last executing test programs: 21.437273677s ago: executing program 3 (id=549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="08a503576a7f"}, 0x0, {0x2, 0x0, @loopback}, 'syz_tun\x00'}) 21.437035997s ago: executing program 3 (id=550): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/oops_count', 0x88100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 21.423395669s ago: executing program 3 (id=551): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 21.202215579s ago: executing program 3 (id=553): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pipe2(&(0x7f0000000000), 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 20.85748425s ago: executing program 3 (id=560): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e", 0xab}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e40bd678517886e0c9ec482da71", 0x50}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79", 0x9a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f44b", 0xac}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b35b9b3aa61985ea588557", 0x83}, {&(0x7f0000000b80)="8d75938ba9bc695806fede7eee392592a6014e55025d4c6612fbb793e3ed010000000000000007aab6dc2d3668aa974f67dad537a2d75fcac54500000000000000000000000000000000d70f7cae577664b818df8e9b4e81ef2a362d8b04feea468d93805102ab8deb693659820db4e2512d5878387d2d3a53a8e52a5fcefe09acf7dc23fd7a1c9add1f1adf28c1671ebc7fa1eaae340364b2ed0a1e96d2eafcddf5d93106", 0xa5}], 0x3}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 19.794052878s ago: executing program 3 (id=570): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000900)='mm_page_alloc\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000580)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 8.650673718s ago: executing program 0 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x134, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 8.649764348s ago: executing program 2 (id=629): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x14, &(0x7f0000000040)={0x0}}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x141) 7.154842935s ago: executing program 0 (id=631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, 0x0, 0x0) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.154694505s ago: executing program 1 (id=632): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, 0x0) 7.154355725s ago: executing program 2 (id=633): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000060670000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) 7.153970285s ago: executing program 4 (id=634): socket(0x2, 0x3, 0x100000001) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 5.501989186s ago: executing program 4 (id=635): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000077dd00850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.501596426s ago: executing program 0 (id=636): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000d40)=[{}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDDELIO(r1, 0x8917, 0x20000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 5.501303176s ago: executing program 1 (id=637): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) close(r0) 5.501128617s ago: executing program 2 (id=638): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES64], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5.487158578s ago: executing program 4 (id=639): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r0, &(0x7f0000001a00)=""/177, 0xb1) 5.486660258s ago: executing program 1 (id=640): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) utime(&(0x7f0000000e00)='./file0\x00', 0x0) 3.738690788s ago: executing program 0 (id=641): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001740)='9', 0x1}, {&(0x7f0000000100)='\n', 0x1}], 0x2) 3.738075538s ago: executing program 1 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) listen(0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.737331148s ago: executing program 2 (id=643): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) 3.737090658s ago: executing program 4 (id=644): r0 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f029b2c136ef75afb83de448daaaf62170b0cb491a4309cfc1c72540d8102d2c55327c43ab82286ef1fdd", 0x55}], 0x1}, 0x200040c4) 1.917712954s ago: executing program 0 (id=645): syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() open(0x0, 0x143142, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 1.916042524s ago: executing program 1 (id=646): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 1.915243925s ago: executing program 2 (id=647): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x0, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 1.914845535s ago: executing program 4 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x338, 0x0, 0xd0, 0xffffffff, 0x178, 0x178, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @multicast1, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0, 0x0, 0x100000000000000}, 0x38) 1.34687ms ago: executing program 0 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 739.45µs ago: executing program 1 (id=650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{0x3}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0xe, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0xffffffff}, {0x2}, {}, {0xfffffffc}, {0x0, 0xe}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xffffffff}, {0x0, 0x55f1, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe10}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40000}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 264.56µs ago: executing program 2 (id=651): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r0, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) 0s ago: executing program 4 (id=652): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@oldalloc}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x464, &(0x7f00000004c0)="$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") kernel console output (not intermixed with test programs): 404 audit(1727358493.469:157): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 30.249976][ T489] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.272253][ T313] wacom 0003:056A:006B.0004: item fetching failed at offset 2/5 [ 30.275087][ T24] audit: type=1400 audit(1727358493.499:158): avc: denied { map_create } for pid=499 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 30.291207][ T313] wacom 0003:056A:006B.0004: parse failed [ 30.304267][ T313] wacom: probe of 0003:056A:006B.0004 failed with error -22 [ 30.315415][ T24] audit: type=1400 audit(1727358493.499:159): avc: denied { prog_load } for pid=499 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 30.334459][ T24] audit: type=1400 audit(1727358493.499:160): avc: denied { prog_load } for pid=499 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 30.365529][ T24] audit: type=1400 audit(1727358493.509:161): avc: denied { ioctl } for pid=477 comm="syz.2.44" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 30.401415][ T503] device pim6reg1 entered promiscuous mode [ 30.558414][ T348] usb 5-1: USB disconnect, device number 2 [ 31.067404][ T520] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 31.076275][ T520] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 31.167101][ T520] xt_hashlimit: size too large, truncated to 1048576 [ 31.448335][ T535] netlink: 56 bytes leftover after parsing attributes in process `syz.1.63'. [ 31.467238][ T536] netlink: 56 bytes leftover after parsing attributes in process `syz.1.63'. [ 31.577538][ T538] FAULT_INJECTION: forcing a failure. [ 31.577538][ T538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.590885][ T348] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.598389][ T538] CPU: 0 PID: 538 Comm: syz.1.65 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 31.602243][ T540] Zero length message leads to an empty skb [ 31.607828][ T538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 31.607833][ T538] Call Trace: [ 31.607864][ T538] dump_stack_lvl+0x1e2/0x24b [ 31.631222][ T538] ? bfq_pos_tree_add_move+0x43b/0x43b [ 31.636510][ T538] dump_stack+0x15/0x17 [ 31.640496][ T538] should_fail+0x3c6/0x510 [ 31.644839][ T538] should_fail_usercopy+0x1a/0x20 [ 31.649697][ T538] copy_page_from_iter+0x398/0x6e0 [ 31.654647][ T538] tun_get_user+0x755/0x38f0 [ 31.659078][ T538] ? _kstrtoull+0x3a0/0x4a0 [ 31.663426][ T538] ? tun_do_read+0x1f60/0x1f60 [ 31.668130][ T538] ? kstrtouint_from_user+0x20a/0x2a0 [ 31.673427][ T538] ? kstrtol_from_user+0x310/0x310 [ 31.678370][ T538] ? avc_policy_seqno+0x1b/0x70 [ 31.683053][ T538] ? selinux_file_permission+0x2bb/0x560 [ 31.688526][ T538] ? fsnotify_perm+0x67/0x4e0 [ 31.693120][ T538] tun_chr_write_iter+0x1a8/0x250 [ 31.697980][ T538] vfs_write+0xb4c/0xe70 [ 31.702073][ T538] ? queue_stack_map_push_elem+0x31c/0x550 [ 31.707835][ T538] ? kernel_write+0x3d0/0x3d0 [ 31.712346][ T538] ? __fdget_pos+0x209/0x3a0 [ 31.716762][ T538] ? ksys_write+0x77/0x2c0 [ 31.721006][ T538] ksys_write+0x199/0x2c0 [ 31.725184][ T538] ? bpf_trace_run1+0x210/0x210 [ 31.729869][ T538] ? __ia32_sys_read+0x90/0x90 [ 31.734461][ T538] ? __bpf_trace_sys_enter+0x62/0x70 [ 31.739581][ T538] __x64_sys_write+0x7b/0x90 [ 31.744013][ T538] do_syscall_64+0x34/0x70 [ 31.748265][ T538] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.754121][ T538] RIP: 0033:0x7fb931efea1f [ 31.758372][ T538] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 31.777946][ T538] RSP: 002b:00007fb930b79000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 31.786192][ T538] RAX: ffffffffffffffda RBX: 00007fb9320b7f80 RCX: 00007fb931efea1f [ 31.794000][ T538] RDX: 00000000000000d2 RSI: 0000000020003b40 RDI: 00000000000000c8 [ 31.801811][ T538] RBP: 00007fb930b79090 R08: 0000000000000000 R09: 0000000000000000 [ 31.809716][ T538] R10: 00000000000000d2 R11: 0000000000000293 R12: 0000000000000001 [ 31.817529][ T538] R13: 0000000000000000 R14: 00007fb9320b7f80 R15: 00007ffffac534c8 [ 31.837083][ T543] FAULT_INJECTION: forcing a failure. [ 31.837083][ T543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.850358][ T543] CPU: 0 PID: 543 Comm: syz.1.66 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 31.859783][ T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 31.869680][ T543] Call Trace: [ 31.872812][ T543] dump_stack_lvl+0x1e2/0x24b [ 31.877320][ T543] ? bfq_pos_tree_add_move+0x43b/0x43b [ 31.882631][ T543] ? kmem_cache_free+0xa9/0x1e0 [ 31.887342][ T543] ? kasan_set_track+0x5d/0x70 [ 31.892021][ T543] ? kasan_set_free_info+0x23/0x40 [ 31.896953][ T543] ? ____kasan_slab_free+0x121/0x160 [ 31.902192][ T543] dump_stack+0x15/0x17 [ 31.906166][ T543] should_fail+0x3c6/0x510 [ 31.910423][ T543] should_fail_usercopy+0x1a/0x20 [ 31.915291][ T543] _copy_from_user+0x20/0xd0 [ 31.919793][ T543] ___sys_recvmsg+0x150/0x690 [ 31.924303][ T543] ? __sys_recvmsg+0x270/0x270 [ 31.928907][ T543] ? __fsnotify_parent+0x4b9/0x6c0 [ 31.934034][ T543] ? __fdget+0x1bc/0x240 [ 31.938102][ T543] ? do_recvmmsg+0x172/0x920 [ 31.942631][ T543] do_recvmmsg+0x407/0x920 [ 31.946871][ T543] ? __sys_recvmmsg+0x270/0x270 [ 31.951558][ T543] ? mutex_lock+0xa5/0x110 [ 31.955815][ T543] ? timespec64_add_safe+0x220/0x220 [ 31.960939][ T543] ? bpf_trace_run2+0xf4/0x280 [ 31.965619][ T543] __x64_sys_recvmmsg+0x1b4/0x240 [ 31.970478][ T543] ? do_recvmmsg+0x920/0x920 [ 31.974912][ T543] ? syscall_enter_from_user_mode+0x144/0x1a0 [ 31.981348][ T543] do_syscall_64+0x34/0x70 [ 31.985587][ T543] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.991342][ T543] RIP: 0033:0x7fb931efff39 [ 31.995563][ T543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.016370][ T543] RSP: 002b:00007fb930b79038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 32.024549][ T543] RAX: ffffffffffffffda RBX: 00007fb9320b7f80 RCX: 00007fb931efff39 [ 32.032466][ T543] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 32.040306][ T543] RBP: 00007fb930b79090 R08: 0000000020003700 R09: 0000000000000000 [ 32.048448][ T543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.056311][ T543] R13: 0000000000000000 R14: 00007fb9320b7f80 R15: 00007ffffac534c8 [ 32.129311][ T549] process 'syz.3.67' launched './file0' with NULL argv: empty string added [ 32.190323][ T553] capability: warning: `syz.3.67' uses deprecated v2 capabilities in a way that may be insecure [ 32.208615][ T348] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 32.241108][ T348] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 32.317761][ T348] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 32.415515][ T348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.479671][ T528] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 32.490468][ T557] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.499040][ T557] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,noload,barrier=0x0000000000000005,errors=continue,data_err=abort,,errors=continue [ 32.911068][ T569] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.919384][ T528] EXT4-fs (loop4): 1 truncate cleaned up [ 32.924942][ T528] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 32.926251][ T569] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,noload,barrier=0x0000000000000005,errors=continue,data_err=abort,,errors=continue [ 32.935353][ T528] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.62: bg 0: block 7: invalid block bitmap [ 33.016216][ T528] udc-core: couldn't find an available UDC or it's busy [ 33.023202][ T528] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 33.702224][ T584] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 33.808590][ T348] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 33.816696][ T348] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input5 [ 33.833729][ T348] usb 5-1: USB disconnect, device number 3 [ 33.839402][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 34.626409][ T24] kauditd_printk_skb: 78 callbacks suppressed [ 34.626418][ T24] audit: type=1400 audit(1727358753.856:240): avc: denied { write } for pid=596 comm="syz.1.79" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.648912][ T597] kvm: emulating exchange as write [ 34.839286][ T24] audit: type=1400 audit(1727358754.046:241): avc: denied { create } for pid=610 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.859685][ T24] audit: type=1400 audit(1727358754.046:242): avc: denied { create } for pid=610 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.883979][ T24] audit: type=1404 audit(1727358754.096:243): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 34.899564][ T24] audit: type=1400 audit(1727358754.096:244): avc: denied { read write } for pid=283 comm="syz-executor" name="loop3" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 34.923970][ T24] audit: type=1400 audit(1727358754.116:245): avc: denied { create } for pid=612 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 34.943338][ T24] audit: type=1400 audit(1727358754.116:246): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 34.970506][ T24] audit: type=1400 audit(1727358754.116:247): avc: denied { map_create } for pid=614 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 34.991354][ T24] audit: type=1400 audit(1727358754.116:248): avc: denied { read write } for pid=614 comm="syz.2.85" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 35.027638][ T24] audit: type=1400 audit(1727358754.116:249): avc: denied { map_create } for pid=614 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 35.047265][ T293] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 35.053494][ T586] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.223301][ T655] FAULT_INJECTION: forcing a failure. [ 36.223301][ T655] name failslab, interval 1, probability 0, space 0, times 0 [ 36.238211][ T655] CPU: 0 PID: 655 Comm: syz.4.101 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 36.249885][ T655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 36.260437][ T655] Call Trace: [ 36.263592][ T655] dump_stack_lvl+0x1e2/0x24b [ 36.268431][ T655] ? bfq_pos_tree_add_move+0x43b/0x43b [ 36.273974][ T655] ? kmem_cache_free+0xa9/0x1e0 [ 36.278744][ T655] dump_stack+0x15/0x17 [ 36.283208][ T655] should_fail+0x3c6/0x510 [ 36.287874][ T655] ? sel_write_enforce+0x1ad/0x790 [ 36.293157][ T655] __should_failslab+0xa4/0xe0 [ 36.297753][ T655] should_failslab+0x9/0x20 [ 36.302094][ T655] __kmalloc_track_caller+0x5f/0x320 [ 36.307225][ T655] memdup_user_nul+0x29/0xf0 [ 36.311637][ T655] sel_write_enforce+0x1ad/0x790 [ 36.316404][ T655] ? fsnotify_perm+0x67/0x4e0 [ 36.321012][ T655] ? security_file_permission+0x7b/0xb0 [ 36.326522][ T655] ? sel_read_enforce+0x190/0x190 [ 36.331360][ T655] ? security_file_permission+0x86/0xb0 [ 36.336735][ T655] ? rw_verify_area+0x1c3/0x360 [ 36.341977][ T655] do_iter_write+0x379/0x640 [ 36.346404][ T655] vfs_writev+0x26e/0x510 [ 36.350544][ T655] ? do_writev+0x340/0x340 [ 36.354802][ T655] ? kmem_cache_free+0xa9/0x1e0 [ 36.359486][ T655] ? __kasan_check_write+0x14/0x20 [ 36.364543][ T655] ? mutex_lock+0xa5/0x110 [ 36.368793][ T655] ? mutex_trylock+0xa0/0xa0 [ 36.373301][ T655] ? __fdget_pos+0x2e7/0x3a0 [ 36.377729][ T655] ? do_writev+0x7b/0x340 [ 36.381901][ T655] do_writev+0x1aa/0x340 [ 36.385976][ T655] ? do_readv+0x460/0x460 [ 36.390153][ T655] ? debug_smp_processor_id+0x17/0x20 [ 36.395554][ T655] __x64_sys_writev+0x7d/0x90 [ 36.400151][ T655] do_syscall_64+0x34/0x70 [ 36.404417][ T655] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 36.410145][ T655] RIP: 0033:0x7f53479a6f39 [ 36.414391][ T655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.434103][ T655] RSP: 002b:00007f5346620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 36.442723][ T655] RAX: ffffffffffffffda RBX: 00007f5347b5ef80 RCX: 00007f53479a6f39 [ 36.451026][ T655] RDX: 0000000000000001 RSI: 0000000020002800 RDI: 0000000000000006 [ 36.458826][ T655] RBP: 00007f5346620090 R08: 0000000000000000 R09: 0000000000000000 [ 36.467079][ T655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.475104][ T655] R13: 0000000000000000 R14: 00007f5347b5ef80 R15: 00007ffdc9642428 [ 37.555380][ T691] device pim6reg1 entered promiscuous mode [ 38.087834][ T710] FAULT_INJECTION: forcing a failure. [ 38.087834][ T710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.100920][ T710] CPU: 1 PID: 710 Comm: syz.4.123 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 38.110437][ T710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 38.120998][ T710] Call Trace: [ 38.124130][ T710] dump_stack_lvl+0x1e2/0x24b [ 38.128955][ T710] ? bfq_pos_tree_add_move+0x43b/0x43b [ 38.134393][ T710] dump_stack+0x15/0x17 [ 38.138358][ T710] should_fail+0x3c6/0x510 [ 38.142788][ T710] should_fail_usercopy+0x1a/0x20 [ 38.147881][ T710] _copy_from_user+0x20/0xd0 [ 38.152296][ T710] iovec_from_user+0xc7/0x330 [ 38.156888][ T710] __import_iovec+0x6d/0x3b0 [ 38.161342][ T710] ? __kasan_slab_free+0x11/0x20 [ 38.166103][ T710] ? slab_free_freelist_hook+0xc0/0x190 [ 38.171480][ T710] ? kmem_cache_free+0xa9/0x1e0 [ 38.176163][ T710] ? putname+0xe7/0x140 [ 38.180147][ T710] ? do_sys_openat2+0x1fc/0x710 [ 38.184850][ T710] import_iovec+0xe5/0x120 [ 38.189133][ T710] ___sys_recvmsg+0x56b/0x690 [ 38.193788][ T710] ? __sys_recvmsg+0x270/0x270 [ 38.198377][ T710] ? __fsnotify_parent+0x4b9/0x6c0 [ 38.203761][ T710] ? __fdget+0x1bc/0x240 [ 38.207833][ T710] ? do_recvmmsg+0x172/0x920 [ 38.212389][ T710] do_recvmmsg+0x407/0x920 [ 38.216631][ T710] ? __sys_recvmmsg+0x270/0x270 [ 38.221316][ T710] ? mutex_lock+0xa5/0x110 [ 38.225570][ T710] ? fput_many+0x160/0x1b0 [ 38.229834][ T710] ? timespec64_add_safe+0x220/0x220 [ 38.235128][ T710] ? ksys_write+0x260/0x2c0 [ 38.239450][ T710] __x64_sys_recvmmsg+0x1b4/0x240 [ 38.244447][ T710] ? do_recvmmsg+0x920/0x920 [ 38.248859][ T710] ? debug_smp_processor_id+0x17/0x20 [ 38.254153][ T710] do_syscall_64+0x34/0x70 [ 38.258525][ T710] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.264233][ T710] RIP: 0033:0x7f53479a6f39 [ 38.268479][ T710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.287927][ T710] RSP: 002b:00007f5346620038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 38.296176][ T710] RAX: ffffffffffffffda RBX: 00007f5347b5ef80 RCX: 00007f53479a6f39 [ 38.303984][ T710] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 38.311807][ T710] RBP: 00007f5346620090 R08: 0000000020003700 R09: 0000000000000000 [ 38.319599][ T710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.327407][ T710] R13: 0000000000000000 R14: 00007f5347b5ef80 R15: 00007ffdc9642428 [ 38.644313][ T745] FAULT_INJECTION: forcing a failure. [ 38.644313][ T745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.657398][ T745] CPU: 1 PID: 745 Comm: syz.2.138 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 38.666947][ T745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 38.676839][ T745] Call Trace: [ 38.679963][ T745] dump_stack_lvl+0x1e2/0x24b [ 38.684479][ T745] ? bfq_pos_tree_add_move+0x43b/0x43b [ 38.689770][ T745] ? __kasan_check_write+0x14/0x20 [ 38.694716][ T745] dump_stack+0x15/0x17 [ 38.698706][ T745] should_fail+0x3c6/0x510 [ 38.702960][ T745] should_fail_usercopy+0x1a/0x20 [ 38.707941][ T745] _copy_to_iter+0x230/0xda0 [ 38.712373][ T745] ? __skb_try_recv_datagram+0x3a4/0x590 [ 38.717836][ T745] ? iov_iter_init+0x120/0x120 [ 38.722438][ T745] ? __check_object_size+0x2e6/0x3c0 [ 38.727559][ T745] simple_copy_to_iter+0x50/0x70 [ 38.732337][ T745] __skb_datagram_iter+0xcd/0x780 [ 38.737196][ T745] ? __skb_recv_datagram+0x2a0/0x2a0 [ 38.742312][ T745] ? skb_copy_datagram_iter+0x180/0x180 [ 38.747706][ T745] ? import_iovec+0xe5/0x120 [ 38.752127][ T745] ? do_recvmmsg+0x407/0x920 [ 38.756556][ T745] skb_copy_datagram_iter+0x46/0x180 [ 38.761667][ T745] ? netlink_recvmsg+0x2a1/0x11b0 [ 38.766612][ T745] netlink_recvmsg+0x2bb/0x11b0 [ 38.771405][ T745] ? selinux_socket_sendmsg+0x340/0x340 [ 38.776806][ T745] ? netlink_sendmsg+0xd00/0xd00 [ 38.781547][ T745] ? security_socket_recvmsg+0x87/0xb0 [ 38.786842][ T745] ? netlink_sendmsg+0xd00/0xd00 [ 38.791621][ T745] ____sys_recvmsg+0x286/0x530 [ 38.796280][ T745] ? __sys_recvmsg_sock+0x50/0x50 [ 38.801079][ T745] ? import_iovec+0xe5/0x120 [ 38.805499][ T745] ___sys_recvmsg+0x1ec/0x690 [ 38.810020][ T745] ? __sys_recvmsg+0x270/0x270 [ 38.814622][ T745] ? __fsnotify_parent+0x4b9/0x6c0 [ 38.819566][ T745] ? __fdget+0x1bc/0x240 [ 38.823637][ T745] ? do_recvmmsg+0x172/0x920 [ 38.828076][ T745] do_recvmmsg+0x407/0x920 [ 38.832321][ T745] ? __sys_recvmmsg+0x270/0x270 [ 38.837015][ T745] ? mutex_lock+0xa5/0x110 [ 38.841695][ T745] ? fput_many+0x160/0x1b0 [ 38.846064][ T745] ? timespec64_add_safe+0x220/0x220 [ 38.851524][ T745] ? ksys_write+0x260/0x2c0 [ 38.855876][ T745] __x64_sys_recvmmsg+0x1b4/0x240 [ 38.860830][ T745] ? do_recvmmsg+0x920/0x920 [ 38.865236][ T745] ? debug_smp_processor_id+0x17/0x20 [ 38.870446][ T745] do_syscall_64+0x34/0x70 [ 38.874706][ T745] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.880441][ T745] RIP: 0033:0x7f40a8f55f39 [ 38.884763][ T745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.905468][ T745] RSP: 002b:00007f40a7bcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 38.913704][ T745] RAX: ffffffffffffffda RBX: 00007f40a910df80 RCX: 00007f40a8f55f39 [ 38.921703][ T745] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 38.929805][ T745] RBP: 00007f40a7bcf090 R08: 0000000020003700 R09: 0000000000000000 [ 38.938086][ T745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.946347][ T745] R13: 0000000000000000 R14: 00007f40a910df80 R15: 00007ffc754578b8 [ 39.352144][ T790] FAULT_INJECTION: forcing a failure. [ 39.352144][ T790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.409850][ T790] CPU: 1 PID: 790 Comm: syz.4.155 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 39.419476][ T790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 39.429367][ T790] Call Trace: [ 39.432592][ T790] dump_stack_lvl+0x1e2/0x24b [ 39.437100][ T790] ? bfq_pos_tree_add_move+0x43b/0x43b [ 39.442479][ T790] dump_stack+0x15/0x17 [ 39.446470][ T790] should_fail+0x3c6/0x510 [ 39.450899][ T790] should_fail_usercopy+0x1a/0x20 [ 39.455773][ T790] copyout+0x20/0x90 [ 39.459470][ T790] _copy_to_iter+0x3a1/0xda0 [ 39.463987][ T790] ? __skb_try_recv_datagram+0x3a4/0x590 [ 39.469496][ T790] ? iov_iter_init+0x120/0x120 [ 39.474066][ T790] ? __check_object_size+0x2e6/0x3c0 [ 39.479172][ T790] simple_copy_to_iter+0x50/0x70 [ 39.483952][ T790] __skb_datagram_iter+0xcd/0x780 [ 39.488820][ T790] ? __skb_recv_datagram+0x2a0/0x2a0 [ 39.493955][ T790] ? skb_copy_datagram_iter+0x180/0x180 [ 39.499398][ T790] ? import_iovec+0xe5/0x120 [ 39.504278][ T790] ? do_recvmmsg+0x407/0x920 [ 39.508712][ T790] skb_copy_datagram_iter+0x46/0x180 [ 39.513820][ T790] ? netlink_recvmsg+0x2a1/0x11b0 [ 39.518678][ T790] netlink_recvmsg+0x2bb/0x11b0 [ 39.523365][ T790] ? selinux_socket_sendmsg+0x340/0x340 [ 39.528741][ T790] ? netlink_sendmsg+0xd00/0xd00 [ 39.533526][ T790] ? security_socket_recvmsg+0x87/0xb0 [ 39.538896][ T790] ? netlink_sendmsg+0xd00/0xd00 [ 39.543669][ T790] ____sys_recvmsg+0x286/0x530 [ 39.548274][ T790] ? __sys_recvmsg_sock+0x50/0x50 [ 39.553133][ T790] ? import_iovec+0xe5/0x120 [ 39.557557][ T790] ___sys_recvmsg+0x1ec/0x690 [ 39.562069][ T790] ? __sys_recvmsg+0x270/0x270 [ 39.566674][ T790] ? __fsnotify_parent+0x4b9/0x6c0 [ 39.571619][ T790] ? __fdget+0x1bc/0x240 [ 39.575692][ T790] ? do_recvmmsg+0x172/0x920 [ 39.580226][ T790] do_recvmmsg+0x407/0x920 [ 39.584472][ T790] ? __sys_recvmmsg+0x270/0x270 [ 39.589676][ T790] ? mutex_lock+0xa5/0x110 [ 39.593926][ T790] ? fput_many+0x160/0x1b0 [ 39.598175][ T790] ? timespec64_add_safe+0x220/0x220 [ 39.603484][ T790] ? ksys_write+0x260/0x2c0 [ 39.607918][ T790] __x64_sys_recvmmsg+0x1b4/0x240 [ 39.613188][ T790] ? do_recvmmsg+0x920/0x920 [ 39.617615][ T790] ? debug_smp_processor_id+0x17/0x20 [ 39.622845][ T790] do_syscall_64+0x34/0x70 [ 39.627072][ T790] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.632796][ T790] RIP: 0033:0x7f53479a6f39 [ 39.637123][ T790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.656580][ T790] RSP: 002b:00007f5346620038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 39.664827][ T790] RAX: ffffffffffffffda RBX: 00007f5347b5ef80 RCX: 00007f53479a6f39 [ 39.672786][ T790] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 39.680804][ T790] RBP: 00007f5346620090 R08: 0000000020003700 R09: 0000000000000000 [ 39.688801][ T790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.696596][ T790] R13: 0000000000000000 R14: 00007f5347b5ef80 R15: 00007ffdc9642428 [ 39.714975][ T24] kauditd_printk_skb: 673 callbacks suppressed [ 39.714990][ T24] audit: type=1400 audit(1727358758.936:923): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 39.758530][ T24] audit: type=1400 audit(1727358758.936:924): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 39.798546][ T24] audit: type=1400 audit(1727358758.936:925): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 39.837593][ T802] audit: audit_backlog=65 > audit_backlog_limit=64 [ 39.838530][ T24] audit: type=1400 audit(1727358758.936:926): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 39.866017][ T75] audit: audit_backlog=65 > audit_backlog_limit=64 [ 39.874714][ T75] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 39.874758][ T803] audit: audit_backlog=65 > audit_backlog_limit=64 [ 39.887439][ T802] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 39.907021][ T75] audit: backlog limit exceeded [ 40.142157][ T832] FAULT_INJECTION: forcing a failure. [ 40.142157][ T832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.175404][ T832] CPU: 0 PID: 832 Comm: syz.1.170 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 40.184943][ T832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 40.194836][ T832] Call Trace: [ 40.197964][ T832] dump_stack_lvl+0x1e2/0x24b [ 40.202485][ T832] ? bfq_pos_tree_add_move+0x43b/0x43b [ 40.207775][ T832] dump_stack+0x15/0x17 [ 40.211769][ T832] should_fail+0x3c6/0x510 [ 40.216100][ T832] should_fail_usercopy+0x1a/0x20 [ 40.220970][ T832] copyout+0x20/0x90 [ 40.224728][ T832] _copy_to_iter+0x3a1/0xda0 [ 40.229131][ T832] ? __skb_try_recv_datagram+0x3a4/0x590 [ 40.234593][ T832] ? iov_iter_init+0x120/0x120 [ 40.239195][ T832] ? __check_object_size+0x2e6/0x3c0 [ 40.244321][ T832] simple_copy_to_iter+0x50/0x70 [ 40.249086][ T832] __skb_datagram_iter+0xcd/0x780 [ 40.253950][ T832] ? __skb_recv_datagram+0x2a0/0x2a0 [ 40.259062][ T832] ? skb_copy_datagram_iter+0x180/0x180 [ 40.264445][ T832] ? import_iovec+0xe5/0x120 [ 40.268966][ T832] ? do_recvmmsg+0x407/0x920 [ 40.273389][ T832] skb_copy_datagram_iter+0x46/0x180 [ 40.278502][ T832] ? netlink_recvmsg+0x2a1/0x11b0 [ 40.283365][ T832] netlink_recvmsg+0x2bb/0x11b0 [ 40.288057][ T832] ? selinux_socket_sendmsg+0x340/0x340 [ 40.293432][ T832] ? netlink_sendmsg+0xd00/0xd00 [ 40.298210][ T832] ? security_socket_recvmsg+0x87/0xb0 [ 40.303588][ T832] ? netlink_sendmsg+0xd00/0xd00 [ 40.308374][ T832] ____sys_recvmsg+0x286/0x530 [ 40.312964][ T832] ? __sys_recvmsg_sock+0x50/0x50 [ 40.317833][ T832] ? import_iovec+0xe5/0x120 [ 40.322257][ T832] ___sys_recvmsg+0x1ec/0x690 [ 40.326935][ T832] ? __sys_recvmsg+0x270/0x270 [ 40.331539][ T832] ? __fsnotify_parent+0x4b9/0x6c0 [ 40.336482][ T832] ? __fdget+0x1bc/0x240 [ 40.340560][ T832] ? do_recvmmsg+0x172/0x920 [ 40.344984][ T832] do_recvmmsg+0x407/0x920 [ 40.349252][ T832] ? __sys_recvmmsg+0x270/0x270 [ 40.353939][ T832] ? mutex_lock+0xa5/0x110 [ 40.358186][ T832] ? fput_many+0x160/0x1b0 [ 40.362450][ T832] ? timespec64_add_safe+0x220/0x220 [ 40.367564][ T832] ? ksys_write+0x260/0x2c0 [ 40.371901][ T832] __x64_sys_recvmmsg+0x1b4/0x240 [ 40.376777][ T832] ? do_recvmmsg+0x920/0x920 [ 40.381185][ T832] ? debug_smp_processor_id+0x17/0x20 [ 40.386381][ T832] do_syscall_64+0x34/0x70 [ 40.390639][ T832] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.396364][ T832] RIP: 0033:0x7fb931efff39 [ 40.400616][ T832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.420232][ T832] RSP: 002b:00007fb930b79038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 40.428479][ T832] RAX: ffffffffffffffda RBX: 00007fb9320b7f80 RCX: 00007fb931efff39 [ 40.436293][ T832] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 40.444097][ T832] RBP: 00007fb930b79090 R08: 0000000020003700 R09: 0000000000000000 [ 40.451909][ T832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.459806][ T832] R13: 0000000000000000 R14: 00007fb9320b7f80 R15: 00007ffffac534c8 [ 41.310764][ T872] FAULT_INJECTION: forcing a failure. [ 41.310764][ T872] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 41.324016][ T872] CPU: 1 PID: 872 Comm: syz.3.184 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 41.333655][ T872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 41.343695][ T872] Call Trace: [ 41.346921][ T872] dump_stack_lvl+0x1e2/0x24b [ 41.351429][ T872] ? bfq_pos_tree_add_move+0x43b/0x43b [ 41.356823][ T872] dump_stack+0x15/0x17 [ 41.360983][ T872] should_fail+0x3c6/0x510 [ 41.365325][ T872] should_fail_alloc_page+0x52/0x60 [ 41.370351][ T872] __alloc_pages_nodemask+0x1b3/0xaf0 [ 41.375559][ T872] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 41.381086][ T872] ? stack_trace_save+0x1c0/0x1c0 [ 41.385927][ T872] ? unwind_get_return_address+0x4d/0x90 [ 41.391386][ T872] ? arch_stack_walk+0xf3/0x140 [ 41.396088][ T872] handle_pte_fault+0x1782/0x3e30 [ 41.400942][ T872] ? vmf_allows_speculation+0x6f0/0x6f0 [ 41.406321][ T872] ? __this_cpu_preempt_check+0x13/0x20 [ 41.411706][ T872] handle_mm_fault+0x11d6/0x1a10 [ 41.416480][ T872] ? can_reuse_spf_vma+0xe0/0xe0 [ 41.421247][ T872] ? stack_trace_save+0x1c0/0x1c0 [ 41.426221][ T872] ? down_read_trylock+0x179/0x1d0 [ 41.431164][ T872] ? __init_rwsem+0x1c0/0x1c0 [ 41.435682][ T872] ? vmacache_update+0xb7/0x120 [ 41.440396][ T872] ? find_vma+0x136/0x150 [ 41.444528][ T872] exc_page_fault+0x2a6/0x5b0 [ 41.449056][ T872] asm_exc_page_fault+0x1e/0x30 [ 41.454272][ T872] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 41.461035][ T872] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8 [ 41.480543][ T872] RSP: 0018:ffffc900011074c0 EFLAGS: 00050202 [ 41.486561][ T872] RAX: ffffffff82515401 RBX: 0000000000000197 RCX: 0000000000000157 [ 41.494757][ T872] RDX: 0000000000000197 RSI: ffff888120dc4421 RDI: 0000000020001000 [ 41.502617][ T872] RBP: ffffc900011074f0 R08: dffffc0000000000 R09: ffffed10241b88af [ 41.510457][ T872] R10: 0000000000000007 R11: dffffc0000000001 R12: 00007ffffffff000 [ 41.518270][ T872] R13: 0000000020001157 R14: ffff888120dc43e1 R15: 0000000020000fc0 [ 41.526172][ T872] ? copyout+0x11/0x90 [ 41.530073][ T872] ? copyout+0x78/0x90 [ 41.533975][ T872] _copy_to_iter+0x3a1/0xda0 [ 41.538495][ T872] ? __skb_try_recv_datagram+0x3a4/0x590 [ 41.543965][ T872] ? iov_iter_init+0x120/0x120 [ 41.548561][ T872] ? __check_object_size+0x2e6/0x3c0 [ 41.553766][ T872] simple_copy_to_iter+0x50/0x70 [ 41.558625][ T872] __skb_datagram_iter+0xcd/0x780 [ 41.563486][ T872] ? __skb_recv_datagram+0x2a0/0x2a0 [ 41.568605][ T872] ? skb_copy_datagram_iter+0x180/0x180 [ 41.573998][ T872] ? import_iovec+0xe5/0x120 [ 41.578416][ T872] ? do_recvmmsg+0x407/0x920 [ 41.582843][ T872] skb_copy_datagram_iter+0x46/0x180 [ 41.587966][ T872] ? netlink_recvmsg+0x2a1/0x11b0 [ 41.592930][ T872] netlink_recvmsg+0x2bb/0x11b0 [ 41.597866][ T872] ? selinux_socket_sendmsg+0x340/0x340 [ 41.603268][ T872] ? netlink_sendmsg+0xd00/0xd00 [ 41.608288][ T872] ? security_socket_recvmsg+0x87/0xb0 [ 41.613618][ T872] ? netlink_sendmsg+0xd00/0xd00 [ 41.618346][ T872] ____sys_recvmsg+0x286/0x530 [ 41.622949][ T872] ? __sys_recvmsg_sock+0x50/0x50 [ 41.627816][ T872] ? import_iovec+0xe5/0x120 [ 41.632235][ T872] ___sys_recvmsg+0x1ec/0x690 [ 41.636748][ T872] ? __sys_recvmsg+0x270/0x270 [ 41.641709][ T872] ? __fsnotify_parent+0x4b9/0x6c0 [ 41.646926][ T872] ? __fdget+0x1bc/0x240 [ 41.650995][ T872] ? do_recvmmsg+0x172/0x920 [ 41.655415][ T872] do_recvmmsg+0x407/0x920 [ 41.659754][ T872] ? __sys_recvmmsg+0x270/0x270 [ 41.664441][ T872] ? mutex_lock+0xa5/0x110 [ 41.668700][ T872] ? fput_many+0x160/0x1b0 [ 41.672958][ T872] ? timespec64_add_safe+0x220/0x220 [ 41.678170][ T872] ? ksys_write+0x260/0x2c0 [ 41.682587][ T872] __x64_sys_recvmmsg+0x1b4/0x240 [ 41.687456][ T872] ? do_recvmmsg+0x920/0x920 [ 41.691885][ T872] ? debug_smp_processor_id+0x17/0x20 [ 41.697079][ T872] do_syscall_64+0x34/0x70 [ 41.701346][ T872] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.707250][ T872] RIP: 0033:0x7f1c09a49f39 [ 41.711500][ T872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.732061][ T872] RSP: 002b:00007f1c086c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 41.740294][ T872] RAX: ffffffffffffffda RBX: 00007f1c09c01f80 RCX: 00007f1c09a49f39 [ 41.748125][ T872] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 41.756807][ T872] RBP: 00007f1c086c3090 R08: 0000000020003700 R09: 0000000000000000 [ 41.764833][ T872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.772718][ T872] R13: 0000000000000000 R14: 00007f1c09c01f80 R15: 00007ffdcb1f9788 [ 41.823679][ T884] FAULT_INJECTION: forcing a failure. [ 41.823679][ T884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.837292][ T884] CPU: 0 PID: 884 Comm: syz.3.190 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 41.847081][ T884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 41.857070][ T884] Call Trace: [ 41.860197][ T884] dump_stack_lvl+0x1e2/0x24b [ 41.864722][ T884] ? bfq_pos_tree_add_move+0x43b/0x43b [ 41.870093][ T884] dump_stack+0x15/0x17 [ 41.874125][ T884] should_fail+0x3c6/0x510 [ 41.878358][ T884] should_fail_usercopy+0x1a/0x20 [ 41.883343][ T884] _copy_to_user+0x20/0x90 [ 41.887571][ T884] simple_read_from_buffer+0xc7/0x150 [ 41.892865][ T884] proc_fail_nth_read+0x1a3/0x210 [ 41.897720][ T884] ? proc_fault_inject_write+0x390/0x390 [ 41.903332][ T884] ? security_file_permission+0x86/0xb0 [ 41.908720][ T884] ? rw_verify_area+0x1c3/0x360 [ 41.913385][ T884] ? proc_fault_inject_write+0x390/0x390 [ 41.918870][ T884] vfs_read+0x200/0xba0 [ 41.922854][ T884] ? kernel_read+0x70/0x70 [ 41.927098][ T884] ? __kasan_check_write+0x14/0x20 [ 41.932360][ T884] ? mutex_lock+0xa5/0x110 [ 41.936626][ T884] ? mutex_trylock+0xa0/0xa0 [ 41.941026][ T884] ? __fdget_pos+0x2e7/0x3a0 [ 41.945608][ T884] ? ksys_read+0x77/0x2c0 [ 41.949853][ T884] ksys_read+0x199/0x2c0 [ 41.954103][ T884] ? vfs_write+0xe70/0xe70 [ 41.958412][ T884] ? debug_smp_processor_id+0x17/0x20 [ 41.963653][ T884] __x64_sys_read+0x7b/0x90 [ 41.968338][ T884] do_syscall_64+0x34/0x70 [ 41.972619][ T884] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.978353][ T884] RIP: 0033:0x7f1c09a4897c [ 41.982568][ T884] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 42.002091][ T884] RSP: 002b:00007f1c086c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.010349][ T884] RAX: ffffffffffffffda RBX: 00007f1c09c01f80 RCX: 00007f1c09a4897c [ 42.018270][ T884] RDX: 000000000000000f RSI: 00007f1c086c30a0 RDI: 0000000000000003 [ 42.026084][ T884] RBP: 00007f1c086c3090 R08: 0000000000000000 R09: 0000000000000000 [ 42.033978][ T884] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000001 [ 42.041797][ T884] R13: 0000000000000000 R14: 00007f1c09c01f80 R15: 00007ffdcb1f9788 [ 42.773420][ T931] FAULT_INJECTION: forcing a failure. [ 42.773420][ T931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.807054][ T931] CPU: 0 PID: 931 Comm: syz.0.209 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 42.816607][ T931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 42.826829][ T931] Call Trace: [ 42.829963][ T931] dump_stack_lvl+0x1e2/0x24b [ 42.834477][ T931] ? bfq_pos_tree_add_move+0x43b/0x43b [ 42.839827][ T931] dump_stack+0x15/0x17 [ 42.843757][ T931] should_fail+0x3c6/0x510 [ 42.848011][ T931] should_fail_usercopy+0x1a/0x20 [ 42.852872][ T931] _copy_to_user+0x20/0x90 [ 42.857142][ T931] simple_read_from_buffer+0xc7/0x150 [ 42.862425][ T931] proc_fail_nth_read+0x1a3/0x210 [ 42.867383][ T931] ? proc_fault_inject_write+0x390/0x390 [ 42.872841][ T931] ? security_file_permission+0x86/0xb0 [ 42.878233][ T931] ? rw_verify_area+0x1c3/0x360 [ 42.882905][ T931] ? proc_fault_inject_write+0x390/0x390 [ 42.888379][ T931] vfs_read+0x200/0xba0 [ 42.892375][ T931] ? kernel_read+0x70/0x70 [ 42.896625][ T931] ? __kasan_check_write+0x14/0x20 [ 42.901567][ T931] ? mutex_lock+0xa5/0x110 [ 42.905823][ T931] ? mutex_trylock+0xa0/0xa0 [ 42.910242][ T931] ? __fdget_pos+0x2e7/0x3a0 [ 42.914672][ T931] ? ksys_read+0x77/0x2c0 [ 42.918842][ T931] ksys_read+0x199/0x2c0 [ 42.922914][ T931] ? vfs_write+0xe70/0xe70 [ 42.927163][ T931] ? debug_smp_processor_id+0x17/0x20 [ 42.932385][ T931] __x64_sys_read+0x7b/0x90 [ 42.936728][ T931] do_syscall_64+0x34/0x70 [ 42.940974][ T931] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.946796][ T931] RIP: 0033:0x7fb5e746a97c [ 42.951041][ T931] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 42.970483][ T931] RSP: 002b:00007fb5e60e5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.978720][ T931] RAX: ffffffffffffffda RBX: 00007fb5e7623f80 RCX: 00007fb5e746a97c [ 42.986532][ T931] RDX: 000000000000000f RSI: 00007fb5e60e50a0 RDI: 0000000000000003 [ 42.994342][ T931] RBP: 00007fb5e60e5090 R08: 0000000000000000 R09: 0000000000000000 [ 43.002152][ T931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.010081][ T931] R13: 0000000000000000 R14: 00007fb5e7623f80 R15: 00007fff47ef81a8 [ 44.718023][ T24] kauditd_printk_skb: 948 callbacks suppressed [ 44.718033][ T24] audit: type=1400 audit(1727358763.973:1872): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.748009][ T24] audit: type=1400 audit(1727358763.973:1873): avc: denied { prog_load } for pid=1016 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 44.767490][ T24] audit: type=1400 audit(1727358763.983:1874): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 44.767507][ T24] audit: type=1400 audit(1727358763.983:1875): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 44.813973][ T24] audit: type=1400 audit(1727358763.983:1876): avc: denied { prog_load } for pid=1018 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 44.832951][ T24] audit: type=1400 audit(1727358763.983:1877): avc: denied { prog_load } for pid=1018 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 44.832962][ T24] audit: type=1400 audit(1727358763.983:1878): avc: denied { prog_load } for pid=1018 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 44.832973][ T24] audit: type=1400 audit(1727358763.983:1879): avc: denied { map_create } for pid=1018 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 44.832984][ T24] audit: type=1400 audit(1727358763.983:1880): avc: denied { prog_load } for pid=1018 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 44.833000][ T24] audit: type=1400 audit(1727358763.994:1881): avc: denied { prog_load } for pid=1018 comm="syz.1.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 46.132030][ T1069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41216 sclass=netlink_route_socket pid=1069 comm=syz.1.262 [ 49.484653][ T24] kauditd_printk_skb: 663 callbacks suppressed [ 49.484663][ T24] audit: type=1400 audit(1727358768.980:2545): avc: denied { map_create } for pid=1223 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 49.509817][ T24] audit: type=1400 audit(1727358768.980:2546): avc: denied { prog_load } for pid=1223 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 49.529513][ T24] audit: type=1400 audit(1727358768.980:2547): avc: denied { read write } for pid=1223 comm="syz.2.322" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 49.529529][ T24] audit: type=1400 audit(1727358769.012:2548): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 49.529544][ T24] audit: type=1400 audit(1727358769.012:2549): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 49.529557][ T24] audit: type=1400 audit(1727358769.012:2550): avc: denied { map_create } for pid=1225 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 49.529570][ T24] audit: type=1400 audit(1727358769.012:2551): avc: denied { prog_load } for pid=1225 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 49.529584][ T24] audit: type=1400 audit(1727358769.012:2552): avc: denied { prog_load } for pid=1225 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 49.529597][ T24] audit: type=1400 audit(1727358769.012:2553): avc: denied { mounton } for pid=1225 comm="syz.1.323" path="/79/file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 49.529611][ T24] audit: type=1400 audit(1727358769.012:2554): avc: denied { read write } for pid=282 comm="syz-executor" name="loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 49.713622][ T1243] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 49.724670][ T1243] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038 (0x7fffffff) [ 50.284580][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 50.344150][ T5] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 50.684652][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.694174][ T5] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 50.696316][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.705838][ T5] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 50.715930][ T25] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 50.734063][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.742403][ T25] usb 1-1: config 0 descriptor?? [ 50.875229][ T5] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 50.884154][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.891953][ T5] usb 5-1: Product: syz [ 50.895937][ T5] usb 5-1: Manufacturer: syz [ 50.900427][ T5] usb 5-1: SerialNumber: syz [ 50.905646][ T5] usb 5-1: config 0 descriptor?? [ 50.922829][ T1256] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 50.929815][ T1256] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.133484][ T1256] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.140419][ T1256] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 51.189459][ T313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 51.189694][ T25] hid (null): bogus close delimiter [ 51.345208][ T1256] syz.4.334 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.356082][ T1256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.334'. [ 51.396747][ T25] usb 1-1: language id specifier not provided by device, defaulting to English [ 51.437166][ T5] Error reading MAC address [ 51.443206][ T5] usb 5-1: USB disconnect, device number 5 [ 51.532442][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.543274][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.627677][ T313] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 51.636606][ T313] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 51.644548][ T313] usb 3-1: Product: syz [ 51.649862][ T313] usb 3-1: config 0 descriptor?? [ 51.809833][ T25] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input6 [ 51.822898][ T25] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input7 [ 51.835535][ T25] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 52.016961][ T1254] incfs_lookup_dentry err:-14 [ 52.021657][ T1254] incfs: Can't find or create .incomplete dir in ./file0 [ 52.029112][ T1254] incfs: mount failed -14 [ 52.038161][ T304] usb 1-1: USB disconnect, device number 5 [ 52.293268][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.548245][ T1293] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.563722][ T1293] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.574589][ T1293] EXT4-fs (loop1): 1 truncate cleaned up [ 52.580036][ T1293] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 52.580236][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 52.799326][ T304] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 52.913650][ T25] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 52.922544][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.930485][ T25] usb 5-1: Product: syz [ 52.934503][ T25] usb 5-1: Manufacturer: syz [ 52.938901][ T25] usb 5-1: SerialNumber: syz [ 52.944551][ T25] usb 5-1: config 0 descriptor?? [ 53.046967][ T304] usb 1-1: Using ep0 maxpacket: 16 [ 53.180309][ T304] usb 1-1: config 0 has no interfaces? [ 53.351883][ T304] usb 1-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 53.360907][ T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.369043][ T304] usb 1-1: Product: syz [ 53.373192][ T304] usb 1-1: Manufacturer: syz [ 53.377816][ T304] usb 1-1: SerialNumber: syz [ 53.383068][ T304] usb 1-1: config 0 descriptor?? [ 53.415202][ T5] usb 5-1: USB disconnect, device number 6 [ 53.671413][ T304] usb 1-1: USB disconnect, device number 6 [ 53.828315][ T1308] xt_hashlimit: size too large, truncated to 1048576 [ 53.876120][ T313] usbhid 3-1:0.0: can't add hid device: -71 [ 53.876865][ T1309] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 53.881916][ T313] usbhid: probe of 3-1:0.0 failed with error -71 [ 53.929957][ T313] usb 3-1: USB disconnect, device number 4 [ 54.268731][ T24] kauditd_printk_skb: 163 callbacks suppressed [ 54.268741][ T24] audit: type=1400 audit(1727358773.999:2718): avc: denied { create } for pid=1323 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.295731][ T24] audit: type=1400 audit(1727358774.030:2719): avc: denied { connect } for pid=1323 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.352089][ T313] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 54.462131][ T24] audit: type=1400 audit(1727358774.114:2720): avc: denied { create } for pid=1325 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.526588][ T24] audit: type=1400 audit(1727358774.125:2721): avc: denied { write } for pid=1325 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.546377][ T24] audit: type=1400 audit(1727358774.125:2722): avc: denied { read write } for pid=1325 comm="syz.0.355" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.553389][ T1331] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 54.569881][ T24] audit: type=1400 audit(1727358774.125:2723): avc: denied { open } for pid=1325 comm="syz.0.355" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.581738][ T1331] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038 (0x7fffffff) [ 54.603514][ T24] audit: type=1400 audit(1727358774.125:2724): avc: denied { mounton } for pid=1325 comm="syz.0.355" path="/65/file0" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.603528][ T24] audit: type=1400 audit(1727358774.135:2725): avc: denied { mount } for pid=1325 comm="syz.0.355" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 54.702258][ T24] audit: type=1400 audit(1727358774.450:2726): avc: denied { create } for pid=1336 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.724915][ T313] usb 5-1: device descriptor read/64, error -71 [ 55.022810][ T24] audit: type=1400 audit(1727358774.618:2727): avc: denied { write } for pid=1336 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.312371][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.319265][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.326621][ T1345] device bridge_slave_0 entered promiscuous mode [ 55.335648][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.342497][ T1345] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.349783][ T1345] device bridge_slave_1 entered promiscuous mode [ 55.637641][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.644506][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.651858][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.658826][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.676088][ T313] usb 5-1: device descriptor read/64, error -71 [ 55.682689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.690444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.698962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.711100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.721215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.734364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.746923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.754971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.762506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.770457][ T1345] device veth0_vlan entered promiscuous mode [ 55.782001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.791595][ T1345] device veth1_macvtap entered promiscuous mode [ 55.802802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.812555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.871473][ T304] kernel write not supported for file /2/net/snmp (pid: 304 comm: kworker/1:3) [ 55.880339][ T20] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 55.933306][ T313] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 55.953079][ T110] device bridge_slave_1 left promiscuous mode [ 55.959062][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.966554][ T110] device bridge_slave_0 left promiscuous mode [ 55.972588][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.980158][ T110] device veth1_macvtap left promiscuous mode [ 55.986105][ T110] device veth0_vlan left promiscuous mode [ 56.133318][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 56.190536][ T313] usb 5-1: device descriptor read/64, error -71 [ 56.333309][ T304] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 56.447761][ T20] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 56.456659][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.464895][ T20] usb 3-1: Product: syz [ 56.468908][ T20] usb 3-1: Manufacturer: syz [ 56.473288][ T20] usb 3-1: SerialNumber: syz [ 56.478308][ T20] usb 3-1: config 0 descriptor?? [ 56.561863][ T313] usb 5-1: device descriptor read/64, error -71 [ 56.581148][ T304] usb 1-1: Using ep0 maxpacket: 8 [ 56.676277][ T313] usb usb5-port1: attempt power cycle [ 56.695344][ T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.706083][ T304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.716383][ T304] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 56.725642][ T304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.734264][ T304] usb 1-1: config 0 descriptor?? [ 56.907229][ T348] usb 3-1: USB disconnect, device number 5 [ 57.191590][ T304] hid-picolcd 0003:04D8:F002.0006: unknown main item tag 0x0 [ 57.257430][ T304] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 57.265137][ T304] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 57.276286][ T313] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 57.362132][ T313] usb 5-1: Using ep0 maxpacket: 16 [ 57.383938][ T1366] netlink: 'syz.0.365': attribute type 27 has an invalid length. [ 57.402028][ T1366] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.409011][ T1366] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.461211][ T1373] device veth0_vlan left promiscuous mode [ 57.467412][ T1373] device veth0_vlan entered promiscuous mode [ 57.473953][ T1373] device veth1_macvtap left promiscuous mode [ 57.480037][ T313] usb 5-1: config 0 has no interfaces? [ 57.480696][ T1373] device veth1_macvtap entered promiscuous mode [ 57.496014][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.503334][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.510928][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.519421][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.526300][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.534359][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.542734][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.551820][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.559134][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.567708][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.576053][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 57.584223][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.592668][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 57.600941][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.611035][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.618864][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.627138][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.635272][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.643310][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=9ea1, bcdDevice= 0.40 [ 57.643723][ T20] usb 1-1: USB disconnect, device number 7 [ 57.652621][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.666246][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.674507][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.682709][ T313] usb 5-1: Product: syz [ 57.687094][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.694951][ T313] usb 5-1: Manufacturer: syz [ 57.699775][ T313] usb 5-1: SerialNumber: syz [ 57.705239][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.713358][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.721120][ T422] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 57.728764][ T313] usb 5-1: config 0 descriptor?? [ 57.733960][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.741809][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.749964][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.758169][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.766657][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.775680][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.783705][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.791748][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.799025][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.806589][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.815025][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.823254][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.831241][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.969116][ T586] usb 5-1: USB disconnect, device number 9 [ 58.076592][ T422] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.086610][ T422] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.097290][ T1383] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(8963) [ 58.105007][ T1383] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 58.114618][ T1383] F2FS-fs (loop2): invalid crc value [ 58.121734][ T1383] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 58.142307][ T1383] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 58.149670][ T1383] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 58.157930][ T1393] netlink: 140 bytes leftover after parsing attributes in process `syz.0.372'. [ 58.171904][ T422] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 58.181320][ T422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 58.189247][ T422] usb 2-1: SerialNumber: syz [ 58.458256][ T422] usb 2-1: 0:2 : does not exist [ 58.474048][ T422] usb 2-1: USB disconnect, device number 3 [ 58.584471][ T1245] udevd[1245]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.919958][ T1403] erofs: (device loop0): mounted with root inode @ nid 36. [ 59.324779][ T293] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 59.352482][ T1414] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 59.363590][ T1414] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038 (0x7fffffff) [ 59.376660][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 59.376672][ T24] audit: type=1400 audit(1727358779.363:2749): avc: denied { write } for pid=75 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.409494][ T24] audit: type=1400 audit(1727358779.363:2750): avc: denied { remove_name } for pid=75 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.432244][ T24] audit: type=1400 audit(1727358779.363:2751): avc: denied { rename } for pid=75 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.458236][ T24] audit: type=1400 audit(1727358779.363:2752): avc: denied { add_name } for pid=75 comm="syslogd" name="messages.0" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.479578][ T24] audit: type=1400 audit(1727358779.363:2753): avc: denied { create } for pid=75 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.540875][ T24] audit: type=1400 audit(1727358779.531:2754): avc: denied { create } for pid=1402 comm="syz.0.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.561306][ T24] audit: type=1400 audit(1727358779.531:2755): avc: denied { ioctl } for pid=1402 comm="syz.0.375" path="socket:[18776]" dev="sockfs" ino=18776 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.600873][ T304] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 59.822225][ T293] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 59.865452][ T293] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 59.878565][ T293] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 59.888693][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.915235][ T304] usb 5-1: Using ep0 maxpacket: 16 [ 60.201286][ T1411] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 60.471776][ T1411] EXT4-fs (loop3): 1 truncate cleaned up [ 60.477396][ T1411] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 60.488906][ T24] audit: type=1400 audit(1727358780.528:2756): avc: denied { create } for pid=1410 comm="syz.3.378" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.497254][ T1411] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.378: bg 0: block 7: invalid block bitmap [ 60.509405][ T24] audit: type=1400 audit(1727358780.528:2757): avc: denied { read write } for pid=1410 comm="syz.3.378" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.521346][ T304] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 60.543601][ T24] audit: type=1400 audit(1727358780.528:2758): avc: denied { open } for pid=1410 comm="syz.3.378" path="/3/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.574790][ T304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.574800][ T304] usb 5-1: Product: syz [ 60.574809][ T304] usb 5-1: Manufacturer: syz [ 60.574819][ T304] usb 5-1: SerialNumber: syz [ 60.578362][ T304] usb 5-1: config 0 descriptor?? [ 60.707392][ T1441] binder: 1437:1441 ioctl 4018620d 0 returned -22 [ 60.753986][ T1441] EXT4-fs (loop0): Test dummy encryption mode enabled [ 60.761709][ T1441] EXT4-fs error (device loop0): ext4_fill_super:4955: inode #2: comm syz.0.383: casefold flag without casefold feature [ 60.774591][ T1441] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 60.787750][ T1441] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue [ 60.810748][ T1441] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 60.829470][ T293] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 60.836822][ T293] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input8 [ 60.857102][ T293] usb 4-1: USB disconnect, device number 3 [ 60.862783][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 61.072496][ T304] usb 5-1: USB disconnect, device number 10 [ 61.839268][ T293] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 62.572918][ T293] usb 4-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 62.591600][ T293] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 62.674902][ T293] usb 4-1: New USB device found, idVendor=abcd, idProduct=aafb, bcdDevice=11.81 [ 62.683956][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.693297][ T293] usb 4-1: config 0 descriptor?? [ 63.117414][ T1506] request_module fs-nfs succeeded, but still no fs? [ 63.144421][ T1507] tipc: Started in network mode [ 63.149361][ T1507] tipc: Own node identity 1, cluster identity 4711 [ 63.155910][ T1507] tipc: 32-bit node address hash set to 1 [ 63.794237][ T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 64.136711][ T1527] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 64.148090][ T1527] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038 (0x7fffffff) [ 64.218723][ T20] usb 2-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 64.219269][ T24] kauditd_printk_skb: 36 callbacks suppressed [ 64.219287][ T24] audit: type=1400 audit(1727358784.444:2795): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 64.229079][ T20] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 64.333879][ T20] usb 2-1: New USB device found, idVendor=abcd, idProduct=aafb, bcdDevice=11.81 [ 64.342995][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.380136][ T618] usb 4-1: USB disconnect, device number 4 [ 64.658980][ T20] usb 2-1: config 0 descriptor?? [ 64.751172][ T1542] netlink: 72 bytes leftover after parsing attributes in process `syz.0.411'. [ 65.312204][ T1540] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 65.328951][ T1540] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 65.342061][ T1540] F2FS-fs (loop3): invalid crc value [ 65.348925][ T1540] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.441086][ T1555] tipc: Started in network mode [ 65.445844][ T1555] tipc: Own node identity 1, cluster identity 4711 [ 65.452163][ T1555] tipc: 32-bit node address hash set to 1 [ 65.542944][ T1540] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 65.563783][ T1540] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 65.578463][ T24] audit: type=1400 audit(1727358785.872:2796): avc: denied { read append open } for pid=1539 comm="syz.3.410" path="/7/file0/cgroup.controllers" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.700712][ T1559] EXT4-fs (loop0): Ignoring removed bh option [ 65.721862][ T1559] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.414: inline data xattr refers to an external xattr inode [ 65.736595][ T1559] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.414: couldn't read orphan inode 12 (err -117) [ 65.748467][ T1559] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,bh,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue [ 65.793067][ T1550] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 65.801086][ T1550] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 65.810680][ T1550] F2FS-fs (loop4): invalid crc value [ 65.831444][ T1550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.863412][ T24] audit: type=1400 audit(1727358786.176:2797): avc: denied { write } for pid=1567 comm="syz.3.415" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.889820][ T1550] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 65.896774][ T1550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.041640][ T24] audit: type=1400 audit(1727358786.365:2798): avc: denied { create } for pid=1558 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.064050][ T1574] syz.0.414[1574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.064104][ T1574] syz.0.414[1574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.076288][ T24] audit: type=1400 audit(1727358786.386:2799): avc: denied { write } for pid=1558 comm="syz.0.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.217993][ T24] audit: type=1400 audit(1727358786.544:2800): avc: denied { execute } for pid=1567 comm="syz.3.415" path="/8/bus" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.374445][ T1586] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.385047][ T24] audit: type=1400 audit(1727358786.722:2801): avc: denied { mount } for pid=1585 comm="syz.3.420" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.570997][ T348] usb 2-1: USB disconnect, device number 4 [ 66.684591][ T24] audit: type=1400 audit(1727358787.027:2802): avc: denied { unmount } for pid=1345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.842689][ T1600] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 66.850476][ T1600] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 66.860868][ T1600] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.883396][ T1600] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 66.890370][ T1600] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 66.956627][ T348] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 67.040191][ T618] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 67.135675][ T24] audit: type=1400 audit(1727358787.446:2803): avc: denied { mounton } for pid=1599 comm="syz.0.423" path="/proc/241/task" dev="proc" ino=19095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 67.546010][ T618] usb 4-1: Using ep0 maxpacket: 16 [ 67.592667][ T348] usb 2-1: config 0 has an invalid interface number: 204 but max is 1 [ 67.600647][ T348] usb 2-1: config 0 has no interface number 1 [ 67.617048][ T24] audit: type=1400 audit(1727358788.013:2804): avc: denied { write } for pid=1624 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.651939][ T1629] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.670659][ T1629] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 67.685583][ T1629] EXT4-fs (loop0): 1 truncate cleaned up [ 67.691271][ T1629] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,block_validity,sysvgroups,,errors=continue [ 67.707276][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 67.793056][ T348] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 67.802021][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.809853][ T348] usb 2-1: Product: syz [ 67.813896][ T348] usb 2-1: Manufacturer: syz [ 67.818220][ T348] usb 2-1: SerialNumber: syz [ 67.823319][ T348] usb 2-1: config 0 descriptor?? [ 67.850192][ T618] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 67.859138][ T618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.911222][ T348] snd-usb-audio: probe of 2-1:0.204 failed with error -22 [ 67.918245][ T618] usb 4-1: Product: syz [ 67.923846][ T618] usb 4-1: Manufacturer: syz [ 67.929645][ T618] usb 4-1: SerialNumber: syz [ 67.934810][ T618] usb 4-1: config 0 descriptor?? [ 67.945248][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 68.211968][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.225253][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.235536][ T25] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 68.244590][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.253335][ T25] usb 5-1: config 0 descriptor?? [ 68.258866][ T348] usb 2-1: USB disconnect, device number 5 [ 68.508514][ T421] usb 4-1: USB disconnect, device number 5 [ 68.516874][ T293] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 68.688989][ T25] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 68.745289][ T313] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 68.754897][ T25] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found [ 68.762481][ T25] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found [ 68.880406][ T1620] netlink: 'syz.4.429': attribute type 27 has an invalid length. [ 68.894050][ T1620] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.901078][ T1620] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.907516][ T293] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.918752][ T293] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.928518][ T293] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 68.937590][ T293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.969454][ T1643] device veth0_vlan left promiscuous mode [ 68.976057][ T1643] device veth0_vlan entered promiscuous mode [ 68.982721][ T1643] device veth1_macvtap left promiscuous mode [ 68.992405][ T1643] device veth1_macvtap entered promiscuous mode [ 68.999348][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 68.999359][ T24] audit: type=1326 audit(1727358789.462:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f40a8f88025 code=0x7ffc0000 [ 69.006346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.028839][ T618] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 69.044338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.051617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.059642][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.066511][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.074508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.082800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.090912][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.097744][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.105056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.113162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 69.121169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.126685][ T313] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 69.129144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 69.140354][ T313] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 69.150991][ T25] usb 5-1: USB disconnect, device number 11 [ 69.167370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.168999][ T313] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 69.180112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.184460][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.194017][ T24] audit: type=1326 audit(1727358789.662:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a8f55f39 code=0x7ffc0000 [ 69.200777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.231573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.239543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.247578][ T1639] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 69.254749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.259775][ T24] audit: type=1326 audit(1727358789.662:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a8f55f39 code=0x7ffc0000 [ 69.262926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.291336][ T24] audit: type=1326 audit(1727358789.662:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f40a8f55f39 code=0x7ffc0000 [ 69.294616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.319699][ T24] audit: type=1326 audit(1727358789.662:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a8f55f39 code=0x7ffc0000 [ 69.325033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.347870][ T24] audit: type=1326 audit(1727358789.662:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a8f55f39 code=0x7ffc0000 [ 69.356004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.379272][ T24] audit: type=1326 audit(1727358789.662:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a8f55f39 code=0x7ffc0000 [ 69.386630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.409558][ T24] audit: type=1326 audit(1727358789.662:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a8f55f39 code=0x7ffc0000 [ 69.417604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.440398][ T24] audit: type=1326 audit(1727358789.662:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a8f55f39 code=0x7ffc0000 [ 69.448210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.472211][ T24] audit: type=1326 audit(1727358789.704:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.2.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40a8f55f39 code=0x7ffc0000 [ 69.478984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.509922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.518271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.526533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.528424][ T618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.534289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.546522][ T293] logitech-hidpp-device 0003:046D:C086.0008: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 69.568566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.570389][ T618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.588303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.595671][ T618] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 69.598333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.605870][ T618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.613377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.621181][ T618] usb 2-1: config 0 descriptor?? [ 69.629235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.643007][ T1639] EXT4-fs (loop0): 1 truncate cleaned up [ 69.649329][ T1639] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 69.658997][ T1639] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.433: bg 0: block 7: invalid block bitmap [ 69.745744][ T421] usb 3-1: USB disconnect, device number 6 [ 69.897983][ T313] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 69.898037][ T293] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 69.905797][ T313] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input9 [ 69.921448][ T1642] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 69.933086][ T313] usb 1-1: USB disconnect, device number 8 [ 69.938777][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 70.026368][ T1642] overlayfs: missing 'lowerdir' [ 70.164468][ T293] usb 5-1: Using ep0 maxpacket: 16 [ 70.251167][ T618] samsung 0003:0419:0600.0009: item fetching failed at offset 0/5 [ 70.259169][ T618] samsung 0003:0419:0600.0009: parse failed [ 70.265010][ T618] samsung: probe of 0003:0419:0600.0009 failed with error -22 [ 70.288427][ T293] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 70.299283][ T293] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.308788][ T293] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.473683][ T422] usb 2-1: USB disconnect, device number 6 [ 70.574537][ T293] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 70.583392][ T293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.591533][ T293] usb 5-1: Product: syz [ 70.595833][ T293] usb 5-1: Manufacturer: syz [ 70.600325][ T293] usb 5-1: SerialNumber: syz [ 70.758011][ T1667] F2FS-fs (loop0): invalid crc value [ 70.803318][ T1667] F2FS-fs (loop0): Found nat_bits in checkpoint [ 70.828404][ T1667] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 71.108600][ T1650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'. [ 71.136609][ T293] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 71.762743][ T284] attempt to access beyond end of device [ 71.762743][ T284] loop0: rw=524288, want=45072, limit=40427 [ 71.774633][ T284] attempt to access beyond end of device [ 71.774633][ T284] loop0: rw=0, want=45072, limit=40427 [ 71.883188][ T305] attempt to access beyond end of device [ 71.883188][ T305] loop0: rw=2049, want=41072, limit=40427 [ 72.093943][ T1713] EXT4-fs error (device loop2): ext4_fill_super:4955: inode #2: comm syz.2.455: casefold flag without casefold feature [ 72.098389][ T1717] device sit0 entered promiscuous mode [ 72.112619][ T1713] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 72.127923][ T1713] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 72.128348][ T1717] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 72.144484][ T1717] netlink: 1 bytes leftover after parsing attributes in process `syz.1.456'. [ 72.252496][ T1718] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.265415][ T1718] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.276800][ T293] usb 5-1: USB disconnect, device number 12 [ 72.323649][ T1718] device bridge_slave_0 entered promiscuous mode [ 72.334314][ T1718] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.343248][ T1718] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.351699][ T1718] device bridge_slave_1 entered promiscuous mode [ 72.362359][ T1728] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 72.391648][ T1728] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 72.411397][ T1728] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 72.431108][ T1728] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.452270][ T1718] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.459150][ T1718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.466268][ T1718] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.473134][ T1718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.485007][ T1728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 72.496255][ T1728] System zones: 0-1, 3-36 [ 72.510568][ T1728] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc=0x0000000000000000,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,usrjquota=./file1,max_dir_size_kb=0x0000000000005819,,errors=continue [ 72.536945][ T9] device bridge_slave_1 left promiscuous mode [ 72.542902][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.550644][ T9] device bridge_slave_0 left promiscuous mode [ 72.556699][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.564559][ T9] device veth1_macvtap left promiscuous mode [ 72.584540][ T9] device veth0_vlan left promiscuous mode [ 72.655934][ T1705] F2FS-fs (loop3): invalid crc value [ 72.679626][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.687213][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.696057][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.705108][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.714254][ T1705] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.715514][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.747857][ T1705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 72.769834][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.804272][ T1718] device veth0_vlan entered promiscuous mode [ 72.819269][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.827615][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.835219][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.852071][ T1718] device veth1_macvtap entered promiscuous mode [ 72.860052][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.872853][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.890466][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.900268][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.908880][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.928290][ T1757] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 72.935731][ T1757] FAT-fs (loop1): Filesystem has been set read-only [ 73.021138][ T1764] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 73.064409][ T1767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 73.073030][ T1767] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.079925][ T1767] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.094894][ T1767] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 73.102026][ T1767] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #13: comm syz.1.472: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 73.120343][ T1767] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.472: couldn't read orphan inode 13 (err -117) [ 73.132662][ T1767] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noblock_validity,min_batch_time=0x000000000000082f,grpquota,debug,debug,grpid,,errors=continue [ 73.223340][ T586] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 73.275888][ T1767] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 73.302023][ T1767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 73.321638][ T1767] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.403769][ T1789] fuse: Bad value for 'user_id' [ 73.411759][ T1789] netlink: 36 bytes leftover after parsing attributes in process `syz.4.479'. [ 73.489123][ T586] usb 4-1: Using ep0 maxpacket: 16 [ 73.537698][ T1806] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 73.587992][ T1809] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.487: inode #1: comm syz.2.487: iget: illegal inode # [ 73.603374][ T586] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 73.611533][ T1809] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.487: error while reading EA inode 1 err=-117 [ 73.616245][ T1806] attempt to access beyond end of device [ 73.616245][ T1806] loop1: rw=3, want=6952, limit=128 [ 73.634870][ T1809] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.487: inode #1: comm syz.2.487: iget: illegal inode # [ 73.635350][ T586] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 73.657333][ T1809] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.487: error while reading EA inode 1 err=-117 [ 73.657528][ T586] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 73.669934][ T1809] EXT4-fs (loop2): 1 orphan inode deleted [ 73.679150][ T1806] attempt to access beyond end of device [ 73.679150][ T1806] loop1: rw=2051, want=7894, limit=128 [ 73.684302][ T1809] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nolazytime,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,norecovery,,errors=continue [ 73.695376][ T586] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 73.733464][ T586] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 73.743612][ T586] usb 4-1: config 1 interface 0 has no altsetting 0 [ 73.750347][ T586] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 73.759280][ T586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.822719][ T586] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 73.836799][ T24] kauditd_printk_skb: 57 callbacks suppressed [ 73.836810][ T24] audit: type=1400 audit(1727358794.543:2897): avc: denied { unmount } for pid=1718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.962316][ T1827] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.969560][ T1827] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.970039][ T1824] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 73.986025][ T1827] device bridge_slave_0 entered promiscuous mode [ 73.993173][ T1827] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.997775][ T1824] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.000339][ T1827] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.015243][ T1824] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 74.021696][ T1827] device bridge_slave_1 entered promiscuous mode [ 74.051266][ T1824] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.051266][ T1824] [ 74.051295][ T586] scsi host1: usb-storage 4-1:1.0 [ 74.061132][ T1824] EXT4-fs (loop2): Total free blocks count 0 [ 74.071991][ T1824] EXT4-fs (loop2): Free/Dirty block details [ 74.077975][ T1824] EXT4-fs (loop2): free_blocks=2415919104 [ 74.083736][ T1824] EXT4-fs (loop2): dirty_blocks=16 [ 74.088992][ T1824] EXT4-fs (loop2): Block reservation details [ 74.094935][ T1824] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 74.115776][ T1838] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 74.127382][ T1827] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.134782][ T1827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.134857][ T1838] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.134857][ T1838] [ 74.141914][ T1827] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.155227][ T1840] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 74.158533][ T1827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.175556][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.182974][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.187492][ T1840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e12c, mo2=0002] [ 74.195318][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.200827][ T1840] System zones: 1-12 [ 74.210694][ T1840] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.217496][ T1840] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.497: bg 0: block 361: padding at end of block bitmap is not set [ 74.238795][ T1840] EXT4-fs (loop1): Remounting filesystem read-only [ 74.249033][ T1840] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5647: Corrupt filesystem [ 74.254557][ T348] usb 4-1: USB disconnect, device number 6 [ 74.257969][ T1840] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.497: invalid indirect mapped block 12 (level 1) [ 74.277087][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.278746][ T1840] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.497: invalid indirect mapped block 2 (level 2) [ 74.312776][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.333705][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.346039][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.354537][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.362772][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.372656][ T1827] device veth0_vlan entered promiscuous mode [ 74.384279][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.384545][ T1840] EXT4-fs (loop1): 1 truncate cleaned up [ 74.393835][ T1827] device veth1_macvtap entered promiscuous mode [ 74.405186][ T1840] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,data=writeback [ 74.431715][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.443453][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.572063][ T1857] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.609095][ T1868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 74.618036][ T1858] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 74.619861][ T1857] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.505: bg 0: block 64: padding at end of block bitmap is not set [ 74.646099][ T1868] device batadv_slave_0 entered promiscuous mode [ 74.653842][ T1857] Quota error (device loop4): write_blk: dquota write failed [ 74.654017][ T1858] ext4 filesystem being mounted at /110/bus supports timestamps until 2038 (0x7fffffff) [ 74.674208][ T9] device bridge_slave_1 left promiscuous mode [ 74.683238][ T1857] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 74.692873][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.693227][ T1857] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.505: Failed to acquire dquot type 0 [ 74.711091][ T9] device bridge_slave_0 left promiscuous mode [ 74.711246][ T1857] EXT4-fs (loop4): 1 truncate cleaned up [ 74.717312][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.722698][ T1857] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 74.739707][ T9] device veth1_macvtap left promiscuous mode [ 74.745700][ T9] device veth0_vlan left promiscuous mode [ 74.778173][ T24] audit: type=1400 audit(1727358795.530:2898): avc: denied { create } for pid=1856 comm="syz.4.505" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 74.813508][ T1857] Quota error (device loop4): write_blk: dquota write failed [ 74.825245][ T1857] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 74.835760][ T1857] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.505: Failed to acquire dquot type 0 [ 74.862070][ T24] audit: type=1400 audit(1727358795.624:2899): avc: denied { read write } for pid=1883 comm="syz.2.515" name="event0" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.888982][ T1345] F2FS-fs (loop3): sanity_check_inode: inode (ino=6, mode=41471) should not have inline_data, run fsck to fix [ 74.901558][ T24] audit: type=1400 audit(1727358795.624:2900): avc: denied { open } for pid=1883 comm="syz.2.515" path="/dev/input/event0" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.925484][ T1345] F2FS-fs (loop3): sanity_check_inode: inode (ino=6, mode=41471) should not have inline_data, run fsck to fix [ 75.090786][ T1898] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 75.104269][ T1898] EXT4-fs (loop1): group descriptors corrupted! [ 75.157223][ T9] tipc: Left network mode [ 75.347462][ T1910] syz.4.525[1910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.347515][ T1910] syz.4.525[1910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.434232][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.452670][ T1911] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.460056][ T1911] device bridge_slave_0 entered promiscuous mode [ 75.467632][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.475164][ T1911] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.482903][ T1911] device bridge_slave_1 entered promiscuous mode [ 75.517590][ T24] audit: type=1400 audit(1727358796.296:2901): avc: denied { ioctl } for pid=1925 comm="syz.4.531" path="/dev/input/event0" dev="devtmpfs" ino=163 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.537027][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.549710][ T1911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.556804][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.563575][ T1911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.579416][ T1923] loop2: p2 p3 p7 [ 75.597996][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.638167][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.647257][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.666365][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.668835][ T1269] udevd[1269]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 75.675662][ T1245] udevd[1245]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 75.688212][ T1274] udevd[1274]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 75.693898][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.725773][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.764872][ T24] audit: type=1400 audit(1727358796.559:2902): avc: denied { read } for pid=1943 comm="syz.4.539" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.809403][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.817540][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.826674][ T1911] device veth0_vlan entered promiscuous mode [ 75.842016][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.852824][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.866368][ T1911] device veth1_macvtap entered promiscuous mode [ 75.874920][ T9] device bridge_slave_1 left promiscuous mode [ 75.881597][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.889005][ T9] device bridge_slave_0 left promiscuous mode [ 75.896991][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.905567][ T9] device veth1_macvtap left promiscuous mode [ 75.913205][ T9] device veth0_vlan left promiscuous mode [ 75.977854][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.986319][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.994688][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.005868][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.014771][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.031639][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.042562][ T1737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.145639][ T1970] syz.1.548[1970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.145695][ T1970] syz.1.548[1970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.161437][ T1970] syz.1.548[1970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.191930][ T1970] syz.1.548[1970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.242526][ T1976] EXT4-fs (loop3): Ignoring removed nobh option [ 76.268861][ T1976] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,inode_readahead_blks=0x0000000000008000,,errors=continue [ 76.282185][ T1976] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038 (0x7fffffff) [ 76.380539][ T1911] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 1024 [ 76.417470][ T1911] EXT4-fs error (device loop3): ext4_empty_dir:3102: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 76.431184][ T1911] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 1024 [ 76.446315][ T1911] EXT4-fs error (device loop3): ext4_empty_dir:3102: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 76.459724][ T1911] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 1024 [ 76.475282][ T1911] EXT4-fs error (device loop3): ext4_empty_dir:3102: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 76.488522][ T1911] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 1024 [ 76.504252][ T1984] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 76.514409][ T1911] EXT4-fs error (device loop3): ext4_empty_dir:3102: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 76.527394][ T1984] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038 (0x7fffffff) [ 76.538144][ T1911] EXT4-fs error (device loop3): ext4_readdir:220: inode #11: comm syz-executor: path /4/mnt/lost+found: directory fails checksum at offset 1024 [ 76.576700][ T1911] EXT4-fs error (device loop3): ext4_empty_dir:3102: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 76.701228][ T1992] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 76.715886][ T1992] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 76.725147][ T1992] ext2 filesystem being mounted at /127/bus supports timestamps until 2038 (0x7fffffff) [ 77.039324][ T2003] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.049138][ T2003] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.056750][ T2003] device bridge_slave_0 entered promiscuous mode [ 77.063754][ T2003] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.064633][ T2000] cgroup: syz.0.559 (2000) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 77.086720][ T2003] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.087096][ T2003] device bridge_slave_1 entered promiscuous mode [ 77.107455][ T2013] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.119133][ T2000] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 77.130743][ T2000] tmpfs: Unknown parameter 'fd' [ 77.139125][ T2013] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #4: comm syz.4.564: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 77.173813][ T2013] EXT4-fs error (device loop4): ext4_quota_enable:6426: comm syz.4.564: Bad quota inode: 4, type: 1 [ 77.185044][ T2013] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.199877][ T2013] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 77.210338][ T2013] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 77.231132][ T2003] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.238023][ T2003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.245130][ T2003] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.251905][ T2003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.275614][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.290594][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.298906][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.313972][ T1737] device bridge_slave_1 left promiscuous mode [ 77.321470][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.329763][ T1737] device bridge_slave_0 left promiscuous mode [ 77.335714][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.341766][ T2033] overlayfs: failed to resolve './file2': -2 [ 77.364695][ T1737] device veth1_macvtap left promiscuous mode [ 77.370733][ T1737] device veth0_vlan left promiscuous mode [ 77.441686][ T2037] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro, [ 77.456173][ T2037] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038 (0x7fffffff) [ 77.505911][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.514147][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.521017][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.528655][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.536643][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.543695][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.550855][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.559060][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.569012][ T2051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 77.577699][ T2051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 77.588405][ T2051] device wireguard0 entered promiscuous mode [ 77.618888][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.639155][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.647365][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.654655][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.662630][ T2056] EXT4-fs (loop0): Ignoring removed bh option [ 77.668606][ T2056] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.669489][ T2003] device veth0_vlan entered promiscuous mode [ 77.690832][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.691314][ T2056] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue [ 77.700289][ T2003] device veth1_macvtap entered promiscuous mode [ 77.735450][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.743647][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.751595][ T618] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 77.759971][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.768251][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.789229][ T2054] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 77.985266][ T618] usb 2-1: Invalid ep0 maxpacket: 32 [ 78.128379][ T618] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 78.271575][ T1737] device bridge_slave_1 left promiscuous mode [ 78.277499][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.284757][ T1737] device bridge_slave_0 left promiscuous mode [ 78.291655][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.299136][ T1737] device veth1_macvtap left promiscuous mode [ 78.305008][ T1737] device veth0_vlan left promiscuous mode [ 78.375939][ T618] usb 2-1: Invalid ep0 maxpacket: 32 [ 78.381126][ T618] usb usb2-port1: attempt power cycle [ 78.776118][ T618] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 78.862357][ T618] usb 2-1: Invalid ep0 maxpacket: 32 [ 79.005595][ T618] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 79.090964][ T618] usb 2-1: Invalid ep0 maxpacket: 32 [ 79.096143][ T618] usb usb2-port1: unable to enumerate USB device [ 79.345634][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 79.345645][ T24] audit: type=1400 audit(1727358800.317:2932): avc: denied { read } for pid=2091 comm="syz.2.591" name="usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.375304][ T24] audit: type=1400 audit(1727358800.317:2933): avc: denied { open } for pid=2091 comm="syz.2.591" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.395579][ T2094] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 79.401879][ T24] audit: type=1400 audit(1727358800.338:2934): avc: denied { ioctl } for pid=2091 comm="syz.2.591" path="/dev/usbmon0" dev="devtmpfs" ino=134 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.410468][ T2094] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 79.441023][ T24] audit: type=1400 audit(1727358800.391:2935): avc: denied { map } for pid=2093 comm="syz.4.592" path="/130/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.446988][ T2094] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 16384 with max blocks 1 with error 28 [ 79.481474][ T2094] EXT4-fs (loop4): This should not happen!! Data will be lost [ 79.481474][ T2094] [ 79.491132][ T2094] EXT4-fs (loop4): Total free blocks count 0 [ 79.496919][ T2094] EXT4-fs (loop4): Free/Dirty block details [ 79.502719][ T2094] EXT4-fs (loop4): free_blocks=68451041280 [ 79.508288][ T2094] EXT4-fs (loop4): dirty_blocks=16 [ 79.513311][ T2094] EXT4-fs (loop4): Block reservation details [ 79.519221][ T2094] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 80.755678][ T24] audit: type=1400 audit(1727358801.797:2936): avc: denied { ioctl } for pid=2113 comm="syz.4.599" path="socket:[21881]" dev="sockfs" ino=21881 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.847081][ T2121] FAT-fs (loop2): Directory bread(block 64) failed [ 80.853471][ T2121] FAT-fs (loop2): Directory bread(block 65) failed [ 80.859909][ T2121] FAT-fs (loop2): Directory bread(block 66) failed [ 80.863388][ T2117] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 80.866601][ T2121] FAT-fs (loop2): Directory bread(block 67) failed [ 80.883558][ T2121] FAT-fs (loop2): Directory bread(block 68) failed [ 80.901146][ T2121] FAT-fs (loop2): Directory bread(block 69) failed [ 80.907684][ T2121] FAT-fs (loop2): Directory bread(block 70) failed [ 80.908140][ T2122] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold, [ 80.914353][ T2121] FAT-fs (loop2): Directory bread(block 71) failed [ 80.939870][ T2121] FAT-fs (loop2): Directory bread(block 72) failed [ 80.946235][ T2121] FAT-fs (loop2): Directory bread(block 73) failed [ 80.985281][ T2121] attempt to access beyond end of device [ 80.985281][ T2121] loop2: rw=0, want=1196, limit=256 [ 81.064820][ T2122] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.600: bg 0: block 234: padding at end of block bitmap is not set [ 81.078968][ T2122] EXT4-fs (loop1): Remounting filesystem read-only [ 83.744767][ T2158] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 83.775602][ T2158] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noquota,barrier=0x0000000000000000,jqfmt=vfsv1,block_validity,mblk_io_submit,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 83.801389][ T24] audit: type=1400 audit(1727358804.999:2937): avc: denied { mounton } for pid=2157 comm="syz.4.614" path="/135/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.843774][ T2158] loop_set_status: loop4 () has still dirty pages (nrpages=2) [ 83.862369][ T24] audit: type=1400 audit(1727358805.073:2938): avc: denied { unlink } for pid=286 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 83.884918][ T24] audit: type=1400 audit(1727358805.073:2939): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 84.864729][ T2173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 84.873640][ T2173] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038 (0x7fffffff) [ 84.893138][ T2169] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 84.903024][ T24] audit: type=1400 audit(1727358806.164:2940): avc: denied { setattr } for pid=2168 comm="syz.1.616" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.120812][ T2186] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.132350][ T2186] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 86.140368][ T2186] System zones: 1-12 [ 86.142338][ T24] audit: type=1400 audit(1727358807.466:2941): avc: denied { create } for pid=2183 comm="syz.1.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.164389][ T2186] EXT4-fs (loop2): 1 truncate cleaned up [ 86.170166][ T2186] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,grpid,max_batch_time=0x0000000000000003,debug,jqfmt=vfsv0,quota,,errors=continue [ 87.487911][ T24] audit: type=1326 audit(1727358808.873:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53479a6f39 code=0x7ffc0000 [ 87.496186][ T2202] 9pnet: Could not find request transport: f [ 87.530992][ T24] audit: type=1326 audit(1727358808.873:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53479a6f39 code=0x7ffc0000 [ 87.554526][ T24] audit: type=1326 audit(1727358808.904:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f53479a6f39 code=0x7ffc0000 [ 87.577948][ T24] audit: type=1326 audit(1727358808.904:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53479a6f39 code=0x7ffc0000 [ 87.601405][ T24] audit: type=1326 audit(1727358808.904:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53479a6f39 code=0x7ffc0000 [ 87.624542][ T24] audit: type=1326 audit(1727358808.904:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f53479a6f39 code=0x7ffc0000 [ 87.647764][ T24] audit: type=1400 audit(1727358808.904:2948): avc: denied { relabelfrom } for pid=2203 comm="syz.4.626" name="" dev="pipefs" ino=21978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 87.670258][ T24] audit: type=1326 audit(1727358808.904:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2203 comm="syz.4.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53479a6f39 code=0x7ffc0000 [ 90.460844][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 90.460856][ T24] audit: type=1400 audit(1727358811.991:2952): avc: denied { connect } for pid=2222 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.503110][ T24] audit: type=1400 audit(1727358812.043:2953): avc: denied { setopt } for pid=2222 comm="syz.2.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.125527][ T24] audit: type=1400 audit(1727358813.744:2954): avc: denied { append } for pid=2229 comm="syz.2.638" name="001" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 92.156800][ T24] audit: type=1326 audit(1727358813.775:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931efff39 code=0x7ffc0000 [ 92.192693][ T24] audit: type=1326 audit(1727358813.775:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931efff39 code=0x7ffc0000 [ 92.226384][ T24] audit: type=1326 audit(1727358813.786:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb931efff39 code=0x7ffc0000 [ 92.253646][ T24] audit: type=1326 audit(1727358813.786:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931efff39 code=0x7ffc0000 [ 92.277017][ T24] audit: type=1326 audit(1727358813.786:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931efff39 code=0x7ffc0000 [ 92.300551][ T24] audit: type=1326 audit(1727358813.786:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb931efff39 code=0x7ffc0000 [ 92.324039][ T24] audit: type=1326 audit(1727358813.786:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2239 comm="syz.1.640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb931efff39 code=0x7ffc0000 [ 93.877161][ T2247] SELinux: syz.0.641 (2247) set checkreqprot to 1. This is deprecated and will be rejected in a future kernel release. [ 95.756637][ T2260] loop0: p1 < > p4 [ 95.760823][ T2260] loop0: p4 size 8388608 extends beyond EOD, truncated [ 95.798949][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 95.798959][ T24] audit: type=1400 audit(1727358817.597:2993): avc: denied { map } for pid=2259 comm="syz.0.645" path="/35/bus" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.828465][ T24] audit: type=1400 audit(1727358817.597:2994): avc: denied { execute } for pid=2259 comm="syz.0.645" path="/35/bus" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.829571][ T93] loop0: p1 < > p4 [ 95.857293][ T93] loop0: p4 size 8388608 extends beyond EOD, truncated [ 95.914175][ T93] loop0: p1 < > p4 [ 95.918316][ T93] loop0: p4 size 8388608 extends beyond EOD, truncated [ 95.973469][ T1245] udevd[1245]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 95.976923][ T1269] udevd[1269]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 95.996261][ T1245] udevd[1245]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 95.996266][ T1269] udevd[1269]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=3 req=570 state=1 status=67 (errno 9: Bad file descriptor) [ 97.614802][ T24] audit: type=1400 audit(1727358819.497:2995): avc: denied { write } for pid=272 comm="syz-executor" path="pipe:[13786]" dev="pipefs" ino=13786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 97.650031][ T2278] EXT4-fs error (device loop4): ext4_get_journal_inode:5243: comm syz.4.652: inode #196608: comm syz.4.652: iget: illegal inode # [ 97.663913][ T2278] EXT4-fs (loop4): Remounting filesystem read-only [ 97.670551][ T2278] EXT4-fs (loop4): no journal found [ 97.675823][ T2278] EXT4-fs (loop4): can't get journal size [ 97.696884][ T2278] EXT4-fs: failed to create workqueue [ 97.702100][ T2278] EXT4-fs (loop4): mount failed [ 98.514145][ T1737] device bridge_slave_1 left promiscuous mode [ 98.520054][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.527533][ T1737] device bridge_slave_0 left promiscuous mode [ 98.533578][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.541007][ T1737] device veth1_macvtap left promiscuous mode [ 98.546872][ T1737] device veth0_vlan left promiscuous mode [ 99.059078][ T1737] tipc: Left network mode [ 99.858902][ T1737] device bridge_slave_1 left promiscuous mode [ 99.864821][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.872081][ T1737] device bridge_slave_0 left promiscuous mode [ 99.878035][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.885512][ T1737] device bridge_slave_1 left promiscuous mode [ 99.891419][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.898671][ T1737] device bridge_slave_0 left promiscuous mode [ 99.904955][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.912257][ T1737] device bridge_slave_1 left promiscuous mode [ 99.918263][ T1737] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.925438][ T1737] device bridge_slave_0 left promiscuous mode [ 99.931442][ T1737] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.939284][ T1737] device veth1_macvtap left promiscuous mode [ 99.945115][ T1737] device veth0_vlan left promiscuous mode [ 99.950738][ T1737] device veth1_macvtap left promiscuous mode [ 99.956670][ T1737] device veth0_vlan left promiscuous mode [ 99.962446][ T1737] device veth1_macvtap left promiscuous mode