last executing test programs: 2.705382233s ago: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4136], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000040)='./file1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002060000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) readv(r7, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000934000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000a6f000/0x4000)=nil) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2.693383915s ago: executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000100)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xd) 2.655834741s ago: executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.639797184s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) rt_sigqueueinfo(0x0, 0x0, 0x0) 2.598623701s ago: executing program 4: write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfe1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x3f, 0x0, &(0x7f0000000000)='%', 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.523700653s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000017ce2121fa03c47df5cf870c00"], 0x0}, 0x0) 1.54940103s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 1.455539595s ago: executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) recvfrom$unix(0xffffffffffffffff, &(0x7f0000002a00)=""/4111, 0x100f, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11}, 0x90) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b4d, &(0x7f00000000c0)) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0xd4ba0ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r4}, 0x38) 1.442962667s ago: executing program 1: setitimer(0x0, &(0x7f0000000580)={{}, {0x6}}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./control\x00', 0x2801, 0x3) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futimesat(r0, &(0x7f00000003c0)='./control\x00', &(0x7f00000005c0)={{r1, r2/1000+10000}, {0x77359400}}) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r3) r4 = inotify_init1(0x0) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r4, 0xa, 0xe) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@dev}}}, [@mark={0xc}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xd8}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) 1.330871476s ago: executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)) fcntl$lock(r0, 0x26, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x1, 0x0, 0xff34}) 1.062463498s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000540)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_pcpu_drain\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r4 = gettid() syz_emit_ethernet(0x86, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r4}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, &(0x7f0000000240), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rpcgss_seqno\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) sendmmsg$unix(r7, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18, 0x20008050}}], 0x1, 0x0) r8 = dup3(r7, r6, 0x0) connect$unix(r8, &(0x7f0000000100)=@abs={0x1}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00'}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000000), 0x400000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.031456143s ago: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.018873436s ago: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 987.52368ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r1}, 0x10) timer_create(0x2, &(0x7f0000000440)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_btf_id_by_name$bpf_lsm(0x0) 891.014546ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000004c0)={0xb0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {0x0, 0x0, 0x1, 0x0, ':'}}]}, 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000007c0)={0xb0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}, {0x0, 0x0, 0x5, 0x0, 'wfdno'}}]}, 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)) 774.518525ms ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x2, 0x8, 0xd0eb}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(r3, &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x22020600) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000005780)='./bus\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646973636172640000008000000000ff5f78617474722c646973636172642c7768696e854ca65d829f48447365722d626173651a9603642c6e6f696e6c696e48c8c199ffba36996c007570972cb0aab560ecd4a62772a15b05a04f8812838b6d154a85515cf6a313e8043c58707a92904e0d69fdd8fd380734190ccaff409ba8953c23b0c6f1c09d53447f1e1d0cedb97bb4daf266dcc2cec17b92cbbe1303abfc278ad72513243c4862de20f7d1964503b1815a337e284216bd6809000000000004000000d593d55b7516ceab7cd61a02b7aa1f09af6411cc77b8aeb6cb60fe02009fbd67bd8d700393ec17bc2e355467864b7e313f5f5ebeade831252175cba82d03f4f3b5999117e18e7fa077c6bf2fe6d11ac48428b298ad0c52acbc155d3426000000000000000000002885bbb75b27d8d946f52a47131d4b8a2856fcd6538f20e5770e22998c00c00920f5a0b5a39f5e623dfa827d6fd5e2ed4eaebc88578a0c0a41a0405d299d9fb6a7144daf6044fe919519cf7d543e08ac5c4dd7d6a537aac11dfedb47de53a50e501b402feeb5126a6d6479098c2218d508866776aa9c", @ANYRES32=0x0], 0x1, 0x552b, &(0x7f000000ad00)="$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") r4 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x9}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYRESDEC=r5, @ANYRESDEC=r6, @ANYRES64, @ANYRES8=r5, @ANYRESHEX=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xd5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='xprtrdma_post_send_err\x00', r6}, 0x10) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 610.149712ms ago: executing program 3: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x16543e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) ftruncate(r0, 0x7fff) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)='\a', 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 498.5693ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, 0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) socket(0xa, 0x0, 0x0) 490.956721ms ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x174}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1f}, {0x0, 0x3}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 120.963471ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 105.649673ms ago: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4136], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r1, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000040)='./file1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002060000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) readv(r7, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000934000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000a6f000/0x4000)=nil) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 100.851344ms ago: executing program 0: r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}]}}}], 0x18}, 0x0) 97.292795ms ago: executing program 4: timer_create(0x0, 0x0, &(0x7f0000044000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001a80)='sys_enter\x00', r1}, 0x10) timer_delete(0x0) 73.322668ms ago: executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 60.79101ms ago: executing program 4: setitimer(0x0, &(0x7f0000000580)={{}, {0x6}}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./control\x00', 0x2801, 0x3) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futimesat(r0, &(0x7f00000003c0)='./control\x00', &(0x7f00000005c0)={{r1, r2/1000+10000}, {0x77359400}}) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r3) r4 = inotify_init1(0x0) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r4, 0xa, 0xe) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@dev}}}, [@mark={0xc}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xd8}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) 49.614312ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000004c0)={0xb0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {0x0, 0x0, 0x1, 0x0, ':'}}]}, 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f00000007c0)={0xb0, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}, {0x0, 0x0, 0x5, 0x0, 'wfdno'}}]}, 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)) 37.990444ms ago: executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x44}}, 0x0) 29.804756ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2200006, &(0x7f0000000900)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@usrjquota}, {@lazytime}, {@nodelalloc}, {@acl}, {@debug}], [{@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000000}}, {@flag='nolazytime'}, {@hash}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, '}'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x39, 0x36, 0x62, 0x64, 0x31, 0x64, 0x64], 0x2d, [0x33, 0x61, 0x6d, 0x39], 0x2d, [0x37, 0x32, 0x30, 0x62], 0x2d, [0x6f, 0x64, 0x62, 0x66], 0x2d, [0x36, 0x64, 0x32, 0x37, 0x30, 0x30, 0x32, 0x37]}}}, {@pcr={'pcr', 0x3d, 0x11}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}]}, 0xfc, 0x574, &(0x7f0000000380)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x10) 14.811948ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000200000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="810200000000000000001200000008000600010000000c00018008000100", @ANYRES32=r4], 0x28}}, 0x0) 0s ago: executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000350000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) kernel console output (not intermixed with test programs): 73570][ T936] usb 2-1: SerialNumber: syz [ 49.070610][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 49.070630][ T28] audit: type=1400 audit(1718567876.150:425): avc: denied { bind } for pid=1221 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.100497][ T28] audit: type=1400 audit(1718567876.150:426): avc: denied { setopt } for pid=1221 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.121771][ T936] usb 2-1: 0:2 : does not exist [ 49.207065][ T1226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 49.219109][ T28] audit: type=1400 audit(1718567876.300:427): avc: denied { create } for pid=1224 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 49.240548][ T28] audit: type=1400 audit(1718567876.320:428): avc: denied { write } for pid=1224 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.246976][ T365] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 49.336725][ T938] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 49.506741][ T365] usb 4-1: Using ep0 maxpacket: 8 [ 49.540001][ T333] usb 2-1: USB disconnect, device number 6 [ 49.562745][ T1235] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 49.576674][ T938] usb 1-1: Using ep0 maxpacket: 32 [ 49.626765][ T365] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 49.637441][ T365] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 49.646970][ T365] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 49.657858][ T365] usb 4-1: config 1 interface 1 has no altsetting 0 [ 49.696906][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 49.708062][ T938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 49.719097][ T938] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 49.727946][ T938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.736345][ T938] usb 1-1: config 0 descriptor?? [ 49.756773][ T1220] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 49.776958][ T938] hub 1-1:0.0: USB hub found [ 49.826741][ T365] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.835655][ T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.843484][ T365] usb 4-1: Product: syz [ 49.847478][ T365] usb 4-1: Manufacturer: syz [ 49.851849][ T365] usb 4-1: SerialNumber: syz [ 49.949088][ T28] audit: type=1400 audit(1718567877.030:429): avc: denied { setopt } for pid=1240 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.159903][ T1252] mmap: syz-executor.1 (1252): VmData 28987392 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 50.166929][ T365] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 50.179695][ T365] usb 4-1: 2:1 : invalid channels 0 [ 50.199066][ T365] usb 4-1: USB disconnect, device number 6 [ 50.246721][ T938] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 50.286962][ T1254] loop1: detected capacity change from 0 to 1024 [ 50.308148][ T1254] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2002c118, mo2=0002] [ 50.316068][ T1254] System zones: 0-1, 3-12 [ 50.320933][ T1254] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 50.346758][ T938] usbhid 1-1:0.0: can't add hid device: -71 [ 50.352628][ T938] usbhid: probe of 1-1:0.0 failed with error -71 [ 50.366482][ T310] EXT4-fs (loop1): unmounting filesystem. [ 50.389760][ T938] usb 1-1: USB disconnect, device number 5 [ 50.475062][ T1265] bridge0: port 3(veth1_macvtap) entered blocking state [ 50.481914][ T1265] bridge0: port 3(veth1_macvtap) entered disabled state [ 50.886553][ T1280] loop0: detected capacity change from 0 to 512 [ 50.901524][ T1280] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 50.909421][ T1280] System zones: 1-12 [ 50.913629][ T1280] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.0: invalid block [ 50.925745][ T1280] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 50.940238][ T1280] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 50.940704][ T1281] loop3: detected capacity change from 0 to 128 [ 50.960951][ T1280] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 50.961182][ T1281] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 50.969888][ T1280] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 50.990782][ T1280] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 51.005207][ T1280] EXT4-fs (loop0): 1 truncate cleaned up [ 51.010732][ T1280] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 51.025808][ T1280] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz-executor.0: Directory hole found for htree index block [ 51.038640][ T1280] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz-executor.0: Directory hole found for htree index block [ 51.116699][ T938] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.126123][ T313] EXT4-fs (loop0): unmounting filesystem. [ 51.393910][ T1291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 51.527335][ T1291] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 51.667077][ T938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.677611][ T938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.695893][ T28] audit: type=1400 audit(1718567878.770:430): avc: denied { unmount } for pid=312 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 51.766761][ T938] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 51.776292][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.784341][ T938] usb 5-1: SerialNumber: syz [ 52.047285][ T938] usb 5-1: 0:2 : does not exist [ 52.106419][ T1309] syz-executor.3[1309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.106470][ T1309] syz-executor.3[1309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.180245][ T1312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 52.310106][ T1320] bridge0: port 3(veth1_macvtap) entered blocking state [ 52.317071][ T1320] bridge0: port 3(veth1_macvtap) entered disabled state [ 52.395694][ T1322] loop1: detected capacity change from 0 to 512 [ 52.411905][ T1322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 52.419730][ T1322] System zones: 1-12 [ 52.423924][ T1322] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.1: invalid block [ 52.436087][ T1322] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1) [ 52.450451][ T1322] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 52.465753][ T1322] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 52.477961][ T501] usb 5-1: USB disconnect, device number 4 [ 52.485225][ T1322] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 52.499017][ T1322] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 52.513776][ T1322] EXT4-fs (loop1): 1 truncate cleaned up [ 52.519248][ T1322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 52.530365][ T1322] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 52.543321][ T1322] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 52.608305][ T310] EXT4-fs (loop1): unmounting filesystem. [ 52.773368][ T28] audit: type=1400 audit(1718567879.850:431): avc: denied { create } for pid=1334 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.793768][ T28] audit: type=1400 audit(1718567879.850:432): avc: denied { setopt } for pid=1334 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.814129][ T28] audit: type=1400 audit(1718567879.850:433): avc: denied { getopt } for pid=1334 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.834478][ T28] audit: type=1400 audit(1718567879.850:434): avc: denied { block_suspend } for pid=1334 comm="syz-executor.1" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.098722][ T1338] loop4: detected capacity change from 0 to 256 [ 53.439440][ T1344] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 53.569604][ T1347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 53.922469][ T1364] loop2: detected capacity change from 0 to 16 [ 53.956457][ T1364] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 53.966896][ T1364] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 53.977865][ T1364] erofs: (device loop2): mounted with root inode @ nid 36. [ 54.006198][ T1364] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 54.071180][ T1371] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 54.114697][ T1370] loop3: detected capacity change from 0 to 8192 [ 54.123509][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 54.123522][ T28] audit: type=1400 audit(1718567881.200:436): avc: denied { mounton } for pid=1367 comm="syz-executor.3" path="/root/syzkaller-testdir4108470128/syzkaller.5olMXQ/60/bus" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.248098][ T1375] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 54.348925][ T936] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 54.747588][ T1388] loop3: detected capacity change from 0 to 40427 [ 54.763232][ T1388] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 54.770952][ T1388] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 54.779730][ T1388] F2FS-fs (loop3): invalid crc value [ 54.786259][ T1388] F2FS-fs (loop3): Found nat_bits in checkpoint [ 54.811852][ T1388] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 54.818871][ T1388] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 54.876703][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 55.216829][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.227741][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.237477][ T936] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 55.246569][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.323981][ T1408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 55.468763][ T1408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 55.495272][ T936] usb 3-1: config 0 descriptor?? [ 55.618514][ T28] audit: type=1400 audit(1718567882.700:437): avc: denied { read } for pid=1410 comm="syz-executor.3" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.642144][ T28] audit: type=1400 audit(1718567882.720:438): avc: denied { open } for pid=1410 comm="syz-executor.3" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.667742][ T1411] loop0: detected capacity change from 0 to 128 [ 55.674018][ T1411] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 55.692540][ T28] audit: type=1400 audit(1718567882.770:439): avc: denied { map } for pid=1410 comm="syz-executor.3" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.785358][ T1416] loop1: detected capacity change from 0 to 8192 [ 55.977319][ T936] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 55.994821][ T936] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 56.001418][ T936] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 56.007926][ T936] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 56.014350][ T936] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 56.021054][ T936] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 56.028005][ T936] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0 [ 56.034926][ T936] lua 0003:1E7D:2C2E.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 56.199914][ T936] usb 3-1: USB disconnect, device number 3 [ 56.282905][ T28] audit: type=1400 audit(1718567883.360:440): avc: denied { read } for pid=1430 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.307672][ T28] audit: type=1400 audit(1718567883.360:441): avc: denied { open } for pid=1430 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.331277][ T28] audit: type=1400 audit(1718567883.360:442): avc: denied { ioctl } for pid=1430 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=138 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 56.389448][ T1434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 56.647667][ T1445] loop4: detected capacity change from 0 to 8192 [ 56.686356][ T28] audit: type=1400 audit(1718567883.760:443): avc: denied { relabelfrom } for pid=1448 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 56.706540][ T28] audit: type=1400 audit(1718567883.760:444): avc: denied { relabelto } for pid=1448 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 57.089031][ T1463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 57.234731][ T1463] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 57.296693][ T332] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 57.566677][ T332] usb 1-1: Using ep0 maxpacket: 8 [ 57.696905][ T28] audit: type=1400 audit(1718567884.780:445): avc: denied { create } for pid=1477 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.717476][ T332] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 57.728151][ T332] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 57.766123][ T332] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.777235][ T332] usb 1-1: config 1 interface 1 has no altsetting 0 [ 57.832063][ T1485] loop2: detected capacity change from 0 to 16 [ 57.844049][ T1485] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 57.854508][ T1485] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 57.865618][ T1485] erofs: (device loop2): mounted with root inode @ nid 36. [ 57.894068][ T1485] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 57.955058][ T1490] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 57.964344][ T332] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.973917][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.981803][ T332] usb 1-1: Product: syz [ 57.985821][ T332] usb 1-1: Manufacturer: syz [ 57.990175][ T332] usb 1-1: SerialNumber: syz [ 58.256691][ T936] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 58.316807][ T332] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 58.324004][ T332] usb 1-1: 2:1 : invalid channels 0 [ 58.348292][ T332] usb 1-1: USB disconnect, device number 6 [ 58.506707][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 58.626797][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.641021][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.652343][ T936] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 58.661264][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.669692][ T936] usb 3-1: config 0 descriptor?? [ 58.690849][ T1518] syz-executor.1[1518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.690918][ T1518] syz-executor.1[1518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.707922][ T1518] syz-executor.1[1518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.720920][ T1518] syz-executor.1[1518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.862447][ T1521] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 58.886798][ T365] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.126687][ T365] usb 5-1: Using ep0 maxpacket: 8 [ 59.144611][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 59.144625][ T28] audit: type=1400 audit(1718567886.220:451): avc: denied { write } for pid=1527 comm="syz-executor.1" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.172050][ T28] audit: type=1400 audit(1718567886.220:452): avc: denied { add_name } for pid=1527 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.172742][ T936] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 59.193004][ T28] audit: type=1400 audit(1718567886.220:453): avc: denied { associate } for pid=1527 comm="syz-executor.1" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.199544][ T936] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 59.227909][ T936] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 59.234410][ T936] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 59.240988][ T936] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 59.247940][ T936] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 59.254732][ T936] lua 0003:1E7D:2C2E.0009: unknown main item tag 0x0 [ 59.262759][ T936] lua 0003:1E7D:2C2E.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 59.276727][ T365] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 59.285085][ T365] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 59.295307][ T365] usb 5-1: config 135 has no interface number 0 [ 59.301431][ T365] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.347457][ T1533] syz-executor.3[1533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.347528][ T1533] syz-executor.3[1533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.392137][ T936] usb 3-1: USB disconnect, device number 4 [ 59.466746][ T365] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 59.475725][ T365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.483580][ T365] usb 5-1: Product: syz [ 59.487621][ T365] usb 5-1: Manufacturer: syz [ 59.492520][ T365] usb 5-1: SerialNumber: syz [ 59.537219][ T365] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 59.543482][ T365] usb 5-1: No valid video chain found. [ 59.726372][ T1546] loop1: detected capacity change from 0 to 1024 [ 59.747716][ T1546] EXT4-fs: Ignoring removed oldalloc option [ 59.755253][ T1546] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.766199][ T1546] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 59.773765][ T1546] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 59.834389][ T310] EXT4-fs (loop1): unmounting filesystem. [ 59.844905][ T1551] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 59.867465][ T28] audit: type=1326 audit(1718567886.950:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1550 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92b6e7cea9 code=0x0 [ 60.056786][ T24] usb 5-1: USB disconnect, device number 5 [ 60.077288][ T28] audit: type=1400 audit(1718567887.160:455): avc: denied { module_load } for pid=1550 comm="syz-executor.3" path=2F6D656D66643A1037202864656C6574656429 dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 60.077317][ T1562] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 60.178355][ T1568] syz-executor.1[1568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.178422][ T1568] syz-executor.1[1568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.851468][ T1575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.598209][ T1582] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.605631][ T1582] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 61.894856][ T28] audit: type=1400 audit(1718567888.970:456): avc: denied { bind } for pid=1594 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.993232][ T28] audit: type=1400 audit(1718567889.070:457): avc: denied { write } for pid=1598 comm="syz-executor.1" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 62.018236][ T1600] input: syz0 as /devices/virtual/input/input8 [ 62.169724][ T1590] loop0: detected capacity change from 0 to 131072 [ 62.185117][ T1590] F2FS-fs (loop0): invalid crc value [ 62.192069][ T1590] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.200421][ T28] audit: type=1326 audit(1718567889.280:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1605 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92b6e7cea9 code=0x0 [ 62.227472][ T1590] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 62.246136][ T28] audit: type=1400 audit(1718567889.320:459): avc: denied { read } for pid=1588 comm="syz-executor.0" name="file2" dev="loop0" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.246215][ T1590] fscrypt (loop0, inode 8): Error -61 getting encryption context [ 62.269000][ T28] audit: type=1400 audit(1718567889.320:460): avc: denied { open } for pid=1588 comm="syz-executor.0" path="/root/syzkaller-testdir1301985974/syzkaller.qK1tIT/93/file1/file2" dev="loop0" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.428677][ T1618] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 62.926260][ T1631] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.012947][ T1631] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 64.822034][ T1657] loop0: detected capacity change from 0 to 256 [ 65.470420][ T28] audit: type=1400 audit(1718567892.550:461): avc: denied { mounton } for pid=1672 comm="syz-executor.4" path="/proc/1672/task" dev="proc" ino=20278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 65.476114][ T1675] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 65.508161][ T28] audit: type=1400 audit(1718567892.550:462): avc: denied { mount } for pid=1672 comm="syz-executor.4" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.064893][ T1697] loop1: detected capacity change from 0 to 16 [ 66.076265][ T1697] erofs: (device loop1): z_erofs_load_lz4_config: invalid lz4 cfgs, size=4 [ 66.483644][ T1717] input: syz0 as /devices/virtual/input/input9 [ 66.686699][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 66.743370][ T28] audit: type=1400 audit(1718567893.820:463): avc: denied { bind } for pid=1731 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.763122][ T28] audit: type=1400 audit(1718567893.820:464): avc: denied { listen } for pid=1731 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.836289][ T28] audit: type=1400 audit(1718567893.910:465): avc: denied { read } for pid=1731 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.926659][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 67.046731][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.216735][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 67.225643][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.233517][ T24] usb 5-1: Product: syz [ 67.237560][ T24] usb 5-1: Manufacturer: syz [ 67.241947][ T24] usb 5-1: SerialNumber: syz [ 67.246905][ T24] usb 5-1: config 0 descriptor?? [ 67.491397][ T28] audit: type=1326 audit(1718567894.570:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1764 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92b6e7cea9 code=0x0 [ 67.511509][ T24] usb 5-1: Found UVC 0.00 device syz (8086:0b03) [ 67.520753][ T24] usb 5-1: No valid video chain found. [ 67.720223][ T332] usb 5-1: USB disconnect, device number 6 [ 67.954019][ T1791] loop0: detected capacity change from 0 to 16 [ 67.968917][ T1791] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 67.979512][ T1791] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 67.990466][ T1791] erofs: (device loop0): mounted with root inode @ nid 36. [ 68.019551][ T1791] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 68.080035][ T1796] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.376797][ T332] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 68.576701][ T936] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 68.589095][ T1815] loop1: detected capacity change from 0 to 256 [ 68.636659][ T332] usb 1-1: Using ep0 maxpacket: 16 [ 69.016726][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.030515][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.040159][ T332] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 69.049056][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.058072][ T332] usb 1-1: config 0 descriptor?? [ 69.266734][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.277535][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.287158][ T936] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 69.295983][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.307615][ T936] usb 3-1: config 0 descriptor?? [ 69.363198][ T28] audit: type=1400 audit(1718567896.440:467): avc: denied { create } for pid=1828 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.383609][ T28] audit: type=1400 audit(1718567896.450:468): avc: denied { ioctl } for pid=1828 comm="syz-executor.3" path="socket:[21823]" dev="sockfs" ino=21823 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 69.547300][ T332] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 69.554034][ T332] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 69.560863][ T332] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 69.787851][ T332] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 69.794390][ T332] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 69.800948][ T332] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 69.807444][ T332] lua 0003:1E7D:2C2E.000A: unknown main item tag 0x0 [ 69.814257][ T332] lua 0003:1E7D:2C2E.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 69.825559][ T332] usb 1-1: USB disconnect, device number 7 [ 70.112134][ T1842] bridge0: port 3(veth1_macvtap) entered blocking state [ 70.120530][ T1842] bridge0: port 3(veth1_macvtap) entered disabled state [ 70.223844][ T1846] input: syz0 as /devices/virtual/input/input10 [ 70.537579][ T1859] SELinux: Context hyz: is not valid (left unmapped). [ 70.544729][ T28] audit: type=1400 audit(1718567897.620:469): avc: denied { relabelto } for pid=1858 comm="syz-executor.3" name="file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="hyz:" [ 70.616362][ T1860] loop1: detected capacity change from 0 to 512 [ 70.620943][ T28] audit: type=1400 audit(1718567897.700:470): avc: denied { unlink } for pid=312 comm="syz-executor.3" name="file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="hyz:" [ 70.659112][ T1860] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.667942][ T1860] ext4 filesystem being mounted at /root/syzkaller-testdir3647606776/syzkaller.ict1D7/134/bus supports timestamps until 2038 (0x7fffffff) [ 70.685210][ T28] audit: type=1400 audit(1718567897.760:471): avc: denied { ioctl } for pid=1855 comm="syz-executor.1" path="/root/syzkaller-testdir3647606776/syzkaller.ict1D7/134/bus/cpu.stat" dev="loop1" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.717636][ T936] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000B/input/input11 [ 70.730335][ T936] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.000B/input/input12 [ 70.742962][ T936] uclogic 0003:256C:006D.000B: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 70.770121][ T28] audit: type=1400 audit(1718567897.850:472): avc: denied { mounton } for pid=1868 comm="syz-executor.3" path="/root/syzkaller-testdir4108470128/syzkaller.5olMXQ/102/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 70.860064][ T28] audit: type=1400 audit(1718567897.940:473): avc: denied { create } for pid=1870 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 70.925364][ T332] usb 3-1: USB disconnect, device number 5 [ 71.043660][ T1875] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 71.052751][ T1875] FAT-fs (loop9): unable to read boot sector [ 71.116967][ T28] audit: type=1400 audit(1718567898.120:474): avc: denied { mounton } for pid=1870 comm="syz-executor.4" path="/root/syzkaller-testdir2959738018/syzkaller.WJUiJ1/66/file0" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 71.296664][ T501] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 71.340631][ T310] EXT4-fs (loop1): unmounting filesystem. [ 71.398485][ T1877] loop1: detected capacity change from 0 to 256 [ 71.411729][ T28] audit: type=1400 audit(1718567898.490:475): avc: denied { watch watch_reads } for pid=1876 comm="syz-executor.1" path="/root/syzkaller-testdir3647606776/syzkaller.ict1D7/135/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 71.585520][ T1881] loop1: detected capacity change from 0 to 16 [ 71.597041][ T1881] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 71.607440][ T1881] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 71.618234][ T1881] erofs: (device loop1): mounted with root inode @ nid 36. [ 71.656455][ T1881] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 71.676756][ T501] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.687530][ T501] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.716283][ T501] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.725591][ T1889] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.754470][ T28] audit: type=1400 audit(1718567898.830:476): avc: denied { unlink } for pid=1006 comm="syz-executor.4" name="file0" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 71.992418][ T501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.000818][ T501] usb 4-1: config 0 descriptor?? [ 72.028346][ T1895] loop0: detected capacity change from 0 to 512 [ 72.042838][ T1895] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 72.052273][ T1895] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 72.070990][ T1895] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 72.083263][ T1895] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.091634][ T1895] ext2 filesystem being mounted at /root/syzkaller-testdir1301985974/syzkaller.qK1tIT/110/file0 supports timestamps until 2038 (0x7fffffff) [ 72.176735][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 72.416701][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 72.436709][ T19] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 72.476996][ T501] hid (null): bogus close delimiter [ 72.536803][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.547624][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.561845][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 72.570906][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.579346][ T24] usb 2-1: config 0 descriptor?? [ 72.668239][ T28] audit: type=1400 audit(1718567899.750:477): avc: denied { mount } for pid=1909 comm="syz-executor.4" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 72.696702][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 72.727960][ T28] audit: type=1400 audit(1718567899.810:478): avc: denied { unmount } for pid=1006 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 72.826901][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.837684][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.847244][ T19] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 72.856298][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.864814][ T19] usb 1-1: config 0 descriptor?? [ 73.051440][ T24] lua 0003:1E7D:2C2E.000D: unknown main item tag 0x0 [ 73.059337][ T24] lua 0003:1E7D:2C2E.000D: unknown main item tag 0x0 [ 73.068222][ T24] lua 0003:1E7D:2C2E.000D: unknown main item tag 0x0 [ 73.075792][ T24] lua 0003:1E7D:2C2E.000D: unknown main item tag 0x0 [ 73.084072][ T24] lua 0003:1E7D:2C2E.000D: unknown main item tag 0x0 [ 73.091571][ T24] lua 0003:1E7D:2C2E.000D: unknown main item tag 0x0 [ 73.100482][ T24] lua 0003:1E7D:2C2E.000D: unknown main item tag 0x0 [ 73.138589][ T24] lua 0003:1E7D:2C2E.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 73.139153][ T501] usb 4-1: string descriptor 0 read error: -71 [ 73.175938][ T1922] loop4: detected capacity change from 0 to 16 [ 73.186783][ T501] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 73.189916][ T1922] erofs: (device loop4): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffc [ 73.195486][ T501] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 73.214721][ T501] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 73.222659][ T501] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 73.229987][ T501] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 73.238036][ T501] usb 4-1: USB disconnect, device number 7 [ 73.271095][ T938] usb 2-1: USB disconnect, device number 7 [ 73.338487][ T1895] overlayfs: upper fs needs to support d_type. [ 73.456752][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 73.462834][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 73.469738][ T19] usb 1-1: USB disconnect, device number 8 [ 73.846764][ T501] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 73.915519][ T313] EXT4-fs (loop0): unmounting filesystem. [ 74.116752][ T501] usb 5-1: Using ep0 maxpacket: 8 [ 74.232663][ T1940] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.239900][ T1940] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.247321][ T1940] device bridge_slave_0 entered promiscuous mode [ 74.255310][ T1940] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.262169][ T1940] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.269123][ T501] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 74.270168][ T1940] device bridge_slave_1 entered promiscuous mode [ 74.277298][ T501] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 74.293577][ T501] usb 5-1: config 135 has no interface number 0 [ 74.299816][ T501] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.369777][ T1940] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.376638][ T1940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.383799][ T1940] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.390646][ T1940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.410258][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.417705][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.424809][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.435566][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.443763][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.450609][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.460556][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.468665][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.475485][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.485017][ T1950] input: syz0 as /devices/virtual/input/input13 [ 74.492190][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.497218][ T1951] loop0: detected capacity change from 0 to 256 [ 74.499938][ T501] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 74.515042][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.521270][ T1951] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x01a29eb6, utbl_chksum : 0xe619d30d) [ 74.523910][ T501] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.542301][ T501] usb 5-1: Product: syz [ 74.542490][ T10] device bridge_slave_1 left promiscuous mode [ 74.546263][ T501] usb 5-1: Manufacturer: syz [ 74.546276][ T501] usb 5-1: SerialNumber: syz [ 74.557666][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.568911][ T10] device bridge_slave_0 left promiscuous mode [ 74.574930][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.583472][ T10] device veth1_macvtap left promiscuous mode [ 74.589762][ T10] device veth0_vlan left promiscuous mode [ 74.617269][ T501] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 74.623437][ T501] usb 5-1: No valid video chain found. [ 74.702061][ T1959] loop1: detected capacity change from 0 to 512 [ 74.717958][ T1959] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 74.728621][ T1959] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 74.746901][ T1959] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 74.759891][ T1959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.768250][ T1959] ext2 filesystem being mounted at /root/syzkaller-testdir3647606776/syzkaller.ict1D7/140/file0 supports timestamps until 2038 (0x7fffffff) [ 74.845533][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.853802][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.862458][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.870442][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.880292][ T1940] device veth0_vlan entered promiscuous mode [ 74.886512][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.894168][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.909688][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.917638][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.926160][ T1940] device veth1_macvtap entered promiscuous mode [ 74.934510][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.941871][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.950398][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.107900][ T1966] loop0: detected capacity change from 0 to 512 [ 75.129281][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.168503][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.186867][ T938] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 75.224365][ T1966] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 75.243094][ T1966] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 75.255995][ T1966] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.269461][ T1966] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 75.283563][ T1966] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 75.297096][ T1966] EXT4-fs (loop0): 1 orphan inode deleted [ 75.302659][ T1966] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.397190][ T936] usb 5-1: USB disconnect, device number 7 [ 75.476708][ T938] usb 2-1: Using ep0 maxpacket: 8 [ 75.564465][ T1973] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.571417][ T1973] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.578530][ T1973] device bridge_slave_0 entered promiscuous mode [ 75.585812][ T1973] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.592833][ T1973] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.599820][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.600542][ T1973] device bridge_slave_1 entered promiscuous mode [ 75.610589][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.626321][ T938] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 75.635498][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.644819][ T938] usb 2-1: config 0 descriptor?? [ 75.683554][ T1973] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.690428][ T1973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.697481][ T1973] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.704275][ T1973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.711314][ T1979] loop3: detected capacity change from 0 to 256 [ 75.725117][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.732965][ T936] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.744274][ T1979] FAT-fs (loop3): Directory bread(block 64) failed [ 75.750813][ T1979] FAT-fs (loop3): Directory bread(block 65) failed [ 75.757273][ T1979] FAT-fs (loop3): Directory bread(block 66) failed [ 75.758518][ T1980] loop4: detected capacity change from 0 to 256 [ 75.763592][ T1979] FAT-fs (loop3): Directory bread(block 67) failed [ 75.776076][ T1979] FAT-fs (loop3): Directory bread(block 68) failed [ 75.776148][ T936] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.782411][ T1979] FAT-fs (loop3): Directory bread(block 69) failed [ 75.795635][ T1979] FAT-fs (loop3): Directory bread(block 70) failed [ 75.801962][ T1979] FAT-fs (loop3): Directory bread(block 71) failed [ 75.808945][ T1979] FAT-fs (loop3): Directory bread(block 72) failed [ 75.815375][ T1979] FAT-fs (loop3): Directory bread(block 73) failed [ 75.829133][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.837210][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.844061][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.852438][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.860401][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.867244][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.874709][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.887248][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.905062][ T1973] device veth0_vlan entered promiscuous mode [ 75.911492][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.919555][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.928340][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.935999][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.944062][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.951294][ T343] kworker/u4:4: attempt to access beyond end of device [ 75.951294][ T343] loop3: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 75.964883][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.973696][ T10] device bridge_slave_1 left promiscuous mode [ 75.979877][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.987303][ T10] device bridge_slave_0 left promiscuous mode [ 75.993236][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.993945][ T313] EXT4-fs (loop0): unmounting filesystem. [ 76.006805][ T10] device veth1_macvtap left promiscuous mode [ 76.012709][ T10] device veth0_vlan left promiscuous mode [ 76.128370][ T1959] overlayfs: upper fs needs to support d_type. [ 76.149309][ T1986] loop0: detected capacity change from 0 to 256 [ 76.166019][ T1986] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x01a29eb6, utbl_chksum : 0xe619d30d) [ 76.206798][ T938] usbhid 2-1:0.0: can't add hid device: -71 [ 76.212944][ T938] usbhid: probe of 2-1:0.0 failed with error -71 [ 76.220344][ T938] usb 2-1: USB disconnect, device number 8 [ 76.229415][ T1985] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 76.242140][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.250501][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.259596][ T1973] device veth1_macvtap entered promiscuous mode [ 76.266228][ T1985] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 76.280768][ T1985] syz-executor.3 (1985) used greatest stack depth: 20584 bytes left [ 76.282208][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.296528][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.304653][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.315643][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.323954][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.921379][ T310] EXT4-fs (loop1): unmounting filesystem. [ 77.007571][ T2009] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.014494][ T2009] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.021954][ T2009] device bridge_slave_0 entered promiscuous mode [ 77.031606][ T2009] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.038496][ T2009] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.045584][ T2009] device bridge_slave_1 entered promiscuous mode [ 77.052941][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 77.052953][ T28] audit: type=1400 audit(1718567904.130:511): avc: denied { ioctl } for pid=2013 comm="syz-executor.1" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.117423][ T10] device bridge_slave_1 left promiscuous mode [ 77.123331][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.130619][ T10] device bridge_slave_0 left promiscuous mode [ 77.136924][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.144368][ T10] device veth1_macvtap left promiscuous mode [ 77.150219][ T10] device veth0_vlan left promiscuous mode [ 77.213338][ T2009] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.220214][ T2009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.227375][ T2009] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.234154][ T2009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.253048][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.261104][ T936] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.268183][ T936] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.277245][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.285186][ T936] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.292022][ T936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.301236][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.309415][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.316259][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.329562][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.339888][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.352004][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.364730][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.372481][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.379836][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.388461][ T2009] device veth0_vlan entered promiscuous mode [ 77.398732][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.407818][ T2009] device veth1_macvtap entered promiscuous mode [ 77.416914][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.428644][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.554471][ T2025] loop2: detected capacity change from 0 to 256 [ 77.576172][ T2025] FAT-fs (loop2): Directory bread(block 64) failed [ 77.582631][ T2025] FAT-fs (loop2): Directory bread(block 65) failed [ 77.589164][ T2025] FAT-fs (loop2): Directory bread(block 66) failed [ 77.595493][ T2025] FAT-fs (loop2): Directory bread(block 67) failed [ 77.602009][ T2025] FAT-fs (loop2): Directory bread(block 68) failed [ 77.608424][ T2025] FAT-fs (loop2): Directory bread(block 69) failed [ 77.614956][ T2025] FAT-fs (loop2): Directory bread(block 70) failed [ 77.621353][ T2025] FAT-fs (loop2): Directory bread(block 71) failed [ 77.628846][ T2025] FAT-fs (loop2): Directory bread(block 72) failed [ 77.635272][ T2025] FAT-fs (loop2): Directory bread(block 73) failed [ 77.664368][ T2030] loop1: detected capacity change from 0 to 256 [ 77.682593][ T2030] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x01a29eb6, utbl_chksum : 0xe619d30d) [ 77.700605][ T2033] loop4: detected capacity change from 0 to 256 [ 77.782954][ T10] kworker/u4:1: attempt to access beyond end of device [ 77.782954][ T10] loop2: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 78.215519][ T28] audit: type=1326 audit(1718567905.290:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a20e7cea9 code=0x7ffc0000 [ 78.240303][ T28] audit: type=1326 audit(1718567905.290:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a20e7cea9 code=0x7ffc0000 [ 78.269074][ T28] audit: type=1326 audit(1718567905.320:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a20e7cea9 code=0x7ffc0000 [ 78.293100][ T28] audit: type=1326 audit(1718567905.320:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a20e7cea9 code=0x7ffc0000 [ 78.317173][ T28] audit: type=1326 audit(1718567905.320:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a20e7cea9 code=0x7ffc0000 [ 78.340875][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 78.348303][ T28] audit: type=1326 audit(1718567905.320:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a20e7cea9 code=0x7ffc0000 [ 78.372159][ T28] audit: type=1326 audit(1718567905.350:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a20e7cea9 code=0x7ffc0000 [ 78.396406][ T28] audit: type=1326 audit(1718567905.350:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a20e7a627 code=0x7ffc0000 [ 78.420177][ T28] audit: type=1326 audit(1718567905.350:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a20e40309 code=0x7ffc0000 [ 78.469612][ T2048] loop3: detected capacity change from 0 to 16 [ 78.487099][ T2048] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 78.497639][ T2048] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 78.508353][ T2048] erofs: (device loop3): mounted with root inode @ nid 36. [ 78.540529][ T2048] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 78.600951][ T2052] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.726695][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.741074][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.752759][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 78.761696][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.770224][ T24] usb 2-1: config 0 descriptor?? [ 78.876709][ T332] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 78.932721][ T2064] loop2: detected capacity change from 0 to 2048 [ 78.948628][ T2064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 79.045179][ T2068] loop0: detected capacity change from 0 to 40427 [ 79.059538][ T2068] F2FS-fs (loop0): invalid crc value [ 79.064705][ T2068] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 79.136677][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 79.226768][ T936] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 79.247013][ T24] hid (null): bogus close delimiter [ 79.266898][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.277849][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.287468][ T332] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 79.296790][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.316905][ T332] usb 4-1: config 0 descriptor?? [ 79.706794][ T936] usb 3-1: config 127 has an invalid interface number: 229 but max is 0 [ 79.715117][ T936] usb 3-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 79.723786][ T936] usb 3-1: config 127 has no interface number 0 [ 79.729874][ T936] usb 3-1: config 127 interface 229 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 79.740823][ T936] usb 3-1: config 127 interface 229 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 79.751366][ T936] usb 3-1: config 127 interface 229 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 79.787290][ T332] lua 0003:1E7D:2C2E.000F: unknown main item tag 0x0 [ 79.793863][ T332] lua 0003:1E7D:2C2E.000F: unknown main item tag 0x0 [ 79.800421][ T332] lua 0003:1E7D:2C2E.000F: unknown main item tag 0x0 [ 79.807024][ T332] lua 0003:1E7D:2C2E.000F: unknown main item tag 0x0 [ 79.813530][ T332] lua 0003:1E7D:2C2E.000F: unknown main item tag 0x0 [ 79.820089][ T332] lua 0003:1E7D:2C2E.000F: unknown main item tag 0x0 [ 79.826549][ T332] lua 0003:1E7D:2C2E.000F: unknown main item tag 0x0 [ 79.833665][ T332] lua 0003:1E7D:2C2E.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 79.846722][ T24] usb 2-1: string descriptor 0 read error: -71 [ 79.866751][ T24] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 79.875455][ T24] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 79.883292][ T24] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 79.891254][ T24] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 79.898626][ T24] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 79.906509][ T24] usb 2-1: USB disconnect, device number 9 [ 79.997356][ T332] usb 4-1: USB disconnect, device number 8 [ 80.056830][ T333] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 80.156780][ T936] usb 3-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=2e.05 [ 80.165702][ T936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.173519][ T936] usb 3-1: Manufacturer: 㘧ä‘í›ë¼‹äºŒá·ë¶¦á¥©äˆ»ì¡¨äµœæ¦êµ‘㜉⸑뮈ïµâ”¨ã‡ˆï™¡ä¤Žî”Ÿæ—ਰ彉⣉羵⌎䣌è¯ë©’૖ڙ뙋è³é¶„抔贛왳薭늩鳼ⷺ๵윴塮㣕彭繬벭ﵽ장 [ 80.191460][ T936] usb 3-1: SerialNumber: 莆è—è˜î“斵袸퉢ꣽ㼂惚㺦ì†æ’¬ê¿©ä¯‚èžì–죤â­ç…‹ã¢æ ¼èŒ†ë‚­ã ‘芎é°è«§á‹…䯥ø䉥ế២繖ã±ãœ¢â†¬è¼‘è‚šâ ‚å™ç›­â«¤ç’ƒä¹‚够꾨㌣傇æ¦à¶»ê°“á¿ìª¹É‚筜浳棽䳇娶ë¢ë’•æ†‰à­™ç´«ê¨­ã§½á¹¨à¿œâ™¥à¡à°‹å”¯ã…µï¯°æ´¶ä¯¸ç‹žï¡¡ãº‹â‘¤ç¡«ç•Œè¤æŸ”è¸ã½Žá•‘∹ïªï²æ‰ºåš®ì½­ç…™ë§½æ§¡ì‹¬âµ  [ 80.416714][ T333] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.426756][ T333] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 80.435487][ T333] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.497064][ T2112] loop1: detected capacity change from 0 to 256 [ 80.514823][ T2112] FAT-fs (loop1): Directory bread(block 64) failed [ 80.521253][ T2112] FAT-fs (loop1): Directory bread(block 65) failed [ 80.527721][ T2112] FAT-fs (loop1): Directory bread(block 66) failed [ 80.534043][ T2112] FAT-fs (loop1): Directory bread(block 67) failed [ 80.540645][ T2112] FAT-fs (loop1): Directory bread(block 68) failed [ 80.547228][ T2112] FAT-fs (loop1): Directory bread(block 69) failed [ 80.548493][ T936] usb 3-1: USB disconnect, device number 6 [ 80.553822][ T2112] FAT-fs (loop1): Directory bread(block 70) failed [ 80.565759][ T2112] FAT-fs (loop1): Directory bread(block 71) failed [ 80.572357][ T2112] FAT-fs (loop1): Directory bread(block 72) failed [ 80.582010][ T2112] FAT-fs (loop1): Directory bread(block 73) failed [ 80.606746][ T333] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.615730][ T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.623854][ T333] usb 5-1: Product: syz [ 80.626920][ T332] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 80.627990][ T333] usb 5-1: Manufacturer: syz [ 80.639659][ T333] usb 5-1: SerialNumber: syz [ 80.676936][ T333] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 80.683584][ T333] cdc_ncm 5-1:1.0: bind() failure [ 80.724566][ T8] kworker/u4:0: attempt to access beyond end of device [ 80.724566][ T8] loop1: rw=1, sector=1224, nr_sectors = 128 limit=256 [ 80.867685][ T2118] loop3: detected capacity change from 0 to 128 [ 80.886697][ T332] usb 1-1: Using ep0 maxpacket: 8 [ 81.155695][ T2009] EXT4-fs (loop2): unmounting filesystem. [ 81.207131][ T2124] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 81.211296][ T332] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 81.223241][ T332] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 81.233323][ T332] usb 1-1: config 135 has no interface number 0 [ 81.235554][ T2121] overlayfs: failed to resolve './file0': -2 [ 81.239429][ T332] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.261206][ T2125] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 81.416767][ T332] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 81.425656][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.433463][ T332] usb 1-1: Product: syz [ 81.437978][ T332] usb 1-1: Manufacturer: syz [ 81.442399][ T332] usb 1-1: SerialNumber: syz [ 81.679587][ T332] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 81.685777][ T332] usb 1-1: No valid video chain found. [ 82.097089][ T365] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 82.368298][ T332] usb 1-1: USB disconnect, device number 9 [ 82.496771][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.507789][ T365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.517693][ T365] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 82.526929][ T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.537407][ T365] usb 4-1: config 0 descriptor?? [ 82.752790][ T2146] loop2: detected capacity change from 0 to 40427 [ 82.766049][ T2146] F2FS-fs (loop2): invalid crc value [ 82.771316][ T2146] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 82.790830][ T936] usb 5-1: USB disconnect, device number 8 [ 83.017253][ T365] hid-multitouch 0003:1FD2:6007.0010: unknown main item tag 0x0 [ 83.025481][ T365] hid-multitouch 0003:1FD2:6007.0010: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 83.053732][ T2156] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 83.172342][ T2156] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 83.238598][ T365] usb 4-1: USB disconnect, device number 9 [ 83.445684][ T2167] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 83.560077][ T2172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.583260][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 83.583276][ T28] audit: type=1400 audit(1718567910.660:618): avc: denied { getopt } for pid=2165 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 83.680541][ T2176] loop2: detected capacity change from 0 to 2048 [ 83.731486][ T2176] loop2: p2 p3 p7 [ 83.747092][ T2179] loop0: detected capacity change from 0 to 128 [ 83.769693][ T28] audit: type=1400 audit(1718567910.850:619): avc: denied { write } for pid=2175 comm="syz-executor.2" name="loop2p2" dev="devtmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.777143][ T2179] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 83.792779][ T28] audit: type=1400 audit(1718567910.850:620): avc: denied { open } for pid=2175 comm="syz-executor.2" path="/dev/loop2p2" dev="devtmpfs" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.801482][ T2179] ext4 filesystem being mounted at /root/syzkaller-testdir1301985974/syzkaller.qK1tIT/139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 83.839238][ T28] audit: type=1400 audit(1718567910.850:621): avc: denied { ioctl } for pid=2175 comm="syz-executor.2" path="/dev/loop2p2" dev="devtmpfs" ino=468 ioctlcmd=0x127a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.884613][ T28] audit: type=1400 audit(1718567910.940:622): avc: denied { link } for pid=2177 comm="syz-executor.0" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.036468][ T313] EXT4-fs (loop0): unmounting filesystem. [ 84.133095][ T2186] cgroup: none used incorrectly [ 84.143525][ T2189] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 84.155255][ T2189] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 84.240018][ T2188] loop4: detected capacity change from 0 to 40427 [ 84.257193][ T2188] F2FS-fs (loop4): invalid crc value [ 84.262366][ T2188] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 84.360108][ T28] audit: type=1400 audit(1718567911.440:623): avc: denied { bind } for pid=2194 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.758564][ T2214] loop4: detected capacity change from 0 to 2048 [ 84.812492][ T2214] loop4: p2 p3 p7 [ 84.835298][ T2216] loop2: detected capacity change from 0 to 2048 [ 84.876687][ T365] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 84.887597][ T2216] Alternate GPT is invalid, using primary GPT. [ 84.893622][ T2216] loop2: p1 p2 p3 [ 85.129556][ T28] audit: type=1400 audit(1718567912.200:624): avc: denied { bind } for pid=2220 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.266995][ T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.283358][ T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.293280][ T365] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 85.302227][ T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.310714][ T365] usb 1-1: config 0 descriptor?? [ 85.346722][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 85.586779][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 85.809680][ T365] hid-multitouch 0003:1FD2:6007.0011: unknown main item tag 0x0 [ 85.818249][ T365] hid-multitouch 0003:1FD2:6007.0011: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 85.931012][ T24] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 85.956150][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.967528][ T24] usb 5-1: Product: syz [ 85.971640][ T24] usb 5-1: Manufacturer: syz [ 85.976329][ T24] usb 5-1: SerialNumber: syz [ 86.075444][ T332] usb 1-1: USB disconnect, device number 10 [ 86.087813][ T24] usb 5-1: config 0 descriptor?? [ 86.119084][ T2248] loop3: detected capacity change from 0 to 2048 [ 86.142131][ T2248] loop3: p2 p3 p7 [ 86.296471][ T2252] loop1: detected capacity change from 0 to 128 [ 86.310557][ T2252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.319045][ T2252] ext4 filesystem being mounted at /root/syzkaller-testdir3647606776/syzkaller.ict1D7/161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 86.472188][ T310] EXT4-fs (loop1): unmounting filesystem. [ 86.646803][ T24] usb 5-1: MIDIStreaming interface descriptor not found [ 86.655827][ T24] usb 5-1: USB disconnect, device number 9 [ 87.976662][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 88.086246][ T2284] loop4: detected capacity change from 0 to 2048 [ 88.141360][ T2284] loop4: p2 p3 p7 [ 88.160305][ T28] audit: type=1400 audit(1718567915.240:625): avc: denied { relabelfrom } for pid=2286 comm="syz-executor.1" name="" dev="pipefs" ino=24128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 88.205253][ T28] audit: type=1326 audit(1718567915.280:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2289 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a20e7cea9 code=0x0 [ 88.226648][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 88.229844][ T2288] 9pnet_fd: Insufficient options for proto=fd [ 88.372960][ T24] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 88.381247][ T24] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 88.391544][ T24] usb 3-1: config 135 has no interface number 0 [ 88.398030][ T24] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.579239][ T24] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 88.600196][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.669656][ T24] usb 3-1: Product: syz [ 88.673734][ T24] usb 3-1: Manufacturer: syz [ 88.678234][ T24] usb 3-1: SerialNumber: syz [ 88.717018][ T24] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 88.723249][ T24] usb 3-1: No valid video chain found. [ 89.256672][ T332] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 89.498422][ T24] usb 3-1: USB disconnect, device number 7 [ 89.660777][ T28] audit: type=1326 audit(1718567916.740:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77de7cea9 code=0x7ffc0000 [ 89.684632][ T28] audit: type=1326 audit(1718567916.740:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77de7cea9 code=0x7ffc0000 [ 89.708564][ T28] audit: type=1326 audit(1718567916.740:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77de7cea9 code=0x7ffc0000 [ 89.732704][ T28] audit: type=1326 audit(1718567916.740:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77de7cea9 code=0x7ffc0000 [ 89.756611][ T28] audit: type=1326 audit(1718567916.740:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77de7cea9 code=0x7ffc0000 [ 89.756668][ T332] usb 5-1: Using ep0 maxpacket: 16 [ 89.780424][ T28] audit: type=1326 audit(1718567916.740:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77de7cea9 code=0x7ffc0000 [ 89.808917][ T28] audit: type=1326 audit(1718567916.810:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77de7cea9 code=0x7ffc0000 [ 89.832862][ T28] audit: type=1326 audit(1718567916.810:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe77de7a627 code=0x7ffc0000 [ 89.856509][ T28] audit: type=1326 audit(1718567916.810:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe77de40309 code=0x7ffc0000 [ 89.880281][ T28] audit: type=1326 audit(1718567916.810:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2324 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe77de7a627 code=0x7ffc0000 [ 90.161516][ T332] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 90.174560][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.182420][ T332] usb 5-1: Product: syz [ 90.187941][ T332] usb 5-1: Manufacturer: syz [ 90.217744][ T332] usb 5-1: SerialNumber: syz [ 90.241871][ T332] usb 5-1: config 0 descriptor?? [ 90.613047][ T2347] syz-executor.3[2347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.613304][ T2347] syz-executor.3[2347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.669851][ T2349] loop0: detected capacity change from 0 to 512 [ 90.687867][ T2339] loop2: detected capacity change from 0 to 40427 [ 90.697390][ T2349] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 90.710454][ T2349] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 90.711039][ T2339] F2FS-fs (loop2): invalid crc value [ 90.734485][ T2349] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 90.735632][ T2339] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.753206][ T2349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.768106][ T2349] ext2 filesystem being mounted at /root/syzkaller-testdir1301985974/syzkaller.qK1tIT/149/file0 supports timestamps until 2038 (0x7fffffff) [ 90.882720][ T332] usb 5-1: MIDIStreaming interface descriptor not found [ 90.894480][ T2339] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 90.899620][ T332] usb 5-1: USB disconnect, device number 10 [ 91.055823][ T2009] syz-executor.2: attempt to access beyond end of device [ 91.055823][ T2009] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.223709][ T936] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 91.497172][ T936] usb 1-1: Using ep0 maxpacket: 8 [ 91.670093][ T2377] syz-executor.1 (pid 2377) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 91.707003][ T2377] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 91.715910][ T2377] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 91.806836][ T936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.817658][ T936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.827209][ T936] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 91.836034][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.844443][ T936] usb 1-1: config 0 descriptor?? [ 91.883733][ T2383] syz-executor.2[2383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.883777][ T2383] syz-executor.2[2383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.056676][ T332] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 92.298444][ T2349] overlayfs: upper fs needs to support d_type. [ 92.376749][ T936] usbhid 1-1:0.0: can't add hid device: -71 [ 92.382818][ T936] usbhid: probe of 1-1:0.0 failed with error -71 [ 92.389491][ T936] usb 1-1: USB disconnect, device number 11 [ 92.456781][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.467555][ T332] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 92.476430][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.691725][ T332] usb 5-1: config 0 descriptor?? [ 92.881260][ T2407] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 92.890308][ T2407] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 92.890823][ T313] EXT4-fs (loop0): unmounting filesystem. [ 93.040805][ T2409] loop1: detected capacity change from 0 to 40427 [ 93.054210][ T2409] F2FS-fs (loop1): invalid crc value [ 93.060899][ T2409] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.096349][ T2409] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 93.138234][ T310] syz-executor.1: attempt to access beyond end of device [ 93.138234][ T310] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.187151][ T332] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 93.196794][ T332] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0012/input/input14 [ 93.232315][ T2422] Illegal XDP return value 4294967262 on prog (id 657) dev N/A, expect packet loss! [ 93.278111][ T332] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 93.896928][ T332] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 93.978017][ T24] usb 5-1: USB disconnect, device number 11 [ 94.286721][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.297735][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.333728][ T332] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 94.342770][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.351095][ T332] usb 2-1: config 0 descriptor?? [ 94.817336][ T332] hid-multitouch 0003:1FD2:6007.0013: unknown main item tag 0x0 [ 94.827748][ T332] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 94.908594][ T2471] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 94.917658][ T2471] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 95.019494][ T332] usb 2-1: USB disconnect, device number 10 [ 95.421106][ T2481] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.428523][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.436033][ T2481] device bridge_slave_0 entered promiscuous mode [ 95.448211][ T2481] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.455156][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.462899][ T2481] device bridge_slave_1 entered promiscuous mode [ 95.519140][ T2481] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.525990][ T2481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.533079][ T2481] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.539872][ T2481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.559704][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.567668][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.574795][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.585728][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.598137][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.604989][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.621941][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.630167][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.637014][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.648915][ T8] device bridge_slave_1 left promiscuous mode [ 95.655241][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.662722][ T8] device bridge_slave_0 left promiscuous mode [ 95.668868][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.676524][ T8] device veth1_macvtap left promiscuous mode [ 95.682458][ T8] device veth0_vlan left promiscuous mode [ 95.898803][ T2493] loop3: detected capacity change from 0 to 40427 [ 95.910806][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.914401][ T2493] F2FS-fs (loop3): invalid crc value [ 95.918697][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.925065][ T2493] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.938611][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.947405][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.960305][ T2481] device veth0_vlan entered promiscuous mode [ 95.967111][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.975457][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.981641][ T2493] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 95.993059][ T2481] device veth1_macvtap entered promiscuous mode [ 96.002700][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.011158][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.019343][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.027298][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.035700][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.047548][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.055793][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.064791][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.072981][ T1940] syz-executor.3: attempt to access beyond end of device [ 96.072981][ T1940] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.073037][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.429460][ T2539] device pim6reg1 entered promiscuous mode [ 96.510371][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.517786][ T2541] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.525359][ T2541] device bridge_slave_0 entered promiscuous mode [ 96.532613][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.539700][ T2541] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.546852][ T2541] device bridge_slave_1 entered promiscuous mode [ 96.873807][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.880694][ T2541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.887784][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.894563][ T2541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.948878][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.958291][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.205751][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.213149][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.223567][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.232144][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.240521][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.247379][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.255666][ T8] device bridge_slave_1 left promiscuous mode [ 97.261755][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.269248][ T8] device bridge_slave_0 left promiscuous mode [ 97.275887][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.284155][ T8] device veth1_macvtap left promiscuous mode [ 97.291589][ T8] device veth0_vlan left promiscuous mode [ 97.462606][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.470791][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.478882][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.485707][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.512005][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.519983][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.534147][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.542266][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.552579][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.559501][ T2554] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.566870][ T2554] device bridge_slave_0 entered promiscuous mode [ 97.593308][ T2554] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.600245][ T2554] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.607559][ T2554] device bridge_slave_1 entered promiscuous mode [ 97.635529][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.643760][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.670850][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.678839][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.686746][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.694841][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.705063][ T2541] device veth0_vlan entered promiscuous mode [ 97.726014][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.734055][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.749813][ T2541] device veth1_macvtap entered promiscuous mode [ 97.767917][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.775361][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.783636][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.799337][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.807811][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.827890][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.836655][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.844577][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.851416][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.858709][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.870452][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.878761][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.885609][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.903982][ T2554] device veth0_vlan entered promiscuous mode [ 97.913089][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.921671][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.929478][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.936898][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.944162][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.952138][ T936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.976096][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.984415][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.994644][ T2554] device veth1_macvtap entered promiscuous mode [ 98.003993][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.014329][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.022449][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.034002][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.042175][ T938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.146764][ T333] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 98.246059][ T2598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.290510][ T8] device bridge_slave_1 left promiscuous mode [ 98.296455][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.304886][ T8] device bridge_slave_0 left promiscuous mode [ 98.311301][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.318985][ T8] device veth1_macvtap left promiscuous mode [ 98.324974][ T8] device veth0_vlan left promiscuous mode [ 98.506743][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.517508][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.527198][ T333] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 98.536126][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.545144][ T333] usb 2-1: config 0 descriptor?? [ 98.668551][ T28] kauditd_printk_skb: 139 callbacks suppressed [ 98.668574][ T28] audit: type=1400 audit(1718567925.750:776): avc: denied { name_bind } for pid=2614 comm="syz-executor.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 98.827458][ T2625] loop0: detected capacity change from 0 to 512 [ 98.974664][ T28] audit: type=1400 audit(1718567926.050:777): avc: denied { relabelfrom } for pid=2628 comm="syz-executor.2" name="" dev="pipefs" ino=25349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 99.030264][ T2625] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.044267][ T2625] ext4 filesystem being mounted at /root/syzkaller-testdir1301985974/syzkaller.qK1tIT/171/file0 supports timestamps until 2038 (0x7fffffff) [ 99.077135][ T332] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 99.090707][ T2625] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 99.092135][ T28] audit: type=1400 audit(1718567926.170:778): avc: denied { setattr } for pid=2622 comm="syz-executor.0" path="/root/syzkaller-testdir1301985974/syzkaller.qK1tIT/171/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.136222][ T333] hid-multitouch 0003:1FD2:6007.0014: unknown main item tag 0x0 [ 99.136923][ T28] audit: type=1400 audit(1718567926.190:779): avc: denied { rename } for pid=2622 comm="syz-executor.0" name="file0" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 99.156953][ T333] hid-multitouch 0003:1FD2:6007.0014: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 99.166793][ T28] audit: type=1400 audit(1718567926.190:780): avc: denied { reparent } for pid=2622 comm="syz-executor.0" name="file0" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 99.219093][ T313] EXT4-fs (loop0): unmounting filesystem. [ 99.293354][ T2635] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.321048][ T938] usb 2-1: USB disconnect, device number 11 [ 99.336814][ T332] usb 5-1: Using ep0 maxpacket: 16 [ 99.647981][ T332] usb 5-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 99.666544][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.674690][ T332] usb 5-1: Product: syz [ 99.678792][ T332] usb 5-1: Manufacturer: syz [ 99.683193][ T332] usb 5-1: SerialNumber: syz [ 99.688537][ T332] usb 5-1: config 0 descriptor?? [ 99.805796][ T2648] device pim6reg1 entered promiscuous mode [ 100.075451][ T2663] random: crng reseeded on system resumption [ 100.075452][ T28] audit: type=1400 audit(1718567927.150:781): avc: denied { write } for pid=2660 comm="syz-executor.1" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 100.226802][ T332] usb 5-1: MIDIStreaming interface descriptor not found [ 100.234792][ T332] usb 5-1: USB disconnect, device number 12 [ 100.549038][ T2679] loop0: detected capacity change from 0 to 16 [ 100.555444][ T2679] erofs: (device loop0): mounted with root inode @ nid 36. [ 100.671110][ T28] audit: type=1326 audit(1718567927.750:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2681 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae47e7cea9 code=0x7fc00000 [ 100.694890][ T28] audit: type=1326 audit(1718567927.750:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2681 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fae47e7cea9 code=0x7fc00000 [ 100.718665][ T28] audit: type=1326 audit(1718567927.750:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2681 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae47e7cea9 code=0x7fc00000 [ 100.786662][ T938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 100.804764][ T2687] usb usb8: usbfs: process 2687 (syz-executor.0) did not claim interface 0 before use [ 101.146744][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.157665][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.167276][ T938] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 101.176135][ T938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.184643][ T938] usb 4-1: config 0 descriptor?? [ 101.463001][ T28] audit: type=1400 audit(1718567928.540:785): avc: denied { remount } for pid=2712 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 101.667250][ T938] hid-multitouch 0003:1FD2:6007.0015: unknown main item tag 0x0 [ 101.675114][ T938] hid-multitouch 0003:1FD2:6007.0015: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 101.869538][ T332] usb 4-1: USB disconnect, device number 10 [ 102.828887][ T2729] loop2: detected capacity change from 0 to 512 [ 102.843881][ T2729] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.852035][ T2729] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode [ 102.867809][ T2729] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 12 (err -117) [ 102.879941][ T2729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.920442][ T2554] EXT4-fs (loop2): unmounting filesystem. [ 104.449475][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 104.449491][ T28] audit: type=1400 audit(1718567931.530:791): avc: denied { create } for pid=2760 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.587250][ T28] audit: type=1326 audit(1718567931.670:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2762 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54627cea9 code=0x7fc00000 [ 104.611043][ T28] audit: type=1326 audit(1718567931.670:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2762 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fe54627cea9 code=0x7fc00000 [ 104.634891][ T28] audit: type=1326 audit(1718567931.670:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2762 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe54627cea9 code=0x7fc00000 [ 104.810508][ T2778] random: crng reseeded on system resumption [ 104.831930][ T2780] loop3: detected capacity change from 0 to 512 [ 104.858128][ T2780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.866928][ T2780] ext4 filesystem being mounted at /root/syzkaller-testdir2432183454/syzkaller.LnnGiu/56/file0 supports timestamps until 2038 (0x7fffffff) [ 104.887405][ T2780] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 104.964476][ T28] audit: type=1400 audit(1718567932.040:795): avc: denied { read } for pid=2781 comm="syz-executor.1" path="socket:[26278]" dev="sockfs" ino=26278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.994987][ T2786] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.008067][ T1940] EXT4-fs (loop3): unmounting filesystem. [ 105.077814][ T2789] loop0: detected capacity change from 0 to 512 [ 105.093542][ T2789] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.101665][ T2789] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.0: inline data xattr refers to an external xattr inode [ 105.116814][ T2789] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 105.134689][ T2789] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.156367][ T2790] loop2: detected capacity change from 0 to 128 [ 105.209043][ T313] EXT4-fs (loop0): unmounting filesystem. [ 106.295716][ T28] audit: type=1400 audit(1718567933.370:796): avc: denied { getopt } for pid=2806 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.349181][ T2813] loop4: detected capacity change from 0 to 128 [ 106.350554][ T28] audit: type=1400 audit(1718567933.430:797): avc: denied { setopt } for pid=2809 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.471777][ T2819] tipc: Started in network mode [ 106.476516][ T2819] tipc: Node identity 7f000001, cluster identity 4711 [ 106.483544][ T2819] tipc: Enabled bearer , priority 10 [ 106.673209][ T2829] request_module fs-rpc_pipefs succeeded, but still no fs? [ 106.793805][ T2837] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.123889][ T2851] loop4: detected capacity change from 0 to 128 [ 107.419684][ T2868] usb usb8: usbfs: process 2868 (syz-executor.0) did not claim interface 0 before use [ 107.486700][ T24] tipc: Node number set to 2130706433 [ 107.691884][ T2875] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.706767][ T936] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 107.769123][ T2879] syz-executor.1[2879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.769196][ T2879] syz-executor.1[2879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.845516][ T2878] loop4: detected capacity change from 0 to 40427 [ 107.869546][ T2878] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 107.877267][ T2878] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.885915][ T2878] F2FS-fs (loop4): invalid crc value [ 107.892574][ T2878] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.932262][ T2878] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 107.939402][ T2878] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.946750][ T936] usb 4-1: Using ep0 maxpacket: 16 [ 108.104745][ T936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.301117][ T936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.310736][ T936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.323356][ T936] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 108.332376][ T936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.340848][ T936] usb 4-1: config 0 descriptor?? [ 108.817433][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.824524][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.831716][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.838842][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.845774][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.853101][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.860252][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.867341][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.874826][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.882167][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.889263][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.896223][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.903287][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.910334][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.917364][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.924345][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.931420][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.940114][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.947177][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.954187][ T936] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 108.961338][ T936] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 108.969129][ T936] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 108.980377][ T936] microsoft 0003:045E:07DA.0016: no inputs found [ 108.986514][ T936] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 108.988159][ T2903] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 108.995054][ T28] audit: type=1400 audit(1718567936.060:798): avc: denied { remount } for pid=2901 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.021957][ T936] usb 4-1: USB disconnect, device number 11 [ 109.046798][ T2912] usb usb8: usbfs: process 2912 (syz-executor.4) did not claim interface 0 before use [ 109.080185][ T2917] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.169639][ T2931] tipc: Failed to remove unknown binding: 66,1,1/0:3232913250/3232913252 [ 109.177972][ T2931] tipc: Failed to remove unknown binding: 66,1,1/0:3232913250/3232913252 [ 109.188787][ T2931] incfs: Options parsing error. -22 [ 109.193847][ T2931] incfs: mount failed -22 [ 109.209257][ T28] audit: type=1400 audit(1718567936.290:799): avc: denied { create } for pid=2937 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.210236][ T2936] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 109.459591][ T28] audit: type=1326 audit(1718567936.540:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75087cea9 code=0x7ffc0000 [ 109.485350][ T28] audit: type=1326 audit(1718567936.560:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa75087cea9 code=0x7ffc0000 [ 109.514047][ T28] audit: type=1326 audit(1718567936.560:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75087cea9 code=0x7ffc0000 [ 109.538243][ T28] audit: type=1326 audit(1718567936.560:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fa75087cea9 code=0x7ffc0000 [ 109.564475][ T28] audit: type=1326 audit(1718567936.560:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75087cea9 code=0x7ffc0000 [ 109.588608][ T28] audit: type=1326 audit(1718567936.560:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75087cea9 code=0x7ffc0000 [ 109.612437][ T28] audit: type=1326 audit(1718567936.560:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75087cea9 code=0x7ffc0000 [ 109.614071][ T2950] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.646176][ T28] audit: type=1326 audit(1718567936.560:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75087cea9 code=0x7ffc0000 [ 109.671622][ T28] audit: type=1326 audit(1718567936.590:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75087cea9 code=0x7ffc0000 [ 109.695443][ T28] audit: type=1326 audit(1718567936.590:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2942 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa75087a627 code=0x7ffc0000 [ 109.797479][ T2969] tipc: Failed to remove unknown binding: 66,1,1/0:3777308347/3777308349 [ 109.805832][ T2969] tipc: Failed to remove unknown binding: 66,1,1/0:3777308347/3777308349 [ 109.806955][ T2971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.816731][ T2969] incfs: Options parsing error. -22 [ 109.823416][ T2971] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.828899][ T2969] incfs: mount failed -22 [ 109.852012][ T2971] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 109.860971][ T2971] serio: Serial port pts0 [ 109.880151][ T2977] loop3: detected capacity change from 0 to 2048 [ 109.898158][ T2977] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.969728][ T2984] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 234: padding at end of block bitmap is not set [ 109.997482][ T2984] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 110.027800][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.034866][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.037006][ T343] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 110.054115][ T343] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.054115][ T343] [ 110.064692][ T343] EXT4-fs (loop3): Total free blocks count 0 [ 110.070664][ T343] EXT4-fs (loop3): Free/Dirty block details [ 110.078051][ T343] EXT4-fs (loop3): free_blocks=0 [ 110.084115][ T343] EXT4-fs (loop3): dirty_blocks=2848 [ 110.089304][ T343] EXT4-fs (loop3): Block reservation details [ 110.095132][ T343] EXT4-fs (loop3): i_reserved_data_blocks=178 [ 110.115977][ T343] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 798 with error 28 [ 110.136702][ T333] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 110.152320][ T3003] tipc: Failed to remove unknown binding: 66,1,1/0:2326369273/2326369275 [ 110.160632][ T3005] syz-executor.0[3005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.160693][ T3005] syz-executor.0[3005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.161032][ T3003] tipc: Failed to remove unknown binding: 66,1,1/0:2326369273/2326369275 [ 110.203545][ T3003] incfs: Options parsing error. -22 [ 110.208812][ T3003] incfs: mount failed -22 [ 110.291971][ T3024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.301144][ T3024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.312124][ T3024] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 110.321086][ T3024] serio: Serial port pts0 [ 110.397330][ T333] usb 2-1: Using ep0 maxpacket: 16 [ 110.547321][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.558865][ T3030] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.565860][ T3030] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.576636][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.586453][ T3033] loop2: detected capacity change from 0 to 2048 [ 110.588415][ T333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.605409][ T333] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.614364][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.623360][ T333] usb 2-1: config 0 descriptor?? [ 110.628991][ T3033] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.670360][ T3043] loop3: detected capacity change from 0 to 512 [ 110.678974][ T3043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 110.695437][ T1940] EXT4-fs (loop3): unmounting filesystem. [ 110.702537][ T3045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 110.722527][ T3045] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 110.725285][ T343] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 110.743550][ T343] EXT4-fs (loop2): This should not happen!! Data will be lost [ 110.743550][ T343] [ 110.753147][ T343] EXT4-fs (loop2): Total free blocks count 0 [ 110.759268][ T343] EXT4-fs (loop2): Free/Dirty block details [ 110.765089][ T343] EXT4-fs (loop2): free_blocks=0 [ 110.769962][ T343] EXT4-fs (loop2): dirty_blocks=2752 [ 110.775115][ T343] EXT4-fs (loop2): Block reservation details [ 110.780934][ T343] EXT4-fs (loop2): i_reserved_data_blocks=172 [ 110.792811][ T343] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 694 with error 28 [ 110.841197][ T3058] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.850325][ T3058] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.861537][ T3058] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 110.870197][ T3058] serio: Serial port pts0 [ 110.897242][ T3062] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.904179][ T3062] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.929997][ T3067] device pim6reg1 entered promiscuous mode [ 111.005917][ T3076] loop2: detected capacity change from 0 to 2048 [ 111.018220][ T3076] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.101102][ T3089] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 234: padding at end of block bitmap is not set [ 111.117525][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.133175][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.140236][ T3089] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 111.146657][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.157649][ T341] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1966 with error 28 [ 111.181042][ T341] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.181042][ T341] [ 111.190658][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.194073][ T341] EXT4-fs (loop2): Total free blocks count 0 [ 111.197750][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.203566][ T341] EXT4-fs (loop2): Free/Dirty block details [ 111.210691][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.216446][ T341] EXT4-fs (loop2): free_blocks=0 [ 111.223348][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.228320][ T341] EXT4-fs (loop2): dirty_blocks=1968 [ 111.235263][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.240380][ T341] EXT4-fs (loop2): Block reservation details [ 111.247333][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.253104][ T341] EXT4-fs (loop2): i_reserved_data_blocks=123 [ 111.260153][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.273096][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.280084][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.287126][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.294116][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.301230][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.308329][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.315353][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.316398][ T2554] EXT4-fs (loop2): unmounting filesystem. [ 111.322440][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.322461][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.342424][ T333] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 111.349561][ T333] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 111.358290][ T333] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 111.369491][ T333] microsoft 0003:045E:07DA.0017: no inputs found [ 111.375628][ T333] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 111.385282][ T333] usb 2-1: USB disconnect, device number 12 [ 111.406765][ T3099] device pim6reg1 entered promiscuous mode [ 111.468097][ T3113] loop4: detected capacity change from 0 to 512 [ 111.475951][ T3113] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 111.492679][ T2481] EXT4-fs (loop4): unmounting filesystem. [ 112.699244][ T3147] loop3: detected capacity change from 0 to 512 [ 112.720662][ T3147] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.747262][ T3156] overlayfs: failed to resolve './file2': -2 [ 112.754255][ T3154] device pim6reg1 entered promiscuous mode [ 112.756154][ T1940] EXT4-fs (loop3): unmounting filesystem. [ 112.894344][ T3185] loop1: detected capacity change from 0 to 512 [ 112.928768][ T3185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.951394][ T2541] EXT4-fs (loop1): unmounting filesystem. [ 112.999031][ T3194] loop0: detected capacity change from 0 to 1024 [ 113.006037][ T3194] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 113.036844][ T936] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.216640][ T365] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 113.266217][ T3217] loop1: detected capacity change from 0 to 8192 [ 113.406697][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.417497][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.427286][ T936] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 113.436203][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.444585][ T936] usb 3-1: config 0 descriptor?? [ 113.528573][ T365] usb 5-1: Using ep0 maxpacket: 16 [ 113.671721][ T365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.700170][ T365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.745283][ T365] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.815631][ T365] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.873420][ T365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.923772][ T365] usb 5-1: config 0 descriptor?? [ 113.943178][ T3231] xt_TCPMSS: Only works on TCP SYN packets [ 114.046714][ T936] usbhid 3-1:0.0: can't add hid device: -71 [ 114.052538][ T936] usbhid: probe of 3-1:0.0 failed with error -71 [ 114.059223][ T936] usb 3-1: USB disconnect, device number 8 [ 114.066262][ T3235] Â: renamed from pim6reg1 [ 114.437403][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.453419][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.461072][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.474081][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.481206][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.488391][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.495475][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.502533][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.516653][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.523708][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.545840][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.552932][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.559959][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.566958][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.573968][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.581025][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.588049][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.595058][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.602110][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.609130][ T365] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 114.616393][ T365] microsoft 0003:045E:07DA.0018: No inputs registered, leaving [ 114.624299][ T365] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 114.635517][ T365] microsoft 0003:045E:07DA.0018: no inputs found [ 114.641680][ T365] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 114.651166][ T365] usb 5-1: USB disconnect, device number 13 [ 114.676339][ T3261] overlayfs: missing 'lowerdir' [ 114.821085][ T3261] loop2: detected capacity change from 0 to 40427 [ 114.836416][ T3261] F2FS-fs (loop2): Invalid segment/section count (458776 != 24 * 1) [ 114.844637][ T3261] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 114.853917][ T3261] F2FS-fs (loop2): invalid crc value [ 114.860851][ T3261] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.897981][ T3261] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 114.904979][ T3261] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 114.983920][ T28] kauditd_printk_skb: 236 callbacks suppressed [ 114.983934][ T28] audit: type=1400 audit(1718567942.060:1046): avc: denied { create } for pid=3260 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.034151][ T28] audit: type=1400 audit(1718567942.110:1047): avc: denied { bind } for pid=3260 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.056715][ T28] audit: type=1400 audit(1718567942.110:1048): avc: denied { node_bind } for pid=3260 comm="syz-executor.2" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 115.347185][ T28] audit: type=1400 audit(1718567942.430:1049): avc: denied { write } for pid=3283 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.377400][ T3282] overlayfs: failed to resolve './file2': -2 [ 115.416491][ T3296] loop0: detected capacity change from 0 to 1024 [ 115.423243][ T3296] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 115.441393][ C0] softirq: huh, entered softirq 3 NET_RX ffffffff840ba070 with preempt_count 00000103, exited with 00000102? [ 115.452934][ T3296] BUG: scheduling while atomic: syz-executor.0/3296/0x00000002 [ 115.457171][ T3290] Â: renamed from pim6reg1 2024/06/16 19:59:02 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 115.460486][ T3296] Modules linked in: [ 115.468338][ T3296] Preemption disabled at: [ 115.468350][ T3296] [] ext4_es_insert_extent+0x4bf/0x2ff0 [ 115.479406][ T3296] CPU: 0 PID: 3296 Comm: syz-executor.0 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 115.489282][ T3296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 115.499180][ T3296] Call Trace: [ 115.502299][ T3296] [ 115.505074][ T3296] dump_stack_lvl+0x151/0x1b7 [ 115.509674][ T3296] ? ext4_es_insert_extent+0x4bf/0x2ff0 [ 115.515054][ T3296] ? ext4_es_insert_extent+0x4bf/0x2ff0 [ 115.520439][ T3296] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 115.525731][ T3296] ? fsnotify_perm+0x6a/0x5d0 [ 115.530248][ T3296] ? ext4_es_insert_extent+0x4bf/0x2ff0 [ 115.535626][ T3296] dump_stack+0x15/0x1b [ 115.539618][ T3296] __schedule_bug+0x195/0x260 [ 115.544131][ T3296] ? cpu_util_update_eff+0x10e0/0x10e0 [ 115.549432][ T3296] __schedule+0xcf7/0x1550 [ 115.553678][ T3296] ? __mutex_lock_slowpath+0x10/0x10 [ 115.558801][ T3296] ? __sched_text_start+0x8/0x8 [ 115.563486][ T3296] ? ksys_write+0x260/0x2c0 [ 115.567825][ T3296] ? __x64_sys_futex+0x100/0x100 [ 115.572601][ T3296] schedule+0xc3/0x180 [ 115.576505][ T3296] exit_to_user_mode_loop+0x4e/0xa0 [ 115.581539][ T3296] exit_to_user_mode_prepare+0x5a/0xa0 [ 115.586840][ T3296] syscall_exit_to_user_mode+0x26/0x140 [ 115.592219][ T3296] do_syscall_64+0x49/0xb0 [ 115.596472][ T3296] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 115.602198][ T3296] RIP: 0033:0x7f2a20e7cea9 [ 115.606449][ T3296] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 115.625988][ T3296] RSP: 002b:00007f2a21c460c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.634224][ T3296] RAX: 0000000000001f00 RBX: 00007f2a20fb3f80 RCX: 00007f2a20e7cea9 [ 115.642033][ T3296] RDX: 000000000000fecc RSI: 0000000020000100 RDI: 0000000000000004 [ 115.649845][ T3296] RBP: 00007f2a20eebff4 R08: 0000000000000000 R09: 0000000000000000 [ 115.657658][ T3296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.665466][ T3296] R13: 000000000000000b R14: 00007f2a20fb3f80 R15: 00007ffcb7a12e18 [ 115.673286][ T3296]