last executing test programs: 10.825541457s ago: executing program 4 (id=5455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) 10.514569618s ago: executing program 4 (id=5463): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000240)="47c9ac9d4baa", 0x6, 0x40, &(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 10.449220413s ago: executing program 4 (id=5465): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000380)={[{@fat=@quiet}, {@dots}, {@nodots}, {@nodots}, {@dots}, {}, {@nodots}, {@fat=@quiet}, {@nodots}, {@fat=@errors_continue}, {@fat=@umask}, {@dots}, {@fat=@check_strict}, {@nodots}, {@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@fat=@discard}, {@fat=@usefree}, {@fat=@sys_immutable}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x80006800) 10.393295896s ago: executing program 4 (id=5471): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x6, 0xcca, 0x5, 0x1300, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0xd, @void, @value, @void, @value}, 0x50) r1 = syz_open_dev$hidraw(0x0, 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r1, 0x401c5820, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xb4, &(0x7f0000000b00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60003a04007e3a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 10.261495055s ago: executing program 4 (id=5480): bpf$BPF_GET_PROG_INFO(0x15, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000004600), &(0x7f0000004640)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$link(0x8, r2, r3) 9.685242364s ago: executing program 4 (id=5481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x4, 0x3, 0x7ffc0000}]}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r2, 0x0, 0x8000000d) 6.612887942s ago: executing program 2 (id=5522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.698634584s ago: executing program 2 (id=5527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x40, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x40}}, 0x0) 4.677066373s ago: executing program 2 (id=5531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000040)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c000280080001c0000000020c00018008000140ac1414bb05000500020000000500010006"], 0x68}}, 0x0) 3.572052448s ago: executing program 0 (id=5533): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x2001420, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpo']) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 3.571445678s ago: executing program 2 (id=5535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r1, 0x0, 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000b80000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x3fb) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000080), 0x0, 0x5ad, &(0x7f0000000180)="$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") 2.35696934s ago: executing program 0 (id=5537): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 2.3557537s ago: executing program 1 (id=5538): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3}]}}}], 0x18}}], 0x2, 0x0) 2.35519238s ago: executing program 2 (id=5539): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000380)={[{@fat=@quiet}, {@dots}, {@nodots}, {@nodots}, {@dots}, {}, {@nodots}, {@fat=@quiet}, {@nodots}, {@fat=@errors_continue}, {@fat=@umask}, {@dots}, {@fat=@check_strict}, {@nodots}, {@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@fat=@discard}, {@fat=@usefree}, {@fat=@sys_immutable}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.35487134s ago: executing program 3 (id=5540): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 2.155726574s ago: executing program 0 (id=5541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 2.155421464s ago: executing program 1 (id=5542): r0 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty, 0x7fff}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003e000000000000ff0000008500000007000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0xfff7) 2.155219204s ago: executing program 2 (id=5543): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0xff97, r0, &(0x7f0000000040)="0200ffff0000", 0x6}]) 2.109651397s ago: executing program 3 (id=5544): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_pts(r0, 0x0) dup3(r5, r0, 0x0) 632.223637ms ago: executing program 0 (id=5545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 631.948887ms ago: executing program 1 (id=5546): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000004c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@minixdf}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0xa, 0x4f8, &(0x7f0000000700)="$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") sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r6 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) 625.503148ms ago: executing program 3 (id=5547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) io_getevents(0x0, 0x100000000000006, 0x0, 0x0, 0x0) 599.499709ms ago: executing program 0 (id=5548): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) 591.64288ms ago: executing program 3 (id=5549): unshare(0x64000600) 545.211603ms ago: executing program 1 (id=5550): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 28.283648ms ago: executing program 3 (id=5552): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) dup3(r1, r2, 0x0) 28.099738ms ago: executing program 0 (id=5553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x1, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xa000200f}) close_range(r2, 0xffffffffffffffff, 0x0) 27.937508ms ago: executing program 1 (id=5554): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)='%pi6 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(r0, 0x400, 0x1ee) 11.941319ms ago: executing program 3 (id=5555): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000062180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 0s ago: executing program 1 (id=5556): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77858e9ef9 code=0x7ffc0000 [ 973.886025][T19351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.909704][ T24] audit: type=1326 audit(1860530715.125:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.2.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77858e9ef9 code=0x7ffc0000 [ 973.916472][T19351] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.940043][ T24] audit: type=1326 audit(1860530715.125:10421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.2.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77858e9ef9 code=0x7ffc0000 [ 973.946618][T19351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.970105][ T24] audit: type=1326 audit(1860530715.125:10422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.2.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77858e9ef9 code=0x7ffc0000 [ 974.000480][ T24] audit: type=1326 audit(1860530715.125:10423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.2.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77858e9ef9 code=0x7ffc0000 [ 974.000543][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.024166][ T24] audit: type=1326 audit(1860530715.125:10424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.2.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77858e9ef9 code=0x7ffc0000 [ 974.031321][ T25] usb 4-1: device descriptor read/8, error -71 [ 974.055105][ T24] audit: type=1326 audit(1860530715.125:10425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.2.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77858e9ef9 code=0x7ffc0000 [ 974.084246][ T24] audit: type=1326 audit(1860530715.125:10426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.2.4764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77858e9ef9 code=0x7ffc0000 [ 974.108126][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.120585][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 974.128703][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 974.148684][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 974.156869][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.163744][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.171396][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 974.179480][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.186433][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.198275][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 974.215071][T19351] device veth0_vlan entered promiscuous mode [ 974.221381][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 974.229947][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 974.238120][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 974.245300][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 974.252674][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 974.265674][ T25] usb 4-1: device descriptor read/8, error -71 [ 974.268280][T19351] device veth1_macvtap entered promiscuous mode [ 974.278906][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 974.290667][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 974.300241][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 974.357727][T19363] EXT4-fs (loop4): 1 orphan inode deleted [ 974.363353][T19363] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,quota,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock, [ 974.380790][T19363] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038 (0x7fffffff) [ 974.816274][T14386] device veth0_macvtap left promiscuous mode [ 974.822310][T14386] bridge0: port 3(veth0_macvtap) entered disabled state [ 974.831163][T14386] device bridge_slave_1 left promiscuous mode [ 974.838274][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.847084][T14386] device bridge_slave_0 left promiscuous mode [ 974.853697][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.861416][T14386] device veth1_macvtap left promiscuous mode [ 974.867294][T14386] device veth0_vlan left promiscuous mode [ 974.945548][ T20] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 975.329074][T19379] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 975.363420][T19382] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 975.387202][T19382] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 975.411655][T19382] EXT4-fs (loop2): shut down requested (0) [ 975.556303][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.567357][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.576949][ T20] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 975.586422][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.598044][ T20] usb 5-1: config 0 descriptor?? [ 975.854493][T19393] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 975.875563][T19227] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 976.076292][ T20] elo 0003:04E7:0030.0093: item fetching failed at offset 5/7 [ 976.083733][ T20] elo 0003:04E7:0030.0093: parse failed [ 976.089402][ T20] elo: probe of 0003:04E7:0030.0093 failed with error -22 [ 976.135600][T19227] usb 3-1: Using ep0 maxpacket: 32 [ 976.185691][ T1338] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 976.415587][T19227] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 976.424445][T19227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.432278][T19227] usb 3-1: Product: syz [ 976.436393][T19227] usb 3-1: Manufacturer: syz [ 976.440772][T19227] usb 3-1: SerialNumber: syz [ 976.446012][T19227] usb 3-1: config 0 descriptor?? [ 976.575610][ T1338] usb 4-1: unable to get BOS descriptor set [ 976.695604][ T1338] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 976.703035][ T1338] usb 4-1: can't read configurations, error -61 [ 976.855562][ T1338] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 977.135590][T19227] (unnamed net_device) (uninitialized): Assigned a random MAC address: 92:13:c9:d9:95:24 [ 977.146656][T19227] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 977.153105][T19227] usb 3-1: USB disconnect, device number 122 [ 977.215595][ T1338] usb 4-1: unable to get BOS descriptor set [ 977.335571][ T1338] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 977.342954][ T1338] usb 4-1: can't read configurations, error -61 [ 977.349134][ T1338] usb usb4-port1: attempt power cycle [ 977.654998][ T20] usb 5-1: USB disconnect, device number 13 [ 977.715924][T19398] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.722876][T19398] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.730221][T19398] device bridge_slave_0 entered promiscuous mode [ 977.737530][T19398] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.744431][T19398] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.752245][T19398] device bridge_slave_1 entered promiscuous mode [ 977.758589][ T1338] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 977.799783][T19398] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.806666][T19398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.813782][T19398] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.820562][T19398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.165772][ T1338] usb 4-1: unable to get BOS descriptor set [ 978.246748][T19398] device veth0_vlan entered promiscuous mode [ 978.260206][T19398] device veth1_macvtap entered promiscuous mode [ 978.273484][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 978.282394][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 978.291017][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 978.300021][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 978.308655][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 978.310215][T19413] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 978.317490][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 978.330373][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 978.338437][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 978.346728][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 978.354452][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 978.355714][ T1338] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 978.361744][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 978.369287][ T1338] usb 4-1: can't read configurations, error -61 [ 978.376582][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 978.404806][T19415] syz.1.4773[19415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 978.404863][T19415] syz.1.4773[19415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 978.525609][ T1338] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 978.596673][T19227] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 978.608134][T19419] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 978.695533][ T1340] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 978.745566][ T1338] usb 4-1: unable to get BOS descriptor set [ 978.766043][T14386] device bridge_slave_1 left promiscuous mode [ 978.771973][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.779332][T14386] device bridge_slave_0 left promiscuous mode [ 978.785329][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.792883][T14386] device veth1_macvtap left promiscuous mode [ 978.798762][T14386] device veth0_vlan left promiscuous mode [ 978.865590][ T1338] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 978.873029][ T1338] usb 4-1: can't read configurations, error -61 [ 978.879428][ T1338] usb usb4-port1: unable to enumerate USB device [ 978.885535][T19227] usb 5-1: device descriptor read/64, error -71 [ 978.935576][T19231] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 978.965534][ T1340] usb 2-1: device descriptor read/64, error -71 [ 979.305542][T19227] usb 5-1: device descriptor read/64, error -71 [ 979.325549][T19231] usb 3-1: unable to get BOS descriptor set [ 979.355591][ T1340] usb 2-1: device descriptor read/64, error -71 [ 979.475627][T19231] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 979.483026][T19231] usb 3-1: can't read configurations, error -61 [ 979.605522][T19227] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 979.625551][ T1340] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 979.636926][T19231] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 979.695839][T19425] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.702694][T19425] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.710232][T19425] device bridge_slave_0 entered promiscuous mode [ 979.721762][T19425] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.728778][T19425] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.736161][T19425] device bridge_slave_1 entered promiscuous mode [ 979.782319][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 979.789772][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 979.801001][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 979.810106][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 979.818087][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.824927][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.832422][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 979.843004][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 979.851221][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 979.859194][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.866030][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.879874][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 979.890593][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 979.903954][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 979.905728][T19227] usb 5-1: device descriptor read/64, error -71 [ 979.911981][ T1340] usb 2-1: device descriptor read/64, error -71 [ 979.922570][T19425] device veth0_vlan entered promiscuous mode [ 979.931069][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 979.938988][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 979.946457][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 979.960251][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 979.969697][T19425] device veth1_macvtap entered promiscuous mode [ 979.979728][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 979.991688][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 980.015575][T19231] usb 3-1: unable to get BOS descriptor set [ 980.116812][T14386] device veth0_macvtap left promiscuous mode [ 980.122721][T14386] bridge0: port 3(veth0_macvtap) entered disabled state [ 980.130150][T14386] device bridge_slave_1 left promiscuous mode [ 980.135621][T19231] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 980.136110][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.143575][T19231] usb 3-1: can't read configurations, error -61 [ 980.156906][T14386] device bridge_slave_0 left promiscuous mode [ 980.157066][T19231] usb usb3-port1: attempt power cycle [ 980.162973][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.175922][T14386] device veth1_macvtap left promiscuous mode [ 980.181811][T14386] device veth0_vlan left promiscuous mode [ 980.295741][ T20] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 980.305649][T19227] usb 5-1: device descriptor read/64, error -71 [ 980.325658][ T1340] usb 2-1: device descriptor read/64, error -71 [ 980.425631][T19227] usb usb5-port1: attempt power cycle [ 980.445821][ T1340] usb usb2-port1: attempt power cycle [ 980.555554][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 980.575557][T19231] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 980.685717][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.696472][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.785582][T19231] usb 3-1: unable to get BOS descriptor set [ 980.835576][T19227] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 980.855568][ T1340] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 980.863056][ T20] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 980.871978][ T20] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 980.880121][ T20] usb 1-1: Product: syz [ 980.884023][ T20] usb 1-1: Manufacturer: syz [ 980.889113][ T20] usb 1-1: config 0 descriptor?? [ 980.905599][T19231] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 980.913033][T19231] usb 3-1: can't read configurations, error -61 [ 981.005542][T19227] usb 5-1: device descriptor read/8, error -71 [ 981.065520][T19231] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 981.085562][ T1340] usb 2-1: device descriptor read/8, error -71 [ 981.275638][T19227] usb 5-1: device descriptor read/8, error -71 [ 981.281723][T19231] usb 3-1: unable to get BOS descriptor set [ 981.356243][ T20] kovaplus 0003:1E7D:2D50.0094: item fetching failed at offset 5/7 [ 981.364035][ T20] kovaplus 0003:1E7D:2D50.0094: parse failed [ 981.369871][ T1340] usb 2-1: device descriptor read/8, error -71 [ 981.375833][ T20] kovaplus: probe of 0003:1E7D:2D50.0094 failed with error -22 [ 981.405968][T19231] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 981.413925][T19231] usb 3-1: can't read configurations, error -61 [ 981.420985][T19231] usb usb3-port1: unable to enumerate USB device [ 981.567286][T19231] usb 1-1: USB disconnect, device number 29 [ 981.688427][T19443] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 981.697965][T19443] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4783: iget: bad i_size value: -67835469387268086 [ 981.711052][T19443] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4783: couldn't read orphan inode 15 (err -117) [ 981.723419][T19443] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 981.732531][T19443] ext2 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 981.965777][ T1340] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 982.092529][ T24] kauditd_printk_skb: 40 callbacks suppressed [ 982.092539][ T24] audit: type=1400 audit(1860530723.515:10467): avc: denied { create } for pid=19451 comm="syz.0.4785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 982.135534][T19227] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 982.225807][ T1340] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.247669][ T1340] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 982.267783][ T24] audit: type=1400 audit(1860530723.685:10468): avc: denied { write } for pid=19451 comm="syz.0.4785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 982.307024][ T1340] usb 2-1: config 1 has no interface number 0 [ 982.313670][ T1340] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.325862][ T24] audit: type=1400 audit(1860530723.685:10469): avc: denied { nlmsg_write } for pid=19451 comm="syz.0.4785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 982.346805][ T1340] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 982.505561][T19227] usb 5-1: unable to get BOS descriptor set [ 982.515847][ T1340] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.524737][ T1340] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.532542][ T1340] usb 2-1: Product: syz [ 982.536700][ T1340] usb 2-1: Manufacturer: syz [ 982.541106][ T1340] usb 2-1: SerialNumber: syz [ 982.645599][T19227] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 982.653069][T19227] usb 5-1: can't read configurations, error -61 [ 982.659210][T19227] usb usb5-port1: unable to enumerate USB device [ 982.952978][T19456] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 983.285519][ T1338] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 983.455544][ T1340] cdc_ncm 2-1:1.1: bind() failure [ 983.461688][ T1340] usb 2-1: USB disconnect, device number 31 [ 983.645573][ T1338] usb 1-1: unable to get BOS descriptor set [ 983.765546][ T1338] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 983.772996][ T1338] usb 1-1: can't read configurations, error -61 [ 983.925531][ T1338] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 984.095915][T19462] tipc: Started in network mode [ 984.100730][T19462] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 984.110202][T19462] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 984.118687][T19462] tipc: Enabled bearer , priority 10 [ 984.325601][ T1338] usb 1-1: unable to get BOS descriptor set [ 984.485554][ T1338] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 984.493007][ T1338] usb 1-1: can't read configurations, error -61 [ 984.499115][ T1338] usb usb1-port1: attempt power cycle [ 984.963873][ T1338] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 985.135528][ T1340] tipc: 32-bit node address hash set to 1000000 [ 985.215570][ T1338] usb 1-1: unable to get BOS descriptor set [ 985.375673][ T1338] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 985.383067][ T1338] usb 1-1: can't read configurations, error -61 [ 985.556108][ T1338] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 985.763370][ T24] audit: type=1400 audit(1860530727.185:10470): avc: denied { create } for pid=19470 comm="syz.1.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 985.783493][ T24] audit: type=1400 audit(1860530727.185:10471): avc: denied { setopt } for pid=19470 comm="syz.1.4789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 985.795845][ T1338] usb 1-1: unable to get BOS descriptor set [ 985.809332][ T24] audit: type=1400 audit(1860530727.185:10472): avc: denied { ioctl } for pid=19470 comm="syz.1.4789" path="socket:[128193]" dev="sockfs" ino=128193 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 985.925556][ T1338] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 985.933002][ T1338] usb 1-1: can't read configurations, error -61 [ 985.939130][ T1338] usb usb1-port1: unable to enumerate USB device [ 986.185083][T19475] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.192029][T19475] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.199578][T19475] device bridge_slave_0 entered promiscuous mode [ 986.206696][T19475] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.213516][T19475] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.221017][T19475] device bridge_slave_1 entered promiscuous mode [ 986.256447][T19475] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.263309][T19475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.270388][T19475] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.277175][T19475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.297894][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 986.305240][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.312876][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.321923][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 986.329998][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.336833][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.347569][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 986.355969][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.362791][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.374598][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 986.385266][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 986.399621][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 986.412475][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 986.420308][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 986.427626][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 986.435844][T19475] device veth0_vlan entered promiscuous mode [ 986.446320][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 986.456606][T19475] device veth1_macvtap entered promiscuous mode [ 986.466059][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 986.477580][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 986.508664][T19480] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 986.815613][ T1338] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 986.824383][T14386] device bridge_slave_1 left promiscuous mode [ 986.830660][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.839285][T14386] device bridge_slave_0 left promiscuous mode [ 986.845325][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.854463][T14386] device veth1_macvtap left promiscuous mode [ 986.860485][T14386] device veth0_vlan left promiscuous mode [ 987.085588][ T1338] usb 4-1: device descriptor read/64, error -71 [ 987.476047][ T1338] usb 4-1: device descriptor read/64, error -71 [ 987.675609][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 987.745531][ T1338] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 987.915566][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 988.015567][ T1338] usb 4-1: device descriptor read/64, error -71 [ 988.035575][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.045523][ T25] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 988.205605][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 988.214531][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.222440][ T25] usb 2-1: Product: syz [ 988.226576][ T25] usb 2-1: Manufacturer: syz [ 988.230968][ T25] usb 2-1: SerialNumber: syz [ 988.236378][ T25] usb 2-1: config 0 descriptor?? [ 988.405516][ T1338] usb 4-1: device descriptor read/64, error -71 [ 988.525586][ T1338] usb usb4-port1: attempt power cycle [ 988.748393][T19493] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.755237][T19493] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.763115][T19493] device bridge_slave_0 entered promiscuous mode [ 988.774880][T19493] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.781795][T19493] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.789109][T19493] device bridge_slave_1 entered promiscuous mode [ 988.842243][T19493] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.849118][T19493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.856209][T19493] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.862979][T19493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.888980][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 988.896604][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.903718][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.935417][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 988.935708][ T1338] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 988.943691][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.957577][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.967786][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 988.976800][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.983650][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.997405][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 989.006846][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 989.021092][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 989.034898][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 989.043093][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 989.050519][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 989.060583][T19493] device veth0_vlan entered promiscuous mode [ 989.070626][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 989.079525][T19493] device veth1_macvtap entered promiscuous mode [ 989.089157][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.108248][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 989.164666][ T1338] usb 4-1: device descriptor read/8, error -71 [ 989.186207][T14386] device bridge_slave_1 left promiscuous mode [ 989.192178][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.199439][T14386] device bridge_slave_0 left promiscuous mode [ 989.205406][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.212998][T14386] device veth1_macvtap left promiscuous mode [ 989.218911][T14386] device veth0_vlan left promiscuous mode [ 989.415579][ T24] audit: type=1400 audit(1860530730.805:10473): avc: denied { name_bind } for pid=19497 comm="syz.2.4793" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 989.515650][ T1338] usb 4-1: device descriptor read/8, error -71 [ 990.005522][ T1338] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 990.095567][ T1338] usb 4-1: Using ep0 maxpacket: 32 [ 990.375587][ T1338] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 990.384470][ T1338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.392314][ T1338] usb 4-1: Product: syz [ 990.396252][ T1338] usb 4-1: Manufacturer: syz [ 990.400652][ T1338] usb 4-1: SerialNumber: syz [ 990.405785][ T1338] usb 4-1: config 0 descriptor?? [ 990.423226][T19227] usb 2-1: USB disconnect, device number 32 [ 990.689565][T19502] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.4794: casefold flag without casefold feature [ 990.702198][T19502] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.4794: missing EA_INODE flag [ 990.713891][T19502] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4794: error while reading EA inode 12 err=-117 [ 990.726315][T19502] EXT4-fs (loop3): 1 orphan inode deleted [ 990.731860][T19502] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 990.745522][ T24] audit: type=1400 audit(1860530732.165:10474): avc: denied { setattr } for pid=19501 comm="syz.3.4794" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 990.768212][ T24] audit: type=1400 audit(1860530732.175:10475): avc: denied { mounton } for pid=19501 comm="syz.3.4794" path="/1/file0/file0" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 990.791050][ T24] audit: type=1400 audit(1860530732.175:10476): avc: denied { add_name } for pid=19501 comm="syz.3.4794" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 990.811294][ T24] audit: type=1400 audit(1860530732.175:10477): avc: denied { setattr } for pid=19501 comm="syz.3.4794" name="work" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 990.833069][ T24] audit: type=1400 audit(1860530732.175:10478): avc: denied { rename } for pid=19501 comm="syz.3.4794" name="#af" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 990.854948][ T24] audit: type=1400 audit(1860530732.175:10479): avc: denied { unlink } for pid=19501 comm="syz.3.4794" name="#af" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 990.877344][T19227] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 991.115529][T19227] usb 2-1: Using ep0 maxpacket: 16 [ 991.206659][ T1338] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 991.222030][ T24] audit: type=1400 audit(1860530732.645:10480): avc: denied { search } for pid=143 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 991.235748][T19227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.243428][ T24] audit: type=1400 audit(1860530732.645:10481): avc: denied { read } for pid=143 comm="dhcpcd" name="n64" dev="tmpfs" ino=33743 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 991.257444][T19227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.278233][ T24] audit: type=1400 audit(1860530732.645:10482): avc: denied { open } for pid=143 comm="dhcpcd" path="/run/udev/data/n64" dev="tmpfs" ino=33743 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 991.405563][T19227] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 991.420603][T19227] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 991.429044][T19227] usb 2-1: Product: syz [ 991.433045][T19227] usb 2-1: Manufacturer: syz [ 991.438935][ T1338] usb 4-1: USB disconnect, device number 16 [ 991.439174][T19227] usb 2-1: config 0 descriptor?? [ 991.455552][ T143] net eth1: rx_urb submit failed: -19 [ 991.693312][T19539] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.700221][T19539] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.707613][T19539] device bridge_slave_0 entered promiscuous mode [ 991.714297][T19539] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.721611][T19539] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.728828][T19539] device bridge_slave_1 entered promiscuous mode [ 991.763083][T19539] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.769937][T19539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.777032][T19539] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.783807][T19539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.802423][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.809557][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.816926][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 991.824193][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 991.838502][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 991.846480][T14386] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.853300][T14386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.861838][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 991.870017][T14386] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.876871][T14386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.890807][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 991.899973][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 991.913396][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 991.926354][T19227] kovaplus 0003:1E7D:2D50.0095: item fetching failed at offset 5/7 [ 991.927713][T19539] device veth0_vlan entered promiscuous mode [ 991.934286][T19227] kovaplus 0003:1E7D:2D50.0095: parse failed [ 991.946097][T19539] device veth1_macvtap entered promiscuous mode [ 991.952508][T19227] kovaplus: probe of 0003:1E7D:2D50.0095 failed with error -22 [ 991.952876][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 991.973190][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 991.982570][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 991.989985][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 992.010272][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 992.018522][T14386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 992.138611][ T839] usb 2-1: USB disconnect, device number 33 [ 992.913789][T19556] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 992.963880][ T391] device bridge_slave_1 left promiscuous mode [ 992.969870][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.977214][ T391] device bridge_slave_0 left promiscuous mode [ 992.983267][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.990874][ T391] device veth1_macvtap left promiscuous mode [ 992.996926][ T391] device veth0_vlan left promiscuous mode [ 993.075668][ T1338] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 993.112619][T19561] usb usb7: usbfs: process 19561 (syz.3.4799) did not claim interface 0 before use [ 993.331084][T19565] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.335525][T19227] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 993.338169][T19565] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.352668][T19565] device bridge_slave_0 entered promiscuous mode [ 993.359852][T19565] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.366692][T19565] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.373816][T19565] device bridge_slave_1 entered promiscuous mode [ 993.406776][T19565] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.413640][T19565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.420734][T19565] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.427507][T19565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.446095][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 993.453408][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.460655][ T960] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.470779][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 993.478919][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.485745][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.495090][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 993.503194][ T960] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.510022][ T960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.523813][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 993.532749][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 993.546336][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 993.557671][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 993.565431][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 993.572832][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 993.573058][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 993.591536][T19565] device veth0_vlan entered promiscuous mode [ 993.601496][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 993.610244][T19565] device veth1_macvtap entered promiscuous mode [ 993.620878][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 993.630731][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 993.638888][ T1338] usb 3-1: config 0 has no interfaces? [ 993.715393][T19227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 993.726938][T19227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 993.738012][T19227] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 993.746861][T19227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.835665][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 993.855837][ T1338] usb 3-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 993.865342][ T1338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 993.874468][ T1338] usb 3-1: Product: syz [ 993.881177][ T1338] usb 3-1: Manufacturer: syz [ 993.886243][ T1338] usb 3-1: SerialNumber: syz [ 993.897595][ T1338] usb 3-1: config 0 descriptor?? [ 993.913964][T19227] usb 5-1: config 0 descriptor?? [ 993.945672][T19559] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 993.985564][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 993.996576][ T25] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 994.005336][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.013873][ T25] usb 2-1: config 0 descriptor?? [ 994.024997][T19574] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.4803: invalid indirect mapped block 10 (level 1) [ 994.038496][T19574] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.4803: invalid indirect mapped block 8 (level 1) [ 994.052186][T19574] EXT4-fs (loop3): 1 truncate cleaned up [ 994.057823][T19574] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,,errors=continue [ 994.082345][T19574] EXT4-fs error (device loop3): ext4_discard_preallocations:4592: comm syz.3.4803: Error -117 loading buddy information for 14592488 [ 994.096291][T19574] EXT4-fs error (device loop3): ext4_discard_preallocations:4592: comm syz.3.4803: Error -117 loading buddy information for 14592488 [ 994.110583][T19574] EXT4-fs error (device loop3): ext4_clear_blocks:880: inode #18: comm syz.3.4803: attempt to clear invalid blocks 37 len 12 [ 994.123849][T19574] EXT4-fs error (device loop3): __ext4_get_inode_loc:4437: comm syz.3.4803: Invalid inode table block 0 in block_group 0 [ 994.136817][T19577] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #18: block 37: comm syz.3.4803: lblock 0 mapped to illegal pblock 37 (length 12) [ 994.136850][T19574] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5897: Corrupt filesystem [ 994.160424][T19574] EXT4-fs error (device loop3): ext4_punch_hole:4229: inode #18: comm syz.3.4803: mark_inode_dirty error [ 994.165801][T19577] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #18: block 37: comm syz.3.4803: lblock 0 mapped to illegal pblock 37 (length 4) [ 994.187769][T19554] kernel profiling enabled (shift: 15) [ 994.194465][ T20] usb 3-1: USB disconnect, device number 127 [ 994.236531][ T391] device bridge_slave_1 left promiscuous mode [ 994.242529][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.250824][ T391] device bridge_slave_0 left promiscuous mode [ 994.256887][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.264854][ T391] device veth1_macvtap left promiscuous mode [ 994.271171][ T391] device veth0_vlan left promiscuous mode [ 994.281839][T19475] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 994.298634][T19475] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 994.319063][T19475] EXT4-fs error (device loop3): __ext4_get_inode_loc:4437: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 994.395783][T19227] hid (null): bogus close delimiter [ 994.471685][T19579] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.478737][T19579] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.486234][T19579] device bridge_slave_0 entered promiscuous mode [ 994.495645][T19579] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.502556][T19579] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.509764][T19579] device bridge_slave_1 entered promiscuous mode [ 994.552314][T19579] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.559194][T19579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.566273][T19579] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.573038][T19579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.595852][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 994.603520][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.610684][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.615564][T19227] usb 5-1: language id specifier not provided by device, defaulting to English [ 994.628552][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 994.636755][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.643577][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.652647][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 994.660805][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.667910][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.680850][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 994.690795][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 994.704241][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 994.716048][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 994.723805][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.731290][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.739694][T19579] device veth0_vlan entered promiscuous mode [ 994.755873][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 994.766520][T19579] device veth1_macvtap entered promiscuous mode [ 994.777750][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 994.795167][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 994.824221][T19559] syz.4.4800[19559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 994.824280][T19559] syz.4.4800[19559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 994.863118][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 994.863131][ T24] audit: type=1326 audit(1860530736.285:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19592 comm="syz.3.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ea0fef9 code=0x7ffc0000 [ 994.903842][ T24] audit: type=1326 audit(1860530736.285:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19592 comm="syz.3.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ea0fef9 code=0x7ffc0000 [ 994.904366][ T1338] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 994.928107][ T24] audit: type=1326 audit(1860530736.325:10500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19592 comm="syz.3.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fb88ea0fef9 code=0x7ffc0000 [ 994.962857][ T24] audit: type=1326 audit(1860530736.325:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19592 comm="syz.3.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ea0fef9 code=0x7ffc0000 [ 994.990482][ T24] audit: type=1326 audit(1860530736.325:10502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19592 comm="syz.3.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ea0fef9 code=0x7ffc0000 [ 995.059374][ T24] audit: type=1326 audit(1860530736.355:10503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19592 comm="syz.3.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb88ea0fef9 code=0x7ffc0000 [ 995.086034][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 995.431757][T19604] usb usb7: usbfs: process 19604 (syz.1.4809) did not claim interface 0 before use [ 995.561276][ T25] usbhid: probe of 2-1:0.0 failed with error -71 [ 995.575316][ T25] usb 2-1: USB disconnect, device number 34 [ 995.594514][ T24] audit: type=1326 audit(1860530736.385:10504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19592 comm="syz.3.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ea0fef9 code=0x7ffc0000 [ 995.657234][ T24] audit: type=1326 audit(1860530736.385:10505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19592 comm="syz.3.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ea0fef9 code=0x7ffc0000 [ 995.682091][ T24] audit: type=1326 audit(1860530736.455:10506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19592 comm="syz.3.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb88ea0fef9 code=0x7ffc0000 [ 995.724665][ T24] audit: type=1326 audit(1860530736.455:10507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19592 comm="syz.3.4806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb88ea0fef9 code=0x7ffc0000 [ 995.775554][ T1338] usb 1-1: Using ep0 maxpacket: 16 [ 995.824455][T19559] udc-core: couldn't find an available UDC or it's busy [ 995.838721][T19559] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 995.883057][T19227] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0096/input/input40 [ 995.929431][T19227] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0096/input/input41 [ 995.956354][T19227] uclogic 0003:256C:006D.0096: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 996.058559][T19613] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 996.118975][ T1338] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 996.127991][ T1338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.136209][ T1338] usb 1-1: Product: syz [ 996.140201][ T1338] usb 1-1: Manufacturer: syz [ 996.144830][ T1338] usb 1-1: SerialNumber: syz [ 996.150511][ T1338] usb 1-1: config 0 descriptor?? [ 996.270556][T19617] usb usb7: usbfs: process 19617 (syz.2.4812) did not claim interface 0 before use [ 996.682725][ T391] device bridge_slave_1 left promiscuous mode [ 996.689731][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.706680][ T391] device bridge_slave_0 left promiscuous mode [ 996.713278][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.743949][T19227] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 996.752527][ T391] device veth1_macvtap left promiscuous mode [ 996.760946][ T391] device veth0_vlan left promiscuous mode [ 996.765881][ T1338] r8152 1-1:0.0: Unknown version 0x0000 [ 996.815874][T19619] exfat: Deprecated parameter 'utf8' [ 996.830910][T19619] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 997.071171][T19628] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.078501][T19628] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.086096][T19628] device bridge_slave_0 entered promiscuous mode [ 997.093159][T19628] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.100301][T19628] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.107260][T19227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.108125][T19628] device bridge_slave_1 entered promiscuous mode [ 997.123310][T19227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 997.133586][T19227] usb 2-1: config 1 has no interface number 0 [ 997.139590][T19227] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.150472][T19227] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 997.159889][T19221] usb 5-1: USB disconnect, device number 18 [ 997.167805][T19628] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.174659][T19628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.181741][T19628] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.188535][T19628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.223931][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 997.232643][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.240060][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.258850][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 997.267878][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.274710][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.282295][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 997.290552][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.297505][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.309127][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 997.315819][T19227] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 997.322280][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 997.333338][T19227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.341379][T19227] usb 2-1: Product: syz [ 997.345399][T19227] usb 2-1: Manufacturer: syz [ 997.349801][T19227] usb 2-1: SerialNumber: syz [ 997.358096][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 997.369179][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 997.377377][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 997.384571][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 997.394550][T19628] device veth0_vlan entered promiscuous mode [ 997.404571][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 997.415164][T19628] device veth1_macvtap entered promiscuous mode [ 997.424950][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 997.434660][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 997.492228][T19639] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 997.683354][T19650] usb usb7: usbfs: process 19650 (syz.3.4817) did not claim interface 0 before use [ 997.870008][T19221] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 997.906377][ T391] device bridge_slave_1 left promiscuous mode [ 997.912386][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.919716][ T391] device bridge_slave_0 left promiscuous mode [ 997.925737][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.933206][ T391] device veth1_macvtap left promiscuous mode [ 997.939103][ T391] device veth0_vlan left promiscuous mode [ 998.001886][ T839] usb 1-1: USB disconnect, device number 34 [ 998.185671][T19666] usb usb7: usbfs: process 19666 (syz.0.4822) did not claim interface 0 before use [ 998.456089][T19221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 998.467100][T19221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 998.478049][T19221] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 998.486878][T19221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.496095][T19221] usb 5-1: config 0 descriptor?? [ 998.515575][T19637] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 998.585662][T19227] cdc_ncm 2-1:1.1: bind() failure [ 998.593887][T19227] usb 2-1: USB disconnect, device number 35 [ 998.820277][T19670] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 998.967729][ T391] Bluetooth: hci0: Frame reassembly failed (-84) [ 998.975756][T19221] hid (null): bogus close delimiter [ 999.195674][T19221] usb 5-1: language id specifier not provided by device, defaulting to English [ 999.219598][T19686] FAULT_INJECTION: forcing a failure. [ 999.219598][T19686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.232545][T19686] CPU: 1 PID: 19686 Comm: syz.1.4829 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 999.242231][T19686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 999.252125][T19686] Call Trace: [ 999.255258][T19686] dump_stack_lvl+0x1e2/0x24b [ 999.259764][T19686] ? bfq_pos_tree_add_move+0x43b/0x43b [ 999.265059][T19686] ? kmem_cache_free+0xa9/0x1e0 [ 999.269745][T19686] ? kasan_set_track+0x5d/0x70 [ 999.274345][T19686] ? kasan_set_free_info+0x23/0x40 [ 999.279291][T19686] ? ____kasan_slab_free+0x121/0x160 [ 999.284559][T19686] dump_stack+0x15/0x17 [ 999.288541][T19686] should_fail+0x3c6/0x510 [ 999.292807][T19686] should_fail_usercopy+0x1a/0x20 [ 999.297658][T19686] strncpy_from_user+0x24/0x2d0 [ 999.302340][T19686] strncpy_from_user_nofault+0x73/0x150 [ 999.307724][T19686] bpf_probe_read_compat_str+0xec/0x180 [ 999.313104][T19686] ? dentry_free+0xd5/0x160 [ 999.317449][T19686] bpf_prog_e42f6260c1b72fb3+0x35/0x774 [ 999.322827][T19686] bpf_trace_run2+0xef/0x280 [ 999.327257][T19686] ? bpf_trace_run1+0x210/0x210 [ 999.331935][T19686] ? dentry_free+0xd5/0x160 [ 999.336291][T19686] ? kmem_cache_free+0xa9/0x1e0 [ 999.340975][T19686] ? ____kasan_slab_free+0x12c/0x160 [ 999.346093][T19686] ? dentry_free+0xd5/0x160 [ 999.350432][T19686] __bpf_trace_kmem_free+0x6f/0x90 [ 999.355375][T19686] ? dentry_free+0xd5/0x160 [ 999.359720][T19686] __traceiter_kmem_cache_free+0x2e/0x50 [ 999.365187][T19686] kmem_cache_free+0x1c0/0x1e0 [ 999.369783][T19686] ? dentry_free+0xd5/0x160 [ 999.374130][T19686] dentry_free+0xd5/0x160 [ 999.378293][T19686] __dentry_kill+0x505/0x650 [ 999.382718][T19686] ? lockref_put_return+0xc9/0xe0 [ 999.387578][T19686] dentry_kill+0xc0/0x2a0 [ 999.391741][T19686] dput+0x40/0x80 [ 999.395216][T19686] __fput+0x52e/0x7b0 [ 999.399035][T19686] ____fput+0x15/0x20 [ 999.402851][T19686] task_work_run+0x129/0x190 [ 999.407281][T19686] exit_to_user_mode_loop+0xbf/0xd0 [ 999.412312][T19686] syscall_exit_to_user_mode+0xa2/0x1a0 [ 999.417693][T19686] do_syscall_64+0x40/0x70 [ 999.421945][T19686] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 999.427668][T19686] RIP: 0033:0x7f231929aef9 [ 999.431921][T19686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.451360][T19686] RSP: 002b:00007f2317f14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 999.459606][T19686] RAX: 0000000000000000 RBX: 00007f2319452f80 RCX: 00007f231929aef9 [ 999.467417][T19686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 999.475232][T19686] RBP: 00007f2317f14090 R08: 0000000000000000 R09: 0000000000000000 [ 999.483041][T19686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.490852][T19686] R13: 0000000000000000 R14: 00007f2319452f80 R15: 00007ffc230c11d8 [ 999.500802][T19637] syz.4.4820[19637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.500860][T19637] syz.4.4820[19637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.598463][T19688] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 999.623103][T19688] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 999.631349][T19688] F2FS-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿÿÿÿÿÿ" or missing value [ 999.905590][ T24] kauditd_printk_skb: 145 callbacks suppressed [ 999.905650][ T24] audit: type=1400 audit(1860530741.185:10653): avc: denied { map_read map_write } for pid=19693 comm="syz.1.4833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 999.958947][T19637] udc-core: couldn't find an available UDC or it's busy [ 999.973857][T19637] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1000.059939][ T24] audit: type=1400 audit(1860530741.195:10654): avc: denied { create } for pid=19693 comm="syz.1.4833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1000.191714][ T24] audit: type=1400 audit(1860530741.205:10655): avc: denied { create } for pid=19693 comm="syz.1.4833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1000.219475][T19221] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0097/input/input42 [ 1000.232874][T19221] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0097/input/input43 [ 1000.245802][ T24] audit: type=1400 audit(1860530741.665:10656): avc: denied { read } for pid=78 comm="acpid" name="event3" dev="devtmpfs" ino=2597 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1000.266424][T19221] uclogic 0003:256C:006D.0097: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1000.279880][ T24] audit: type=1400 audit(1860530741.665:10657): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2597 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1000.295556][T19227] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1000.304644][ T24] audit: type=1400 audit(1860530741.725:10658): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=2597 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1000.836250][T19702] EXT4-fs (loop2): Ignoring removed oldalloc option [ 1000.842740][T19702] EXT4-fs (loop2): Ignoring removed oldalloc option [ 1000.900753][T19702] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,oldalloc,oldalloc,jqfmt=vfsv1,dioread_lock,,errors=continue [ 1000.978734][ T24] audit: type=1400 audit(1860530742.345:10659): avc: denied { mount } for pid=19687 comm="syz.2.4830" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1001.000810][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 1001.006841][ T40] Bluetooth: hci0: sending frame failed (-49) [ 1001.014188][ T24] audit: type=1400 audit(1860530742.385:10660): avc: denied { create } for pid=19687 comm="syz.2.4830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1001.034740][ T24] audit: type=1400 audit(1860530742.385:10661): avc: denied { write } for pid=19687 comm="syz.2.4830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1001.055211][ T24] audit: type=1400 audit(1860530742.395:10662): avc: denied { nlmsg_write } for pid=19687 comm="syz.2.4830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1001.190103][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4835'. [ 1001.463950][ T1340] usb 5-1: USB disconnect, device number 19 [ 1001.584284][T19717] FAULT_INJECTION: forcing a failure. [ 1001.584284][T19717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.596149][T19714] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 1001.605226][T19717] CPU: 0 PID: 19717 Comm: syz.4.4837 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 1001.618730][T19717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1001.628617][T19717] Call Trace: [ 1001.631752][T19717] dump_stack_lvl+0x1e2/0x24b [ 1001.636259][T19717] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1001.641552][T19717] dump_stack+0x15/0x17 [ 1001.645545][T19717] should_fail+0x3c6/0x510 [ 1001.649802][T19717] should_fail_usercopy+0x1a/0x20 [ 1001.654656][T19717] _copy_from_iter_full+0x1ef/0xa20 [ 1001.659692][T19717] ? tipc_buf_acquire+0x2b/0xe0 [ 1001.664381][T19717] ? __kmalloc_track_caller+0x184/0x320 [ 1001.669761][T19717] ? copyin+0x90/0x90 [ 1001.673578][T19717] ? __kasan_check_write+0x14/0x20 [ 1001.678528][T19717] ? __check_object_size+0x2e6/0x3c0 [ 1001.683645][T19717] tipc_msg_build+0xa10/0x1040 [ 1001.688246][T19717] ? proc_pident_instantiate+0x7a/0x2e0 [ 1001.693624][T19717] ? proc_pident_lookup+0x1c4/0x260 [ 1001.698662][T19717] ? tipc_msg_fragment+0x760/0x760 [ 1001.703609][T19717] ? __local_bh_enable_ip+0x53/0x80 [ 1001.708644][T19717] ? tipc_nametbl_lookup_dst_nodes+0x375/0x7e0 [ 1001.714629][T19717] __tipc_sendmsg+0x2403/0x3ab0 [ 1001.719320][T19717] ? avc_has_perm_noaudit+0x240/0x240 [ 1001.724524][T19717] ? tipc_sk_publish+0x3e0/0x3e0 [ 1001.729297][T19717] ? avc_has_perm+0x14d/0x400 [ 1001.733810][T19717] ? memcpy+0x56/0x70 [ 1001.737631][T19717] ? avc_has_perm+0x275/0x400 [ 1001.742144][T19717] ? wait_woken+0x250/0x250 [ 1001.746483][T19717] ? avc_has_perm_noaudit+0x240/0x240 [ 1001.751692][T19717] ? unwind_get_return_address+0x4d/0x90 [ 1001.757163][T19717] ? __kasan_check_write+0x14/0x20 [ 1001.762109][T19717] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1001.766970][T19717] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1001.772004][T19717] ? __local_bh_enable_ip+0x53/0x80 [ 1001.777037][T19717] ? local_bh_enable+0x1f/0x30 [ 1001.781635][T19717] ? lock_sock_nested+0x26a/0x300 [ 1001.786495][T19717] ? sock_init_data+0xc0/0xc0 [ 1001.791009][T19717] ? kmem_cache_free+0xa9/0x1e0 [ 1001.795697][T19717] ? check_stack_object+0x114/0x130 [ 1001.800729][T19717] tipc_sendmsg+0x55/0x70 [ 1001.804892][T19717] ? tipc_recvmsg+0x13b0/0x13b0 [ 1001.809582][T19717] ____sys_sendmsg+0x59e/0x8f0 [ 1001.814183][T19717] ? __sys_sendmsg_sock+0x40/0x40 [ 1001.819044][T19717] ? import_iovec+0xe5/0x120 [ 1001.823469][T19717] ___sys_sendmsg+0x252/0x2e0 [ 1001.827987][T19717] ? __sys_sendmsg+0x280/0x280 [ 1001.832582][T19717] ? rw_verify_area+0x1c3/0x360 [ 1001.837276][T19717] ? __fdget+0x1bc/0x240 [ 1001.841348][T19717] __se_sys_sendmsg+0x1b1/0x280 [ 1001.846036][T19717] ? __x64_sys_sendmsg+0x90/0x90 [ 1001.850807][T19717] ? ksys_write+0x260/0x2c0 [ 1001.855151][T19717] ? debug_smp_processor_id+0x17/0x20 [ 1001.860356][T19717] __x64_sys_sendmsg+0x7b/0x90 [ 1001.864955][T19717] do_syscall_64+0x34/0x70 [ 1001.869213][T19717] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1001.874935][T19717] RIP: 0033:0x7ff9b92d3ef9 [ 1001.879192][T19717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.898627][T19717] RSP: 002b:00007ff9b7f4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.906874][T19717] RAX: ffffffffffffffda RBX: 00007ff9b948bf80 RCX: 00007ff9b92d3ef9 [ 1001.914684][T19717] RDX: 0000000000000000 RSI: 0000000020004440 RDI: 0000000000000009 [ 1001.922495][T19717] RBP: 00007ff9b7f4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.930306][T19717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.938118][T19717] R13: 0000000000000000 R14: 00007ff9b948bf80 R15: 00007ffe2370df58 [ 1001.946352][T19227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.957192][T19227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1001.965921][T19227] usb 4-1: config 1 has no interface number 0 [ 1002.006765][T19227] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.017462][T19227] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1002.032636][T19723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4839'. [ 1002.044823][T19723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4839'. [ 1002.453960][T19732] input: syz1 as /devices/virtual/input/input44 [ 1002.734705][T19227] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1002.747677][T19227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.758649][T19227] usb 4-1: Product: syz [ 1002.763673][T19227] usb 4-1: Manufacturer: syz [ 1002.798124][T19714] usb usb7: usbfs: process 19714 (syz.2.4836) did not claim interface 0 before use [ 1003.002780][T19227] usb 4-1: can't set config #1, error -71 [ 1003.009584][T19227] usb 4-1: USB disconnect, device number 17 [ 1003.058703][T19743] FAULT_INJECTION: forcing a failure. [ 1003.058703][T19743] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.071270][T19743] CPU: 1 PID: 19743 Comm: syz.4.4842 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 1003.081036][T19743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1003.090925][T19743] Call Trace: [ 1003.094065][T19743] dump_stack_lvl+0x1e2/0x24b [ 1003.098570][T19743] ? panic+0x812/0x812 [ 1003.102472][T19743] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1003.107767][T19743] dump_stack+0x15/0x17 [ 1003.111758][T19743] should_fail+0x3c6/0x510 [ 1003.115510][T19221] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1003.116014][T19743] ? __build_skb+0x2a/0x300 [ 1003.116033][T19743] __should_failslab+0xa4/0xe0 [ 1003.132342][T19743] should_failslab+0x9/0x20 [ 1003.136674][T19743] kmem_cache_alloc+0x3d/0x2e0 [ 1003.141285][T19743] ? __put_user_ns+0x60/0x60 [ 1003.145700][T19743] __build_skb+0x2a/0x300 [ 1003.149877][T19743] build_skb+0x25/0x1e0 [ 1003.153869][T19743] bpf_prog_test_run_skb+0x388/0x1410 [ 1003.159069][T19743] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 1003.164792][T19743] ? __kasan_check_write+0x14/0x20 [ 1003.169738][T19743] ? fput_many+0x160/0x1b0 [ 1003.173988][T19743] ? __bpf_prog_test_run_raw_tp+0x240/0x240 [ 1003.179720][T19743] __se_sys_bpf+0x5235/0x11cb0 [ 1003.184321][T19743] ? stack_trace_save+0x113/0x1c0 [ 1003.189183][T19743] ? terminate_walk+0x407/0x4f0 [ 1003.193871][T19743] ? stack_trace_snprint+0xf0/0xf0 [ 1003.198820][T19743] ? kmem_cache_free+0xa9/0x1e0 [ 1003.203497][T19743] ? kmem_cache_free+0xa9/0x1e0 [ 1003.208185][T19743] ? kasan_set_track+0x5d/0x70 [ 1003.212784][T19743] ? __x64_sys_bpf+0x90/0x90 [ 1003.217212][T19743] ? __kasan_slab_free+0x11/0x20 [ 1003.221988][T19743] ? slab_free_freelist_hook+0xc0/0x190 [ 1003.227368][T19743] ? kmem_cache_free+0xa9/0x1e0 [ 1003.232053][T19743] ? putname+0xe7/0x140 [ 1003.236050][T19743] ? do_sys_openat2+0x1fc/0x710 [ 1003.240737][T19743] ? __x64_sys_openat+0x243/0x290 [ 1003.245592][T19743] ? do_syscall_64+0x34/0x70 [ 1003.250023][T19743] ? _kstrtoull+0x3a0/0x4a0 [ 1003.254357][T19743] ? kstrtouint_from_user+0x20a/0x2a0 [ 1003.259568][T19743] ? kstrtol_from_user+0x310/0x310 [ 1003.264531][T19743] ? memset+0x35/0x40 [ 1003.268336][T19743] ? __fsnotify_parent+0x4b9/0x6c0 [ 1003.273283][T19743] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 1003.279879][T19743] ? proc_fail_nth_write+0x20b/0x290 [ 1003.284996][T19743] ? proc_fail_nth_read+0x210/0x210 [ 1003.290030][T19743] ? security_file_permission+0x86/0xb0 [ 1003.295413][T19743] ? rw_verify_area+0x1c3/0x360 [ 1003.300101][T19743] ? preempt_count_add+0x92/0x1a0 [ 1003.304956][T19743] ? vfs_write+0x852/0xe70 [ 1003.309214][T19743] ? kmem_cache_free+0x1c0/0x1e0 [ 1003.313985][T19743] ? kernel_write+0x3d0/0x3d0 [ 1003.318504][T19743] ? __kasan_check_write+0x14/0x20 [ 1003.323445][T19743] ? mutex_lock+0xa5/0x110 [ 1003.327698][T19743] ? mutex_trylock+0xa0/0xa0 [ 1003.332125][T19743] ? __kasan_check_write+0x14/0x20 [ 1003.337073][T19743] ? fput_many+0x160/0x1b0 [ 1003.341330][T19743] ? debug_smp_processor_id+0x17/0x20 [ 1003.346535][T19743] __x64_sys_bpf+0x7b/0x90 [ 1003.350785][T19743] do_syscall_64+0x34/0x70 [ 1003.355038][T19743] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1003.355507][T19221] usb 2-1: Using ep0 maxpacket: 8 [ 1003.360773][T19743] RIP: 0033:0x7ff9b92d3ef9 [ 1003.360785][T19743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.360799][T19743] RSP: 002b:00007ff9b7f4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1003.397566][T19743] RAX: ffffffffffffffda RBX: 00007ff9b948bf80 RCX: 00007ff9b92d3ef9 [ 1003.405373][T19743] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 1003.413187][T19743] RBP: 00007ff9b7f4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.420997][T19743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.428810][T19743] R13: 0000000000000000 R14: 00007ff9b948bf80 R15: 00007ffe2370df58 [ 1003.437753][ T1340] Bluetooth: hci0: command 0x1001 tx timeout [ 1003.453228][ T40] Bluetooth: hci0: sending frame failed (-49) [ 1003.474019][T19749] FAULT_INJECTION: forcing a failure. [ 1003.474019][T19749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.488146][T19749] CPU: 0 PID: 19749 Comm: syz.2.4843 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 1003.497927][T19749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1003.507817][T19749] Call Trace: [ 1003.510954][T19749] dump_stack_lvl+0x1e2/0x24b [ 1003.515465][T19749] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1003.520753][T19749] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 1003.526395][T19749] dump_stack+0x15/0x17 [ 1003.530386][T19749] should_fail+0x3c6/0x510 [ 1003.534637][T19749] should_fail_usercopy+0x1a/0x20 [ 1003.539497][T19749] _copy_to_user+0x20/0x90 [ 1003.543752][T19749] __se_sys_bpf+0x86ce/0x11cb0 [ 1003.548351][T19749] ? stack_trace_save+0x113/0x1c0 [ 1003.553211][T19749] ? terminate_walk+0x407/0x4f0 [ 1003.557900][T19749] ? stack_trace_snprint+0xf0/0xf0 [ 1003.562845][T19749] ? kmem_cache_free+0xa9/0x1e0 [ 1003.567531][T19749] ? kmem_cache_free+0xa9/0x1e0 [ 1003.572216][T19749] ? kasan_set_track+0x5d/0x70 [ 1003.576819][T19749] ? __x64_sys_bpf+0x90/0x90 [ 1003.581244][T19749] ? __kasan_slab_free+0x11/0x20 [ 1003.586021][T19749] ? slab_free_freelist_hook+0xc0/0x190 [ 1003.591397][T19749] ? kmem_cache_free+0xa9/0x1e0 [ 1003.596090][T19749] ? putname+0xe7/0x140 [ 1003.600079][T19749] ? do_sys_openat2+0x1fc/0x710 [ 1003.604763][T19749] ? __x64_sys_openat+0x243/0x290 [ 1003.609627][T19749] ? do_syscall_64+0x34/0x70 [ 1003.614052][T19749] ? _kstrtoull+0x3a0/0x4a0 [ 1003.618393][T19749] ? kstrtouint_from_user+0x20a/0x2a0 [ 1003.623599][T19749] ? kstrtol_from_user+0x310/0x310 [ 1003.628547][T19749] ? memset+0x35/0x40 [ 1003.632365][T19749] ? __fsnotify_parent+0x4b9/0x6c0 [ 1003.637314][T19749] ? __fsnotify_update_child_dentry_flags+0x2b0/0x2b0 [ 1003.643906][T19749] ? proc_fail_nth_write+0x20b/0x290 [ 1003.649029][T19749] ? proc_fail_nth_read+0x210/0x210 [ 1003.654066][T19749] ? security_file_permission+0x86/0xb0 [ 1003.659446][T19749] ? rw_verify_area+0x1c3/0x360 [ 1003.664131][T19749] ? preempt_count_add+0x92/0x1a0 [ 1003.668990][T19749] ? vfs_write+0x852/0xe70 [ 1003.673245][T19749] ? kmem_cache_free+0x1c0/0x1e0 [ 1003.678019][T19749] ? kernel_write+0x3d0/0x3d0 [ 1003.682531][T19749] ? __kasan_check_write+0x14/0x20 [ 1003.687479][T19749] ? mutex_lock+0xa5/0x110 [ 1003.691732][T19749] ? mutex_trylock+0xa0/0xa0 [ 1003.696159][T19749] ? __kasan_check_write+0x14/0x20 [ 1003.701166][T19749] ? fput_many+0x160/0x1b0 [ 1003.705365][T19749] ? debug_smp_processor_id+0x17/0x20 [ 1003.710566][T19749] __x64_sys_bpf+0x7b/0x90 [ 1003.714818][T19749] do_syscall_64+0x34/0x70 [ 1003.719075][T19749] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1003.724798][T19749] RIP: 0033:0x7f33f4d3def9 [ 1003.729056][T19749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1003.748492][T19749] RSP: 002b:00007f33f39b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1003.756738][T19749] RAX: ffffffffffffffda RBX: 00007f33f4ef5f80 RCX: 00007f33f4d3def9 [ 1003.764548][T19749] RDX: 0000000000000020 RSI: 0000000020000400 RDI: 0000000000000015 [ 1003.772358][T19749] RBP: 00007f33f39b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.780171][T19749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.787982][T19749] R13: 0000000000000000 R14: 00007f33f4ef5f80 R15: 00007fff7d379558 [ 1003.800377][T19221] usb 2-1: config index 0 descriptor too short (expected 127, got 45) [ 1003.811210][T19221] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.821409][T19221] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.832521][T19221] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.842350][T19221] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1003.852362][T19221] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1003.861441][T19221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.875214][T19221] usb 2-1: config 0 descriptor?? [ 1004.121419][T19733] udc-core: couldn't find an available UDC or it's busy [ 1004.128234][T19733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1004.265601][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1004.516291][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 1004.635558][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.646298][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.655502][T19220] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1004.655946][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1004.675794][ T20] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1004.684593][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.693283][ T20] usb 3-1: config 0 descriptor?? [ 1004.895494][T19220] usb 5-1: Using ep0 maxpacket: 32 [ 1005.055543][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 1005.061353][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 1005.069322][ T20] usb 3-1: USB disconnect, device number 2 [ 1005.170342][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 1005.170354][ T24] audit: type=1400 audit(1860530746.595:10697): avc: denied { read write } for pid=19765 comm="syz.1.4850" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1005.181256][T19220] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1005.240720][ T24] audit: type=1400 audit(1860530746.595:10698): avc: denied { open } for pid=19765 comm="syz.1.4850" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1005.240753][T19220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.265097][T19220] usb 5-1: Product: syz [ 1005.276653][T19221] usbhid 2-1:0.0: can't add hid device: -71 [ 1005.282450][T19221] usbhid: probe of 2-1:0.0 failed with error -71 [ 1005.294123][T19220] usb 5-1: Manufacturer: syz [ 1005.295525][ T24] audit: type=1400 audit(1860530746.595:10699): avc: denied { mounton } for pid=19765 comm="syz.1.4850" path="/17/file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1005.302385][T19221] usb 2-1: USB disconnect, device number 36 [ 1005.327444][T19220] usb 5-1: SerialNumber: syz [ 1005.336073][T19220] usb 5-1: config 0 descriptor?? [ 1005.374243][ T24] audit: type=1400 audit(1860530746.595:10700): avc: denied { mount } for pid=19765 comm="syz.1.4850" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1005.398680][ T24] audit: type=1400 audit(1860530746.595:10701): avc: denied { create } for pid=19765 comm="syz.1.4850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1005.418430][ T24] audit: type=1400 audit(1860530746.635:10702): avc: denied { sys_admin } for pid=19765 comm="syz.1.4850" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1005.530702][ T24] audit: type=1326 audit(1860530746.915:10703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b4e1ef9 code=0x7ffc0000 [ 1005.542986][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 1005.583819][ T24] audit: type=1326 audit(1860530746.915:10704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b4e1ef9 code=0x7ffc0000 [ 1005.612763][ T24] audit: type=1326 audit(1860530746.915:10705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f321b4e1ef9 code=0x7ffc0000 [ 1005.636378][ T24] audit: type=1326 audit(1860530746.915:10706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19769 comm="syz.3.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321b4e1ef9 code=0x7ffc0000 [ 1005.895168][T19762] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4849: casefold flag without casefold feature [ 1005.907848][T19762] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.4849: missing EA_INODE flag [ 1005.919628][T19762] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.4849: error while reading EA inode 12 err=-117 [ 1005.932018][T19762] EXT4-fs (loop4): 1 orphan inode deleted [ 1005.937612][T19762] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1006.146696][T19790] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1006.156320][T19790] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1006.166420][T19790] EXT4-fs error (device loop3): ext4_get_journal_inode:5243: inode #5: comm syz.3.4857: unexpected bad inode w/o EXT4_IGET_BAD [ 1006.179588][T19790] EXT4-fs (loop3): no journal found [ 1006.184650][T19790] EXT4-fs (loop3): can't get journal size [ 1006.191332][T19790] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,nolazytime,bsddf,,errors=continue [ 1006.285628][T19224] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1006.297217][T19800] FAULT_INJECTION: forcing a failure. [ 1006.297217][T19800] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.309729][T19800] CPU: 1 PID: 19800 Comm: syz.3.4860 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 1006.319403][T19800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1006.329296][T19800] Call Trace: [ 1006.332426][T19800] dump_stack_lvl+0x1e2/0x24b [ 1006.336940][T19800] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1006.342248][T19800] dump_stack+0x15/0x17 [ 1006.346222][T19800] should_fail+0x3c6/0x510 [ 1006.350474][T19800] ? anon_vma_clone+0x9a/0x500 [ 1006.355079][T19800] __should_failslab+0xa4/0xe0 [ 1006.359674][T19800] should_failslab+0x9/0x20 [ 1006.364014][T19800] kmem_cache_alloc+0x3d/0x2e0 [ 1006.368613][T19800] anon_vma_clone+0x9a/0x500 [ 1006.373040][T19800] __split_vma+0x184/0x420 [ 1006.377291][T19800] split_vma+0x7c/0xd0 [ 1006.381200][T19800] mlock_fixup+0x46f/0x540 [ 1006.385459][T19800] apply_vma_lock_flags+0x203/0x340 [ 1006.390485][T19800] ? do_mlock+0x540/0x540 [ 1006.394665][T19800] ? ksys_write+0x260/0x2c0 [ 1006.399008][T19800] do_mlock+0x459/0x540 [ 1006.399028][T19800] __x64_sys_mlock2+0xb8/0xe0 [ 1006.407498][T19800] do_syscall_64+0x34/0x70 [ 1006.411750][T19800] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1006.417479][T19800] RIP: 0033:0x7f321b4e1ef9 [ 1006.421730][T19800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.441257][T19800] RSP: 002b:00007f321a15b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 1006.449501][T19800] RAX: ffffffffffffffda RBX: 00007f321b699f80 RCX: 00007f321b4e1ef9 [ 1006.457313][T19800] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020549000 [ 1006.465124][T19800] RBP: 00007f321a15b090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.472935][T19800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.480745][T19800] R13: 0000000000000000 R14: 00007f321b699f80 R15: 00007ffe7737cf58 [ 1006.516430][T19220] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 1006.573468][T19813] bridge0: port 3(vlan2) entered blocking state [ 1006.580180][T19813] bridge0: port 3(vlan2) entered disabled state [ 1006.665573][T19224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1006.677220][T19224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1006.688182][T19224] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1006.696991][T19224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.705646][T19224] usb 2-1: config 0 descriptor?? [ 1006.720159][T19227] usb 5-1: USB disconnect, device number 20 [ 1006.726389][T19782] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1006.735575][ T143] net eth1: rx_urb submit failed: -19 [ 1007.185774][T19224] hid (null): bogus close delimiter [ 1007.405600][T19224] usb 2-1: language id specifier not provided by device, defaulting to English [ 1007.417715][T19860] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1007.459788][T19862] EXT4-fs (loop4): Ignoring removed orlov option [ 1007.466219][T19862] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1007.480301][T19862] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 1007.595799][T19875] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4881: iget: bad extended attribute block 1 [ 1007.608481][T19782] syz.1.4853[19782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1007.608543][T19782] syz.1.4853[19782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1007.621129][T19875] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4881: couldn't read orphan inode 15 (err -117) [ 1007.644614][T19875] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,max_dir_size_kb=0x0000000000000005,bsddf,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue [ 1007.682830][T19880] device batadv_slave_0 entered promiscuous mode [ 1007.690876][T19880] device batadv_slave_0 left promiscuous mode [ 1007.856435][T19224] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0098/input/input45 [ 1007.873984][T19224] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0098/input/input46 [ 1007.890796][T19895] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1007.905698][T19224] uclogic 0003:256C:006D.0098: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1007.915758][T19895] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 1008.014009][T19909] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1008.030325][T19909] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4893: bg 0: block 248: padding at end of block bitmap is not set [ 1008.048265][T19909] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.4893: Failed to acquire dquot type 1 [ 1008.060131][T19909] EXT4-fs (loop3): 1 truncate cleaned up [ 1008.060768][T19782] udc-core: couldn't find an available UDC or it's busy [ 1008.066076][T19909] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1008.073897][T19782] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1008.090071][T19917] syz.4.4897[19917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1008.090134][T19917] syz.4.4897[19917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1008.105253][T19909] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1008.137162][T19220] usb 2-1: USB disconnect, device number 37 [ 1008.144562][T19909] EXT4-fs (loop3): re-mounted. Opts: (null) [ 1008.150850][T19909] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.4893: Failed to acquire dquot type 1 [ 1008.203048][ T7156] Bluetooth: hci1: Frame reassembly failed (-84) [ 1008.214720][T19927] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1008.535511][ T1340] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1008.653307][T19939] netem: change failed [ 1008.667599][T19941] syz.1.4906 (19941) used obsolete PPPIOCDETACH ioctl [ 1009.025558][ T1340] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.035494][ T1340] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1009.044228][ T1340] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1009.053092][ T1340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.061439][ T1340] usb 4-1: config 0 descriptor?? [ 1009.207339][T19948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.214236][T19948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.221880][T19948] device bridge_slave_0 entered promiscuous mode [ 1009.228752][T19948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.240030][T19948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.247451][T19948] device bridge_slave_1 entered promiscuous mode [ 1009.285012][T19948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.291868][T19948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.298975][T19948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.305778][T19948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.329919][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1009.337839][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.345680][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.357637][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1009.365619][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.372437][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.376094][T19936] loop3: p1 < > p2 p3 p4 < p5 > [ 1009.386188][T19936] loop3: p3 size 16744448 extends beyond EOD, truncated [ 1009.394344][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1009.402974][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.409843][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.421206][T19224] usb 4-1: USB disconnect, device number 18 [ 1009.429785][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1009.438124][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1009.456392][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1009.469135][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1009.477105][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1009.484311][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1009.492648][T19948] device veth0_vlan entered promiscuous mode [ 1009.502663][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1009.513329][T19948] device veth1_macvtap entered promiscuous mode [ 1009.522922][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1009.532867][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1009.986466][ T7156] device bridge_slave_1 left promiscuous mode [ 1009.996739][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.008163][ T7156] device bridge_slave_0 left promiscuous mode [ 1010.014113][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.022006][ T7156] device veth1_macvtap left promiscuous mode [ 1010.032525][ T7156] device veth0_vlan left promiscuous mode [ 1010.209613][ T24] kauditd_printk_skb: 171 callbacks suppressed [ 1010.209626][ T24] audit: type=1400 audit(1860530751.635:10874): avc: denied { read write } for pid=19628 comm="syz-executor" name="loop3" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1010.240585][ T24] audit: type=1400 audit(1860530751.635:10875): avc: denied { open } for pid=19628 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1010.267128][ T24] audit: type=1400 audit(1860530751.635:10876): avc: denied { ioctl } for pid=19628 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1010.292835][ T1340] Bluetooth: hci1: command 0x1003 tx timeout [ 1010.293059][ T24] audit: type=1400 audit(1860530751.655:10877): avc: denied { append } for pid=75 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=22 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1010.298996][ T1886] Bluetooth: hci1: sending frame failed (-49) [ 1010.327335][ T24] audit: type=1400 audit(1860530751.655:10878): avc: denied { prog_load } for pid=19977 comm="syz.3.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1010.346546][ T24] audit: type=1400 audit(1860530751.655:10879): avc: denied { bpf } for pid=19977 comm="syz.3.4917" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1010.367947][ T24] audit: type=1400 audit(1860530751.655:10880): avc: denied { perfmon } for pid=19977 comm="syz.3.4917" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1010.389005][ T24] audit: type=1400 audit(1860530751.665:10881): avc: denied { prog_run } for pid=19977 comm="syz.3.4917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1010.408109][ T24] audit: type=1400 audit(1860530751.695:10882): avc: denied { mounton } for pid=19977 comm="syz.3.4917" path="/35/file0" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1010.481921][ T24] audit: type=1326 audit(1860530751.905:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19981 comm="syz.0.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfc86def9 code=0x7ffc0000 [ 1010.549026][T19989] syz.1.4922[19989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1010.549078][T19989] syz.1.4922[19989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1010.599326][T19995] netlink: 'syz.3.4925': attribute type 2 has an invalid length. [ 1010.661349][T20001] device syzkaller0 entered promiscuous mode [ 1010.758438][T20013] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1010.767718][T20013] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 1010.919773][T20032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1010.938950][T20032] EXT4-fs (loop3): 1 truncate cleaned up [ 1010.944437][T20032] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue [ 1011.445570][T19221] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1011.725523][T19221] usb 1-1: device descriptor read/64, error -71 [ 1012.080512][T19628] FAT-fs (loop3): Directory bread(block 34) failed [ 1012.087024][T19628] FAT-fs (loop3): Directory bread(block 35) failed [ 1012.093384][T19628] FAT-fs (loop3): Directory bread(block 36) failed [ 1012.099840][T19628] FAT-fs (loop3): Directory bread(block 37) failed [ 1012.106191][T19628] FAT-fs (loop3): Directory bread(block 38) failed [ 1012.112537][T19628] FAT-fs (loop3): Directory bread(block 39) failed [ 1012.119271][T19628] FAT-fs (loop3): Directory bread(block 40) failed [ 1012.125580][T19220] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1012.125631][T19221] usb 1-1: device descriptor read/64, error -71 [ 1012.132993][T19628] FAT-fs (loop3): Directory bread(block 41) failed [ 1012.288110][T20087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.294982][T20087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.302345][T20087] device bridge_slave_0 entered promiscuous mode [ 1012.310802][T20087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.317680][T20087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.324769][T20087] device bridge_slave_1 entered promiscuous mode [ 1012.355497][ T20] Bluetooth: hci1: command 0x1001 tx timeout [ 1012.360495][T20087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.361363][ T1886] Bluetooth: hci1: sending frame failed (-49) [ 1012.368167][T20087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.368237][T20087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.387949][T20087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.407366][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1012.414717][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.421721][T19221] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1012.429261][ T960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.429282][T19220] usb 2-1: device descriptor read/64, error -71 [ 1012.457534][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1012.466294][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.473163][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.481340][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1012.489716][ T960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.496575][ T960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.508646][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1012.519603][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1012.532522][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1012.544039][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1012.551907][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1012.559245][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1012.569491][T20087] device veth0_vlan entered promiscuous mode [ 1012.579446][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1012.588418][T20087] device veth1_macvtap entered promiscuous mode [ 1012.598110][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1012.609348][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1012.686285][ T7156] device bridge_slave_1 left promiscuous mode [ 1012.692270][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.699553][ T7156] device bridge_slave_0 left promiscuous mode [ 1012.705525][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.712991][ T7156] device veth1_macvtap left promiscuous mode [ 1012.718993][ T7156] device veth0_vlan left promiscuous mode [ 1012.725537][T19221] usb 1-1: device descriptor read/64, error -71 [ 1012.735162][T20101] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1012.752648][T20101] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1012.769914][T20101] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1012.782112][T20101] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1012.782112][T20101] [ 1012.791748][T20101] EXT4-fs (loop3): Total free blocks count 0 [ 1012.797644][T20101] EXT4-fs (loop3): Free/Dirty block details [ 1012.803270][T20101] EXT4-fs (loop3): free_blocks=2415919104 [ 1012.808868][T20101] EXT4-fs (loop3): dirty_blocks=16 [ 1012.813756][T20101] EXT4-fs (loop3): Block reservation details [ 1012.819805][T20101] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 1012.826597][T20105] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 1012.838801][T20105] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1012.838801][T20105] [ 1012.875546][T19220] usb 2-1: device descriptor read/64, error -71 [ 1012.914366][T20111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1013.072175][T20131] netlink: 'syz.3.4984': attribute type 3 has an invalid length. [ 1013.089194][T20133] usb usb7: usbfs: process 20133 (syz.3.4985) did not claim interface 0 before use [ 1013.108504][T20135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4986'. [ 1013.155611][T19220] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1013.163039][T19221] usb 1-1: device descriptor read/64, error -71 [ 1013.176789][T20137] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1013.185721][T20137] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 1013.285653][T19221] usb usb1-port1: attempt power cycle [ 1013.321518][T20149] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 1013.335347][T20149] ext4 filesystem being mounted at /22/bus supports timestamps until 2038 (0x7fffffff) [ 1013.397000][T20154] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1013.408217][T20154] EXT4-fs (loop4): 1 truncate cleaned up [ 1013.413665][T20154] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue [ 1013.445589][T19220] usb 2-1: device descriptor read/64, error -71 [ 1013.715502][T19221] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1013.835506][T19220] usb 2-1: device descriptor read/64, error -71 [ 1013.885532][T19221] usb 1-1: device descriptor read/8, error -71 [ 1013.956702][T19220] usb usb2-port1: attempt power cycle [ 1014.095532][T19221] usb 1-1: device descriptor read/8, error -71 [ 1014.332717][T20176] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1014.376840][T19220] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1014.436002][ T9700] Bluetooth: hci1: command 0x1009 tx timeout [ 1014.545581][T19220] usb 2-1: device descriptor read/8, error -71 [ 1014.658470][T20216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1014.775591][T19220] usb 2-1: device descriptor read/8, error -71 [ 1014.999216][T20265] device pim6reg1 entered promiscuous mode [ 1015.220225][ T24] kauditd_printk_skb: 385 callbacks suppressed [ 1015.220237][ T24] audit: type=1400 audit(1860530756.645:11269): avc: denied { read write } for pid=19398 comm="syz-executor" name="loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1015.251147][ T24] audit: type=1400 audit(1860530756.645:11270): avc: denied { map_create } for pid=20272 comm="syz.1.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1015.251165][ T24] audit: type=1400 audit(1860530756.645:11271): avc: denied { prog_load } for pid=20272 comm="syz.1.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1015.290810][ T24] audit: type=1400 audit(1860530756.645:11272): avc: denied { create } for pid=20272 comm="syz.1.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1015.311291][ T24] audit: type=1400 audit(1860530756.645:11273): avc: denied { create } for pid=20272 comm="syz.1.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1015.311311][ T24] audit: type=1400 audit(1860530756.645:11274): avc: denied { create } for pid=20272 comm="syz.1.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 1015.351937][ T24] audit: type=1400 audit(1860530756.645:11275): avc: denied { prog_load } for pid=20272 comm="syz.1.5045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1015.371410][ T24] audit: type=1400 audit(1860530756.655:11276): avc: denied { read write } for pid=19398 comm="syz-executor" name="loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1015.403856][ T24] audit: type=1400 audit(1860530756.655:11277): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 1015.427941][ T24] audit: type=1400 audit(1860530756.655:11278): avc: denied { execute } for pid=20274 comm="syz.1.5046" name="file1" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 1015.480013][T20306] serio: Serial port pts0 [ 1015.782148][T20388] futex_wake_op: syz.3.5101 tries to shift op by 144; fix this program [ 1016.343630][T20516] netlink: 'syz.4.5163': attribute type 5 has an invalid length. [ 1016.389406][T20532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.396379][T20532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.405837][T20532] device bridge_slave_1 left promiscuous mode [ 1016.412093][T20532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.425999][T20532] device bridge_slave_0 left promiscuous mode [ 1016.431952][T20532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.480129][T20818] netlink: 'syz.1.5308': attribute type 32 has an invalid length. [ 1017.556607][T20826] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1017.623150][ T93] udevd[93]: worker [3134] terminated by signal 33 (Unknown signal 33) [ 1017.650079][T20840] syz.1.5319[20840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1017.650131][T20840] syz.1.5319[20840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1017.747276][T20856] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1017.771174][T20856] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1017.785647][T20856] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 1017.843430][T20875] mmap: syz.1.5335 (20875) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1019.506145][ T7156] device bridge_slave_1 left promiscuous mode [ 1019.512107][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.519529][ T7156] device bridge_slave_0 left promiscuous mode [ 1019.525577][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.533390][ T7156] device veth1_macvtap left promiscuous mode [ 1019.539280][ T7156] device veth0_vlan left promiscuous mode [ 1020.309682][ T24] kauditd_printk_skb: 1860 callbacks suppressed [ 1020.309694][ T24] audit: type=1400 audit(2000000004.250:13139): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 1020.337516][ T24] audit: type=1400 audit(2000000004.250:13140): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 1020.359573][ T24] audit: type=1400 audit(2000000004.300:13141): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 1020.381622][ T24] audit: type=1400 audit(2000000004.320:13142): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 1020.403667][ T24] audit: type=1400 audit(2000000004.350:13143): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 1020.425693][ T24] audit: type=1400 audit(2000000004.370:13144): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 1020.447670][ T24] audit: type=1400 audit(2000000004.390:13145): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 1020.493682][ T24] audit: type=1400 audit(2000000004.410:13146): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 1020.505834][T21024] device syzkaller0 entered promiscuous mode [ 1020.515548][ T24] audit: type=1400 audit(2000000004.410:13147): avc: denied { execmem } for pid=21019 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1020.541524][ T24] audit: type=1400 audit(2000000004.410:13148): avc: denied { prog_load } for pid=21025 comm="syz.3.5403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1023.233056][T21056] netlink: 'syz.4.5418': attribute type 3 has an invalid length. [ 1023.362370][T21076] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1023.371559][T21076] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1023.670219][T21078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.683935][T21078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.694714][T21078] device bridge_slave_0 entered promiscuous mode [ 1023.709319][T21078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.716388][T21078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.723775][T21078] device bridge_slave_1 entered promiscuous mode [ 1023.774206][T21078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.781086][T21078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.788194][T21078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.794943][T21078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.820302][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.828450][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.836379][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1023.844421][T21109] serio: Serial port pts0 [ 1023.844458][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1023.864785][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1023.873375][ T7156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.880267][ T7156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.888326][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1023.898010][ T7156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.904865][ T7156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.913598][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1023.926268][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1023.942687][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1023.954352][T21078] device veth0_vlan entered promiscuous mode [ 1023.962351][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1023.976911][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1023.984959][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1023.994902][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1024.004127][T21078] device veth1_macvtap entered promiscuous mode [ 1024.021692][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1024.046101][ T7156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1024.210383][T21130] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1024.296534][T21145] Leaked POSIX lock on dev=0x0:0x46 ino=0x2c1 fl_owner=ffff888132beb740 fl_flags=0x81 fl_type=0x0 fl_pid=21141 [ 1024.475158][T19948] Leaked locks on dev=0x0:0x46 ino=0x2c1: [ 1024.505657][T19948] POSIX: fl_owner=ffff888132beb740 fl_flags=0x81 fl_type=0x0 fl_pid=21141 [ 1024.524006][T21163] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1024.613210][T21170] hub 2-0:1.0: USB hub found [ 1024.617858][T21170] hub 2-0:1.0: 1 port detected [ 1024.659820][T21180] device ip6_vti0 entered promiscuous mode [ 1024.675215][T21180] device vlan2 entered promiscuous mode [ 1024.685154][T21180] device ip6_vti0 left promiscuous mode [ 1024.930740][T21220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.937740][T21220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.945027][T21220] device bridge_slave_0 entered promiscuous mode [ 1024.952430][T21220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.959343][T21220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.966724][T21220] device bridge_slave_1 entered promiscuous mode [ 1024.996203][T21229] SELinux: failed to load policy [ 1025.021629][T21220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.028512][T21220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.035617][T21220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.042369][T21220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.068480][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1025.082098][ T960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.090574][ T960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.110339][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1025.123916][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.130803][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.138429][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1025.146703][ T960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.153570][ T960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.170525][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1025.178990][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1025.195389][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1025.217856][T21220] device veth0_vlan entered promiscuous mode [ 1025.224951][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1025.233176][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1025.241569][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1025.259185][T21220] device veth1_macvtap entered promiscuous mode [ 1025.266714][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1025.278332][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1025.287222][T21260] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1025.296346][T21260] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 1025.310695][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1025.356761][T21269] syz.1.5508[21269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1025.356817][T21269] syz.1.5508[21269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1025.442245][ T24] kauditd_printk_skb: 258 callbacks suppressed [ 1025.442258][ T24] audit: type=1400 audit(2000000009.380:13407): avc: denied { read write } for pid=21274 comm="syz.1.5509" name="uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1025.451807][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.454135][ T24] audit: type=1400 audit(2000000009.380:13408): avc: denied { open } for pid=21274 comm="syz.1.5509" path="/dev/uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1025.461701][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.484618][ T24] audit: type=1400 audit(2000000009.380:13409): avc: denied { read write } for pid=21274 comm="syz.1.5509" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1025.491778][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.515109][ T24] audit: type=1400 audit(2000000009.380:13410): avc: denied { open } for pid=21274 comm="syz.1.5509" path="/dev/raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1025.522515][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.546012][ T24] audit: type=1400 audit(2000000009.380:13411): avc: denied { ioctl } for pid=21274 comm="syz.1.5509" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1025.553071][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.615896][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.623160][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.630553][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.637786][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.644945][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.652173][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.659373][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.666579][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.673748][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.681129][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.688349][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.695518][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.702710][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.710263][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.717509][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.724645][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.732023][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.739229][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.746585][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.753754][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.761013][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.768250][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.775368][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.782603][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.789794][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.797579][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.804767][T19221] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 1025.812837][T19221] hid-generic 0000:0000:0000.0099: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1026.085539][T19221] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1026.225959][ T7156] device bridge_slave_1 left promiscuous mode [ 1026.231876][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.239328][ T7156] device bridge_slave_0 left promiscuous mode [ 1026.245245][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.252890][ T7156] device veth1_macvtap left promiscuous mode [ 1026.258744][ T7156] device veth0_vlan left promiscuous mode [ 1026.314155][ T24] audit: type=1326 audit(2000000010.250:13412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce1249ef9 code=0x7ffc0000 [ 1026.343462][ T24] audit: type=1326 audit(2000000010.250:13413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce1249ef9 code=0x7ffc0000 [ 1026.355786][T19221] usb 2-1: device descriptor read/64, error -71 [ 1026.372614][ T24] audit: type=1326 audit(2000000010.250:13414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ce1249ef9 code=0x7ffc0000 [ 1026.399262][ T24] audit: type=1326 audit(2000000010.280:13415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce1249ef9 code=0x7ffc0000 [ 1026.422907][ T24] audit: type=1326 audit(2000000010.280:13416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21283 comm="syz.3.5520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce1249ef9 code=0x7ffc0000 [ 1026.430463][T21282] device syzkaller0 entered promiscuous mode [ 1026.785558][T19221] usb 2-1: device descriptor read/64, error -71 [ 1026.922383][T21291] futex_wake_op: syz.2.5513 tries to shift op by 144; fix this program [ 1027.262522][T19221] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1027.455959][ T7156] device bridge_slave_1 left promiscuous mode [ 1027.461918][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.469149][ T7156] device bridge_slave_0 left promiscuous mode [ 1027.475056][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.482962][ T7156] device veth1_macvtap left promiscuous mode [ 1027.488804][ T7156] device veth0_vlan left promiscuous mode [ 1027.545562][T19221] usb 2-1: device descriptor read/64, error -71 [ 1027.935506][T19221] usb 2-1: device descriptor read/64, error -71 [ 1028.055541][T19221] usb usb2-port1: attempt power cycle [ 1028.475511][T19221] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1028.965519][T19221] usb 2-1: device not accepting address 44, error -71 [ 1029.375969][T21325] IPv6: NLM_F_CREATE should be specified when creating new route [ 1029.386181][T21327] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1029.476629][T21322] device veth0_vlan left promiscuous mode [ 1029.482446][T21322] device veth0_vlan entered promiscuous mode [ 1031.516441][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 1031.516453][ T24] audit: type=1400 audit(2000000015.460:13467): avc: denied { create } for pid=21350 comm="syz.3.5536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1031.517120][T21351] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5536'. [ 1031.522387][ T24] audit: type=1400 audit(2000000015.460:13468): avc: denied { write } for pid=21350 comm="syz.3.5536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1031.572647][ T24] audit: type=1400 audit(2000000015.460:13469): avc: denied { nlmsg_write } for pid=21350 comm="syz.3.5536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1031.682863][T21349] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1031.693579][T21349] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1031.704257][T21349] JBD2: no valid journal superblock found [ 1031.709854][T21349] EXT4-fs (loop2): error loading journal [ 1032.931777][ T24] audit: type=1400 audit(2000000016.860:13470): avc: denied { connect } for pid=21370 comm="syz.1.5542" lport=44 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1033.516012][ T7156] device bridge_slave_1 left promiscuous mode [ 1033.521985][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.529359][ T7156] device bridge_slave_0 left promiscuous mode [ 1033.535277][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.543185][ T7156] device veth1_macvtap left promiscuous mode [ 1033.549030][ T7156] device veth0_vlan left promiscuous mode SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=4 req=5481 state=1 status=67 (errno 9: Bad file descriptor) [ 1035.072947][ T24] audit: type=1400 audit(2000000019.010:13471): avc: denied { write } for pid=293 comm="syz-executor" path="pipe:[1480]" dev="pipefs" ino=1480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1035.104720][ T24] audit: type=1326 audit(2000000019.040:13472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.1.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231929aef9 code=0x7ffc0000 [ 1035.132090][ T24] audit: type=1326 audit(2000000019.040:13473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.1.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231929aef9 code=0x7ffc0000 [ 1035.155965][ T24] audit: type=1326 audit(2000000019.040:13474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.1.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f231929aef9 code=0x7ffc0000 [ 1035.179557][ T24] audit: type=1326 audit(2000000019.040:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.1.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231929aef9 code=0x7ffc0000 [ 1035.203899][ T24] audit: type=1326 audit(2000000019.040:13476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21412 comm="syz.1.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231929aef9 code=0x7ffc0000 [ 1035.477353][ T7156] tipc: Disabling bearer [ 1035.482441][ T7156] tipc: Left network mode [ 1036.436287][ T7156] device bridge_slave_1 left promiscuous mode [ 1036.442217][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.449568][ T7156] device bridge_slave_0 left promiscuous mode [ 1036.455554][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.463442][ T7156] device bridge_slave_1 left promiscuous mode [ 1036.469452][ T7156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.476650][ T7156] device bridge_slave_0 left promiscuous mode [ 1036.482540][ T7156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.490426][ T7156] device veth1_macvtap left promiscuous mode [ 1036.496379][ T7156] device veth1_macvtap left promiscuous mode [ 1036.502267][ T7156] device veth0_vlan left promiscuous mode [ 1036.508010][ T7156] device veth1_macvtap left promiscuous mode [ 1036.513802][ T7156] device veth0_vlan left promiscuous mode