last executing test programs: 3.360478189s ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1806000000000000000000000000000071121600000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x1, &(0x7f0000000040)) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000000)) creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) keyctl$search(0xa, r2, &(0x7f0000000080)='id_legacy\x00', &(0x7f0000001a40)={'syz', 0x0}, 0x0) timerfd_create(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 2.703247238s ago: executing program 0: socket$unix(0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000200)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x11, r0, 0xce2df000) fallocate(r0, 0x0, 0x0, 0x800000b) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) 2.57601236s ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f00000004c0)) timer_delete(0x0) 2.162406359s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 2.017435193s ago: executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="0802"], 0x208) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 1.994697937s ago: executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x82b6, 0x0, "b73a6a0d70060010"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) 1.962911792s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8907, &(0x7f0000000380), 0x1f, 0x4da, &(0x7f0000000a40)="$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") socket$pptp(0x18, 0x1, 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6c8, 0x2e0, 0x2e0, 0x2e0, 0x538, 0x2e0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@set4={{0x50}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x728) sync() 1.068673701s ago: executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000042c0)={{0x12, 0x1, 0x0, 0xe, 0x79, 0x57, 0x40, 0x403, 0xf44c, 0xa7d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x37, 0x53, 0x4d, 0x0, [], [{{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) 999.034613ms ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{}]}) 936.707623ms ago: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100742010ff"}) 919.731526ms ago: executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x1000}}], 0x18}}], 0x1, 0x0) 893.86557ms ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 879.481253ms ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae09, 0x0) 877.573503ms ago: executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000023) rt_sigreturn() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001a80), 0x1, 0x0) r3 = dup3(r1, r2, 0x0) read$FUSE(r3, &(0x7f0000003ac0)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 827.293432ms ago: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0xfffc, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}}, 0xb8}}, 0x0) 788.029818ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x6, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfcc4}, 0x48) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x48) 730.605188ms ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000100904"], 0x0) 404.614652ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001f4a46d4850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x90) 392.817644ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000980), &(0x7f0000000a40)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 305.496909ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) 285.769272ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000c82a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 254.423617ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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") lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 253.613627ms ago: executing program 4: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0x60}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 244.793809ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 216.017033ms ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000013c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) read(r1, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) bpf$PROG_LOAD(0x5, 0x0, 0x0) 201.206986ms ago: executing program 1: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x606, &(0x7f0000001040)="$eJzs3c9rXNUeAPDvvcnkJW3eS/sQsUUx4KIFaZrUYtWNbV3YRcGCXYi4aGiSGjr9QZOCrQVTcKGgIOJWpBv/AffSvTsR1J1roYpUFFQycu/caSfJTDptMzNp7ucDN3PPuTNzzndOTu45MzlzAyi3NGJXxPKpJGKsKXu0ODgekW+3f7t2OtuSqNVe/zWJpMhr3H+5uN2e/UgihiPi26MR/x9YW+TClatnp6u1uvci9i+eu7h/4crVffPnps/Mnpk9P3XghYOHJl+cOji1ISFuL26PHX/tyY/ff/v5ue+q+5I4HCcr787Eqjg2yniMx3IRYnP+YEQcynZavC6Pmi0QQqkNFL+PlYh4PMZiIE/VjcX8R32tHNBVleK2BpRQou9DSTXGAY25fWfz4JNdHJH01q0j9QnQ2vgH8/c8IobzMdK220nTzKj+3saODSg/K+Ofa7s/z7ZY8T7En3daZ3ADymln6XpEPNEq/iSv24480iz+dMVcP4mIyYgYKur3ykPUIWna78b7MOu5n/ib2yGNiMPFbZZ/tNMCayuT46sO9zp+AMrp5pHiRL6Upe6e/7KxR2P8Ey3GP6Mtzl0Pot/nv/bjv8b5fjgf96SrxmHZmOVE66esrM746cNjn7Yrv3n8l21Z+Y2xYC/cuh6xe1X8H2TBFuOfLP6kRftndzl1uLMyXv3+l2PtjvU7/tqNiD0t5z93R6XZ3jqfT+6fm6/OTtZ/tizj62/e+rJd+f2OP2v/bW3ib2r/dPXjstfkYodlfHXixrl2x0bvGX/681BSn28OFTnvTC8uXpqKGEqOF3dpyj+wfl0a92k8Rxb/3mda9/8Vv//XVz7PSONPZgcuvnH2drtjD9L+TVOI5VqHdWgni3/m3u2/pv9neZ90WMYfb15+qt2x9eIfeZjAAAAAAAAAoITS/DPYJJ24s5+mExP19bKPxba0emFh8dm5C5fPz0Tszf8fspI2Pukeq6eTLD1V/D9sI31gVfq5iNgZEZ8NjOTpidMXqjP9Dh4AAAAAAAAAAAAAAAAAAAA2ie3F+v/Gdap/H6iv/wdKopsXmAM2N/0fyivv/2su8QSUgfM/lJf+D+Wl/0N56f9QWiP6P5SX/g/lpf9Deen/AAAAALAl7Xz65o9JRCy9NJJvmaHimBVBsLVV+l0BoG8G+l0BoG/ufPRvsA+l09H4/6/iywG7Xx2gD5JWmfngoLZ+57/Z8pEAAAAAAAAAAAAAQBfs2dV+/b+1wbC1WfYH5fUQ6/99dQA84nz1P5SXOT5wr1X8w+0OWP8PAAAAAAAAAAAAAD0zmm9JOlGsBR6NNJ2YiPhvROyISjI3X52djIj/RcQPA5X/ZOmpflcaAAAAAAAAAAAAAAAAAAAAtpiFK1fPTlers5ead/5ek7O1dxpXQe1BWS/HfT4qkt6/LCMR0fdG6drOYFNOErGUtfymqNilhdgc1ch3+vyHCQAAAAAAAAAAAAAAAAAASqhp7XFru7/ocY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoPfuXv+/ezv9jhEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDT9GwAA//9kcT0X") getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) 74.650567ms ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 50.509732ms ago: executing program 4: r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 34.108254ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) 0s ago: executing program 1: unshare(0x6020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}], 0x8) kernel console output (not intermixed with test programs): 324] usb 5-1: Product: syz [ 37.664288][ T324] usb 5-1: Manufacturer: syz [ 37.669069][ T324] usb 5-1: SerialNumber: syz [ 37.744820][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 37.744888][ T28] audit: type=1400 audit(1718629917.913:226): avc: denied { create } for pid=953 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.826069][ T957] syz-executor.3[957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.826405][ T957] syz-executor.3[957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.959644][ T19] usb 2-1: string descriptor 0 read error: -71 [ 37.980223][ T324] usb 5-1: config 0 descriptor?? [ 38.007436][ T19] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 38.017640][ T19] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 38.025812][ T19] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 38.035518][ T19] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 38.042980][ T19] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 38.052151][ T19] usb 2-1: USB disconnect, device number 4 [ 38.252959][ T28] audit: type=1400 audit(1718629918.403:227): avc: denied { create } for pid=963 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 38.360586][ T28] audit: type=1400 audit(1718629918.413:228): avc: denied { read } for pid=963 comm="syz-executor.3" name="file0" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 38.480372][ T28] audit: type=1400 audit(1718629918.413:229): avc: denied { open } for pid=963 comm="syz-executor.3" path="/root/syzkaller-testdir628916902/syzkaller.sAUU8T/55/file0" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 38.538643][ T28] audit: type=1326 audit(1718629918.703:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=969 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6fa87cf29 code=0x0 [ 38.577362][ T324] usb 5-1: MIDIStreaming interface descriptor not found [ 38.605379][ T324] usb 5-1: USB disconnect, device number 4 [ 38.711453][ T988] device syzkaller0 entered promiscuous mode [ 38.740055][ T990] syz-executor.2[990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.740129][ T990] syz-executor.2[990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.783334][ T952] loop0: detected capacity change from 0 to 262144 [ 38.805047][ T952] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.836864][ T28] audit: type=1326 audit(1718629919.003:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fa87cf29 code=0x7ffc0000 [ 38.888134][ T28] audit: type=1326 audit(1718629919.003:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fa87cf29 code=0x7ffc0000 [ 38.914370][ T28] audit: type=1326 audit(1718629919.003:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fa6fa87cf29 code=0x7ffc0000 [ 38.938812][ T28] audit: type=1326 audit(1718629919.003:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fa87cf29 code=0x7ffc0000 [ 38.938839][ T952] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 38.938864][ T28] audit: type=1326 audit(1718629919.033:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=997 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6fa87cf29 code=0x7ffc0000 [ 39.153121][ T1019] loop4: detected capacity change from 0 to 512 [ 39.166396][ T1019] FAT-fs (loop4): bogus sectors per cluster 69 [ 39.188613][ T1019] FAT-fs (loop4): Can't find a valid FAT filesystem [ 39.717217][ T324] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.893204][ T1042] loop1: detected capacity change from 0 to 512 [ 39.899858][ T1042] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.906550][ T1042] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.919871][ T1042] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.931966][ T1042] EXT4-fs (loop1): 1 truncate cleaned up [ 39.937674][ T1042] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.954004][ T313] EXT4-fs (loop1): unmounting filesystem. [ 39.978206][ T324] usb 4-1: Using ep0 maxpacket: 32 [ 40.076520][ T1064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 40.097344][ T324] usb 4-1: config index 0 descriptor too short (expected 4114, got 18) [ 40.298046][ T324] usb 4-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=20.8a [ 40.307046][ T324] usb 4-1: New USB device strings: Mfr=25, Product=9, SerialNumber=2 [ 40.314921][ T324] usb 4-1: Product: syz [ 40.318895][ T324] usb 4-1: Manufacturer: syz [ 40.323293][ T324] usb 4-1: SerialNumber: syz [ 40.328375][ T324] usb 4-1: config 0 descriptor?? [ 40.359978][ T1072] loop0: detected capacity change from 0 to 512 [ 40.374279][ T1076] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 40.386339][ T1072] FAT-fs (loop0): bogus sectors per cluster 69 [ 40.392775][ T1072] FAT-fs (loop0): Can't find a valid FAT filesystem [ 40.416420][ T1076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 40.428782][ T1083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 40.450417][ T340] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.521007][ T1097] geneve1: tun_chr_ioctl cmd 35108 [ 40.569874][ T40] usb 4-1: USB disconnect, device number 3 [ 40.600196][ T1105] loop2: detected capacity change from 0 to 512 [ 40.606851][ T1105] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.610825][ T1109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 40.622846][ T1105] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.634702][ T1105] EXT4-fs (loop2): 1 truncate cleaned up [ 40.640410][ T1105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.659438][ T1112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 40.659537][ T314] EXT4-fs (loop2): unmounting filesystem. [ 40.797238][ T602] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.900688][ T1135] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 40.930403][ T1137] loop1: detected capacity change from 0 to 512 [ 40.936966][ T1137] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.946455][ T1137] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.958150][ T1137] EXT4-fs (loop1): 1 truncate cleaned up [ 40.963713][ T1137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.979984][ T313] EXT4-fs (loop1): unmounting filesystem. [ 40.997269][ T1141] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.238130][ T602] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 41.247272][ T602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.256076][ T602] usb 5-1: config 0 descriptor?? [ 41.268220][ T1165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 41.279137][ T1165] bridge0: port 3(vlan2) entered blocking state [ 41.285196][ T1165] bridge0: port 3(vlan2) entered disabled state [ 41.294583][ T1167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.304557][ T1156] syz-executor.2 (pid 1156) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 41.321126][ T1156] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 41.725580][ T1099] binder: 1098:1099 ioctl c0306201 20000380 returned -14 [ 41.734855][ T324] usb 5-1: USB disconnect, device number 5 [ 41.781520][ T1193] loop1: detected capacity change from 0 to 512 [ 41.802159][ T1193] FAT-fs (loop1): bogus sectors per cluster 69 [ 41.808399][ T1193] FAT-fs (loop1): Can't find a valid FAT filesystem [ 42.419846][ T1210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 42.577282][ T317] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 42.750526][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 42.750543][ T28] audit: type=1400 audit(1718629922.923:248): avc: denied { ioctl } for pid=1234 comm="syz-executor.3" path="/dev/uinput" dev="devtmpfs" ino=170 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 42.787338][ T1235] input: syz0 as /devices/virtual/input/input5 [ 42.852252][ T317] usb 3-1: Using ep0 maxpacket: 16 [ 43.018290][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.110764][ T317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.121254][ T317] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.134523][ T317] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 43.143860][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.156283][ T317] usb 3-1: config 0 descriptor?? [ 43.228184][ T1247] loop0: detected capacity change from 0 to 128 [ 43.249605][ T1249] device syz_tun entered promiscuous mode [ 43.263830][ T1249] device macsec1 entered promiscuous mode [ 43.270577][ T1249] device syz_tun left promiscuous mode [ 43.369783][ T1252] loop1: detected capacity change from 0 to 512 [ 43.377333][ T1252] FAT-fs (loop1): bogus sectors per cluster 69 [ 43.389467][ T1252] FAT-fs (loop1): Can't find a valid FAT filesystem [ 43.647423][ T317] koneplus 0003:1E7D:2E22.0002: unknown main item tag 0x0 [ 43.795010][ T317] koneplus 0003:1E7D:2E22.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 43.847912][ T317] koneplus 0003:1E7D:2E22.0002: couldn't init struct koneplus_device [ 43.858953][ T317] koneplus 0003:1E7D:2E22.0002: couldn't install mouse [ 43.867940][ T317] koneplus: probe of 0003:1E7D:2E22.0002 failed with error -71 [ 43.885018][ T317] usb 3-1: USB disconnect, device number 4 [ 43.916519][ T1267] loop4: detected capacity change from 0 to 256 [ 44.584662][ T28] audit: type=1400 audit(1718629924.753:249): avc: denied { create } for pid=1300 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.606337][ T1302] sch_fq: defrate 0 ignored. [ 44.631846][ T28] audit: type=1400 audit(1718629924.783:250): avc: denied { read } for pid=1300 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.708680][ T1314] loop2: detected capacity change from 0 to 256 [ 44.778384][ T1321] loop2: detected capacity change from 0 to 256 [ 44.828112][ T495] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.840309][ T1321] request_module fs-nfs succeeded, but still no fs? [ 45.053029][ T1342] loop4: detected capacity change from 0 to 512 [ 45.063742][ T1342] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.090639][ T1342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.102915][ T1342] EXT4-fs (loop4): 1 truncate cleaned up [ 45.137275][ T1342] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.343664][ T310] EXT4-fs (loop4): unmounting filesystem. [ 45.557585][ T1360] __nla_validate_parse: 2 callbacks suppressed [ 45.557604][ T1360] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 45.748334][ T1376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 45.758914][ T1376] device syz_tun entered promiscuous mode [ 45.764495][ T1376] device macsec1 entered promiscuous mode [ 45.770845][ T1376] device syz_tun left promiscuous mode [ 46.136138][ T1381] loop2: detected capacity change from 0 to 8192 [ 46.385797][ T1407] overlayfs: unrecognized mount option "euid<00000000000000000000" or missing value [ 46.526568][ T28] audit: type=1400 audit(2000000001.280:251): avc: denied { wake_alarm } for pid=1422 comm="syz-executor.3" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.576144][ T1423] loop3: detected capacity change from 0 to 2048 [ 46.616256][ T1423] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.638433][ T1423] ext4 filesystem being mounted at /root/syzkaller-testdir628916902/syzkaller.sAUU8T/83/file0 supports timestamps until 2038 (0x7fffffff) [ 46.664526][ T28] audit: type=1400 audit(2000000001.420:252): avc: denied { read } for pid=1422 comm="syz-executor.3" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.694222][ T28] audit: type=1400 audit(2000000001.440:253): avc: denied { open } for pid=1422 comm="syz-executor.3" path="/root/syzkaller-testdir628916902/syzkaller.sAUU8T/83/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.724915][ T1423] futex_wake_op: syz-executor.3 tries to shift op by -1; fix this program [ 46.739521][ T28] audit: type=1400 audit(2000000001.500:254): avc: denied { write } for pid=1422 comm="syz-executor.3" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.739559][ T1423] fs-verity: sha512 using implementation "sha512-avx2" [ 46.773504][ T1437] device pim6reg1 entered promiscuous mode [ 46.774833][ T28] audit: type=1400 audit(2000000001.500:255): avc: denied { ioctl } for pid=1422 comm="syz-executor.3" path="/root/syzkaller-testdir628916902/syzkaller.sAUU8T/83/file0/file0/file0" dev="loop3" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.810476][ T1441] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 46.854611][ T312] EXT4-fs (loop3): unmounting filesystem. [ 47.409099][ T28] audit: type=1400 audit(2000000002.170:256): avc: denied { block_suspend } for pid=1446 comm="syz-executor.4" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.594057][ T1454] overlayfs: unrecognized mount option "euid<00000000000000000000" or missing value [ 47.683551][ T1468] loop0: detected capacity change from 0 to 8192 [ 47.759074][ T1476] loop4: detected capacity change from 0 to 256 [ 47.775793][ T1476] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 47.788778][ T1476] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 47.805244][ T28] audit: type=1400 audit(2000000002.560:257): avc: denied { write } for pid=1475 comm="syz-executor.4" path="/root/syzkaller-testdir4056366783/syzkaller.GZsmwu/73/bus/bus" dev="loop4" ino=1048624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.937429][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 47.948704][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 47.959621][ T1488] device syz_tun entered promiscuous mode [ 47.966241][ T1488] device macsec1 entered promiscuous mode [ 47.973496][ T1488] device syz_tun left promiscuous mode [ 48.072732][ T28] audit: type=1400 audit(2000000002.830:258): avc: denied { read } for pid=1496 comm="syz-executor.2" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 48.095685][ T28] audit: type=1400 audit(2000000002.830:259): avc: denied { open } for pid=1496 comm="syz-executor.2" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 48.122699][ T1492] overlayfs: unrecognized mount option "euid<00000000000000000000" or missing value [ 48.179391][ T1504] loop2: detected capacity change from 0 to 512 [ 48.187448][ T1503] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.187725][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 48.210953][ T1504] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.229870][ T1504] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz-executor.2: bad orphan inode 16 [ 48.245511][ T1504] ext4_test_bit(bit=15, block=4) = 0 [ 48.256764][ T1504] EXT4-fs (loop2): 1 orphan inode deleted [ 48.265469][ T1504] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.269786][ T40] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 48.291070][ T1504] EXT4-fs (loop2): unmounting filesystem. [ 48.293240][ T1516] loop0: detected capacity change from 0 to 256 [ 48.303834][ T1516] exfat: Deprecated parameter 'namecase' [ 48.313502][ T1516] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe1967d45, utbl_chksum : 0xe619d30d) [ 48.389863][ T1513] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 48.527211][ T40] usb 5-1: Using ep0 maxpacket: 16 [ 48.527261][ T19] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 48.541158][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.549052][ T19] usb 4-1: Product: syz [ 48.553133][ T19] usb 4-1: Manufacturer: syz [ 48.557523][ T19] usb 4-1: SerialNumber: syz [ 48.563192][ T19] usb 4-1: config 0 descriptor?? [ 48.580517][ T1529] overlayfs: unrecognized mount option "euid<00000000000000000000" or missing value [ 48.647315][ T40] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.658601][ T40] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 48.668630][ T40] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 48.757255][ T40] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.766201][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.774005][ T40] usb 5-1: SerialNumber: syz [ 48.797325][ T1490] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 48.817776][ T40] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 48.935106][ T1541] loop2: detected capacity change from 0 to 8192 [ 49.037827][ T40] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 49.051001][ T40] usb 5-1: USB disconnect, device number 6 [ 49.077990][ T19] usb 4-1: MIDIStreaming interface descriptor not found [ 49.088587][ T19] usb 4-1: USB disconnect, device number 4 [ 49.096318][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.145474][ T1547] loop1: detected capacity change from 0 to 256 [ 49.152248][ T1547] exfat: Deprecated parameter 'namecase' [ 49.161090][ T1547] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe1967d45, utbl_chksum : 0xe619d30d) [ 49.861823][ T1590] overlayfs: unrecognized mount option "euid<00000000000000000000" or missing value [ 49.946032][ T28] audit: type=1400 audit(2000000004.700:260): avc: denied { getopt } for pid=1593 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.480742][ T1583] device veth0_vlan left promiscuous mode [ 50.486981][ T1583] device veth0_vlan entered promiscuous mode [ 50.597118][ T1616] loop1: detected capacity change from 0 to 256 [ 50.613472][ T1616] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 50.726161][ T1620] syz-executor.1[1620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.726235][ T1620] syz-executor.1[1620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.756380][ T28] audit: type=1400 audit(2000000000.450:261): avc: denied { audit_read } for pid=1622 comm="syz-executor.0" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.791340][ T1626] loop1: detected capacity change from 0 to 256 [ 50.875084][ T1626] FAT-fs (loop1): Directory bread(block 64) failed [ 50.903828][ T1621] sch_fq: defrate 0 ignored. [ 50.908647][ T1626] FAT-fs (loop1): Directory bread(block 65) failed [ 50.919456][ T1626] FAT-fs (loop1): Directory bread(block 66) failed [ 50.927542][ T1626] FAT-fs (loop1): Directory bread(block 67) failed [ 50.934035][ T1626] FAT-fs (loop1): Directory bread(block 68) failed [ 50.955682][ T1626] FAT-fs (loop1): Directory bread(block 69) failed [ 50.962366][ T1626] FAT-fs (loop1): Directory bread(block 70) failed [ 50.968795][ T1626] FAT-fs (loop1): Directory bread(block 71) failed [ 50.975365][ T1626] FAT-fs (loop1): Directory bread(block 72) failed [ 50.988731][ T1626] FAT-fs (loop1): Directory bread(block 73) failed [ 51.521436][ T1655] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 51.782104][ T1666] input: syz0 as /devices/virtual/input/input11 [ 51.861560][ T1678] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 51.895527][ T1678] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 51.904371][ T1680] loop4: detected capacity change from 0 to 2048 [ 51.923434][ T1678] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 51.941754][ T1678] device veth0_vlan left promiscuous mode [ 51.947788][ T1678] device veth0_vlan entered promiscuous mode [ 51.954857][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.192884][ T1680] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 52.256045][ T1680] ext4 filesystem being mounted at /root/syzkaller-testdir4056366783/syzkaller.GZsmwu/84/file0 supports timestamps until 2038 (0x7fffffff) [ 52.289788][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.297254][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.314996][ T1696] loop2: detected capacity change from 0 to 256 [ 52.333869][ T28] audit: type=1400 audit(2000000002.030:262): avc: denied { map } for pid=1679 comm="syz-executor.4" path="/root/syzkaller-testdir4056366783/syzkaller.GZsmwu/84/file0/file0/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.340670][ T1698] loop1: detected capacity change from 0 to 512 [ 52.377016][ T28] audit: type=1326 audit(2000000002.070:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1695 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6fa87cf29 code=0x0 [ 52.379394][ T310] EXT4-fs (loop4): unmounting filesystem. [ 52.426312][ T1698] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 52.438185][ T1698] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 52.449422][ T1698] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 52.463292][ T1698] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 52.478293][ T1698] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 52.491816][ T1698] EXT4-fs (loop1): Remounting filesystem read-only [ 52.499438][ T1698] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 52.526463][ T1698] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.558162][ T28] audit: type=1400 audit(2000000002.260:264): avc: denied { mounton } for pid=1695 comm="syz-executor.2" path=2F726F6F742F73797A6B616C6C65722D74657374646972323835303139333935392F73797A6B616C6C65722E4F6D793244492F3130312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="loop2" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 52.616297][ T1710] device veth0_vlan left promiscuous mode [ 52.622610][ T1710] device veth0_vlan entered promiscuous mode [ 52.630195][ T313] EXT4-fs (loop1): unmounting filesystem. [ 52.738628][ T1718] input: syz0 as /devices/virtual/input/input12 [ 53.066128][ T28] audit: type=1400 audit(2000000002.760:265): avc: denied { bind } for pid=1729 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.097585][ T1732] input: syz1 as /devices/virtual/input/input13 [ 53.297237][ T19] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 53.375017][ T1753] loop4: detected capacity change from 0 to 256 [ 53.386937][ T1753] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 53.453247][ T1763] loop4: detected capacity change from 0 to 256 [ 53.473287][ T28] audit: type=1326 audit(2000000003.170:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1762 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6de687cf29 code=0x0 [ 53.502504][ T1767] x_tables: duplicate underflow at hook 1 [ 53.541171][ T1769] syz-executor.2[1769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.541250][ T1769] syz-executor.2[1769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.568737][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 53.625497][ T1777] loop1: detected capacity change from 0 to 128 [ 53.700652][ T1777] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000401) [ 53.713635][ T1777] FAT-fs (loop1): Filesystem has been set read-only [ 54.954105][ T1797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 54.963631][ T1797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 54.980442][ T19] usb 4-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 54.989393][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.997120][ T19] usb 4-1: Product: syz [ 55.001304][ T19] usb 4-1: Manufacturer: syz [ 55.005769][ T19] usb 4-1: SerialNumber: syz [ 55.011965][ T19] usb 4-1: config 0 descriptor?? [ 55.212064][ T1815] syz-executor.0[1815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.212140][ T1815] syz-executor.0[1815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.228151][ T1815] loop0: detected capacity change from 0 to 256 [ 55.255519][ T1815] FAT-fs (loop0): Directory bread(block 64) failed [ 55.288379][ T1815] FAT-fs (loop0): Directory bread(block 65) failed [ 55.296429][ T1815] FAT-fs (loop0): Directory bread(block 66) failed [ 55.340760][ T1815] FAT-fs (loop0): Directory bread(block 67) failed [ 55.372509][ T1815] FAT-fs (loop0): Directory bread(block 68) failed [ 55.465737][ T1815] FAT-fs (loop0): Directory bread(block 69) failed [ 55.589061][ T1815] FAT-fs (loop0): Directory bread(block 70) failed [ 55.607891][ T1815] FAT-fs (loop0): Directory bread(block 71) failed [ 55.616614][ T1815] FAT-fs (loop0): Directory bread(block 72) failed [ 55.625940][ T28] audit: type=1326 audit(2000000005.330:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6fa87cf29 code=0x0 [ 55.635094][ T1815] FAT-fs (loop0): Directory bread(block 73) failed [ 55.650583][ T19] usb 4-1: MIDIStreaming interface descriptor not found [ 55.665708][ T19] usb 4-1: USB disconnect, device number 5 [ 55.808620][ T28] audit: type=1326 audit(2000000005.510:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de687cf29 code=0x7ffc0000 [ 56.137909][ T28] audit: type=1326 audit(2000000005.510:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de687cf29 code=0x7ffc0000 [ 56.162194][ T28] audit: type=1326 audit(2000000005.510:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f6de687cf29 code=0x7ffc0000 [ 56.231775][ T28] audit: type=1326 audit(2000000005.510:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de687cf29 code=0x7ffc0000 [ 56.256005][ T28] audit: type=1326 audit(2000000005.510:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de687cf29 code=0x7ffc0000 [ 56.315425][ T28] audit: type=1326 audit(2000000005.510:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6de687cf29 code=0x7ffc0000 [ 56.342452][ T28] audit: type=1326 audit(2000000005.510:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de687cf29 code=0x7ffc0000 [ 56.385472][ T1847] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 56.592043][ T1853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 56.717916][ T1864] syz-executor.1[1864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.718001][ T1864] syz-executor.1[1864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.744156][ T1864] loop1: detected capacity change from 0 to 256 [ 56.796323][ T1864] FAT-fs (loop1): Directory bread(block 64) failed [ 56.803956][ T1864] FAT-fs (loop1): Directory bread(block 65) failed [ 56.810441][ T1870] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 56.810819][ T1864] FAT-fs (loop1): Directory bread(block 66) failed [ 56.825555][ T1864] FAT-fs (loop1): Directory bread(block 67) failed [ 56.832372][ T1864] FAT-fs (loop1): Directory bread(block 68) failed [ 56.852891][ T1864] FAT-fs (loop1): Directory bread(block 69) failed [ 56.865977][ T1868] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.872955][ T1864] FAT-fs (loop1): Directory bread(block 70) failed [ 56.873170][ T1868] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.886817][ T1868] device bridge_slave_0 entered promiscuous mode [ 56.893981][ T1868] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.900970][ T1864] FAT-fs (loop1): Directory bread(block 71) failed [ 56.907515][ T1868] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.917232][ T1864] FAT-fs (loop1): Directory bread(block 72) failed [ 56.937019][ T1868] device bridge_slave_1 entered promiscuous mode [ 56.943287][ T1864] FAT-fs (loop1): Directory bread(block 73) failed [ 57.437753][ T1868] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.444638][ T1868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.451783][ T1868] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.458644][ T1868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.491917][ T1570] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.505621][ T1570] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.615995][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.638092][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.669164][ T1891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 57.672426][ T1893] loop3: detected capacity change from 0 to 256 [ 57.688953][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.708293][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.726474][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.733374][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.753303][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.761725][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.769987][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.776878][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.784317][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.792309][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.837097][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.848083][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.859581][ T1899] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 57.875692][ T1868] device veth0_vlan entered promiscuous mode [ 59.161581][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.197613][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.206064][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.214031][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.223474][ T1921] loop1: detected capacity change from 0 to 2048 [ 59.242659][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.250171][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.257222][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 59.257236][ T28] audit: type=1400 audit(2000000008.950:335): avc: denied { create } for pid=1916 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.287959][ T1868] device veth1_macvtap entered promiscuous mode [ 59.293754][ T28] audit: type=1400 audit(2000000008.960:336): avc: denied { getopt } for pid=1916 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.303394][ T1921] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.325513][ T28] audit: type=1400 audit(2000000009.020:337): avc: denied { mount } for pid=1920 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.350937][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.352013][ T1931] loop3: detected capacity change from 0 to 256 [ 59.381380][ T28] audit: type=1400 audit(2000000009.070:338): avc: denied { view } for pid=1920 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.392457][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.408910][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.416657][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.424883][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.433617][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.441877][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.450810][ T342] device bridge_slave_1 left promiscuous mode [ 59.458121][ T28] audit: type=1400 audit(2000000009.070:339): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.460132][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.482142][ T28] audit: type=1400 audit(2000000009.070:340): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.520944][ T28] audit: type=1400 audit(2000000009.070:341): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.551103][ T342] device bridge_slave_0 left promiscuous mode [ 59.557143][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.565553][ T342] device veth1_macvtap left promiscuous mode [ 59.571932][ T342] device veth0_vlan left promiscuous mode [ 59.690157][ T1934] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 59.698207][ T1934] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 59.706116][ T1934] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 59.714064][ T1934] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 59.721960][ T1934] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 59.729999][ T1934] netlink: 'syz-executor.1': attribute type 37 has an invalid length. [ 59.738064][ T1934] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 59.745977][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.762655][ T28] audit: type=1400 audit(2000000009.460:342): avc: denied { mounton } for pid=1868 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.790984][ T28] audit: type=1400 audit(2000000009.460:343): avc: denied { unmount } for pid=313 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.796389][ T313] EXT4-fs (loop1): unmounting filesystem. [ 59.836582][ T1957] device veth0_vlan left promiscuous mode [ 59.855787][ T1957] device veth0_vlan entered promiscuous mode [ 59.890904][ T1967] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 59.944343][ T28] audit: type=1400 audit(2000000009.640:344): avc: denied { unlink } for pid=1973 comm="syz-executor.1" name="#1" dev="sda1" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 60.017649][ T1983] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 60.026363][ T1983] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 60.047446][ T1983] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 60.055498][ T1983] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.337230][ T19] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 60.389108][ T2025] loop1: detected capacity change from 0 to 256 [ 60.472379][ T2028] fuse: Bad value for 'fd' [ 60.748301][ T2031] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 60.847240][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 60.931700][ T2050] loop1: detected capacity change from 0 to 512 [ 60.958224][ T2050] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.981069][ T2050] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 16 [ 60.991525][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 61.003483][ T19] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 61.014403][ T2050] ext4_test_bit(bit=15, block=4) = 0 [ 61.019613][ T2050] EXT4-fs (loop1): 1 orphan inode deleted [ 61.025413][ T2050] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 61.050761][ T19] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 61.066631][ T2057] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 61.068777][ T19] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 61.171247][ T19] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 61.183266][ T19] usb 4-1: config 1 interface 0 has no altsetting 0 [ 61.193404][ T19] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 61.202642][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.258000][ T19] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 61.318624][ T2076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.328579][ T2076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.339894][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.348872][ T2076] device bridge_slave_0 left promiscuous mode [ 61.354773][ T2076] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.409381][ T2076] syz-executor.2 (2076) used greatest stack depth: 21096 bytes left [ 61.467880][ T19] scsi host1: usb-storage 4-1:1.0 [ 61.497355][ T2079] loop2: detected capacity change from 0 to 256 [ 61.507408][ T324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.762282][ T313] EXT4-fs (loop1): unmounting filesystem. [ 61.779456][ T316] usb 4-1: USB disconnect, device number 6 [ 61.886934][ T2083] loop1: detected capacity change from 0 to 256 [ 62.724602][ T2094] fuse: Bad value for 'fd' [ 63.092800][ T2096] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.107500][ T324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 63.125222][ T324] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 63.157872][ T324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.197410][ T324] usb 1-1: config 0 descriptor?? [ 63.223008][ T2115] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 63.238500][ T324] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 63.266111][ T2119] loop3: detected capacity change from 0 to 256 [ 63.369425][ T2129] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 63.447422][ T19] usb 1-1: USB disconnect, device number 2 [ 64.943507][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 64.943529][ T28] audit: type=1400 audit(2000000013.830:356): avc: denied { append } for pid=2125 comm="syz-executor.1" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.974511][ T28] audit: type=1326 audit(2000000013.990:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcecf47cf29 code=0x0 [ 65.502335][ T2148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.530420][ T28] audit: type=1326 audit(2000000015.230:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2149 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcecf47cf29 code=0x0 [ 65.647267][ T324] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 65.671026][ T28] audit: type=1400 audit(2000000015.370:359): avc: denied { mount } for pid=2167 comm="syz-executor.0" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.675723][ T2168] syz-executor.0[2168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.693786][ T2168] syz-executor.0[2168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.696855][ T28] audit: type=1400 audit(2000000015.370:360): avc: denied { execute } for pid=2167 comm="syz-executor.0" path="/root/syzkaller-testdir3189802149/syzkaller.7ey3Vk/156/file0/bus" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.897252][ T316] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 66.017282][ T317] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.057285][ T324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.068112][ T324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.078165][ T324] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 66.087044][ T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.095485][ T324] usb 3-1: config 0 descriptor?? [ 66.137420][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 66.257290][ T317] usb 1-1: Using ep0 maxpacket: 32 [ 66.262385][ T316] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 66.271246][ T316] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 66.280805][ T316] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 66.290218][ T316] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 66.299746][ T316] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 66.309408][ T316] usb 4-1: config 1 interface 0 has no altsetting 0 [ 66.315811][ T316] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 66.324713][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.369178][ T316] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 66.380828][ T2171] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 66.380868][ T28] audit: type=1400 audit(2000000016.080:361): avc: denied { getattr } for pid=2170 comm="syz-executor.1" name="/" dev="incremental-fs" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.510649][ T2177] syz-executor.1[2177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.510739][ T2177] syz-executor.1[2177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.526110][ T2177] loop1: detected capacity change from 0 to 512 [ 66.578328][ T324] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 66.587481][ T324] sony 0003:054C:0268.0003: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 66.597418][ T317] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 66.599223][ T324] sony 0003:054C:0268.0003: failed to claim input [ 66.608130][ T316] scsi host1: usb-storage 4-1:1.0 [ 66.639072][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.700539][ T2180] fuse: Bad value for 'fd' [ 66.710227][ T28] audit: type=1326 audit(2000000016.410:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2174 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6de687cf29 code=0x0 [ 66.921623][ T317] usb 1-1: Product: syz [ 67.025262][ T317] usb 1-1: Manufacturer: syz [ 67.071931][ T317] usb 1-1: SerialNumber: syz [ 67.117304][ T316] usb 4-1: USB disconnect, device number 7 [ 67.145975][ T317] usb 1-1: config 0 descriptor?? [ 67.191465][ T602] usb 3-1: USB disconnect, device number 5 [ 67.281283][ T2183] loop1: detected capacity change from 0 to 40427 [ 67.288424][ T2183] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 67.296102][ T2183] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 67.305072][ T2183] F2FS-fs (loop1): invalid crc value [ 67.311558][ T2183] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.353785][ T2183] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 67.360824][ T2183] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 67.383930][ T28] audit: type=1400 audit(2000000017.080:363): avc: denied { mounton } for pid=2182 comm="syz-executor.1" path="/root/syzkaller-testdir3288275425/syzkaller.L1we2z/182/bus/bus" dev="loop1" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.411450][ T28] audit: type=1400 audit(2000000017.080:364): avc: denied { write } for pid=2182 comm="syz-executor.1" name="bus" dev="loop1" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.434019][ T28] audit: type=1400 audit(2000000017.080:365): avc: denied { add_name } for pid=2182 comm="syz-executor.1" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.455058][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 67.464486][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 68.787360][ T317] (unnamed net_device) (uninitialized): Assigned a random MAC address: 06:83:a7:7c:af:0c [ 69.042301][ T317] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 69.051384][ T317] usb 1-1: USB disconnect, device number 3 [ 69.613095][ T2227] loop3: detected capacity change from 0 to 40427 [ 69.620186][ T2227] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.628088][ T2227] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.639789][ T2227] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.657293][ T317] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 69.688401][ T2227] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.695355][ T2227] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.727232][ T316] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 69.780193][ T342] kworker/u4:3: attempt to access beyond end of device [ 69.780193][ T342] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 69.912435][ T317] usb 2-1: Using ep0 maxpacket: 16 [ 70.040000][ T2279] syz-executor.4[2279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.040073][ T2279] syz-executor.4[2279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.397317][ T317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 70.625712][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 70.625825][ T28] audit: type=1400 audit(2000000020.080:377): avc: denied { execute_no_trans } for pid=2269 comm="syz-executor.2" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.679980][ T317] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 70.690082][ T317] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 70.699838][ T317] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 70.710019][ T317] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 70.725189][ T317] usb 2-1: config 1 interface 0 has no altsetting 0 [ 70.733236][ T317] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 70.742993][ T316] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 70.757753][ T317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.765793][ T316] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 70.792950][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.827704][ T317] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 70.839139][ T316] usb 1-1: config 0 descriptor?? [ 70.844811][ T2286] loop2: detected capacity change from 0 to 16 [ 70.861625][ T2286] erofs: (device loop2): mounted with root inode @ nid 36. [ 70.877743][ T2286] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 70.890863][ T1868] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 70.900700][ T316] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 70.912278][ T1868] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 70.920893][ T1868] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 71.001019][ T28] audit: type=1326 audit(2000000020.700:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2299 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31ca27cf29 code=0x0 [ 71.040016][ T317] scsi host1: usb-storage 2-1:1.0 [ 71.100197][ T2298] loop3: detected capacity change from 0 to 40427 [ 71.102810][ T28] audit: type=1400 audit(2000000020.800:379): avc: denied { read } for pid=2242 comm="syz-executor.0" dev="nsfs" ino=4026532516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.112845][ T2298] F2FS-fs (loop3): invalid crc value [ 71.130043][ T28] audit: type=1400 audit(2000000020.800:380): avc: denied { open } for pid=2242 comm="syz-executor.0" path="net:[4026532516]" dev="nsfs" ino=4026532516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.135939][ T6] usb 1-1: USB disconnect, device number 4 [ 71.160353][ T2298] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.221307][ T2298] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.798485][ T315] syz-executor.0 (315) used greatest stack depth: 21040 bytes left [ 71.861497][ T312] syz-executor.3: attempt to access beyond end of device [ 71.861497][ T312] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.882229][ T2332] loop2: detected capacity change from 0 to 16 [ 71.893991][ T2332] erofs: (device loop2): mounted with root inode @ nid 36. [ 71.910601][ T2332] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 71.928865][ T1868] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46 [ 71.939574][ T2327] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.949271][ T1868] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 71.957602][ T2327] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.964629][ T1868] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 71.966807][ T2327] device bridge_slave_0 entered promiscuous mode [ 71.980105][ T2327] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.987039][ T2327] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.994583][ T2327] device bridge_slave_1 entered promiscuous mode [ 72.016862][ T2334] loop2: detected capacity change from 0 to 256 [ 72.030769][ T2334] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.105615][ T2327] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.112597][ T2327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.119707][ T2327] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.126546][ T2327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.148598][ T316] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 72.172001][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.180903][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.198690][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.215879][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.245914][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.252813][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.396597][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.472807][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.479766][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.580126][ T2348] loop2: detected capacity change from 0 to 512 [ 72.605846][ T28] audit: type=1326 audit(2000000022.300:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2340 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31ca27cf29 code=0x0 [ 72.632235][ T316] usb 2-1: USB disconnect, device number 5 [ 72.713643][ T2350] fuse: Bad value for 'fd' [ 72.812052][ T10] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 72.899643][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.924333][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.937049][ T28] audit: type=1326 audit(2000000022.430:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2346 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6de687cf29 code=0x0 [ 72.989397][ T10] sd 1:0:0:0: [sdb] Sense not available. [ 73.015281][ T10] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 73.049355][ T10] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 73.056678][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.070292][ T10] sd 1:0:0:0: [sdb] Write Protect is off [ 73.072419][ T2355] loop3: detected capacity change from 0 to 8192 [ 73.082577][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.215148][ T10] sd 1:0:0:0: [sdb] Asking for cache data failed [ 73.234372][ T10] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 73.476038][ T10] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 73.503537][ T28] audit: type=1400 audit(2000000023.200:383): avc: denied { mounton } for pid=2360 comm="syz-executor.4" path="/root/syzkaller-testdir4056366783/syzkaller.GZsmwu/148/file0" dev="sda1" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 73.531729][ T2327] device veth0_vlan entered promiscuous mode [ 73.556226][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.566099][ T495] udevd[495]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 73.584560][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.598893][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.616827][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.691557][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.699032][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.707688][ T1907] device bridge_slave_1 left promiscuous mode [ 73.721197][ T1907] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.730639][ T1907] device bridge_slave_0 left promiscuous mode [ 73.736771][ T1907] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.745864][ T1907] device veth1_macvtap left promiscuous mode [ 73.752238][ T1907] device veth0_vlan left promiscuous mode [ 73.808287][ T2371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.884753][ T2375] loop3: detected capacity change from 0 to 8192 [ 73.908050][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.926722][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.943036][ T2327] device veth1_macvtap entered promiscuous mode [ 73.967868][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.976426][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.057565][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.065735][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.083542][ T2388] loop0: detected capacity change from 0 to 16 [ 74.090443][ T2388] erofs: (device loop0): mounted with root inode @ nid 36. [ 74.099568][ T28] audit: type=1400 audit(2000000023.810:384): avc: denied { mounton } for pid=2387 comm="syz-executor.0" path="/root/syzkaller-testdir757384953/syzkaller.pLXarB/0/file2/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.105951][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.135483][ T40] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 74.144566][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.153412][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.221792][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.231320][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.240256][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.263594][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.276714][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.293266][ T28] audit: type=1326 audit(2000000023.960:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2384 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31ca27cf29 code=0x0 [ 74.340696][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.348948][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.356918][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.365016][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.373060][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.381147][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.389261][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.397332][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.405376][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.413463][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.421659][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.429678][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.437682][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.445670][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.454356][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.463702][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.471716][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.479760][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.487817][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.495838][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.504221][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.513069][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.521633][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.530300][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.541624][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.549545][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.550260][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.567032][ T40] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 74.569225][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.585358][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.593926][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.602248][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.610845][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.619246][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.627509][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.635673][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.647430][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.651107][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.659821][ T40] usb 2-1: config 0 descriptor?? [ 74.665046][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.683259][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.691588][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.699965][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.708263][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.716668][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.726428][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.734517][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.744552][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.753756][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.763204][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.774803][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.788471][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.800967][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.816942][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.994959][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.043614][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.051717][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.059910][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.068829][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.076875][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.085012][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.093530][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.101626][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.109761][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.117917][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.126174][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.134299][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.142436][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.150571][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.158693][ T40] hid (null): bogus close delimiter [ 75.158700][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.158898][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.179816][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.188108][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.196169][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.204313][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.212390][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.220520][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.228598][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.236658][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.246007][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.259379][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.269887][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.281106][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.296432][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.306298][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.347455][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.360145][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.368297][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.376297][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.400775][ T40] usb 2-1: language id specifier not provided by device, defaulting to English [ 75.411101][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.419505][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.427796][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.435844][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.444219][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.463477][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.474126][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.538787][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.595038][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.673978][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.749638][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.781194][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.798691][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.815038][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.832637][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.849371][ T40] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input14 [ 75.863299][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.877517][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.879438][ T40] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input15 [ 75.885557][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.898039][ T28] audit: type=1400 audit(2000000025.580:386): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=541 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.912180][ T2419] loop3: detected capacity change from 0 to 40427 [ 75.935359][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 75.949173][ T28] audit: type=1400 audit(2000000025.580:387): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=541 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.959038][ T2419] F2FS-fs (loop3): invalid crc value [ 75.973811][ T40] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input16 [ 75.998089][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.006119][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.012881][ T40] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input17 [ 76.029623][ T2419] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.031948][ T28] audit: type=1400 audit(2000000025.650:388): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=541 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.037539][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.077758][ T40] uclogic 0003:256C:006D.0004: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 76.095210][ T40] usb 2-1: USB disconnect, device number 6 [ 76.103031][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.124965][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.133663][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.141961][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.154505][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.162778][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.174409][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.182676][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.190981][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.207476][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.215513][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.223833][ T2419] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 76.231730][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.239888][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.247949][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.255986][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.264324][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.272399][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.281704][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.289846][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.297911][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.305926][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.319845][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.332089][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.351482][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.359572][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.367938][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.376305][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.386352][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.398634][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.406653][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.414798][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.437016][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.482821][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.517713][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.714090][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.727473][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.742239][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.768993][ T312] syz-executor.3: attempt to access beyond end of device [ 76.768993][ T312] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 76.793779][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.801844][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.811477][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.827829][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.846092][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.866321][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.887004][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.906379][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.914605][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.937412][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.945399][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 76.970257][ T28] audit: type=1400 audit(2000000026.670:389): avc: denied { write } for pid=2442 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.990357][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.010359][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.027516][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.049353][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.070895][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.088630][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.098614][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.118643][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.126662][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.137953][ T2453] syz-executor.3[2453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.138027][ T2453] syz-executor.3[2453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.150590][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.173515][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.184096][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.194261][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.208251][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.218976][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.228991][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.237046][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.249146][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.257425][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.265518][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.273793][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.285091][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.293382][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.303883][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.312487][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.320824][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.330237][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.338726][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.346858][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.355565][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.363892][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.368848][ T2463] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 77.372571][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.385959][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.396448][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.404654][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.414155][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.422269][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.430732][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.438908][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.447004][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.455266][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.463239][ T19] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 77.470934][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.479196][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.494490][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.502712][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.511244][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.519625][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.528036][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.536100][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.544431][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.552665][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.560849][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.569009][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.577531][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.585738][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.594226][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.602550][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.610800][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.619012][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.627346][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.635433][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.643770][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.652825][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.660943][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.669031][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.677019][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.685219][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.693434][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.703122][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.717201][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 77.723709][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.731830][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 77.739919][ T2327] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 78.017347][ T19] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 78.026298][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.034168][ T19] usb 4-1: Product: syz [ 78.038138][ T19] usb 4-1: Manufacturer: syz [ 78.042816][ T19] usb 4-1: SerialNumber: syz [ 78.048658][ T19] usb 4-1: config 0 descriptor?? [ 78.347824][ T1907] device bridge_slave_1 left promiscuous mode [ 78.353880][ T1907] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.361288][ T1907] device bridge_slave_0 left promiscuous mode [ 78.367389][ T1907] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.375037][ T1907] device veth1_macvtap left promiscuous mode [ 78.380971][ T1907] device veth0_vlan left promiscuous mode [ 78.494056][ T2488] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 78.524486][ T2490] loop1: detected capacity change from 0 to 512 [ 78.568768][ T2490] EXT4-fs: Ignoring removed oldalloc option [ 78.577601][ T2490] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (56219!=33349) [ 78.607822][ T2490] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 78.618059][ T2490] EXT4-fs (loop1): mount failed [ 78.756551][ T19] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 78.769697][ T2500] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.786253][ T2500] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.793815][ T2500] device bridge_slave_0 entered promiscuous mode [ 78.800680][ T2500] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.807620][ T2500] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.815182][ T2500] device bridge_slave_1 entered promiscuous mode [ 79.058992][ T317] usb 4-1: USB disconnect, device number 8 [ 79.197065][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.204960][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.228542][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.236824][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.245572][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.252445][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.259679][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.267953][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.276086][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.282956][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.290172][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.298070][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.305983][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.320242][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.334048][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.342717][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.350226][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.358784][ T2500] device veth0_vlan entered promiscuous mode [ 79.371106][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.381360][ T2500] device veth1_macvtap entered promiscuous mode [ 79.392216][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.403095][ T2222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.497633][ T2545] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 79.654036][ T2552] loop2: detected capacity change from 0 to 512 [ 79.671911][ T2552] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.680979][ T28] audit: type=1400 audit(2000000029.370:390): avc: denied { bind } for pid=2555 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.731901][ T2552] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 79.750654][ T28] audit: type=1400 audit(2000000029.370:391): avc: denied { setopt } for pid=2555 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.982201][ T2553] loop1: detected capacity change from 0 to 512 [ 79.997889][ T2565] loop3: detected capacity change from 0 to 256 [ 80.011030][ T2552] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.024121][ T495] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.037963][ T2552] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 80.038149][ T28] audit: type=1326 audit(2000000029.740:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2548 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcecf47cf29 code=0x0 [ 80.090481][ T28] audit: type=1400 audit(2000000029.790:393): avc: denied { setopt } for pid=2551 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.121598][ T28] audit: type=1400 audit(2000000029.810:394): avc: denied { module_load } for pid=2564 comm="syz-executor.3" path="/root/syzkaller-testdir628916902/syzkaller.sAUU8T/148/file0/bus" dev="loop3" ino=1048652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 80.167513][ T28] audit: type=1400 audit(2000000029.860:395): avc: denied { connect } for pid=2569 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.263024][ T2578] syz-executor.3[2578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.263126][ T2578] syz-executor.3[2578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.391169][ T2608] validate_nla: 4 callbacks suppressed [ 81.391189][ T2608] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 81.441723][ T2608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.484976][ T2608] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.497728][ T2608] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.592532][ T2615] syz-executor.4[2615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.592643][ T2615] syz-executor.4[2615] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.660625][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 81.660642][ T28] audit: type=1400 audit(2000000031.360:397): avc: denied { nlmsg_read } for pid=2626 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.699306][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.765142][ T2636] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 81.773862][ T28] audit: type=1400 audit(2000000031.470:398): avc: denied { connect } for pid=2633 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.775763][ T2634] syz-executor.1[2634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.795574][ T2634] syz-executor.1[2634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.986720][ T2636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.297296][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.307488][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 82.316335][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.326618][ T2673] syz-executor.3[2673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.329453][ T2673] syz-executor.3[2673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.483971][ T2675] loop1: detected capacity change from 0 to 256 [ 82.953563][ T2677] loop0: detected capacity change from 0 to 40427 [ 82.967287][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.979929][ T2677] F2FS-fs (loop0): invalid crc value [ 82.989531][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.998188][ T6] usb 3-1: Product: syz [ 83.001748][ T2677] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.002246][ T6] usb 3-1: Manufacturer: syz [ 83.012872][ T6] usb 3-1: SerialNumber: syz [ 83.091687][ T6] usb 3-1: selecting invalid altsetting 1 [ 83.114771][ T2677] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.119398][ T2689] loop1: detected capacity change from 0 to 256 [ 83.744877][ T6] cdc_ncm 3-1:1.0: bind() failure [ 83.758319][ T6] usb 3-1: USB disconnect, device number 6 [ 83.807558][ T28] audit: type=1400 audit(2000000033.490:399): avc: denied { map } for pid=2710 comm="syz-executor.1" path="socket:[24065]" dev="sockfs" ino=24065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.837583][ T2500] syz-executor.0: attempt to access beyond end of device [ 83.837583][ T2500] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.842411][ T28] audit: type=1400 audit(2000000033.490:400): avc: denied { read } for pid=2710 comm="syz-executor.1" path="socket:[24065]" dev="sockfs" ino=24065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.105621][ T2719] loop1: detected capacity change from 0 to 256 [ 86.034692][ T28] audit: type=1400 audit(2000000035.730:401): avc: denied { nlmsg_write } for pid=2726 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 86.132008][ T28] audit: type=1400 audit(2000000035.770:402): avc: denied { mount } for pid=2727 comm="syz-executor.0" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.154593][ T28] audit: type=1400 audit(2000000035.770:403): avc: denied { mounton } for pid=2727 comm="syz-executor.0" path="/root/syzkaller-testdir526482338/syzkaller.K0JhcE/11/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 86.182101][ T28] audit: type=1326 audit(2000000035.810:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de687cf29 code=0x7ffc0000 [ 86.205965][ T28] audit: type=1326 audit(2000000035.810:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de687cf29 code=0x7ffc0000 [ 86.230067][ T28] audit: type=1326 audit(2000000035.820:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2730 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6de687cf29 code=0x7ffc0000 [ 86.305903][ T2738] syz-executor.3[2738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.305974][ T2738] syz-executor.3[2738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.389812][ T2750] loop1: detected capacity change from 0 to 256 [ 86.693156][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 86.693183][ T28] audit: type=1326 audit(2000000036.390:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ca27cf29 code=0x7ffc0000 [ 86.900342][ T28] audit: type=1326 audit(2000000036.430:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31ca27cf29 code=0x7ffc0000 [ 86.939830][ T28] audit: type=1326 audit(2000000036.430:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ca27cf29 code=0x7ffc0000 [ 86.954567][ T2778] loop0: detected capacity change from 0 to 256 [ 86.981122][ T28] audit: type=1326 audit(2000000036.440:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31ca27cf29 code=0x7ffc0000 [ 87.018582][ T2780] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 87.037869][ T28] audit: type=1326 audit(2000000036.460:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ca27cf29 code=0x7ffc0000 [ 87.062562][ T28] audit: type=1326 audit(2000000036.470:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31ca27a6a7 code=0x7ffc0000 [ 87.064031][ T2785] loop2: detected capacity change from 0 to 256 [ 87.086266][ T28] audit: type=1326 audit(2000000036.480:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31ca240379 code=0x7ffc0000 [ 87.141714][ T2780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.276890][ T2785] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 87.342939][ T2790] loop0: detected capacity change from 0 to 256 [ 87.353502][ T28] audit: type=1326 audit(2000000036.480:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f31ca27cf29 code=0x7ffc0000 [ 87.392688][ T2790] FAT-fs (loop0): Directory bread(block 64) failed [ 87.398056][ T28] audit: type=1326 audit(2000000036.480:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31ca27a6a7 code=0x7ffc0000 [ 87.400341][ T2790] FAT-fs (loop0): Directory bread(block 65) failed [ 87.425446][ T28] audit: type=1326 audit(2000000036.490:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2766 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31ca240379 code=0x7ffc0000 [ 87.461220][ T2790] FAT-fs (loop0): Directory bread(block 66) failed [ 87.470579][ T2790] FAT-fs (loop0): Directory bread(block 67) failed [ 87.477651][ T2790] FAT-fs (loop0): Directory bread(block 68) failed [ 87.484070][ T2790] FAT-fs (loop0): Directory bread(block 69) failed [ 87.501095][ T2790] FAT-fs (loop0): Directory bread(block 70) failed [ 87.509193][ T2790] FAT-fs (loop0): Directory bread(block 71) failed [ 87.515986][ T2790] FAT-fs (loop0): Directory bread(block 72) failed [ 87.518390][ T2801] loop2: detected capacity change from 0 to 512 [ 87.528456][ T2790] FAT-fs (loop0): Directory bread(block 73) failed [ 87.545094][ T2801] EXT4-fs (loop2): 1 truncate cleaned up [ 87.550691][ T2801] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.595219][ T2790] syz-executor.0: attempt to access beyond end of device [ 87.595219][ T2790] loop0: rw=2049, sector=1224, nr_sectors = 12 limit=256 [ 87.616693][ T2790] syz-executor.0: attempt to access beyond end of device [ 87.616693][ T2790] loop0: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 87.630980][ T2790] syz-executor.0: attempt to access beyond end of device [ 87.630980][ T2790] loop0: rw=2049, sector=1232, nr_sectors = 4 limit=256 [ 87.644830][ T2790] Buffer I/O error on dev loop0, logical block 308, lost async page write [ 87.692745][ T2814] loop0: detected capacity change from 0 to 256 [ 87.728554][ T2818] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 87.744846][ T2818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.763422][ T2818] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.766915][ T2821] loop1: detected capacity change from 0 to 256 [ 87.771050][ T2818] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.786881][ T2821] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 87.799581][ T2810] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 13: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 88.069893][ T2826] loop3: detected capacity change from 0 to 512 [ 88.148004][ T1907] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.187426][ T2840] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.380121][ T1868] EXT4-fs (loop2): unmounting filesystem. [ 88.393014][ T2850] loop3: detected capacity change from 0 to 512 [ 88.409615][ T2850] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.418856][ T2850] ext4 filesystem being mounted at /root/syzkaller-testdir628916902/syzkaller.sAUU8T/171/file0 supports timestamps until 2038 (0x7fffffff) [ 88.439983][ T2850] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 3: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 88.472671][ T312] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir628916902/syzkaller.sAUU8T/171/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 88.515755][ T312] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor.3: path /root/syzkaller-testdir628916902/syzkaller.sAUU8T/171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 88.541815][ T312] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path /root/syzkaller-testdir628916902/syzkaller.sAUU8T/171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 88.569306][ T312] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor.3: path /root/syzkaller-testdir628916902/syzkaller.sAUU8T/171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.595446][ T312] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor.3: path /root/syzkaller-testdir628916902/syzkaller.sAUU8T/171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 88.771721][ T312] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor.3: path /root/syzkaller-testdir628916902/syzkaller.sAUU8T/171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 88.811768][ T312] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz-executor.3: path /root/syzkaller-testdir628916902/syzkaller.sAUU8T/171/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.837205][ T312] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 18: comm syz-executor.3: lblock 23 mapped to illegal pblock 18 (length 1) [ 88.899397][ T10] tipc: Left network mode [ 88.899965][ T312] EXT4-fs (loop3): unmounting filesystem. [ 89.303898][ T2878] loop2: detected capacity change from 0 to 512 [ 89.312604][ T2878] EXT4-fs (loop2): 1 truncate cleaned up [ 89.318317][ T2878] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.370571][ T2881] loop0: detected capacity change from 0 to 256 [ 89.380176][ T2881] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 89.396241][ T2877] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 89.396241][ T2877] [ 89.410383][ T2877] exFAT-fs (loop0): Filesystem has been set read-only [ 89.417922][ T2877] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810bcb7a90 iblock : 0, err : -5) [ 89.429255][ T2877] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967293) [ 89.429255][ T2877] [ 89.441226][ T2877] exFAT-fs (loop0): error, failed to bmap (inode : ffff88810bcb5570 iblock : 0, err : -5) [ 89.455356][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.462748][ T2880] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.472812][ T2880] device bridge_slave_0 entered promiscuous mode [ 89.517793][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.527998][ T2886] EXT4-fs error (device loop2): ext4_find_dest_de:2112: inode #2: block 13: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 89.595514][ T2880] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.610831][ T2880] device bridge_slave_1 entered promiscuous mode [ 89.810835][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.817719][ T2880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.824900][ T2880] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.831770][ T2880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.874314][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.882533][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.889744][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.898199][ T10] device bridge_slave_1 left promiscuous mode [ 89.904214][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.913737][ T10] device bridge_slave_0 left promiscuous mode [ 89.920797][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.933471][ T10] device veth1_macvtap left promiscuous mode [ 89.939859][ T10] device veth0_vlan left promiscuous mode [ 90.207942][ T2837] Bluetooth: hci0: command 0x1003 tx timeout [ 90.213800][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.231163][ T1868] EXT4-fs (loop2): unmounting filesystem. [ 90.252849][ T2906] syz-executor.4[2906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.252929][ T2906] syz-executor.4[2906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.260935][ T2908] loop2: detected capacity change from 0 to 256 [ 90.345009][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.353385][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.361425][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.368290][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.375526][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.386242][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.395263][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.402133][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.429130][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.444388][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.462671][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.473381][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.506320][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.515032][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.883736][ T2880] device veth0_vlan entered promiscuous mode [ 90.909341][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.917796][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.932851][ T2880] device veth1_macvtap entered promiscuous mode [ 90.940057][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.947670][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.954976][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.963186][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.971308][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.987377][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.995737][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.004159][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.012357][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.048314][ T2939] loop0: detected capacity change from 0 to 512 [ 91.069102][ T2939] EXT4-fs (loop0): 1 truncate cleaned up [ 91.076028][ T2939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.090578][ T2946] loop3: detected capacity change from 0 to 256 [ 91.099479][ T342] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.318007][ T2956] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 13: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 92.110647][ T2500] EXT4-fs (loop0): unmounting filesystem. [ 92.893859][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 92.893875][ T28] audit: type=1400 audit(2000000042.590:475): avc: denied { setopt } for pid=2992 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.258129][ T2837] Bluetooth: hci0: command 0x1003 tx timeout [ 93.258160][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.312921][ T28] audit: type=1326 audit(2000000043.010:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3002 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbee7cf29 code=0x7ffc0000 [ 93.367614][ T28] audit: type=1326 audit(2000000043.010:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3002 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dbee7cf29 code=0x7ffc0000 [ 93.392204][ T28] audit: type=1326 audit(2000000043.010:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3002 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbee7cf29 code=0x7ffc0000 [ 93.432408][ T28] audit: type=1326 audit(2000000043.010:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3002 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dbee7cf29 code=0x7ffc0000 [ 93.540286][ T28] audit: type=1326 audit(2000000043.010:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3002 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbee7cf29 code=0x7ffc0000 [ 93.564885][ T28] audit: type=1326 audit(2000000043.010:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3002 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f2dbee7cf29 code=0x7ffc0000 [ 93.651493][ T28] audit: type=1326 audit(2000000043.020:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3002 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbee7cf29 code=0x7ffc0000 [ 93.683061][ T3017] fuse: Bad value for 'fd' [ 93.776854][ T3023] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.923126][ T28] audit: type=1326 audit(2000000043.620:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3037 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbee7cf29 code=0x7ffc0000 [ 93.977237][ T28] audit: type=1326 audit(2000000043.650:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3037 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbee7cf29 code=0x7ffc0000 [ 94.706117][ T3055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.002495][ T3080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.047282][ T2222] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 95.417444][ T2222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.439007][ T2222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.472620][ T3096] fuse: Bad value for 'fd' [ 95.483253][ T2222] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 95.514555][ T2222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.554443][ T2222] usb 4-1: config 0 descriptor?? [ 95.837893][ T10] device bridge_slave_1 left promiscuous mode [ 95.845015][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.875525][ T10] device veth1_macvtap left promiscuous mode [ 95.894600][ T10] device veth0_vlan left promiscuous mode [ 96.080198][ T3110] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.087506][ T2222] hid (null): bogus close delimiter [ 96.134857][ T3118] syz-executor.1[3118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.134933][ T3118] syz-executor.1[3118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.204946][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.237257][ T3098] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.245922][ T3098] device bridge_slave_0 entered promiscuous mode [ 96.261042][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.272219][ T3098] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.281028][ T3098] device bridge_slave_1 entered promiscuous mode [ 96.307360][ T2222] usb 4-1: language id specifier not provided by device, defaulting to English [ 96.361960][ T3134] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 96.375417][ T3134] IPv6: syztnl2: Disabled Multicast RS [ 96.383595][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.390503][ T3098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.397555][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.404364][ T3098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.431576][ T934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.439589][ T934] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.447039][ T934] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.466349][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.474865][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.481745][ T40] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.481816][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.509381][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.517431][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.524267][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.531715][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.539489][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.557399][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.727194][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 96.757802][ T2222] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input18 [ 96.776137][ T2222] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input19 [ 96.795368][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.803358][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.810708][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.818107][ T3098] device veth0_vlan entered promiscuous mode [ 96.826073][ T2222] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input20 [ 96.841535][ T3142] bridge0: port 1(vlan2) entered blocking state [ 96.841543][ T2222] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0005/input/input21 [ 96.843183][ T2222] uclogic 0003:256C:006D.0005: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 96.848549][ T3142] bridge0: port 1(vlan2) entered disabled state [ 96.882839][ T3098] device veth1_macvtap entered promiscuous mode [ 96.889594][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.897735][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.905675][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.917606][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.925714][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.948220][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.956363][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.981591][ T2222] usb 4-1: USB disconnect, device number 9 [ 97.017642][ T40] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 97.028147][ T40] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.036436][ T40] usb 2-1: Product: syz [ 97.040936][ T40] usb 2-1: Manufacturer: syz [ 97.045371][ T40] usb 2-1: SerialNumber: syz [ 97.051383][ T40] usb 2-1: config 0 descriptor?? [ 98.154536][ T40] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 98.535811][ T324] usb 2-1: USB disconnect, device number 7 [ 98.564959][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 98.564977][ T28] audit: type=1400 audit(2000000048.260:499): avc: denied { read } for pid=3209 comm="syz-executor.2" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.612235][ T3222] device pim6reg1 entered promiscuous mode [ 98.627181][ T28] audit: type=1400 audit(2000000048.300:500): avc: denied { open } for pid=3209 comm="syz-executor.2" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.769986][ T3240] loop3: detected capacity change from 0 to 512 [ 98.801508][ T3240] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.818505][ T3240] EXT4-fs (loop3): failed to initialize system zone (-117) [ 98.826689][ T3240] EXT4-fs (loop3): mount failed [ 99.293476][ T3258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=3258 comm=syz-executor.4 [ 99.713728][ T28] audit: type=1400 audit(2000000049.410:501): avc: denied { name_bind } for pid=3292 comm="syz-executor.1" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 99.764140][ T3297] loop1: detected capacity change from 0 to 512 [ 99.796488][ T3297] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.840227][ T3297] ext4 filesystem being mounted at /root/syzkaller-testdir3288275425/syzkaller.L1we2z/241/file0 supports timestamps until 2038 (0x7fffffff) [ 99.855813][ T28] audit: type=1400 audit(2000000049.560:502): avc: denied { read } for pid=3307 comm="syz-executor.0" path="socket:[26976]" dev="sockfs" ino=26976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.891679][ T3312] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.903495][ T3297] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 285: padding at end of block bitmap is not set [ 99.927390][ T3226] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 99.927820][ T28] audit: type=1400 audit(2000000049.630:503): avc: denied { setattr } for pid=3296 comm="syz-executor.1" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.967638][ T313] EXT4-fs (loop1): unmounting filesystem. [ 100.010572][ T3321] syz-executor.4[3321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.010626][ T3321] syz-executor.4[3321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.023519][ T3321] syz-executor.4[3321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.035106][ T3321] syz-executor.4[3321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.124725][ T3340] loop1: detected capacity change from 0 to 512 [ 100.149162][ T3340] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.158385][ T3340] ext4 filesystem being mounted at /root/syzkaller-testdir3288275425/syzkaller.L1we2z/247/file0 supports timestamps until 2038 (0x7fffffff) [ 100.176893][ T3340] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 285: padding at end of block bitmap is not set [ 100.201792][ T313] EXT4-fs (loop1): unmounting filesystem. [ 100.267389][ T324] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.315859][ T3380] overlayfs: missing 'lowerdir' [ 100.367406][ T3226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 100.377203][ T3226] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 100.417654][ T3408] device pim6reg1 entered promiscuous mode [ 100.471809][ T3416] loop1: detected capacity change from 0 to 2048 [ 100.479293][ T3416] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.492588][ T3416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.510573][ T313] EXT4-fs (loop1): unmounting filesystem. [ 100.555908][ T28] audit: type=1400 audit(2000000050.250:504): avc: denied { remount } for pid=3423 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 100.561424][ T3424] loop1: detected capacity change from 0 to 1024 [ 100.582186][ T3226] usb 4-1: New USB device found, idVendor=0403, idProduct=f44c, bcdDevice=a7.d9 [ 100.591537][ T3226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.600422][ T3424] EXT4-fs (loop1): inodes count not valid: 0 vs 32 [ 100.606935][ T3226] usb 4-1: Product: syz [ 100.611275][ T3226] usb 4-1: Manufacturer: syz [ 100.615733][ T3226] usb 4-1: SerialNumber: syz [ 100.622577][ T3226] usb 4-1: config 0 descriptor?? [ 100.627460][ T324] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 100.637701][ T324] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.646612][ T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.669760][ T3424] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 100.678921][ T3424] overlayfs: failed to look up (file1) for ino (-5) [ 100.688053][ T3226] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 100.698906][ T324] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 100.710449][ C1] softirq: huh, entered softirq 3 NET_RX ffffffff840b9c90 with preempt_count 00000102, exited with 00000101? [ 100.710595][ T3226] ftdi_sio ttyUSB0: unknown device type: 0xa7d9 [ 100.724652][ T3431] BUG: scheduling while atomic: syz-executor.0/3431/0x00000002 [ 100.735805][ T3431] Modules linked in: [ 100.739617][ T3431] Preemption disabled at: [ 100.739625][ T3431] [] bpf_bprintf_prepare+0x118/0x1360 [ 100.750566][ T3431] CPU: 1 PID: 3431 Comm: syz-executor.0 Not tainted 6.1.78-syzkaller-00010-gc0618d182a9c #0 [ 100.760420][ T3431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 100.770314][ T3431] Call Trace: [ 100.773437][ T3431] [ 100.776222][ T3431] dump_stack_lvl+0x151/0x1b7 [ 100.780730][ T3431] ? bpf_bprintf_prepare+0x118/0x1360 [ 100.785936][ T3431] ? bpf_bprintf_prepare+0x118/0x1360 [ 100.791152][ T3431] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 100.796453][ T3431] ? bpf_bprintf_prepare+0x118/0x1360 [ 100.801650][ T3431] dump_stack+0x15/0x1b [ 100.805639][ T3431] __schedule_bug+0x195/0x260 [ 100.810152][ T3431] ? __kasan_check_write+0x14/0x20 [ 100.815104][ T3431] ? bpf_prog_test_run+0x441/0x630 [ 100.820050][ T3431] ? cpu_util_update_eff+0x10e0/0x10e0 [ 100.825339][ T3431] ? bpf_prog_query+0x260/0x260 [ 100.830032][ T3431] ? selinux_bpf+0xd2/0x100 [ 100.834370][ T3431] __schedule+0xcf7/0x1550 [ 100.838624][ T3431] ? __sys_bpf+0x59f/0x7f0 [ 100.842875][ T3431] ? __this_cpu_preempt_check+0x13/0x20 [ 100.848257][ T3431] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 100.853464][ T3431] ? __sched_text_start+0x8/0x8 [ 100.858239][ T3431] schedule+0xc3/0x180 [ 100.862143][ T3431] exit_to_user_mode_loop+0x4e/0xa0 [ 100.867180][ T3431] exit_to_user_mode_prepare+0x5a/0xa0 [ 100.872469][ T3431] syscall_exit_to_user_mode+0x26/0x140 [ 100.877854][ T3431] do_syscall_64+0x49/0xb0 [ 100.882103][ T3431] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 100.887836][ T3431] RIP: 0033:0x7f111827cf29 [ 100.892138][ T3431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 100.911646][ T3431] RSP: 002b:00007f11175f70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 2033/05/18 03:34:10 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 100.919857][ T3431] RAX: 0000000000000000 RBX: 00007f11183b3f80 RCX: 00007f111827cf29 [ 100.927933][ T3431] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 100.935741][ T3431] RBP: 00007f11182ec074 R08: 0000000000000000 R09: 0000000000000000 [ 100.943553][ T3431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.951364][ T3431] R13: 000000000000000b R14: 00007f11183b3f80 R15: 00007fff889c5d88 [ 100.959364][ T3431] [ 100.971425][ T40] usb 4-1: USB disconnect, device number 10 [ 100.977260][ T3226] usb 3-1: USB disconnect, device number 7 [ 100.987713][ T40] ftdi_sio 4-1:0.0: device disconnected