last executing test programs: 4.202930266s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='skb_copy_datagram_iovec\x00', r0}, 0x70) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 4.129642148s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8}}, 0x18}}, 0x0) 4.101843063s ago: executing program 0: clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x0, 0x0, 0x0, 0xc6, 0x33, 0x0, 0x0, 0x0, 0x700, 0x0, 0x28fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8000}) clock_adjtime(0x1, &(0x7f0000000000)={0x2, 0x6, 0x0, 0x9, 0x5, 0xfab7, 0x5, 0x1ff, 0x3, 0x6289, 0x5, 0x2, 0x4, 0x4, 0x90, 0x7fffffff, 0x5, 0x1194b107, 0x8, 0x3, 0x1d03, 0x300000000000000, 0xfff, 0xfff, 0x5, 0x10000}) clock_adjtime(0x0, &(0x7f0000000200)={0x101, 0x2, 0x101, 0xfffffffffffffffb, 0xf2c4, 0xffffffff, 0x1, 0xffffffffffffffff, 0x80000000, 0x53348d04, 0x4, 0x3, 0x10001, 0x3, 0x200006, 0x1000, 0x1, 0x2, 0x80000000, 0x6, 0x3, 0x3, 0x61d, 0x0, 0x8, 0x4}) clock_adjtime(0x6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000000000000, 0xffffffff, 0x1, 0xffffffffffff95eb, 0x2, 0x4, 0x6, 0x6, 0xafe3, 0x169f0cb8, 0x6, 0x7, 0x2, 0x6a, 0xb8, 0x0, 0x6, 0x7ff, 0x4, 0xffffffff7fffffff, 0x3f}) 4.047589961s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='xen_mmu_pmd_clear\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0xcc, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x24044000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x151}, 0x24000004) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d5a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0xfffffffb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) getxattr(0x0, 0x0, 0x0, 0x0) close(r4) 2.246309441s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 2.046778782s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 1.979734512s ago: executing program 3: r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x50000000) r1 = socket(0x11, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02150000e578a6ed5bb9c26ed697944d4b06c19897", 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000086dd6008010800142f00fc01000000dd00000000000000000000fc01000000000000000000000000000000008906"], 0x0) 1.904851604s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d640500000000006504040001"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="3aac", 0x2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.8690965s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="850000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='generic_add_lease\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) 1.647062724s ago: executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 1.565382276s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000019030800850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000400), &(0x7f0000000340)=""/173}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000140)={r1, 0x0, 0x20000000}, 0x20) 1.528456232s ago: executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) get_robust_list(0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000100021040100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010062726964676500002400028005002500010000000500180001"], 0x54}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000c0000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) sendto$packet(r2, &(0x7f0000000180)="0b030600e2ff020002004788aa96a13bb1000011000088ca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x3f, 0x0, "2a630f5e00c923cc"}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x0, 0x0, {0x2, 0x78}}, 0x18}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000400)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000008700000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x924}}, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f00000009c0)={0x2, {0x2, 0x401, 0x8, 0x0, 0x0, 0x4}}) 1.498048117s ago: executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f0000000100)=ANY=[@ANYRESOCT]) close_range(r0, 0xffffffffffffffff, 0x0) 1.457925403s ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1.437649997s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)='0', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 1.41364769s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.388453674s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 1.317605555s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000100), 0x4) sendmmsg$unix(r4, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) 1.294097669s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x101400, 0x110, 0xe}, 0x18) move_mount(r1, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x0, 0x592, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="e4", 0x1}], 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x0, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r9}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) sendmsg$sock(r7, 0x0, 0x0) recvmsg(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/139, 0x8b}], 0x1}, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="000404000000df0000000000000000000000000000000001220100000000000000190037ad0327ae24aa364b15e4b5"], 0x28) 1.241061627s ago: executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x2088010, 0x0, 0x3, 0x0, 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) lseek(r0, 0x6dbc, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 1.166895279s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.132074454s ago: executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304000000ffffca88faca"], 0xdd12}], 0x1}, 0x0) 1.067772944s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000580)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r5) 978.096558ms ago: executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x37, 0x0}, 0x0) 117.141782ms ago: executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 116.197981ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0xfffffffffffffc43) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=@framed={{}, [@map_val, @map_val={0x18, 0x0, 0x2, 0x0, r0}, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 97.672255ms ago: executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f0000000100)=ANY=[@ANYRESOCT]) close_range(r0, 0xffffffffffffffff, 0x0) 70.661869ms ago: executing program 4: r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x50000000) r1 = socket(0x11, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02150000e578a6ed5bb9c26ed697944d4b06c19897", 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000086dd6008010800142f00fc01000000dd00000000000000000000fc01000000000000000000000000000000008906"], 0x0) 53.710211ms ago: executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) get_robust_list(0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54000000100021040100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010062726964676500002400028005002500010000000500180001"], 0x54}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000c0000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) sendto$packet(r2, &(0x7f0000000180)="0b030600e2ff020002004788aa96a13bb1000011000088ca1a00", 0x10008, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x3f, 0x0, "2a630f5e00c923cc"}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x0, 0x0, {0x2, 0x78}}, 0x18}}, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000400)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000008700000008000300", @ANYRES32=0x0, @ANYBLOB="05092a00100100250300000075140000000010f8b5f8b0f84e9c00aff749ab2a10638325000000ffffffffffff000000000000000000000000080211000000000000008c18000009728837faa3eb0208ef3fecc2dae409f4a41dd9651626a0000000753a99b9d2a54c0bdfda2f18b0b8440657d3a6ed5b1c0f163750d74a50d6b0610ac383d17a281bf6d16eb22439d626913213ff76ce7016d8109ac18c06592392b651a096412b7d3d6f9ccb1ce125527cbaa6b4ee0f0b31f80e758eac62d6da722fd15839aa1c41836716dedf52ad763f7385b4b962ea51fde6b17fd5945df6efbc91f8583fb44c12c8fc2a267b2f1d6e84eba135978e3deeb540afa915b7c9a4a19bddb3834b08ae622fe1c8e4a9ae16040c50416acb33538cb4baa7dfe22f48061503a00b8a6fa90ce3e0a9df990f5308e6dbc8d222e8702400ed0fc0118287aa490b96869f1292bbac698028e7179a93f9fdd7f7769d85d60e85182391fab815ca8ec4760cbe2083fb07e9a44103be697e72f26a5efbf888b07a40d08f0efd9886e91bfe840821ac07873983899f37cd0d04c6089c8755bc53d9a59792131490806cae86c7260f8809e85e8db5506d3de1620471320c3ea9fe9213b2bda97779ecfc1849bdbff51e311744e8a99e505caf1150bd451a80c62af27e34d68a57709d739c2883129f2a066c78eae87d0e306e1d911e666593dabe34a1e01f39060b39a0b3a717caf615377a506c2f1a1e91a1ef666dc371d87bf2d08f371b85e6e1cd7b0c985b8d6f3d03c7986e1f074647d7e50fd4fce6e439f2d6018b260b8da99b491f3088fbdd9563dd637773c3f93bf873717a9824f573135e334d99972a5bc69cb43ed8e998ea60061e0c75c54a0b115066d5d6caccf4565e7b9afa198237acd43b09e19549da12fa751fe296d8350e1ac625700d401c50ce72b34975a240bc4cf188e281904a6071b20aaeac7cd64cd3fd0aca33d60c6f6c8fa8c9ccc6a7d79b34a9be3dec18d91743ccf7c3004b20da583458d3f745f57c671b980ba914e0818c79d93cecee784e2b545b67bd6a7014420d3e5c2239ec9373d10e7a3460d0045fbd9ba3d52fa6db16c7329cf4adbf28afbfd90fd86ca3e4dc2646a249efeadb9a83af46d9ee5ad2223dad5bf86c9586ddf6ea597420bcd85cf6640ec3d7403025c3200eafe063185231a9948f794ad0e1ad6e77b11e450cf31b4117659518acf7bc8247862554dc43ddfbb09c37ac080780722b754da507e5013cbecb600fb15bf14480d6b0d5ff3e15aa4e22681374a65df152b94ac721ba86a26a402241a5a0663803c9ed86d1f75acae4099b3e9444682568589ecf7994430466c24665114909c8eab7d2145811d1ab88354419ca0692a4b6c69c9219e8d2daf45c87343cd8dd3d7a80fecd2f00f1bbd0d8b619a68928002ef83fc81ee6be6770f83dd71e9b09334de52b224a2029227bb815c2d47692c9d94dd4c2b98ed370aa16e0aad7716d7fce2e0a84e8cc86c497fff9013a99df9d2f0d04e1d807f9c705cc96e032af610889837b8d35c34474723f32f5d14e8b29b4e86e1505f9716ab0a0c91afe78f878658ce899957923355fa906857f1abb2e5bc279f6e4145e62e29169b2b8a0620de16878143e7605088306a2461e8557d728b9c986d68a642137f7bdb233a52e59cfe81c282b992d499ba53996b21f398b2e76dd4bba1e90f1f540cf38f3d21c51be53b8a5ed850a084f71d396cbe71fd495df0d3190f30bea2ec0e11854d3e728ee90d8970738ca68b3296aa1fb6149ea7e97d0cd40e249665d1095030a2f6caa917959b17a28946be3464511d429653d0a5a5498b2f3e9f5e82390b0f77e34cfb5f126eb0585859771f636ba030cca4176132486ec0365926eacdf7a8db4721b891e86530d2c636184703caa223feebe2bc3700e0006d1bfa8d31037548eea2ffee48e492ccc2c0e5e5d5ff2cabe510850d230cd76bcbfc57e4f93e11f02c90207491c4b1921c2ba5b4e27f090af8abc810225517035db14cc5a46d26ce2a66587091de2d90734f9b0b1418d94e013a60aee2e291b46da45ae31bee68e6fa2801253cbb98e9719408e2cedd73f734548c70cf9c08aefc2c8d4b08085f1bc2c9fab46b40d6fa69d5a0d96d455bfb2c53ae13858f9518dda35a9d56a0f41619a4cb46b1da1c59aad2e70f94f29477254d5023048d245be2dfa2d29ab575adef250f4dd6facaa839f722b2d3c5bb68a23eb9552843fd4d8607af3f82b7293e04a44c175e15386ddbf356b25c58604b6b5a114c9e6a439cb93d359c2475b452c733ba457e6bb2f29294d77bd95e5aee658c37cd2a648d7ff3dd7243f083763373d1f365a56189afc8056c47851ce7aff9ff80f0c2bf55312e8c786f12e599ff2b7133ffc8f5a15b4a94e53fe501821f70c5a4ef51e22db4b71e4997acb3f058c597832f387c3a23f7b3aefb5b73e00499dfd438b49afcdedfafbd2f8dfa578a28126b1402037378ff745ce76f69f0a4994555974cc8a98d4c7d451ca4907faed0b9423fd6083937fd776dae36b1d2f7aecc8c391b7d7c0558ca26e3f3242fc64c41328bbd536584fc77c6c01c0773e7ab2882f020effa0b66ecd320c45912f9eb2117c6ee98b789e4113a45d9926d4dccbc8db91432235d0441d460028d0b57161471a6d7a60cdce37771a9ed31b84aa697e96f9f098ae191f1170086d8c63e3b60eb5a2beacce5d97afcd5bfa0b432e78b4335ae1421cff8fef02a4f3de83ec1b2916965f3821b6736c37c39b51998eb0e3d7b00b9061e77351216336a5a70b260a3edd3e4aef0859d041f96c95fd5695a94a63c0fd7f6104fa8a8296d640ca4ba5475fd762d18fa8554af9e86f55025e0228d691916c13a3c3a015496282b1af1b5e7657a692cccd77869358dde80e94168251277cc96ec586a899caf98cd2fbfe1b8e4a456ed9961ace5b1772b541ad8c1f217c5f251b189b2ced86b2346b195dcee40f7da53d107b6406620443f4d8934ad4673b1953d3ebe80f6ddb876e297f34f93308bce3feb416952a70430a4663776240c01ffac965a1c6f52df977fa5e5b05a59a1c4e8b4a3ead63241687ce4c6039e292842ed88aa7f8cd8deb8e72392914ad681fdb35fa14c82af795388e2ff3fc3a9804b58acd2e7f1ee07d0cca553abd6b3aba8a34eb0fb748e48bffcea3dde525154a2ddf7e0f4930d0cc3b76cb04a17b5afa00b8c972db5111d6e0c25bb172552a74b95600"], 0x924}}, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f00000009c0)={0x2, {0x2, 0x401, 0x8, 0x0, 0x0, 0x4}}) 0s ago: executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. 2024/06/18 01:16:19 fuzzer started 2024/06/18 01:16:19 dialing manager at 10.128.0.163:30008 [ 29.355374][ T30] audit: type=1400 audit(1718673379.640:66): avc: denied { node_bind } for pid=286 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.376379][ T30] audit: type=1400 audit(1718673379.640:67): avc: denied { name_bind } for pid=286 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.463467][ T30] audit: type=1400 audit(1718673379.750:68): avc: denied { integrity } for pid=296 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 29.507012][ T296] cgroup: Unknown subsys name 'net' [ 29.525959][ T30] audit: type=1400 audit(1718673379.780:69): avc: denied { mounton } for pid=298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.526193][ T296] cgroup: Unknown subsys name 'devices' [ 29.551855][ T30] audit: type=1400 audit(1718673379.780:70): avc: denied { mount } for pid=298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.580287][ T30] audit: type=1400 audit(1718673379.790:71): avc: denied { mounton } for pid=296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.605562][ T30] audit: type=1400 audit(1718673379.790:72): avc: denied { mount } for pid=296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.619672][ T302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.629791][ T30] audit: type=1400 audit(1718673379.810:73): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.657658][ T30] audit: type=1400 audit(1718673379.810:74): avc: denied { setattr } for pid=303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.675008][ T300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.682456][ T30] audit: type=1400 audit(1718673379.930:75): avc: denied { relabelto } for pid=302 comm="mkswap" name="swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.742909][ T296] cgroup: Unknown subsys name 'hugetlb' [ 29.748588][ T296] cgroup: Unknown subsys name 'rlimit' 2024/06/18 01:16:20 starting 5 executor processes [ 31.361226][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.368560][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.376401][ T312] device bridge_slave_0 entered promiscuous mode [ 31.387204][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.394429][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.402477][ T312] device bridge_slave_1 entered promiscuous mode [ 31.467554][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.475377][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.483252][ T314] device bridge_slave_0 entered promiscuous mode [ 31.494167][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.501569][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.510198][ T314] device bridge_slave_1 entered promiscuous mode [ 31.635755][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.642726][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.650810][ T315] device bridge_slave_0 entered promiscuous mode [ 31.685331][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.692306][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.700056][ T315] device bridge_slave_1 entered promiscuous mode [ 31.822110][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.829172][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.837084][ T316] device bridge_slave_0 entered promiscuous mode [ 31.880832][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.887752][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.895852][ T316] device bridge_slave_1 entered promiscuous mode [ 31.999802][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.006806][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.014968][ T313] device bridge_slave_0 entered promiscuous mode [ 32.060256][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.067176][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.075083][ T313] device bridge_slave_1 entered promiscuous mode [ 32.257234][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.264210][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.271473][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.278483][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.323577][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.331450][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.523332][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.531842][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.563329][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.571913][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.580474][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.587343][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.623618][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.631807][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.639733][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.648808][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.657022][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.664093][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.671626][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.680200][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.688410][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.695284][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.702713][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.711291][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.719584][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.726456][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.734093][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.803362][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.812845][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.821017][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.829365][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.867956][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.875864][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.884277][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.894196][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.902667][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.909561][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.917505][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.937424][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.945758][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.953611][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.962372][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.970997][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.977918][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.990298][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.999805][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.008707][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.015917][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.024695][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.051523][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.060473][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.069958][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.076846][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.084363][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.093024][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.101996][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.111223][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.128529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.136984][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.157329][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.166037][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.175046][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.183516][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.192482][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.200318][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.216081][ T314] device veth0_vlan entered promiscuous mode [ 33.229253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.237370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.245738][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.254527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.263097][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.271808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.280501][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.287376][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.295327][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.341704][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.352055][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.360486][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.371954][ T314] device veth1_macvtap entered promiscuous mode [ 33.382141][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.390978][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.399409][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.406278][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.438244][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.446926][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.456193][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.465514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.474769][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.482961][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.491634][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.499782][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.512409][ T315] device veth0_vlan entered promiscuous mode [ 33.543383][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.552425][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.560773][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.570627][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.578978][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.587406][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.613509][ T312] device veth0_vlan entered promiscuous mode [ 33.622505][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.631342][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.640012][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.649864][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.658860][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.666901][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.676132][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.684388][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.709645][ T315] device veth1_macvtap entered promiscuous mode [ 33.720859][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.729733][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.738779][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.747076][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.756469][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.765801][ T316] device veth0_vlan entered promiscuous mode [ 33.790998][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.806765][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.814522][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.823694][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.832395][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.840893][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.866257][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.875416][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.884869][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.893503][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.919848][ T316] device veth1_macvtap entered promiscuous mode [ 33.945882][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.954432][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.965516][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.981081][ T312] device veth1_macvtap entered promiscuous mode [ 34.002073][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.018686][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.038507][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.046944][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.068929][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.092538][ T313] device veth0_vlan entered promiscuous mode [ 34.102246][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.111812][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.120964][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.130555][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.209715][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.218596][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.228442][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.239684][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.248818][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.257745][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.288740][ T313] device veth1_macvtap entered promiscuous mode [ 34.337988][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.363681][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.376271][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.395349][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.418424][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.426787][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.555874][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 34.555907][ T30] audit: type=1400 audit(1718673384.840:102): avc: denied { write } for pid=355 comm="syz-executor.1" name="001" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.621203][ T324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.738048][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.748549][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.918112][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.927441][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.935929][ T26] usb 4-1: Product: syz [ 34.940817][ T26] usb 4-1: Manufacturer: syz [ 34.945416][ T26] usb 4-1: SerialNumber: syz [ 34.997981][ T324] usb 1-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 35.018051][ T324] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.047908][ T324] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 35.056876][ T324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.083922][ T324] usb 1-1: config 0 descriptor?? [ 35.129151][ T324] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 35.296571][ T30] audit: type=1400 audit(1718673385.580:103): avc: denied { confidentiality } for pid=363 comm="syz-executor.2" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 35.322307][ T30] audit: type=1400 audit(1718673385.610:104): avc: denied { read } for pid=364 comm="syz-executor.4" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.324837][ T365] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 35.397503][ T30] audit: type=1400 audit(1718673385.610:105): avc: denied { open } for pid=364 comm="syz-executor.4" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.448728][ T30] audit: type=1400 audit(1718673385.610:106): avc: denied { ioctl } for pid=364 comm="syz-executor.4" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 35.474936][ T30] audit: type=1400 audit(1718673385.660:107): avc: denied { prog_run } for pid=361 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.496087][ T30] audit: type=1400 audit(1718673385.710:108): avc: denied { create } for pid=361 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.521750][ T30] audit: type=1400 audit(1718673385.710:109): avc: denied { setopt } for pid=361 comm="syz-executor.1" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.543256][ T30] audit: type=1400 audit(1718673385.710:110): avc: denied { read write } for pid=371 comm="syz-executor.2" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.569840][ T30] audit: type=1400 audit(1718673385.710:111): avc: denied { open } for pid=371 comm="syz-executor.2" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.798073][ T60] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.909371][ T380] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 36.228785][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 36.389646][ T26] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 36.658207][ T380] syz-executor.4 (380) used greatest stack depth: 21936 bytes left [ 36.667059][ T26] cdc_ncm 4-1:1.0: bind() failure [ 36.681167][ T26] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 36.689111][ T26] cdc_ncm 4-1:1.1: bind() failure [ 36.691543][ T389] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 36.696675][ T26] usb 4-1: USB disconnect, device number 2 [ 36.734092][ T391] loop2: detected capacity change from 0 to 256 [ 36.748491][ T60] usb 2-1: New USB device found, idVendor=1e2d, idProduct=00f1, bcdDevice=41.fa [ 36.757496][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.766369][ T391] ======================================================= [ 36.766369][ T391] WARNING: The mand mount option has been deprecated and [ 36.766369][ T391] and is ignored by this kernel. Remove the mand [ 36.766369][ T391] option from the mount to silence this warning. [ 36.766369][ T391] ======================================================= [ 36.803207][ T60] usb 2-1: Product: syz [ 36.807239][ T60] usb 2-1: Manufacturer: syz [ 36.811974][ T60] usb 2-1: SerialNumber: syz [ 36.818093][ T60] usb 2-1: config 0 descriptor?? [ 36.843389][ T391] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 37.025311][ T345] syz-executor.0 (345) used greatest stack depth: 20656 bytes left [ 37.630899][ T26] usb 1-1: USB disconnect, device number 2 [ 38.240612][ T430] loop4: detected capacity change from 0 to 256 [ 38.308823][ T430] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 39.419515][ T20] usb 2-1: USB disconnect, device number 2 [ 39.674355][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 39.674387][ T30] audit: type=1400 audit(1718673389.960:135): avc: denied { unmount } for pid=315 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.596512][ T30] audit: type=1400 audit(1718673390.880:136): avc: denied { create } for pid=468 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.707902][ T30] audit: type=1400 audit(1718673390.990:137): avc: denied { bind } for pid=468 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.868049][ T30] audit: type=1400 audit(1718673391.150:138): avc: denied { append } for pid=480 comm="syz-executor.4" name="001" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.906124][ T484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 40.915480][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.946732][ T484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 41.251545][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.267552][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.299119][ T510] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 41.318029][ T26] usb 4-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 41.330668][ T486] device bridge_slave_0 entered promiscuous mode [ 41.338066][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.361196][ T26] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 41.371034][ T409] device bridge_slave_1 left promiscuous mode [ 41.372073][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.377165][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.394574][ T30] audit: type=1400 audit(1718673391.690:139): avc: denied { create } for pid=511 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.404436][ T26] usb 4-1: config 0 descriptor?? [ 41.421426][ T409] device bridge_slave_0 left promiscuous mode [ 41.427491][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.437599][ T409] device veth1_macvtap left promiscuous mode [ 41.448253][ T409] device veth0_vlan left promiscuous mode [ 41.459406][ T26] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 41.480153][ T30] audit: type=1400 audit(1718673391.690:140): avc: denied { write } for pid=511 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.683460][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.691441][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.700338][ T486] device bridge_slave_1 entered promiscuous mode [ 41.774098][ T520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.799838][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.894320][ T527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 41.974116][ T527] Zero length message leads to an empty skb [ 41.982811][ T30] audit: type=1400 audit(1718673392.270:141): avc: denied { ioctl } for pid=531 comm="syz-executor.1" path="socket:[14599]" dev="sockfs" ino=14599 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.174600][ T347] usb 4-1: USB disconnect, device number 3 [ 43.382794][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.396955][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.438336][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.457614][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.479030][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.486292][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.494219][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.504331][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.513274][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.520328][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.541031][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.549787][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.558765][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.568072][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.576832][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.662136][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.678536][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.708655][ T486] device veth0_vlan entered promiscuous mode [ 43.717949][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.726324][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.749945][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.757622][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.778655][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.788543][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.799886][ T486] device veth1_macvtap entered promiscuous mode [ 43.841702][ T30] audit: type=1400 audit(1718673394.130:142): avc: denied { read write } for pid=568 comm="syz-executor.2" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.889504][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.897889][ T30] audit: type=1400 audit(1718673394.130:143): avc: denied { open } for pid=568 comm="syz-executor.2" path="/dev/uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.922791][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.932402][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.941249][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.952697][ T571] ------------[ cut here ]------------ [ 43.963221][ T30] audit: type=1400 audit(1718673394.240:144): avc: denied { ioctl } for pid=568 comm="syz-executor.2" path="/dev/uinput" dev="devtmpfs" ino=166 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.974581][ T571] WARNING: CPU: 1 PID: 571 at mm/page_alloc.c:5751 __alloc_pages+0x770/0x8f0 [ 44.043023][ T571] Modules linked in: [ 44.185682][ T556] loop3: detected capacity change from 0 to 40427 [ 44.224646][ T572] kvm: emulating exchange as write [ 44.225004][ T571] CPU: 0 PID: 571 Comm: syz-executor.2 Not tainted 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 44.240989][ T571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 44.259300][ T556] F2FS-fs (loop3): invalid crc value [ 44.276164][ T571] RIP: 0010:__alloc_pages+0x770/0x8f0 [ 44.281617][ T571] Code: df e9 aa fb ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ba fb ff ff e8 5f 11 05 00 48 ba 00 00 00 00 00 fc ff df e9 a6 fb ff ff <0f> 0b 45 31 e4 e9 73 fc ff ff 48 8d 4c 24 40 80 e1 07 80 c1 03 38 [ 44.312694][ T556] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.382799][ T571] RSP: 0018:ffffc90000b67a20 EFLAGS: 00010246 [ 44.413749][ T571] RAX: 0000000000000004 RBX: 0000000000040dc0 RCX: ffffc90000b67a03 [ 44.440971][ T571] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc90000b67ab8 [ 44.467731][ T571] RBP: ffffc90000b67b30 R08: dffffc0000000000 R09: ffffc90000b67a90 [ 44.507957][ T571] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 44.547688][ T571] R13: 1ffff9200016cf4c R14: 1ffff9200016cf4e R15: 1ffff9200016cf48 [ 44.583326][ T571] FS: 00007fea5ac6c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 44.599520][ T556] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 44.618521][ T571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.629020][ T556] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.649884][ T571] CR2: 0000000000000000 CR3: 000000010ebf6000 CR4: 00000000003526b0 [ 44.670249][ T571] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.695611][ T556] tipc: Started in network mode [ 44.702832][ T571] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.715795][ T556] tipc: Node identity ac1414aa, cluster identity 4711 [ 44.729706][ T556] tipc: New replicast peer: 100.1.1.1 [ 44.737252][ T571] Call Trace: [ 44.745470][ T556] tipc: Enabled bearer , priority 10 [ 44.754036][ T571] [ 44.767087][ T571] ? show_regs+0x58/0x60 [ 44.772888][ T571] ? __warn+0x160/0x2f0 [ 44.779347][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 44.779436][ T30] audit: type=1400 audit(1718673395.070:150): avc: denied { write } for pid=555 comm="syz-executor.3" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.808962][ T571] ? __alloc_pages+0x770/0x8f0 [ 44.818145][ T571] ? report_bug+0x3d9/0x5b0 [ 44.831875][ T571] ? __alloc_pages+0x770/0x8f0 [ 44.840543][ T571] ? handle_bug+0x41/0x70 [ 44.845450][ T571] ? exc_invalid_op+0x1b/0x50 [ 44.850772][ T571] ? asm_exc_invalid_op+0x1b/0x20 [ 44.856074][ T571] ? __alloc_pages+0x770/0x8f0 [ 44.866380][ T30] audit: type=1400 audit(1718673395.070:151): avc: denied { add_name } for pid=555 comm="syz-executor.3" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.887924][ T571] ? prep_new_page+0x110/0x110 [ 44.893109][ T571] ? do_vfs_ioctl+0xbc1/0x2a80 [ 44.918147][ T571] ? memcpy+0x56/0x70 [ 44.922082][ T571] ? __x64_compat_sys_ioctl+0x90/0x90 [ 44.927264][ T571] kmalloc_order+0x4a/0x160 [ 44.943441][ T30] audit: type=1400 audit(1718673395.070:152): avc: denied { create } for pid=555 comm="syz-executor.3" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 44.967561][ T571] kmalloc_order_trace+0x1a/0xb0 [ 44.974144][ T571] __kmalloc+0x19c/0x270 [ 44.979192][ T571] input_mt_init_slots+0xcf/0xa50 [ 44.984224][ T571] ? mutex_lock_interruptible+0xb6/0x1e0 [ 45.009919][ T30] audit: type=1400 audit(1718673395.110:153): avc: denied { mounton } for pid=555 comm="syz-executor.3" path="/root/syzkaller-testdir678308253/syzkaller.9ByEyN/6/file0/bus" dev="loop3" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.038061][ T571] uinput_create_device+0x522/0x630 [ 45.043174][ T571] uinput_ioctl_handler+0xa63/0x16a0 [ 45.067962][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 45.076538][ T314] attempt to access beyond end of device [ 45.076538][ T314] loop3: rw=2049, want=45104, limit=40427 [ 45.089747][ T571] ? uinput_release+0x50/0x50 [ 45.094339][ T571] ? selinux_file_ioctl+0x3cc/0x540 [ 45.101714][ T571] ? __fget_files+0x31e/0x380 [ 45.118056][ T571] uinput_ioctl+0x28/0x30 [ 45.127972][ T571] ? uinput_poll+0x120/0x120 [ 45.139813][ T571] __se_sys_ioctl+0x114/0x190 [ 45.144427][ T571] __x64_sys_ioctl+0x7b/0x90 [ 45.163909][ T571] do_syscall_64+0x3d/0xb0 [ 45.175298][ T571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.188227][ T571] RIP: 0033:0x7fea5b8f1f29 [ 45.195125][ T571] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.246285][ T571] RSP: 002b:00007fea5ac6c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.278006][ T571] RAX: ffffffffffffffda RBX: 00007fea5ba28f80 RCX: 00007fea5b8f1f29 [ 45.288326][ T571] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 45.305555][ T571] RBP: 00007fea5b961074 R08: 0000000000000000 R09: 0000000000000000 [ 45.324279][ T571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.337458][ T603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 45.357402][ T571] R13: 000000000000000b R14: 00007fea5ba28f80 R15: 00007ffe735d56a8 [ 45.377491][ T571] [ 45.383390][ T571] ---[ end trace 975d7b8d5b7de331 ]--- [ 45.428307][ T26] usb 2-1: config 0 has an invalid descriptor of length 198, skipping remainder of the config [ 45.452064][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.479355][ T26] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 45.532199][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.537941][ T30] audit: type=1400 audit(1718673395.820:154): avc: denied { create } for pid=609 comm="syz-executor.0" dev="anon_inodefs" ino=15779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.580755][ T608] loop2: detected capacity change from 0 to 512 [ 45.595058][ T26] usb 2-1: config 0 descriptor?? [ 45.639878][ T26] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 45.648124][ T608] EXT4-fs (loop2): bad s_min_extra_isize: 65535 [ 45.656526][ T30] audit: type=1400 audit(1718673395.940:155): avc: denied { mount } for pid=611 comm="syz-executor.4" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.681224][ T30] audit: type=1400 audit(1718673395.970:156): avc: denied { watch } for pid=611 comm="syz-executor.4" path="/root/syzkaller-testdir415345263/syzkaller.TiqERO/30/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 45.800755][ T30] audit: type=1400 audit(1718673396.090:157): avc: denied { unmount } for pid=312 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.868299][ T536] tipc: Node number set to 2886997162 [ 46.093095][ T633] loop0: detected capacity change from 0 to 512 [ 46.158439][ T30] audit: type=1400 audit(1718673396.450:158): avc: denied { getopt } for pid=634 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.181216][ T633] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.194869][ T30] audit: type=1400 audit(1718673396.480:159): avc: denied { write } for pid=634 comm="syz-executor.3" path="socket:[14932]" dev="sockfs" ino=14932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.197787][ T633] EXT4-fs error (device loop0): ext4_get_journal_inode:5150: comm syz-executor.0: inode #67108864: comm syz-executor.0: iget: illegal inode # [ 46.289713][ T633] EXT4-fs (loop0): no journal found [ 48.197915][ T536] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 48.346053][ T338] usb 2-1: USB disconnect, device number 3 [ 48.437671][ T671] syz-executor.1[671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.437883][ T671] syz-executor.1[671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.512483][ T676] syz-executor.4[676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.524733][ T676] syz-executor.4[676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.568046][ T536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.614032][ T536] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.627803][ T536] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 48.637193][ T536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.653102][ T536] usb 4-1: config 0 descriptor?? [ 48.895781][ T692] loop4: detected capacity change from 0 to 512 [ 49.004273][ T692] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.033076][ T692] EXT4-fs (loop4): orphan cleanup on readonly fs [ 49.051708][ T692] EXT4-fs (loop4): 1 truncate cleaned up [ 49.079396][ T692] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 49.123350][ T536] microsoft 0003:045E:00F9.0001: unbalanced delimiter at end of report description [ 49.145183][ T536] microsoft 0003:045E:00F9.0001: parse failed [ 49.162434][ T703] process 'syz-executor.1' launched './file0' with NULL argv: empty string added [ 49.197913][ T536] microsoft: probe of 0003:045E:00F9.0001 failed with error -22 [ 49.320138][ T536] usb 4-1: USB disconnect, device number 4 [ 49.442601][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 50.001096][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 50.001129][ T30] audit: type=1400 audit(1718673400.290:189): avc: denied { setopt } for pid=756 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.123398][ T760] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 50.168149][ T760] pim6reg0: linktype set to 776 [ 50.296236][ T774] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 50.311708][ T776] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 50.318101][ T774] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 50.547929][ T347] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 50.638051][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.999462][ T347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.017876][ T347] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 51.030515][ T347] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.040714][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.067316][ T347] usb 2-1: config 0 descriptor?? [ 51.083527][ T804] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 51.093238][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.104436][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.114860][ T804] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 51.124431][ T26] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 51.135278][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.154759][ T26] usb 1-1: config 0 descriptor?? [ 51.320386][ T824] incfs: Options parsing error. -22 [ 51.333541][ T824] incfs: mount failed -22 [ 51.452735][ T833] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 51.559332][ T845] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.615882][ T30] audit: type=1400 audit(1718673401.900:190): avc: denied { read write } for pid=848 comm="syz-executor.3" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.620370][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 51.647790][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.655798][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.664228][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.668207][ T347] usb 2-1: string descriptor 0 read error: -71 [ 51.673156][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.680586][ T26] microsoft 0003:045E:00F9.0003: unbalanced delimiter at end of report description [ 51.685759][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.702384][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 51.711589][ T347] usb 2-1: USB disconnect, device number 4 [ 51.721386][ T30] audit: type=1400 audit(1718673401.900:191): avc: denied { open } for pid=848 comm="syz-executor.3" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 51.723333][ T26] microsoft 0003:045E:00F9.0003: parse failed [ 51.746109][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.768291][ T26] microsoft: probe of 0003:045E:00F9.0003 failed with error -22 [ 51.769542][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x2 [ 51.797960][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.805682][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.813666][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.823631][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.833553][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 51.841260][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.849346][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.856894][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.865170][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.873114][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.880733][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.888447][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.895814][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.901014][ T26] usb 1-1: USB disconnect, device number 3 [ 51.904862][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.917355][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.938330][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.945730][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.953489][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.961083][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.968716][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.976011][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.983799][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.991429][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 51.999078][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.006452][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.014151][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.021815][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.029513][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.037037][ T536] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 52.046336][ T536] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 52.120540][ T855] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 52.207513][ T860] loop3: detected capacity change from 0 to 512 [ 52.267063][ T860] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.285057][ T860] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.296527][ T860] EXT4-fs (loop3): 1 truncate cleaned up [ 52.308493][ T409] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 52.321261][ T860] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 52.548023][ T536] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 52.552985][ T875] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 52.790084][ T30] audit: type=1400 audit(1718673403.080:192): avc: denied { setattr } for pid=887 comm="syz-executor.2" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.929108][ T536] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.949187][ T536] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.878093][ T536] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.895913][ T536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.904377][ T909] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 53.924548][ T536] usb 2-1: Product: syz [ 53.934649][ T536] usb 2-1: Manufacturer: syz [ 53.954614][ T536] usb 2-1: SerialNumber: syz [ 54.000024][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 54.247972][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 54.253894][ T885] loop3: detected capacity change from 0 to 40427 [ 54.317324][ T885] F2FS-fs (loop3): invalid crc value [ 54.328823][ T885] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.352071][ T30] audit: type=1400 audit(1718673404.640:193): avc: denied { map } for pid=920 comm="syz-executor.0" path="/dev/ashmem" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.375226][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.407967][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.420928][ T6] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 54.447527][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.468483][ T6] usb 3-1: config 0 descriptor?? [ 54.503495][ T885] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 54.515459][ T885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 54.539632][ T30] audit: type=1400 audit(1718673404.830:194): avc: denied { create } for pid=929 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 54.563709][ T30] audit: type=1400 audit(1718673404.850:195): avc: denied { read } for pid=929 comm="syz-executor.0" name="file0" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 54.589642][ T30] audit: type=1400 audit(1718673404.850:196): avc: denied { open } for pid=929 comm="syz-executor.0" path="/root/syzkaller-testdir2059558159/syzkaller.orYo6W/35/file0" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 54.592538][ T885] tipc: Enabling of bearer rejected, already enabled [ 54.619310][ T30] audit: type=1400 audit(1718673404.880:197): avc: denied { unlink } for pid=486 comm="syz-executor.0" name="file0" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 54.784467][ T314] attempt to access beyond end of device [ 54.784467][ T314] loop3: rw=2049, want=45104, limit=40427 [ 54.991611][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input9 [ 55.079430][ T943] syz-executor.4[943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.079584][ T943] syz-executor.4[943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.098589][ T6] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 55.148615][ T943] loop4: detected capacity change from 0 to 256 [ 55.158102][ T536] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 55.197989][ T536] cdc_ncm 2-1:1.0: bind() failure [ 55.205156][ T536] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 55.227884][ T536] cdc_ncm 2-1:1.1: bind() failure [ 55.241551][ T943] FAT-fs (loop4): Directory bread(block 64) failed [ 55.245944][ T536] usb 2-1: USB disconnect, device number 5 [ 55.261914][ T943] FAT-fs (loop4): Directory bread(block 65) failed [ 55.287965][ T943] FAT-fs (loop4): Directory bread(block 66) failed [ 55.317946][ T943] FAT-fs (loop4): Directory bread(block 67) failed [ 55.324419][ T943] FAT-fs (loop4): Directory bread(block 68) failed [ 55.332214][ T943] FAT-fs (loop4): Directory bread(block 69) failed [ 55.341987][ T943] FAT-fs (loop4): Directory bread(block 70) failed [ 55.349017][ T943] FAT-fs (loop4): Directory bread(block 71) failed [ 55.356269][ T943] FAT-fs (loop4): Directory bread(block 72) failed [ 55.362782][ T943] FAT-fs (loop4): Directory bread(block 73) failed [ 55.376290][ T344] usb 3-1: USB disconnect, device number 2 [ 55.424416][ T30] audit: type=1400 audit(1718673405.710:198): avc: denied { mount } for pid=942 comm="syz-executor.4" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.677519][ T953] syz-executor.3[953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.677683][ T953] syz-executor.3[953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.811156][ T30] audit: type=1400 audit(1718673406.100:199): avc: denied { read } for pid=958 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.115934][ T30] audit: type=1400 audit(1718673406.400:200): avc: denied { unmount } for pid=312 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 56.141522][ T967] loop2: detected capacity change from 0 to 256 [ 56.165801][ T969] loop3: detected capacity change from 0 to 512 [ 56.209784][ T969] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 56.233394][ T972] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 56.233623][ T969] EXT4-fs error (device loop3): ext4_get_journal_inode:5150: comm syz-executor.3: inode #67108864: comm syz-executor.3: iget: illegal inode # [ 56.277105][ T969] EXT4-fs (loop3): no journal found [ 56.827890][ T417] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 56.869330][ T997] loop1: detected capacity change from 0 to 256 [ 57.068747][ T417] usb 4-1: Using ep0 maxpacket: 16 [ 57.337979][ T417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.367470][ T417] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 57.385006][ T30] audit: type=1400 audit(1718673407.670:201): avc: denied { write } for pid=1000 comm="syz-executor.1" name="igmp" dev="proc" ino=4026532472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.414358][ T417] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 57.431633][ T417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.469680][ T417] usb 4-1: config 0 descriptor?? [ 57.476549][ T30] audit: type=1326 audit(1718673407.760:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1000 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a511d2f29 code=0x0 [ 57.546112][ T30] audit: type=1400 audit(1718673407.790:203): avc: denied { read } for pid=1012 comm="syz-executor.2" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.617370][ T30] audit: type=1400 audit(1718673407.860:204): avc: denied { write } for pid=1012 comm="syz-executor.2" laddr=fe80::44c0:fff:fe4a:70a1 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.931175][ T30] audit: type=1400 audit(1718673408.030:205): avc: denied { create } for pid=1014 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.064252][ T30] audit: type=1400 audit(1718673408.060:206): avc: denied { write } for pid=1014 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.673290][ T30] audit: type=1400 audit(1718673408.960:207): avc: denied { create } for pid=1024 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.783701][ T417] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0005/input/input10 [ 58.941321][ T417] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 58.958428][ T417] usb 4-1: USB disconnect, device number 5 [ 59.793388][ T1068] loop3: detected capacity change from 0 to 256 [ 59.855637][ T1068] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 60.827917][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 60.827982][ T30] audit: type=1326 audit(1718673411.110:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1077 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4145050f29 code=0x7fc00000 [ 61.151400][ T1141] loop0: detected capacity change from 0 to 256 [ 61.497416][ T30] audit: type=1400 audit(1718673411.780:215): avc: denied { create } for pid=1149 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.547021][ T30] audit: type=1400 audit(1718673411.810:216): avc: denied { read } for pid=1149 comm="syz-executor.2" path="socket:[18076]" dev="sockfs" ino=18076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.628236][ T30] audit: type=1400 audit(1718673411.810:217): avc: denied { write } for pid=1149 comm="syz-executor.2" path="socket:[18076]" dev="sockfs" ino=18076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.704782][ T30] audit: type=1400 audit(1718673411.810:218): avc: denied { read } for pid=1149 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.784257][ T30] audit: type=1326 audit(1718673411.820:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1149 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea5b8f1f29 code=0x0 [ 62.129501][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 62.316260][ T30] audit: type=1400 audit(1718673412.600:220): avc: denied { create } for pid=1181 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.348150][ T1182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1182 comm=syz-executor.4 [ 62.364435][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.373659][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.389734][ T30] audit: type=1400 audit(1718673412.630:221): avc: denied { write } for pid=1181 comm="syz-executor.4" path="socket:[18173]" dev="sockfs" ino=18173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.394946][ T1165] device bridge_slave_0 entered promiscuous mode [ 62.414792][ T30] audit: type=1400 audit(1718673412.630:222): avc: denied { nlmsg_read } for pid=1181 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 62.450994][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.458158][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.466220][ T1165] device bridge_slave_1 entered promiscuous mode [ 63.530848][ T1199] loop3: detected capacity change from 0 to 128 [ 63.550730][ T1202] loop2: detected capacity change from 0 to 256 [ 63.589693][ T409] device bridge_slave_1 left promiscuous mode [ 63.595794][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.612013][ T30] audit: type=1400 audit(1718673413.900:223): avc: denied { connect } for pid=1204 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.652690][ T409] device bridge_slave_0 left promiscuous mode [ 63.664825][ T1199] attempt to access beyond end of device [ 63.664825][ T1199] loop3: rw=0, want=189, limit=128 [ 63.691828][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.716471][ T409] device veth1_macvtap left promiscuous mode [ 63.723495][ T409] device veth0_vlan left promiscuous mode [ 63.837054][ T1199] attempt to access beyond end of device [ 63.837054][ T1199] loop3: rw=2049, want=190, limit=128 [ 63.848351][ T1199] Buffer I/O error on dev loop3, logical block 189, lost async page write [ 63.856880][ T1199] attempt to access beyond end of device [ 63.856880][ T1199] loop3: rw=2049, want=191, limit=128 [ 63.868936][ T1199] Buffer I/O error on dev loop3, logical block 190, lost async page write [ 63.878321][ T1199] attempt to access beyond end of device [ 63.878321][ T1199] loop3: rw=2049, want=192, limit=128 [ 63.889810][ T1199] Buffer I/O error on dev loop3, logical block 191, lost async page write [ 63.899113][ T1199] attempt to access beyond end of device [ 63.899113][ T1199] loop3: rw=2049, want=193, limit=128 [ 63.910525][ T1199] Buffer I/O error on dev loop3, logical block 192, lost async page write [ 63.919514][ T1199] attempt to access beyond end of device [ 63.919514][ T1199] loop3: rw=2049, want=241, limit=128 [ 63.944725][ T8] attempt to access beyond end of device [ 63.944725][ T8] loop3: rw=1, want=1041, limit=128 [ 63.959094][ T417] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.154258][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.164530][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.189433][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.198383][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.206640][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.213806][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.222508][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.231188][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.239836][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.246708][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.254208][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.262789][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.277995][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.285855][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.294568][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.322762][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.332068][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.340728][ T417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.358004][ T344] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 64.365013][ T417] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.376187][ T1165] device veth0_vlan entered promiscuous mode [ 64.385476][ T417] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 64.406511][ T417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.419094][ T1165] device veth1_macvtap entered promiscuous mode [ 64.426780][ T417] usb 5-1: config 0 descriptor?? [ 64.447392][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.462887][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.474899][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.488905][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.528077][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.528820][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.529396][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.529981][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.644179][ T1228] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 64.727213][ T1234] syz-executor.1[1234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.727355][ T1234] syz-executor.1[1234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.729236][ T1236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.778117][ T1236] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.797965][ T344] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 4 [ 64.809420][ T344] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.822788][ T344] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.837369][ T344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.848354][ T344] usb 4-1: config 0 descriptor?? [ 64.852598][ T1236] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 64.919439][ T344] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 64.920196][ T417] microsoft 0003:045E:00F9.0006: unbalanced delimiter at end of report description [ 64.939916][ T417] microsoft 0003:045E:00F9.0006: parse failed [ 64.946534][ T417] microsoft: probe of 0003:045E:00F9.0006 failed with error -22 [ 65.090058][ T1243] loop0: detected capacity change from 0 to 2048 [ 65.155768][ T344] usb 4-1: USB disconnect, device number 6 [ 65.209952][ T6] usb 5-1: USB disconnect, device number 2 [ 65.230301][ T1243] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.249872][ T1243] ext4 filesystem being mounted at /root/syzkaller-testdir2059558159/syzkaller.orYo6W/55/file0 supports timestamps until 2038 (0x7fffffff) [ 65.286038][ T1243] fs-verity: sha512 using implementation "sha512-avx2" [ 65.321071][ T1243] syz-executor.0 (1243) used greatest stack depth: 19944 bytes left [ 65.493495][ T1276] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 65.516696][ T1276] kvm: pic: non byte read [ 65.521457][ T1276] kvm: pic: level sensitive irq not supported [ 65.521637][ T1276] kvm: pic: non byte read [ 65.532482][ T1276] kvm: pic: level sensitive irq not supported [ 65.532628][ T1276] kvm: pic: non byte read [ 65.543239][ T1276] kvm: pic: level sensitive irq not supported [ 65.543382][ T1276] kvm: pic: non byte read [ 65.781350][ T1297] syz-executor.0[1297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.781499][ T1297] syz-executor.0[1297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.801995][ T1292] loop3: detected capacity change from 0 to 2048 [ 65.840175][ T1297] loop0: detected capacity change from 0 to 256 [ 65.908514][ T1297] FAT-fs (loop0): Directory bread(block 64) failed [ 65.936620][ T1297] FAT-fs (loop0): Directory bread(block 65) failed [ 65.944504][ T1292] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.985482][ T1297] FAT-fs (loop0): Directory bread(block 66) failed [ 65.996532][ T1292] ext4 filesystem being mounted at /root/syzkaller-testdir678308253/syzkaller.9ByEyN/52/file0 supports timestamps until 2038 (0x7fffffff) [ 65.998167][ T1297] FAT-fs (loop0): Directory bread(block 67) failed [ 66.019129][ T1297] FAT-fs (loop0): Directory bread(block 68) failed [ 66.025557][ T1297] FAT-fs (loop0): Directory bread(block 69) failed [ 66.060791][ T1297] FAT-fs (loop0): Directory bread(block 70) failed [ 66.067211][ T1297] FAT-fs (loop0): Directory bread(block 71) failed [ 66.088156][ T1297] FAT-fs (loop0): Directory bread(block 72) failed [ 66.095050][ T1297] FAT-fs (loop0): Directory bread(block 73) failed [ 66.488101][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 67.299696][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 67.299729][ T30] audit: type=1400 audit(1718673417.590:262): avc: denied { write } for pid=1335 comm="syz-executor.2" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.958929][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 67.989746][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 68.046611][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.124251][ T26] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.201995][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.569399][ T26] usb 5-1: config 0 descriptor?? [ 68.588082][ T1315] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.693813][ T30] audit: type=1326 audit(1718673418.980:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5660131f29 code=0x7ffc0000 [ 68.721110][ T30] audit: type=1326 audit(1718673419.010:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5660131f29 code=0x7ffc0000 [ 68.753580][ T30] audit: type=1326 audit(1718673419.010:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5660131f29 code=0x7ffc0000 [ 68.778661][ T1379] syz-executor.0[1379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.778818][ T1379] syz-executor.0[1379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.779767][ T30] audit: type=1326 audit(1718673419.010:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5660131f29 code=0x7ffc0000 [ 68.868761][ T1379] loop0: detected capacity change from 0 to 256 [ 68.903189][ T30] audit: type=1326 audit(1718673419.010:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5660131f29 code=0x7ffc0000 [ 68.950238][ T1379] FAT-fs (loop0): Directory bread(block 64) failed [ 68.951388][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 68.976938][ T1379] FAT-fs (loop0): Directory bread(block 65) failed [ 68.987306][ T1379] FAT-fs (loop0): Directory bread(block 66) failed [ 68.993949][ T30] audit: type=1326 audit(1718673419.010:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5660131f29 code=0x7ffc0000 [ 68.994108][ T30] audit: type=1326 audit(1718673419.120:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5660131f29 code=0x7ffc0000 [ 69.041067][ T1379] FAT-fs (loop0): Directory bread(block 67) failed [ 69.049194][ T30] audit: type=1326 audit(1718673419.120:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5660131f29 code=0x7ffc0000 [ 69.063858][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 69.084587][ T30] audit: type=1326 audit(1718673419.120:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5660131f29 code=0x7ffc0000 [ 69.109869][ T1390] loop3: detected capacity change from 0 to 1024 [ 69.116237][ T1379] FAT-fs (loop0): Directory bread(block 68) failed [ 69.139255][ T1379] FAT-fs (loop0): Directory bread(block 69) failed [ 69.146850][ T26] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 69.152203][ T1379] FAT-fs (loop0): Directory bread(block 70) failed [ 69.170274][ T1379] FAT-fs (loop0): Directory bread(block 71) failed [ 69.187400][ T1379] FAT-fs (loop0): Directory bread(block 72) failed [ 69.194982][ T1379] FAT-fs (loop0): Directory bread(block 73) failed [ 69.197229][ T26] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 69.254472][ T1390] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.138036][ T344] usb 5-1: USB disconnect, device number 3 [ 70.696315][ T1433] loop0: detected capacity change from 0 to 512 [ 70.759880][ T1433] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 70.767657][ T1433] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 70.767657][ T1433] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 70.767657][ T1433] [ 70.787079][ T1433] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.899845][ T1433] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 70.907914][ T1433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842801c, mo2=0002] [ 70.932064][ T1433] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 70.941543][ T1433] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 70.950228][ T1433] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,nouser_xattr,jqfmt=vfsv0,barrier=0x000000000000d95b,debug,,errors=continue. Quota mode: none. [ 70.995006][ T1433] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120 [ 71.007500][ T1433] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 71.023769][ T1433] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120 [ 71.036212][ T1433] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 71.052450][ T1433] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120 [ 71.065195][ T1433] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 71.081304][ T1433] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120 [ 71.093757][ T1433] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 71.111953][ T1433] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 65535 != root limit 120 [ 71.124422][ T1433] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 71.138071][ T1433] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir2059558159/syzkaller.orYo6W/65/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 71.774355][ T1429] loop1: detected capacity change from 0 to 16 [ 71.839441][ T1429] erofs: Unknown parameter '€„' [ 71.998757][ T1454] loop2: detected capacity change from 0 to 1024 [ 72.173543][ T1454] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.628196][ T1466] loop4: detected capacity change from 0 to 128 [ 73.054520][ T1487] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 73.229116][ T1485] loop2: detected capacity change from 0 to 256 [ 73.270219][ T1485] exfat: Deprecated parameter 'utf8' [ 73.289594][ T1485] exfat: Bad value for 'gid' [ 73.803228][ T1518] loop1: detected capacity change from 0 to 512 [ 73.941411][ T1518] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 73.948796][ T1518] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 73.948796][ T1518] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 73.948796][ T1518] [ 73.967360][ T1518] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.253497][ T1518] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 75.261581][ T1518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842801c, mo2=0002] [ 75.270708][ T1518] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 75.280122][ T1518] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 75.288699][ T1518] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,nouser_xattr,jqfmt=vfsv0,barrier=0x000000000000d95b,debug,,errors=continue. Quota mode: none. [ 75.358842][ T1517] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 65535 != root limit 120 [ 75.371232][ T1517] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 75.385023][ T1517] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 65535 != root limit 120 [ 75.397386][ T1517] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 75.411312][ T1517] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 65535 != root limit 120 [ 75.425219][ T1517] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 75.439291][ T1517] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 65535 != root limit 120 [ 75.451784][ T1517] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 75.466004][ T1517] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor.1: dx entry: limit 65535 != root limit 120 [ 75.478626][ T1517] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 75.492239][ T1517] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor.1: path /root/syzkaller-testdir2395532212/syzkaller.RgOTi1/44/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 75.561772][ T1522] loop3: detected capacity change from 0 to 512 [ 75.678141][ T1522] EXT4-fs (loop3): Mount option "dioread_nolock" incompatible with ext3 [ 75.834030][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 75.834063][ T30] audit: type=1400 audit(1718673426.120:303): avc: denied { name_bind } for pid=1530 comm="syz-executor.0" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 76.323817][ T1558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.482686][ T1565] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 76.681728][ T1574] syz-executor.0 (pid 1574) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 76.733730][ T1574] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 76.832492][ T1581] syz-executor.2[1581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.832646][ T1581] syz-executor.2[1581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.847144][ T30] audit: type=1400 audit(1718673427.140:304): avc: denied { create } for pid=1582 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.861854][ T1522] loop3: detected capacity change from 0 to 40427 [ 76.896292][ T1584] xt_bpf: check failed: parse error [ 76.917931][ T30] audit: type=1400 audit(1718673427.140:305): avc: denied { setopt } for pid=1582 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 76.988021][ T30] audit: type=1400 audit(1718673427.270:306): avc: denied { audit_write } for pid=1588 comm="syz-executor.2" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.994843][ T1522] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 77.058508][ T1522] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 77.081838][ T30] audit: type=1107 audit(1718673427.270:307): pid=1588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ì' [ 77.123735][ T1522] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.141664][ T30] audit: type=1400 audit(1718673427.310:308): avc: denied { bind } for pid=1582 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.398800][ T1522] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 77.413704][ T1522] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 77.517231][ T1612] syz-executor.2[1612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.517393][ T1612] syz-executor.2[1612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.567094][ T1616] loop4: detected capacity change from 0 to 256 [ 77.586174][ T1617] xt_bpf: check failed: parse error [ 77.591495][ T30] audit: type=1400 audit(1718673427.870:309): avc: denied { mount } for pid=1521 comm="syz-executor.3" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.624615][ T30] audit: type=1400 audit(1718673427.870:310): avc: denied { mounton } for pid=1521 comm="syz-executor.3" path="/root/syzkaller-testdir678308253/syzkaller.9ByEyN/72/file0/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.660297][ T314] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.660347][ T314] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.671742][ T314] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.693145][ T314] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.693190][ T1616] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 77.708894][ T314] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.780710][ T314] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.799413][ T314] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.807329][ T314] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.815432][ T314] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.834148][ T314] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 77.857393][ T30] audit: type=1400 audit(1718673428.140:311): avc: denied { unmount } for pid=314 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.908439][ T1616] incfs: Can't find or create .incomplete dir in ./file1 [ 77.932439][ T1616] incfs: mount failed -28 [ 77.938810][ T30] audit: type=1400 audit(1718673428.180:312): avc: denied { mounton } for pid=1613 comm="syz-executor.4" path="/root/syzkaller-testdir415345263/syzkaller.TiqERO/107/file2/file0" dev="loop4" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.111625][ T10] tipc: Disabling bearer [ 78.117642][ T10] tipc: Left network mode [ 79.248095][ T1645] loop0: detected capacity change from 0 to 512 [ 79.300931][ T1645] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 79.374635][ T1645] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,minixdf,jqfmt=vfsold,quota,,errors=continue. Quota mode: writeback. [ 79.428547][ T1645] ext4 filesystem being mounted at /root/syzkaller-testdir2059558159/syzkaller.orYo6W/78/file0 supports timestamps until 2038 (0x7fffffff) [ 79.450120][ T10] device bridge_slave_1 left promiscuous mode [ 79.456240][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.488854][ T10] device bridge_slave_0 left promiscuous mode [ 79.558480][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.593396][ T10] device veth1_macvtap left promiscuous mode [ 79.608220][ T10] device veth0_vlan left promiscuous mode [ 80.119162][ T1663] 9p: Unknown uid 18446744073709551615 [ 80.178024][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.359790][ T1662] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.380081][ T1662] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.397019][ T1662] device bridge_slave_0 entered promiscuous mode [ 80.420571][ T1662] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.442879][ T1662] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.470560][ T1662] device bridge_slave_1 entered promiscuous mode [ 80.548027][ T6] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 80.556128][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.597773][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.619037][ T6] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 80.643807][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.669535][ T6] usb 1-1: config 0 descriptor?? [ 80.906169][ T1662] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.913202][ T1662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.920580][ T1662] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.927492][ T1662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.992495][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.003000][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.011733][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.032158][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.041838][ T1632] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.048820][ T1632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.057571][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.066570][ T1632] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.073576][ T1632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.101979][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.123918][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.146553][ T1677] loop4: detected capacity change from 0 to 512 [ 81.154078][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.155967][ T6] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 81.176368][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.185973][ T1632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.197958][ T6] hid-generic 0003:1B1C:1B3E.0008: unknown main item tag 0x0 [ 81.199383][ T1662] device veth0_vlan entered promiscuous mode [ 81.205500][ T6] hid-generic 0003:1B1C:1B3E.0008: item fetching failed at offset 2/5 [ 81.216820][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.229063][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.251187][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.251182][ T6] hid-generic: probe of 0003:1B1C:1B3E.0008 failed with error -22 [ 81.278793][ T1677] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.293726][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.306813][ T1662] device veth1_macvtap entered promiscuous mode [ 81.315310][ T1677] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 81.330610][ T1677] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 81.348471][ T1677] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 81.348932][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.381491][ T1677] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 312: padding at end of block bitmap is not set [ 81.429182][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.448629][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.457573][ T6] usb 1-1: USB disconnect, device number 4 [ 81.478745][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.519844][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.532305][ T536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.551000][ T1684] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 81.633280][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 81.633312][ T30] audit: type=1400 audit(1718673431.920:322): avc: denied { unlink } for pid=1685 comm="syz-executor.1" name="#1" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 81.698918][ T30] audit: type=1400 audit(1718673431.920:323): avc: denied { getattr } for pid=1685 comm="syz-executor.1" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 81.723604][ T30] audit: type=1400 audit(1718673431.970:324): avc: denied { mount } for pid=1690 comm="syz-executor.3" name="/" dev="configfs" ino=12148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 81.750019][ T30] audit: type=1400 audit(1718673431.970:325): avc: denied { setattr } for pid=1690 comm="syz-executor.3" name="/" dev="configfs" ino=12148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.776809][ T30] audit: type=1400 audit(1718673431.990:326): avc: denied { unmount } for pid=1662 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.128047][ T1718] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 82.471263][ T1726] device pim6reg1 entered promiscuous mode [ 82.609809][ T1735] loop2: detected capacity change from 0 to 512 [ 82.702952][ T1735] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 82.742553][ T1735] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 82.759164][ T1735] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 82.773147][ T1735] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,mblk_io_submit,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 82.891587][ T30] audit: type=1400 audit(1718673433.180:327): avc: denied { link } for pid=1734 comm="syz-executor.2" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.020221][ T1742] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 255: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 83.108009][ T1747] loop1: detected capacity change from 0 to 512 [ 83.138274][ T1750] syz-executor.4[1750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.138517][ T1750] syz-executor.4[1750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.160576][ T1750] loop4: detected capacity change from 0 to 256 [ 83.219597][ T1747] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.254232][ T1750] FAT-fs (loop4): Directory bread(block 64) failed [ 83.270713][ T1747] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 83.288583][ T1750] FAT-fs (loop4): Directory bread(block 65) failed [ 83.302223][ T1747] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 83.315804][ T1750] FAT-fs (loop4): Directory bread(block 66) failed [ 83.319014][ T1747] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 83.323206][ T1750] FAT-fs (loop4): Directory bread(block 67) failed [ 83.342512][ T1750] FAT-fs (loop4): Directory bread(block 68) failed [ 83.349206][ T1750] FAT-fs (loop4): Directory bread(block 69) failed [ 83.355768][ T1750] FAT-fs (loop4): Directory bread(block 70) failed [ 83.365941][ T1750] FAT-fs (loop4): Directory bread(block 71) failed [ 83.372986][ T1750] FAT-fs (loop4): Directory bread(block 72) failed [ 83.379847][ T1750] FAT-fs (loop4): Directory bread(block 73) failed [ 83.428395][ T1747] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 312: padding at end of block bitmap is not set [ 84.400641][ T30] audit: type=1400 audit(1718673434.690:328): avc: denied { create } for pid=1771 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.495912][ T30] audit: type=1400 audit(1718673434.720:329): avc: denied { write } for pid=1771 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.617280][ T30] audit: type=1400 audit(1718673434.900:330): avc: denied { execute } for pid=1782 comm="syz-executor.4" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.705015][ T30] audit: type=1400 audit(1718673434.900:331): avc: denied { execute_no_trans } for pid=1782 comm="syz-executor.4" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.970833][ T1805] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 85.010671][ T1805] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.165473][ T1812] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 85.242647][ T1812] netlink: 1024 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.767163][ T1809] loop1: detected capacity change from 0 to 65536 [ 85.859638][ T1809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.172858][ T1839] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.181650][ T1839] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 86.189941][ T1839] overlayfs: missing 'lowerdir' [ 86.505959][ T1843] loop2: detected capacity change from 0 to 1024 [ 86.593847][ T1843] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 86.633994][ T1843] EXT4-fs (loop2): group descriptors corrupted! [ 86.827239][ T1850] loop0: detected capacity change from 0 to 256 [ 86.894737][ T1850] FAT-fs (loop0): Directory bread(block 64) failed [ 86.918655][ T1850] FAT-fs (loop0): Directory bread(block 65) failed [ 86.925128][ T1850] FAT-fs (loop0): Directory bread(block 66) failed [ 86.932671][ T1852] device pim6reg1 entered promiscuous mode [ 86.949629][ T1850] FAT-fs (loop0): Directory bread(block 67) failed [ 86.956151][ T1850] FAT-fs (loop0): Directory bread(block 68) failed [ 86.977938][ T1850] FAT-fs (loop0): Directory bread(block 69) failed [ 86.995473][ T1850] FAT-fs (loop0): Directory bread(block 70) failed [ 87.007933][ T1850] FAT-fs (loop0): Directory bread(block 71) failed [ 87.022241][ T1850] FAT-fs (loop0): Directory bread(block 72) failed [ 87.036908][ T1850] FAT-fs (loop0): Directory bread(block 73) failed [ 88.360351][ T1870] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 88.408136][ T1870] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.581220][ T1891] loop1: detected capacity change from 0 to 512 [ 88.625113][ T1891] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 88.648305][ T1891] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.666711][ T1891] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 88.697097][ T1891] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 88.710142][ T1891] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 88.733982][ T1891] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 88.749694][ T1891] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 88.762997][ T1891] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 88.776383][ T1891] EXT4-fs (loop1): 1 orphan inode deleted [ 88.783655][ T1891] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,user_xattr,debug_want_extra_isize=0x000000000000005c,nodelalloc,mblk_io_submit,errors=continue,usrjquota=,prjquota,nodiscard,,errors=continue. Quota mode: writeback. [ 90.045322][ T1920] loop3: detected capacity change from 0 to 256 [ 90.120272][ T1920] FAT-fs (loop3): Unrecognized mount option "K ‡³hcheck=strict" or missing value [ 91.180123][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 91.180156][ T30] audit: type=1400 audit(1718673441.470:335): avc: denied { connect } for pid=1948 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.222525][ T1950] loop1: detected capacity change from 0 to 2048 [ 91.410447][ T1950] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.450217][ T1960] loop4: detected capacity change from 0 to 2048 [ 91.474622][ T30] audit: type=1400 audit(1718673441.760:336): avc: denied { mounton } for pid=1945 comm="syz-executor.1" path="/root/syzkaller-testdir2395532212/syzkaller.RgOTi1/71/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.726299][ T1967] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 91.826763][ T1960] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.959342][ T1960] ext4 filesystem being mounted at /root/syzkaller-testdir415345263/syzkaller.TiqERO/138/file0 supports timestamps until 2038 (0x7fffffff) [ 92.341425][ T1967] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #18: comm syz-executor.1: mark_inode_dirty error [ 92.540330][ T1165] EXT4-fs error (device loop1): ext4_map_blocks:602: inode #2: block 16: comm syz-executor.1: lblock 0 mapped to illegal pblock 16 (length 1) [ 92.575086][ T1165] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 92.588121][ T1979] loop4: detected capacity change from 0 to 256 [ 92.604592][ T1165] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz-executor.1: mark_inode_dirty error [ 92.646031][ T1979] FAT-fs (loop4): Unrecognized mount option "K ‡³hcheck=strict" or missing value [ 92.753867][ T1992] kvm: vcpu 0: requested 34 ns lapic timer period limited to 200000 ns [ 92.790972][ T1992] kvm: pic: non byte write [ 93.076697][ T2009] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 93.090667][ T2009] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.339778][ T2009] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.492032][ T2009] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.254631][ T8] device bridge_slave_1 left promiscuous mode [ 94.268558][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.274406][ T2039] loop0: detected capacity change from 0 to 512 [ 94.285315][ T8] device bridge_slave_0 left promiscuous mode [ 94.308736][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.326528][ T8] device veth1_macvtap left promiscuous mode [ 94.344236][ T8] device veth0_vlan left promiscuous mode [ 94.376202][ T2044] loop2: detected capacity change from 0 to 1024 [ 94.392882][ T2044] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 94.412909][ T2039] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 94.426953][ T2039] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.0: missing EA_INODE flag [ 94.451646][ T2044] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,stripe=0x0000000000000001,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 94.476160][ T2052] kvm: vcpu 0: requested 34 ns lapic timer period limited to 200000 ns [ 94.487679][ T2039] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 2 err=-117 [ 94.512662][ T2039] EXT4-fs (loop0): 1 orphan inode deleted [ 94.518874][ T2039] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.528321][ T2046] kvm: pic: non byte write [ 94.855648][ T2044] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.742694][ T30] audit: type=1400 audit(1718673446.030:337): avc: denied { shutdown } for pid=2061 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.797633][ T2019] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.814350][ T2066] incfs: Options parsing error. -22 [ 95.819717][ T2066] incfs: mount failed -22 [ 95.819740][ T2019] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.862569][ T2019] device bridge_slave_0 entered promiscuous mode [ 95.883311][ T2019] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.900663][ T2019] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.918806][ T2019] device bridge_slave_1 entered promiscuous mode [ 96.012069][ T2072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.263828][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.273455][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.300734][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.309609][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.319238][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.326127][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.334371][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.352826][ T30] audit: type=1400 audit(1718673446.640:338): avc: denied { read } for pid=2077 comm="syz-executor.0" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 96.379065][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.387685][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.391425][ T30] audit: type=1400 audit(1718673446.670:339): avc: denied { open } for pid=2077 comm="syz-executor.0" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 96.394866][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.434682][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.448659][ T30] audit: type=1400 audit(1718673446.740:340): avc: denied { create } for pid=2078 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.463517][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.489302][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.517203][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.536035][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.545610][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.553404][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.600923][ T2019] device veth0_vlan entered promiscuous mode [ 96.677172][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.687153][ T2099] loop3: detected capacity change from 0 to 512 [ 96.694957][ T2019] device veth1_macvtap entered promiscuous mode [ 96.699892][ T2101] loop2: detected capacity change from 0 to 2048 [ 96.722351][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.742828][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.743144][ T2101] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.762255][ T2101] ext4 filesystem being mounted at /root/syzkaller-testdir1710033532/syzkaller.9Rg8lj/177/file0 supports timestamps until 2038 (0x7fffffff) [ 96.777320][ T2099] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 96.798090][ T2099] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.826845][ T2099] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 96.854565][ T2099] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: missing EA_INODE flag [ 96.870879][ T2099] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 96.884010][ T2099] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: missing EA_INODE flag [ 96.922876][ T2099] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 96.940601][ T30] audit: type=1400 audit(1718673447.230:341): avc: denied { remount } for pid=2111 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 96.968236][ T2112] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 96.979785][ T2114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.990347][ T2112] SELinux: security_context_str_to_sid(staff_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 97.006533][ T2099] EXT4-fs (loop3): 1 orphan inode deleted [ 97.013077][ T2099] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,user_xattr,debug_want_extra_isize=0x000000000000005c,nodelalloc,mblk_io_submit,errors=continue,usrjquota=,prjquota,nodiscard,,errors=continue. Quota mode: writeback. [ 97.067427][ T2116] loop2: detected capacity change from 0 to 128 [ 97.126772][ T2120] incfs: Can't find or create .index dir in ./file0 [ 97.133739][ T2120] incfs: mount failed -14 [ 97.154175][ T2116] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 97.166549][ T2116] EXT4-fs (loop2): quotafile must be on filesystem root [ 97.175568][ T2122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.424894][ T2136] loop2: detected capacity change from 0 to 256 [ 97.467708][ T2140] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 97.477226][ T2140] SELinux: security_context_str_to_sid(staff_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 97.505123][ T2136] FAT-fs (loop2): Directory bread(block 64) failed [ 97.512085][ T2136] FAT-fs (loop2): Directory bread(block 65) failed [ 97.519427][ T2136] FAT-fs (loop2): Directory bread(block 66) failed [ 97.536346][ T30] audit: type=1326 audit(1718673447.820:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f1d2ef29 code=0x7ffc0000 [ 97.561271][ T2136] FAT-fs (loop2): Directory bread(block 67) failed [ 97.567768][ T2136] FAT-fs (loop2): Directory bread(block 68) failed [ 97.580539][ T30] audit: type=1326 audit(1718673447.820:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f49f1d2ef29 code=0x7ffc0000 [ 97.603381][ T2136] FAT-fs (loop2): Directory bread(block 69) failed [ 97.626459][ T30] audit: type=1326 audit(1718673447.820:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f1d2ef29 code=0x7ffc0000 [ 97.630705][ T2136] FAT-fs (loop2): Directory bread(block 70) failed [ 97.667992][ T30] audit: type=1326 audit(1718673447.820:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f49f1d2ef29 code=0x7ffc0000 [ 97.678112][ T39] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.707002][ T2136] FAT-fs (loop2): Directory bread(block 71) failed [ 97.707237][ T30] audit: type=1326 audit(1718673447.820:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f1d2ef29 code=0x7ffc0000 [ 97.717367][ T2136] FAT-fs (loop2): Directory bread(block 72) failed [ 97.739237][ T30] audit: type=1326 audit(1718673447.820:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49f1d2ef29 code=0x7ffc0000 [ 97.774290][ T2136] FAT-fs (loop2): Directory bread(block 73) failed [ 97.801365][ T2149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.118254][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.131492][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.142889][ T39] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 98.156784][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.183214][ T39] usb 4-1: config 0 descriptor?? [ 98.351878][ T2175] incfs: Options parsing error. -22 [ 98.357089][ T2175] incfs: mount failed -22 [ 98.388560][ T2177] loop0: detected capacity change from 0 to 256 [ 98.480725][ T2177] FAT-fs (loop0): Directory bread(block 64) failed [ 98.487151][ T2177] FAT-fs (loop0): Directory bread(block 65) failed [ 98.493673][ T2177] FAT-fs (loop0): Directory bread(block 66) failed [ 98.504270][ T2177] FAT-fs (loop0): Directory bread(block 67) failed [ 98.511260][ T2177] FAT-fs (loop0): Directory bread(block 68) failed [ 98.519010][ T2177] FAT-fs (loop0): Directory bread(block 69) failed [ 98.525767][ T2177] FAT-fs (loop0): Directory bread(block 70) failed [ 98.532469][ T2177] FAT-fs (loop0): Directory bread(block 71) failed [ 98.540883][ T2177] FAT-fs (loop0): Directory bread(block 72) failed [ 98.547353][ T2177] FAT-fs (loop0): Directory bread(block 73) failed [ 98.670201][ T39] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 98.676917][ T39] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 98.686173][ T39] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 98.694473][ T39] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 98.702088][ T39] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 98.710078][ T39] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 98.723416][ T39] isku 0003:1E7D:319C.0009: unknown main item tag 0x0 [ 98.734008][ T39] isku 0003:1E7D:319C.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 98.771975][ T2189] incfs: Can't find or create .index dir in ./file0 [ 98.778754][ T2189] incfs: mount failed -14 [ 98.891807][ T2197] incfs: Can't find or create .index dir in ./file0 [ 98.898596][ T2197] incfs: mount failed -14 [ 98.903892][ T60] usb 4-1: USB disconnect, device number 7 [ 99.198166][ T2211] loop2: detected capacity change from 0 to 256 [ 99.288175][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 99.303852][ T2211] FAT-fs (loop2): Directory bread(block 64) failed [ 99.311572][ T2211] FAT-fs (loop2): Directory bread(block 65) failed [ 99.318371][ T2211] FAT-fs (loop2): Directory bread(block 66) failed [ 99.320644][ T2214] loop0: detected capacity change from 0 to 2048 [ 99.325127][ T2211] FAT-fs (loop2): Directory bread(block 67) failed [ 99.337718][ T2211] FAT-fs (loop2): Directory bread(block 68) failed [ 99.344841][ T2211] FAT-fs (loop2): Directory bread(block 69) failed [ 99.351684][ T2211] FAT-fs (loop2): Directory bread(block 70) failed [ 99.358177][ T2211] FAT-fs (loop2): Directory bread(block 71) failed [ 99.364874][ T2211] FAT-fs (loop2): Directory bread(block 72) failed [ 99.371368][ T2211] FAT-fs (loop2): Directory bread(block 73) failed [ 99.446324][ T2214] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.496401][ T2219] incfs: Can't find or create .index dir in ./file0 [ 99.505424][ T2214] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set [ 99.520604][ T2219] incfs: mount failed -14 [ 99.527474][ T2214] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 30 with max blocks 9 with error 117 [ 99.571035][ T2214] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.571035][ T2214] [ 99.658006][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.682588][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.691380][ T2223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (160 ns). Using initial count to start timer. [ 99.709360][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 99.709432][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.719781][ T2223] kvm: vcpu 0: requested 160 ns lapic timer period limited to 200000 ns [ 99.736178][ T2223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer. [ 99.754734][ T39] usb 2-1: config 0 descriptor?? [ 100.238616][ T39] hid (null): report_id 0 is invalid [ 100.260275][ T39] logitech-hidpp-device 0003:046D:C086.000A: report_id 0 is invalid [ 100.275210][ T39] logitech-hidpp-device 0003:046D:C086.000A: item 0 0 1 8 parsing failed [ 100.297232][ T39] logitech-hidpp-device 0003:046D:C086.000A: hidpp_probe:parse failed [ 100.312314][ T2262] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (160 ns). Using initial count to start timer. [ 100.315349][ T39] logitech-hidpp-device: probe of 0003:046D:C086.000A failed with error -22 [ 100.330195][ T2262] kvm: vcpu 0: requested 160 ns lapic timer period limited to 200000 ns [ 100.347221][ T2262] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer. [ 100.487190][ T60] usb 2-1: USB disconnect, device number 6 [ 100.779301][ T2296] incfs: Options parsing error. -22 [ 100.801131][ T2296] incfs: mount failed -22 [ 101.000800][ T338] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 101.125541][ T2322] incfs: Can't find or create .index dir in ./file0 [ 101.132206][ T2322] incfs: mount failed -14 [ 101.190425][ T2327] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.248860][ T338] usb 1-1: Using ep0 maxpacket: 16 [ 101.372980][ T338] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.394954][ T338] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.405460][ T338] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 101.415015][ T338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.432500][ T338] usb 1-1: config 0 descriptor?? [ 102.394724][ T338] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 102.406357][ T338] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 102.434045][ T338] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 102.478193][ T338] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 102.533607][ T338] savu 0003:1E7D:2D5A.000B: unknown main item tag 0x0 [ 102.553628][ T338] savu 0003:1E7D:2D5A.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 102.568832][ T2363] loop1: detected capacity change from 0 to 1024 [ 102.583193][ T2363] EXT4-fs (loop1): Ignoring removed orlov option [ 102.589561][ T2363] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 102.601504][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 102.601537][ T30] audit: type=1400 audit(3114628144.988:383): avc: denied { setopt } for pid=2358 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.678690][ T30] audit: type=1400 audit(3114628145.009:384): avc: denied { write } for pid=2358 comm="syz-executor.2" path="socket:[24754]" dev="sockfs" ino=24754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.705477][ T2363] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 102.766616][ T60] usb 1-1: USB disconnect, device number 5 [ 102.778728][ T30] audit: type=1400 audit(3114628145.177:385): avc: denied { map } for pid=2362 comm="syz-executor.1" path="/root/syzkaller-testdir993081410/syzkaller.1obATb/16/file1/file0/bus" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 102.819808][ T2363] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 102.834157][ T2363] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 102.868030][ T30] audit: type=1400 audit(3114628145.261:386): avc: denied { remove_name } for pid=2019 comm="syz-executor.1" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.891834][ T30] audit: type=1400 audit(3114628145.271:387): avc: denied { rmdir } for pid=2019 comm="syz-executor.1" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.917298][ T30] audit: type=1400 audit(3114628145.271:388): avc: denied { unlink } for pid=2019 comm="syz-executor.1" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.983348][ T30] audit: type=1400 audit(3114628145.271:389): avc: denied { unlink } for pid=2019 comm="syz-executor.1" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 103.049759][ T30] audit: type=1400 audit(3114628145.271:390): avc: denied { unmount } for pid=2019 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 103.086674][ T30] audit: type=1400 audit(3114628145.292:391): avc: denied { unlink } for pid=2019 comm="syz-executor.1" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.109093][ T30] audit: type=1400 audit(3114628145.292:392): avc: denied { unmount } for pid=2019 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 103.183529][ T2393] tipc: Failed to remove unknown binding: 66,1,1/0:692932250/692932252 [ 103.207071][ T2393] tipc: Failed to remove unknown binding: 66,1,1/0:692932250/692932252 [ 103.326318][ T2398] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.349539][ T2403] syz-executor.0[2403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.349689][ T2403] syz-executor.0[2403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.421964][ T2402] incfs: Can't find or create .index dir in ./file0 [ 103.447405][ T2405] loop1: detected capacity change from 0 to 1024 [ 103.467533][ T2402] incfs: mount failed -14 [ 103.576587][ T2405] EXT4-fs (loop1): Ignoring removed orlov option [ 103.592750][ T2405] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 103.693357][ T2405] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 104.550688][ T2405] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 104.604267][ T2405] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 104.652855][ T2429] tipc: Failed to remove unknown binding: 66,1,1/0:1717679467/1717679469 [ 104.669653][ T2429] tipc: Failed to remove unknown binding: 66,1,1/0:1717679467/1717679469 [ 104.691359][ T2019] ================================================================== [ 104.699313][ T2019] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 104.707217][ T2019] Read of size 4 at addr ffff88812cf28000 by task syz-executor.1/2019 [ 104.715192][ T2019] [ 104.717369][ T2019] CPU: 0 PID: 2019 Comm: syz-executor.1 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 104.728819][ T2019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 104.738714][ T2019] Call Trace: [ 104.741839][ T2019] [ 104.744616][ T2019] dump_stack_lvl+0x151/0x1b7 2068/09/11 22:29:07 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 104.749229][ T2019] ? io_uring_drop_tctx_refs+0x190/0x190 [ 104.754737][ T2019] ? panic+0x751/0x751 [ 104.758709][ T2019] print_address_description+0x87/0x3b0 [ 104.764087][ T2019] kasan_report+0x179/0x1c0 [ 104.768508][ T2019] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 104.773994][ T2019] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 104.779449][ T2019] __asan_report_load4_noabort+0x14/0x20 [ 104.785119][ T2019] ext4_xattr_delete_inode+0xcd0/0xce0 [ 104.790404][ T2019] ? sb_end_intwrite+0x120/0x120 [ 104.795166][ T2019] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 104.801161][ T2019] ? ext4_journal_check_start+0x16c/0x230 [ 104.806807][ T2019] ? __kasan_check_read+0x11/0x20 [ 104.811838][ T2019] ? ext4_inode_is_fast_symlink+0x295/0x3d0 [ 104.817655][ T2019] ? ext4_evict_inode+0xb8d/0x14e0 [ 104.822604][ T2019] ext4_evict_inode+0xea1/0x14e0 [ 104.827376][ T2019] ? _raw_spin_unlock+0x4d/0x70 [ 104.832172][ T2019] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 104.837879][ T2019] ? _raw_spin_unlock+0x4d/0x70 [ 104.842566][ T2019] ? inode_io_list_del+0x18b/0x1a0 [ 104.847613][ T2019] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 104.853342][ T2019] evict+0x2a3/0x630 [ 104.857172][ T2019] iput+0x63b/0x7e0 [ 104.860816][ T2019] vfs_rmdir+0x359/0x470 [ 104.864877][ T2019] do_rmdir+0x3ab/0x630 [ 104.868871][ T2019] ? d_delete_notify+0x160/0x160 [ 104.873833][ T2019] __x64_sys_unlinkat+0xdf/0xf0 [ 104.878502][ T2019] do_syscall_64+0x3d/0xb0 [ 104.882838][ T2019] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 104.888571][ T2019] RIP: 0033:0x7f49f1d2e707 [ 104.892837][ T2019] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 104.912265][ T2019] RSP: 002b:00007ffebdd2bd98 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 104.920695][ T2019] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f49f1d2e707 [ 104.928501][ T2019] RDX: 0000000000000200 RSI: 00007ffebdd2cf40 RDI: 00000000ffffff9c [ 104.936320][ T2019] RBP: 00007f49f1d8b6c6 R08: 0000000000000000 R09: 0000000000000000 [ 104.944138][ T2019] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffebdd2cf40 [ 104.952029][ T2019] R13: 00007f49f1d8b6c6 R14: 000000000001942b R15: 0000000000000008 [ 104.959855][ T2019] [ 104.962792][ T2019] [ 104.964955][ T2019] Allocated by task 2019: [ 104.969146][ T2019] __kasan_slab_alloc+0xb1/0xe0 [ 104.973814][ T2019] slab_post_alloc_hook+0x53/0x2c0 [ 104.978782][ T2019] kmem_cache_alloc+0xf5/0x200 [ 104.983359][ T2019] __alloc_skb+0xbe/0x550 [ 104.987525][ T2019] __ipv6_ifa_notify+0x2e1/0x11c0 [ 104.992478][ T2019] inet6_addr_add+0x628/0x9b0 [ 104.996988][ T2019] inet6_rtm_newaddr+0x98d/0x26b0 [ 105.001848][ T2019] rtnetlink_rcv_msg+0x951/0xc40 [ 105.006715][ T2019] netlink_rcv_skb+0x1cf/0x410 [ 105.011316][ T2019] rtnetlink_rcv+0x1c/0x20 [ 105.015561][ T2019] netlink_unicast+0x8df/0xac0 [ 105.020168][ T2019] netlink_sendmsg+0xa0a/0xd20 [ 105.024766][ T2019] __sys_sendto+0x564/0x720 [ 105.029108][ T2019] __x64_sys_sendto+0xe5/0x100 [ 105.033707][ T2019] do_syscall_64+0x3d/0xb0 [ 105.037968][ T2019] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 105.043692][ T2019] [ 105.045857][ T2019] Freed by task 2019: [ 105.049681][ T2019] kasan_set_track+0x4b/0x70 [ 105.054100][ T2019] kasan_set_free_info+0x23/0x40 [ 105.058878][ T2019] ____kasan_slab_free+0x126/0x160 [ 105.063828][ T2019] __kasan_slab_free+0x11/0x20 [ 105.068423][ T2019] slab_free_freelist_hook+0xbd/0x190 [ 105.073637][ T2019] kmem_cache_free+0x116/0x2e0 [ 105.078233][ T2019] kfree_skbmem+0x104/0x170 [ 105.082666][ T2019] consume_skb+0xb4/0x250 [ 105.086937][ T2019] netlink_broadcast_filtered+0x10f4/0x1220 [ 105.092671][ T2019] nlmsg_notify+0x101/0x1c0 [ 105.097011][ T2019] rtnl_notify+0x9c/0xd0 [ 105.101084][ T2019] __ipv6_ifa_notify+0x32a/0x11c0 [ 105.105944][ T2019] inet6_addr_add+0x628/0x9b0 [ 105.110469][ T2019] inet6_rtm_newaddr+0x98d/0x26b0 [ 105.115403][ T2019] rtnetlink_rcv_msg+0x951/0xc40 [ 105.120182][ T2019] netlink_rcv_skb+0x1cf/0x410 [ 105.124917][ T2019] rtnetlink_rcv+0x1c/0x20 [ 105.129161][ T2019] netlink_unicast+0x8df/0xac0 [ 105.133764][ T2019] netlink_sendmsg+0xa0a/0xd20 [ 105.138365][ T2019] __sys_sendto+0x564/0x720 [ 105.142705][ T2019] __x64_sys_sendto+0xe5/0x100 [ 105.147476][ T2019] do_syscall_64+0x3d/0xb0 [ 105.151748][ T2019] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 105.157465][ T2019] [ 105.159752][ T2019] The buggy address belongs to the object at ffff88812cf28000 [ 105.159752][ T2019] which belongs to the cache skbuff_head_cache of size 248 [ 105.174162][ T2019] The buggy address is located 0 bytes inside of [ 105.174162][ T2019] 248-byte region [ffff88812cf28000, ffff88812cf280f8) [ 105.187205][ T2019] The buggy address belongs to the page: [ 105.192657][ T2019] page:ffffea0004b3ca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12cf28 [ 105.202798][ T2019] flags: 0x4000000000000200(slab|zone=1) [ 105.208396][ T2019] raw: 4000000000000200 ffffea0004a4f540 0000000400000004 ffff888107f98c00 [ 105.216792][ T2019] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 105.225186][ T2019] page dumped because: kasan: bad access detected [ 105.231540][ T2019] page_owner tracks the page as allocated [ 105.237170][ T2019] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1662, ts 80239576347, free_ts 80235833118 [ 105.253158][ T2019] post_alloc_hook+0x1a3/0x1b0 [ 105.257907][ T2019] prep_new_page+0x1b/0x110 [ 105.262259][ T2019] get_page_from_freelist+0x3550/0x35d0 [ 105.267634][ T2019] __alloc_pages+0x27e/0x8f0 [ 105.272118][ T2019] new_slab+0x9a/0x4e0 [ 105.276324][ T2019] ___slab_alloc+0x39e/0x830 [ 105.280964][ T2019] __slab_alloc+0x4a/0x90 [ 105.285130][ T2019] kmem_cache_alloc+0x134/0x200 [ 105.289822][ T2019] __alloc_skb+0xbe/0x550 [ 105.293994][ T2019] inet6_netconf_notify_devconf+0xdd/0x190 [ 105.299863][ T2019] __addrconf_sysctl_register+0x380/0x3e0 [ 105.305481][ T2019] addrconf_sysctl_register+0x141/0x1a0 [ 105.310860][ T2019] ipv6_add_dev+0xc84/0x1140 [ 105.315283][ T2019] addrconf_notify+0x593/0xdd0 [ 105.319886][ T2019] raw_notifier_call_chain+0x8c/0xf0 [ 105.325007][ T2019] call_netdevice_notifiers+0x145/0x1b0 [ 105.330494][ T2019] page last free stack trace: [ 105.335074][ T2019] free_unref_page_prepare+0x7c8/0x7d0 [ 105.340364][ T2019] free_unref_page+0xe8/0x750 [ 105.344971][ T2019] __free_pages+0x61/0xf0 [ 105.349137][ T2019] free_pages+0x7c/0x90 [ 105.353136][ T2019] selinux_genfs_get_sid+0x24d/0x2a0 [ 105.358248][ T2019] inode_doinit_with_dentry+0x8d2/0x1070 [ 105.363735][ T2019] selinux_d_instantiate+0x27/0x40 [ 105.368847][ T2019] security_d_instantiate+0x9f/0x100 [ 105.374249][ T2019] d_splice_alias+0x6d/0x390 [ 105.378648][ T2019] proc_sys_lookup+0x6b3/0x7b0 [ 105.383251][ T2019] path_openat+0x1194/0x2f40 [ 105.387978][ T2019] do_filp_open+0x21c/0x460 [ 105.392313][ T2019] do_sys_openat2+0x13f/0x830 [ 105.396829][ T2019] __x64_sys_openat+0x243/0x290 [ 105.401519][ T2019] do_syscall_64+0x3d/0xb0 [ 105.405771][ T2019] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 105.411769][ T2019] [ 105.413927][ T2019] Memory state around the buggy address: [ 105.419584][ T2019] ffff88812cf27f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.427665][ T2019] ffff88812cf27f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.435837][ T2019] >ffff88812cf28000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 105.443719][ T2019] ^ [ 105.447625][ T2019] ffff88812cf28080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 105.455730][ T2019] ffff88812cf28100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 105.463603][ T2019] ================================================================== [ 105.471586][ T2019] Disabling lock debugging due to kernel taint