T10090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.804647][T10090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.872438][T10090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.892729][T10090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.921337][T10090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.943290][T10090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.116038][T10201] loop1: detected capacity change from 0 to 32768 [ 548.161004][T10201] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10201) [ 548.183781][T10201] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 548.231553][T10201] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 548.281832][T10201] BTRFS info (device loop1): using free-space-tree [ 548.514798][ T2845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.560288][ T2845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.794424][T10201] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 548.811128][ T2845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.845143][ T2845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.148575][ T5107] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 549.242500][T10222] 9pnet_fd: Insufficient options for proto=fd [ 550.751308][T10230] veth1_macvtap: left promiscuous mode [ 550.767046][T10231] veth1_macvtap: entered promiscuous mode [ 550.773034][T10231] macsec0: entered allmulticast mode [ 550.778479][T10231] veth1_macvtap: entered allmulticast mode [ 551.773743][T10242] loop3: detected capacity change from 0 to 512 [ 551.984424][ T45] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 553.661494][T10242] EXT4-fs warning (device loop3): dx_probe:874: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 553.675748][T10242] EXT4-fs warning (device loop3): dx_probe:879: Enable large directory feature to access it [ 553.686137][T10242] EXT4-fs warning (device loop3): dx_probe:964: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 553.712527][T10242] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 553.734773][T10242] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 553.965811][T10242] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 554.536873][T10242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.900868][T10246] loop2: detected capacity change from 0 to 256 [ 554.979014][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 554.999232][ T45] usb 2-1: device descriptor read/all, error -71 [ 555.064323][T10246] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d) [ 555.709335][ T5158] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 556.077944][ T5158] usb 1-1: Using ep0 maxpacket: 32 [ 556.129276][ T5158] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 556.176493][ T5158] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 556.223243][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 556.242003][T10090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.263264][ T5158] usb 1-1: Product: syz [ 556.267566][ T5158] usb 1-1: Manufacturer: syz [ 556.287952][ T5158] usb 1-1: SerialNumber: syz [ 556.310174][ T5158] usb 1-1: config 0 descriptor?? [ 556.329804][T10256] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 556.657523][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.696265][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.831373][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.846346][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.895883][T10268] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 557.241182][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.577160][T10268] fscrypt (sda1, inode 1969): Unsupported encryption flags (0x10) [ 557.617648][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.718303][T10274] loop4: detected capacity change from 0 to 128 [ 557.869199][T10279] veth1_macvtap: left allmulticast mode [ 557.874898][T10279] veth1_macvtap: left promiscuous mode [ 557.881307][T10279] macsec0: left allmulticast mode [ 557.898358][T10280] veth1_macvtap: entered promiscuous mode [ 557.904363][T10280] macsec0: entered allmulticast mode [ 557.909834][T10280] veth1_macvtap: entered allmulticast mode [ 558.769918][T10274] VFS: could not find a valid V7 on loop4. [ 558.800126][ T25] usb 1-1: USB disconnect, device number 18 [ 559.016579][T10284] loop2: detected capacity change from 0 to 2048 [ 559.061342][T10284] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 559.101744][T10284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.220203][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 559.417981][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 559.445326][ T45] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.507049][ T45] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.532970][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 559.545457][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.618576][ T45] hub 4-1:4.0: USB hub found [ 559.817133][ T45] hub 4-1:4.0: 2 ports detected [ 559.991329][T10274] loop4: detected capacity change from 0 to 4096 [ 560.210455][ T29] audit: type=1800 audit(1718733184.706:589): pid=10274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 561.065130][ T45] hub 4-1:4.0: activate --> -90 [ 561.309963][T10315] syz-executor.1[10315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.310215][T10315] syz-executor.1[10315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.472127][ T5158] usb 4-1: USB disconnect, device number 8 [ 561.527807][T10317] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 561.728330][ T45] usb 4-1-port1: config error [ 562.221883][T10323] loop4: detected capacity change from 0 to 4096 [ 563.317130][ T29] audit: type=1400 audit(1718733187.816:590): avc: denied { link } for pid=10320 comm="syz-executor.4" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 564.450166][T10335] loop2: detected capacity change from 0 to 32768 [ 564.482470][T10335] btrfs: Deprecated parameter 'usebackuproot' [ 564.528077][T10335] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 564.551082][T10335] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (10335) [ 564.585518][T10335] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 564.612035][T10335] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 564.641990][T10335] BTRFS info (device loop2): disk space caching is enabled [ 564.717984][ T5158] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 564.802105][ T8166] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 564.839491][T10335] BTRFS error (device loop2): failed to load root extent [ 564.871181][T10335] BTRFS warning (device loop2): try to load backup roots slot 1 [ 564.919396][ T5158] usb 5-1: Using ep0 maxpacket: 32 [ 564.928581][ T5158] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.938255][ T2845] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 564.950012][ T5158] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.978063][ T5158] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 564.995729][T10344] loop0: detected capacity change from 0 to 40427 [ 564.998262][T10335] BTRFS warning (device loop2): couldn't read tree root [ 565.004539][ T5158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.037572][T10335] BTRFS warning (device loop2): try to load backup roots slot 2 [ 565.056168][ T5158] hub 5-1:4.0: USB hub found [ 565.057754][ T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 565.077132][T10335] BTRFS warning (device loop2): couldn't read tree root [ 565.077619][T10344] F2FS-fs (loop0): Found nat_bits in checkpoint [ 565.138160][T10335] BTRFS warning (device loop2): try to load backup roots slot 3 [ 565.263671][T10335] BTRFS info (device loop2): rebuilding free space tree [ 565.271164][ T5158] hub 5-1:4.0: 2 ports detected [ 565.525631][T10335] BTRFS info (device loop2): disabling free space tree [ 565.549211][T10344] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 565.673971][T10335] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 565.812436][T10335] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 566.267946][ T29] audit: type=1400 audit(1718733190.756:591): avc: denied { mounton } for pid=10333 comm="syz-executor.2" path="/root/syzkaller-testdir1338145243/syzkaller.XX04LO/12/file1/file0" dev="loop2" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 566.385961][ T29] audit: type=1400 audit(1718733190.826:592): avc: denied { write } for pid=10333 comm="syz-executor.2" name="file0" dev="loop2" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 566.414099][ T29] audit: type=1400 audit(1718733190.826:593): avc: denied { add_name } for pid=10333 comm="syz-executor.2" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 566.434883][ T29] audit: type=1400 audit(1718733190.866:594): avc: denied { setattr } for pid=10333 comm="syz-executor.2" name="work" dev="loop2" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 566.502350][ T29] audit: type=1400 audit(1718733191.006:595): avc: denied { remove_name } for pid=10333 comm="syz-executor.2" name="#3f" dev="loop2" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 566.559834][ T29] audit: type=1400 audit(1718733191.006:596): avc: denied { rename } for pid=10333 comm="syz-executor.2" name="#3f" dev="loop2" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 566.584673][T10352] loop1: detected capacity change from 0 to 40427 [ 566.599297][T10352] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 566.607694][T10352] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 566.627675][ T29] audit: type=1400 audit(1718733191.126:597): avc: denied { unlink } for pid=10333 comm="syz-executor.2" name="#3f" dev="loop2" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 566.683784][ T29] audit: type=1400 audit(1718733191.126:598): avc: denied { unlink } for pid=10333 comm="syz-executor.2" name="#40" dev="loop2" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 566.718189][T10352] F2FS-fs (loop1): Found nat_bits in checkpoint [ 566.729452][ T5114] syz-executor.0: attempt to access beyond end of device [ 566.729452][ T5114] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 566.785680][ T29] audit: type=1400 audit(1718733191.276:599): avc: denied { remove_name } for pid=9921 comm="syz-executor.2" name="file2" dev="loop2" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 566.820117][ T5114] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 566.823464][ T5158] hub 5-1:4.0: activate --> -90 [ 566.849618][ T5114] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 566.911381][ T29] audit: type=1400 audit(1718733191.326:600): avc: denied { rmdir } for pid=9921 comm="syz-executor.2" name="file2" dev="loop2" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 566.988343][T10352] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 567.227041][ T9921] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 567.260992][ T45] usb 5-1: USB disconnect, device number 19 [ 567.480097][ T5158] usb 5-1-port1: config error [ 568.684341][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.691553][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.873231][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 572.036950][T10432] loop1: detected capacity change from 0 to 32768 [ 572.046041][T10432] btrfs: Deprecated parameter 'usebackuproot' [ 572.060673][T10432] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 572.078691][T10432] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10432) [ 572.108070][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 572.139366][ T8] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.181335][ T8] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.228651][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 572.289370][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.354657][T10432] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 572.377141][ T8] hub 4-1:4.0: USB hub found [ 572.387651][T10432] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 572.578533][T10449] loop4: detected capacity change from 0 to 128 [ 572.719699][T10432] BTRFS info (device loop1): disk space caching is enabled [ 572.841158][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 572.900182][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 572.996931][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 573.045254][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 573.128565][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 573.205498][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 573.275137][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 573.282969][ T8] hub 4-1:4.0: 2 ports detected [ 573.340770][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 573.360953][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 573.374884][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 573.409836][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 573.422136][T10432] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 573.448824][T10432] BTRFS error (device loop1): open_ctree failed [ 574.394765][ T8] hub 4-1:4.0: activate --> -90 [ 574.915844][ T784] usb 4-1: USB disconnect, device number 9 [ 575.388602][ T8] usb 4-1-port1: config error [ 577.039844][T10496] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 577.140817][T10498] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 577.168738][T10498] fscrypt (sda1, inode 1949): Unsupported encryption flags (0x10) [ 577.369276][T10504] tipc: Enabling of bearer rejected, failed to enable media [ 577.439422][T10508] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.3'. [ 577.546986][ T29] audit: type=1800 audit(1718733202.046:601): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 579.998105][ T29] audit: type=1400 audit(1718733204.486:602): avc: denied { ioctl } for pid=10545 comm="syz-executor.1" path="socket:[27239]" dev="sockfs" ino=27239 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 581.385523][T10552] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 581.415417][T10552] fscrypt (sda1, inode 1948): Unsupported encryption flags (0x10) [ 583.074926][T10599] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.4'. [ 583.301880][ T29] audit: type=1400 audit(1718733207.806:603): avc: denied { ioctl } for pid=10602 comm="syz-executor.3" path="socket:[27327]" dev="sockfs" ino=27327 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 583.335815][T10605] netlink: 211388 bytes leftover after parsing attributes in process `syz-executor.0'. [ 583.818101][ T29] audit: type=1400 audit(1718733208.306:604): avc: denied { mount } for pid=10607 comm="syz-executor.4" name="/" dev="ramfs" ino=27395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 584.140488][T10603] netlink: 65051 bytes leftover after parsing attributes in process `syz-executor.1'. [ 584.179085][ T29] audit: type=1400 audit(1718733208.666:605): avc: denied { mounton } for pid=10607 comm="syz-executor.4" path="/root/syzkaller-testdir1704149241/syzkaller.yUKLTV/351/file0/file0" dev="ramfs" ino=27396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 584.261504][ T29] audit: type=1326 audit(1718733208.756:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10602 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4afac7cf29 code=0x0 [ 584.301770][T10608] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 584.332386][T10608] overlayfs: failed to set xattr on upper [ 584.704520][T10608] overlayfs: ...falling back to redirect_dir=nofollow. [ 585.080552][T10608] overlayfs: ...falling back to index=off. [ 585.242636][T10608] overlayfs: ...falling back to uuid=null. [ 585.445578][ T29] audit: type=1400 audit(1718733209.936:607): avc: denied { unmount } for pid=5115 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 585.562597][T10618] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 585.662845][T10618] fscrypt (sda1, inode 1958): Unsupported encryption flags (0x10) [ 585.671122][ T29] audit: type=1400 audit(1718733210.166:608): avc: denied { unmount } for pid=5115 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 586.962711][T10622] tipc: Enabling of bearer rejected, failed to enable media [ 587.329726][T10645] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 587.718664][T10648] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 587.791798][ T29] audit: type=1800 audit(1718733211.896:609): pid=10649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 588.033510][T10655] netlink: 211388 bytes leftover after parsing attributes in process `syz-executor.1'. [ 588.180667][ T29] audit: type=1800 audit(1718733211.916:610): pid=10649 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 588.378070][ T29] audit: type=1804 audit(1718733212.836:611): pid=10656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3010824018/syzkaller.R0f9re/349/bus" dev="sda1" ino=1966 res=1 errno=0 [ 589.679579][ T29] audit: type=1326 audit(1718733214.106:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6407cf29 code=0x7ffc0000 [ 589.848497][ T29] audit: type=1326 audit(1718733214.116:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6407cf29 code=0x7ffc0000 [ 589.945840][ T29] audit: type=1326 audit(1718733214.126:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9d6407cf29 code=0x7ffc0000 [ 589.967608][T10681] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 589.998691][ T29] audit: type=1326 audit(1718733214.126:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6407cf29 code=0x7ffc0000 [ 590.048806][ T29] audit: type=1326 audit(1718733214.126:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9d6407cf29 code=0x7ffc0000 [ 590.111051][ T29] audit: type=1326 audit(1718733214.126:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6407cf29 code=0x7ffc0000 [ 590.144821][ T5107] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 590.187125][ T5107] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 590.228008][ T29] audit: type=1326 audit(1718733214.136:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10639 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d6407cf29 code=0x7ffc0000 [ 590.228926][ T5107] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 591.480585][T10698] netlink: 211388 bytes leftover after parsing attributes in process `syz-executor.4'. [ 592.635177][ T29] audit: type=1400 audit(1718733217.136:619): avc: denied { mount } for pid=10702 comm="syz-executor.2" name="/" dev="autofs" ino=28100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 592.797236][ T29] audit: type=1400 audit(1718733217.296:620): avc: denied { unmount } for pid=9921 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 594.031673][T10733] 9pnet_fd: Insufficient options for proto=fd [ 594.358705][ T2530] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 594.535181][ T29] audit: type=1400 audit(1718733219.036:621): avc: denied { create } for pid=10741 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 594.568189][ T2530] usb 5-1: Using ep0 maxpacket: 32 [ 594.590186][ T2530] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 594.620212][ T2530] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 594.654432][ T2530] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 594.678076][ T2530] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 594.692961][ T2530] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 594.720855][ T2530] usb 5-1: Product: syz [ 594.727684][ T2530] usb 5-1: Manufacturer: syz [ 594.738066][ T2530] usb 5-1: SerialNumber: syz [ 594.779410][ T2530] usb 5-1: config 0 descriptor?? [ 595.848599][T10759] ALSA: mixer_oss: invalid index -1404626105 [ 596.842146][ T29] audit: type=1400 audit(1718733221.326:622): avc: denied { write } for pid=10769 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 596.965352][ T29] audit: type=1400 audit(1718733221.326:623): avc: denied { nlmsg_write } for pid=10769 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 597.008483][ T784] usb 5-1: USB disconnect, device number 20 [ 597.709962][T10779] 9pnet_fd: Insufficient options for proto=fd [ 598.055438][T10782] loop3: detected capacity change from 0 to 2048 [ 598.128249][ T29] audit: type=1400 audit(1718733222.626:624): avc: denied { connect } for pid=10787 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 598.136096][T10782] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 598.214281][ T29] audit: type=1400 audit(1718733222.666:625): avc: denied { write } for pid=10787 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 598.248740][T10782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.415972][ T29] audit: type=1800 audit(1718733222.916:626): pid=10793 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 598.473988][ T29] audit: type=1800 audit(1718733222.936:627): pid=10793 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 598.621868][ T29] audit: type=1804 audit(1718733223.116:628): pid=10798 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1704149241/syzkaller.yUKLTV/361/bus" dev="sda1" ino=1968 res=1 errno=0 [ 599.942199][T10814] 9pnet_fd: Insufficient options for proto=fd [ 600.415466][ T29] audit: type=1400 audit(1718733224.916:629): avc: denied { mount } for pid=10817 comm="syz-executor.1" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 600.444151][ T29] audit: type=1400 audit(1718733224.916:630): avc: denied { search } for pid=10817 comm="syz-executor.1" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 600.598099][ T29] audit: type=1400 audit(1718733224.946:631): avc: denied { unmount } for pid=5107 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 601.558890][T10829] loop1: detected capacity change from 0 to 2048 [ 601.596899][T10829] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 601.621039][T10829] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 602.717084][T10849] 9pnet_fd: Insufficient options for proto=fd [ 603.150544][T10855] loop4: detected capacity change from 0 to 512 [ 603.241753][T10855] EXT4-fs (loop4): 1 truncate cleaned up [ 603.290642][T10855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.452967][ T29] audit: type=1400 audit(1718733227.956:632): avc: denied { getopt } for pid=10852 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 604.448923][ T29] audit: type=1800 audit(1718733228.956:633): pid=10866 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1970 res=0 errno=0 [ 604.864930][T10869] loop0: detected capacity change from 0 to 2048 [ 604.893383][T10869] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 605.590102][T10869] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 606.551398][ T9715] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 606.788019][ T9715] usb 4-1: Using ep0 maxpacket: 32 [ 606.819478][ T9715] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 606.857459][ T9715] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 606.882090][ T9715] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 606.907636][ T9715] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 606.925814][ T9715] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 606.936492][ T9715] usb 4-1: Product: syz [ 606.942891][ T9715] usb 4-1: Manufacturer: syz [ 606.947853][ T9715] usb 4-1: SerialNumber: syz [ 606.956598][ T9715] usb 4-1: config 0 descriptor?? [ 607.331219][ T5115] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.433518][ T29] audit: type=1326 audit(1718733231.936:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1c967cf29 code=0x0 [ 607.735898][ T29] audit: type=1400 audit(1718733232.206:635): avc: denied { mount } for pid=10891 comm="syz-executor.1" name="/" dev="pstore" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 607.773754][T10895] 9pnet_fd: Insufficient options for proto=fd [ 607.819315][ T9715] usb 4-1: USB disconnect, device number 10 [ 608.036098][ T29] audit: type=1800 audit(1718733232.536:636): pid=10901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1958 res=0 errno=0 [ 608.427971][ T29] audit: type=1326 audit(1718733232.926:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10907 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae47cf29 code=0x7ffc0000 [ 608.480502][T10910] loop3: detected capacity change from 0 to 2048 [ 608.507681][ T29] audit: type=1326 audit(1718733232.956:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10907 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae47cf29 code=0x7ffc0000 [ 608.561996][T10910] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 608.586299][ T29] audit: type=1326 audit(1718733232.996:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10907 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4dae47cf29 code=0x7ffc0000 [ 608.648819][T10910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.673031][ T29] audit: type=1326 audit(1718733232.996:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10907 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae47cf29 code=0x7ffc0000 [ 608.758439][ T29] audit: type=1326 audit(1718733232.996:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10907 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae47cf29 code=0x7ffc0000 [ 608.825855][ T29] audit: type=1326 audit(1718733233.006:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10907 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4dae47cf29 code=0x7ffc0000 [ 608.945745][ T29] audit: type=1326 audit(1718733233.006:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10907 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dae47cf29 code=0x7ffc0000 [ 609.016192][T10918] loop0: detected capacity change from 0 to 512 [ 609.047729][T10918] EXT4-fs (loop0): 1 truncate cleaned up [ 609.127051][T10918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.670214][T10935] 9pnet_fd: Insufficient options for proto=fd [ 612.220855][ T5114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.908932][T10969] 9pnet_fd: Insufficient options for proto=fd [ 613.508145][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 613.508170][ T29] audit: type=1400 audit(1718733238.006:645): avc: denied { map } for pid=10976 comm="syz-executor.3" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 614.108323][T10986] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 614.117596][T10986] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 614.126381][T10987] loop3: detected capacity change from 0 to 512 [ 614.163535][T10987] EXT4-fs (loop3): 1 truncate cleaned up [ 614.192759][T10987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.245751][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 615.162852][T11003] 9pnet_fd: Insufficient options for proto=fd [ 616.477624][ T2451] tipc: Subscription rejected, illegal request [ 616.734589][T11013] loop2: detected capacity change from 0 to 8 [ 616.860452][T11018] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 616.919890][T11018] fscrypt (sda1, inode 1942): Unsupported encryption flags (0x10) [ 617.199358][T11024] tipc: Enabling of bearer rejected, failed to enable media [ 618.109864][T10090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.475470][ T2451] tipc: Subscription rejected, illegal request [ 620.346765][ T29] audit: type=1326 audit(1718733244.846:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac7cf29 code=0x7ffc0000 [ 620.787944][ T29] audit: type=1326 audit(1718733244.876:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac7cf29 code=0x7ffc0000 [ 620.937625][ T29] audit: type=1326 audit(1718733244.946:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4afac7cf29 code=0x7ffc0000 [ 620.961939][ T29] audit: type=1326 audit(1718733244.946:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac7cf29 code=0x7ffc0000 [ 621.048223][ T29] audit: type=1326 audit(1718733244.956:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac7cf29 code=0x7ffc0000 [ 621.132755][T11064] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 621.136466][ T29] audit: type=1326 audit(1718733244.986:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f4afac7cf29 code=0x7ffc0000 [ 621.174848][T11064] fscrypt (sda1, inode 1969): Unsupported encryption flags (0x10) [ 621.193873][T11067] loop1: detected capacity change from 0 to 512 [ 621.278106][ T29] audit: type=1326 audit(1718733244.996:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac7cf29 code=0x7ffc0000 [ 621.307679][T11067] EXT4-fs (loop1): 1 truncate cleaned up [ 621.346669][T11067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.418283][ T29] audit: type=1326 audit(1718733245.006:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac7cf29 code=0x7ffc0000 [ 621.437896][T11072] 9pnet_fd: Insufficient options for proto=fd [ 621.465784][T11070] tipc: Started in network mode [ 621.493018][T11070] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 621.514200][ T29] audit: type=1326 audit(1718733245.006:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f4afac7cf29 code=0x7ffc0000 [ 621.560191][T11070] tipc: New replicast peer: fe88:0000:0000:0000:0000:0000:0000:0004 [ 621.626923][T11070] tipc: Enabled bearer , priority 10 [ 621.656486][ T29] audit: type=1326 audit(1718733245.046:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afac7cf29 code=0x7ffc0000 [ 622.868587][ T5185] tipc: Node number set to 1 [ 623.209183][T10090] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 623.268381][T10090] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 623.313295][T11095] loop0: detected capacity change from 0 to 8 [ 623.315557][T11097] loop2: detected capacity change from 0 to 512 [ 623.338582][T10090] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 623.379413][T11097] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 623.445765][T11097] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 623.548380][T11097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.892213][T11102] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 623.902457][T11102] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 624.711406][ T9921] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.180707][T11110] 9pnet_fd: Insufficient options for proto=fd [ 625.564082][ T5107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.943596][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 625.943616][ T29] audit: type=1400 audit(1718733250.446:657): avc: denied { setopt } for pid=11117 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 626.166525][ T11] tipc: Subscription rejected, illegal request [ 626.574815][T11129] loop1: detected capacity change from 0 to 512 [ 626.611198][ T5115] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 626.648434][ T5115] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 626.676410][ T5115] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 626.679892][T11129] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 626.710266][T11129] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 626.757228][T11129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.862289][T11135] 9pnet_fd: Insufficient options for proto=fd [ 627.030359][ T5107] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.507958][ T11] tipc: Subscription rejected, illegal request [ 627.565872][ T5114] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 627.590144][ T5114] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 627.615250][ T5114] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 627.758835][T11163] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 627.808050][T11163] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 627.877431][T11164] loop3: detected capacity change from 0 to 8 [ 627.912812][T11165] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 627.953833][T11163] tmpfs: Unknown parameter 'nolazytimeãØX' [ 628.196656][T11170] 9pnet_fd: Insufficient options for proto=fd [ 629.618114][ T29] audit: type=1804 audit(1718733254.116:658): pid=11182 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1704149241/syzkaller.yUKLTV/389/cgroup.controllers" dev="sda1" ino=1933 res=1 errno=0 [ 630.134829][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.141386][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.479402][T11196] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 630.507291][ T8166] tipc: Subscription rejected, illegal request [ 630.552298][T11196] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 630.636419][T11199] tmpfs: Unknown parameter ' ' [ 630.692986][T11197] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 630.849170][T11201] 9pnet_fd: Insufficient options for proto=fd [ 631.918817][ T29] audit: type=1804 audit(1718733256.426:659): pid=11219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir653424552/syzkaller.w8GKd3/72/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 632.081402][ T12] tipc: Subscription rejected, illegal request [ 632.383565][T11229] 9pnet_fd: Insufficient options for proto=fd [ 632.567939][ T5185] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 632.678936][T11237] ------------[ cut here ]------------ [ 632.684539][T11237] WARNING: CPU: 1 PID: 11237 at include/linux/skbuff.h:2738 skb_ensure_writable+0x376/0x450 [ 632.694797][T11237] Modules linked in: [ 632.698822][T11237] CPU: 1 PID: 11237 Comm: syz-executor.4 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 632.709451][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 632.719630][T11237] RIP: 0010:skb_ensure_writable+0x376/0x450 [ 632.725613][T11237] Code: d2 0f 85 b9 00 00 00 44 0f b7 63 7a 89 ef 44 89 e6 e8 ee 0c cf f8 41 39 ec 0f 83 83 fd ff ff e9 61 ff ff ff e8 9b 12 cf f8 90 <0f> 0b 90 e9 af fc ff ff e8 8d 12 cf f8 44 89 e6 89 ef e8 c3 0c cf [ 632.745367][T11237] RSP: 0018:ffffc900034ff818 EFLAGS: 00010287 [ 632.751562][T11237] RAX: 00000000000017ff RBX: ffff88802f1cdc80 RCX: ffffc90009e3b000 [ 632.759718][T11237] RDX: 0000000000040000 RSI: ffffffff88bed2b5 RDI: 0000000000000005 [ 632.767887][T11237] RBP: 00000000fffffffe R08: 0000000000000005 R09: 0000000000000000 [ 632.775927][T11237] R10: 00000000fffffffe R11: 0000000000000001 R12: 00000000fffffffe [ 632.784032][T11237] R13: ffffffff88cfc900 R14: ffff88802f1cdcf4 R15: ffff88802f1cdcf0 [ 632.787943][ T5185] usb 2-1: Using ep0 maxpacket: 8 [ 632.792103][T11237] FS: 00007f9d64ec76c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 632.806314][T11237] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.813013][T11237] CR2: 0000001b32b25000 CR3: 000000004e3fa000 CR4: 00000000003506f0 [ 632.813068][ T5185] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.821114][T11237] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 632.821145][T11237] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 632.821169][T11237] Call Trace: [ 632.821184][T11237] [ 632.821198][T11237] ? show_regs+0x8c/0xa0 [ 632.821263][T11237] ? __warn+0xe5/0x3c0 [ 632.855562][ T5185] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 632.858255][T11237] ? skb_ensure_writable+0x376/0x450 [ 632.858311][T11237] ? report_bug+0x3c0/0x580 [ 632.858365][T11237] ? handle_bug+0x3d/0x70 [ 632.873419][ T5185] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 632.876725][T11237] ? exc_invalid_op+0x17/0x50 [ 632.893160][ T5185] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 632.896698][T11237] ? asm_exc_invalid_op+0x1a/0x20 [ 632.896755][T11237] ? __pfx_bpf_skb_pull_data+0x10/0x10 [ 632.914172][ T5185] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 632.917659][T11237] ? skb_ensure_writable+0x375/0x450 [ 632.936843][ T5185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.937629][T11237] ? skb_ensure_writable+0x376/0x450 [ 632.951263][T11237] ? skb_ensure_writable+0x375/0x450 [ 632.957060][T11237] ? __pfx_bpf_skb_pull_data+0x10/0x10 [ 632.962648][T11237] bpf_skb_pull_data+0x45/0x280 [ 632.967574][T11237] ? __pfx_bpf_skb_pull_data+0x10/0x10 [ 632.973178][T11237] ___bpf_prog_run+0x3e51/0xabd0 [ 632.974860][ T5185] hub 2-1:1.0: bad descriptor, ignoring hub [ 632.978205][T11237] ? __pfx_lock_release+0x10/0x10 [ 632.978268][T11237] __bpf_prog_run32+0xc1/0x100 [ 632.978315][T11237] ? __pfx___bpf_prog_run32+0x10/0x10 [ 632.978362][T11237] ? lockdep_hardirqs_on+0x7c/0x110 [ 632.986637][ T5185] hub 2-1:1.0: probe with driver hub failed with error -5 [ 632.989340][T11237] ? __pfx___cant_migrate+0x10/0x10 [ 632.989389][T11237] ? ktime_get+0xfb/0x1a0 [ 632.989440][T11237] bpf_test_run+0x3df/0x9a0 [ 632.999835][ T5185] cdc_wdm 2-1:1.0: skipping garbage [ 633.004882][T11237] ? __pfx_bpf_test_run+0x10/0x10 [ 633.032325][ T5185] cdc_wdm 2-1:1.0: skipping garbage [ 633.036555][T11237] ? __asan_memset+0x23/0x50 [ 633.036614][T11237] bpf_prog_test_run_skb+0xb17/0x1db0 [ 633.036661][T11237] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 633.057952][T11237] ? fput+0x32/0x390 [ 633.061924][T11237] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 633.067863][T11237] __sys_bpf+0x10d2/0x49a0 [ 633.072363][T11237] ? find_held_lock+0x2d/0x110 [ 633.072884][ T5185] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 633.077175][T11237] ? __pfx___sys_bpf+0x10/0x10 [ 633.077214][T11237] ? __might_fault+0x13b/0x190 [ 633.077250][T11237] ? __pfx_lock_release+0x10/0x10 [ 633.077306][T11237] ? __pfx___might_resched+0x10/0x10 [ 633.098471][ T5185] cdc_wdm 2-1:1.0: Unknown control protocol [ 633.103207][T11237] ? xfd_validate_state+0x5d/0x180 [ 633.114402][T11237] __x64_sys_bpf+0x78/0xc0 [ 633.118937][T11237] ? lockdep_hardirqs_on+0x7c/0x110 [ 633.124228][T11237] do_syscall_64+0xcd/0x250 [ 633.128901][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.134892][T11237] RIP: 0033:0x7f9d6407cf29 [ 633.139439][T11237] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 633.159181][T11237] RSP: 002b:00007f9d64ec70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.167688][T11237] RAX: ffffffffffffffda RBX: 00007f9d641b3f80 RCX: 00007f9d6407cf29 [ 633.175788][T11237] RDX: 0000000000000048 RSI: 0000000020000200 RDI: 000000000000000a [ 633.176737][T11226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.183846][T11237] RBP: 00007f9d640ec074 R08: 0000000000000000 R09: 0000000000000000 [ 633.183877][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.183899][T11237] R13: 000000000000000b R14: 00007f9d641b3f80 R15: 00007ffc91ce1108 [ 633.183929][T11237] [ 633.183945][T11237] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 633.183963][T11237] CPU: 1 PID: 11237 Comm: syz-executor.4 Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 633.184005][T11237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 633.184026][T11237] Call Trace: [ 633.184039][T11237] [ 633.184050][T11237] dump_stack_lvl+0x3d/0x1f0 [ 633.184108][T11237] panic+0x6f5/0x7a0 [ 633.184160][T11237] ? __pfx_panic+0x10/0x10 [ 633.184212][T11237] ? show_trace_log_lvl+0x363/0x500 [ 633.184272][T11237] ? skb_ensure_writable+0x376/0x450 [ 633.184321][T11237] check_panic_on_warn+0xab/0xb0 [ 633.184376][T11237] __warn+0xf1/0x3c0 [ 633.184428][T11237] ? skb_ensure_writable+0x376/0x450 [ 633.184475][T11237] report_bug+0x3c0/0x580 [ 633.184525][T11237] handle_bug+0x3d/0x70 [ 633.184567][T11237] exc_invalid_op+0x17/0x50 [ 633.184610][T11237] asm_exc_invalid_op+0x1a/0x20 [ 633.184657][T11237] RIP: 0010:skb_ensure_writable+0x376/0x450 [ 633.184726][T11237] Code: d2 0f 85 b9 00 00 00 44 0f b7 63 7a 89 ef 44 89 e6 e8 ee 0c cf f8 41 39 ec 0f 83 83 fd ff ff e9 61 ff ff ff e8 9b 12 cf f8 90 <0f> 0b 90 e9 af fc ff ff e8 8d 12 cf f8 44 89 e6 89 ef e8 c3 0c cf [ 633.184762][T11237] RSP: 0018:ffffc900034ff818 EFLAGS: 00010287 [ 633.184791][T11237] RAX: 00000000000017ff RBX: ffff88802f1cdc80 RCX: ffffc90009e3b000 [ 633.184817][T11237] RDX: 0000000000040000 RSI: ffffffff88bed2b5 RDI: 0000000000000005 [ 633.184842][T11237] RBP: 00000000fffffffe R08: 0000000000000005 R09: 0000000000000000 [ 633.184865][T11237] R10: 00000000fffffffe R11: 0000000000000001 R12: 00000000fffffffe [ 633.184890][T11237] R13: ffffffff88cfc900 R14: ffff88802f1cdcf4 R15: ffff88802f1cdcf0 [ 633.184917][T11237] ? __pfx_bpf_skb_pull_data+0x10/0x10 [ 633.184965][T11237] ? skb_ensure_writable+0x375/0x450 [ 633.185032][T11237] ? skb_ensure_writable+0x375/0x450 [ 633.185078][T11237] ? __pfx_bpf_skb_pull_data+0x10/0x10 [ 633.185122][T11237] bpf_skb_pull_data+0x45/0x280 [ 633.185166][T11237] ? __pfx_bpf_skb_pull_data+0x10/0x10 [ 633.185208][T11237] ___bpf_prog_run+0x3e51/0xabd0 [ 633.185249][T11237] ? __pfx_lock_release+0x10/0x10 [ 633.185305][T11237] __bpf_prog_run32+0xc1/0x100 [ 633.185349][T11237] ? __pfx___bpf_prog_run32+0x10/0x10 [ 633.185395][T11237] ? lockdep_hardirqs_on+0x7c/0x110 [ 633.185433][T11237] ? __pfx___cant_migrate+0x10/0x10 [ 633.185475][T11237] ? ktime_get+0xfb/0x1a0 [ 633.185526][T11237] bpf_test_run+0x3df/0x9a0 [ 633.185585][T11237] ? __pfx_bpf_test_run+0x10/0x10 [ 633.185646][T11237] ? __asan_memset+0x23/0x50 [ 633.185695][T11237] bpf_prog_test_run_skb+0xb17/0x1db0 [ 633.185736][T11237] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 633.185793][T11237] ? fput+0x32/0x390 [ 633.185830][T11237] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 633.185868][T11237] __sys_bpf+0x10d2/0x49a0 [ 633.185906][T11237] ? find_held_lock+0x2d/0x110 [ 633.185951][T11237] ? __pfx___sys_bpf+0x10/0x10 [ 633.185986][T11237] ? __might_fault+0x13b/0x190 [ 633.186026][T11237] ? __pfx_lock_release+0x10/0x10 [ 633.186082][T11237] ? __pfx___might_resched+0x10/0x10 [ 633.186130][T11237] ? xfd_validate_state+0x5d/0x180 [ 633.186185][T11237] __x64_sys_bpf+0x78/0xc0 [ 633.186225][T11237] ? lockdep_hardirqs_on+0x7c/0x110 [ 633.186261][T11237] do_syscall_64+0xcd/0x250 [ 633.186301][T11237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.186350][T11237] RIP: 0033:0x7f9d6407cf29 [ 633.186377][T11237] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 633.186413][T11237] RSP: 002b:00007f9d64ec70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.186448][T11237] RAX: ffffffffffffffda RBX: 00007f9d641b3f80 RCX: 00007f9d6407cf29 [ 633.186475][T11237] RDX: 0000000000000048 RSI: 0000000020000200 RDI: 000000000000000a [ 633.186498][T11237] RBP: 00007f9d640ec074 R08: 0000000000000000 R09: 0000000000000000 [ 633.186522][T11237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.186545][T11237] R13: 000000000000000b R14: 00007f9d641b3f80 R15: 00007ffc91ce1108 [ 633.186576][T11237] [ 633.192785][T11237] Kernel Offset: disabled