last executing test programs: 4.390481461s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/4847], &(0x7f0000000100)='GPL\x00'}, 0x41) syz_emit_ethernet(0xdc, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0xfff2, 0x0, 0x0, 0x0, 0x1}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}]}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x895) memfd_create(&(0x7f0000000040)='rootmode', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400000002060000052406000005240000000d240f01000000000000000000090582020000000000090903"], 0x0) 2.45255357s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x5000) 2.438171982s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_da_write_pages_extent\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='ext4_da_write_pages_extent\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)={'c', ' *:* ', 'rw\x00'}, 0x9) 2.397787919s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r4, 0x1, 0x0, 0x0, {0x14}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) 2.311574712s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) 1.506292756s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x5000) 1.451417965s ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="47880000000000000000060000000800010000000000080003"], 0x24}}, 0x0) 1.449217436s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) 1.42106458s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r4, 0x1, 0x0, 0x0, {0x14}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) 1.415475751s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 1.405330622s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x3ec}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$igmp6(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x20, 0x4, 0x7fe2, 0x6, 0x0, 0xffffffffffffffff, 0x820, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r7, @ANYBLOB="00000080bc4585fe13980000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 1.402842352s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000001480)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2006) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x540e, 0x0) r4 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x14) 1.364682159s ago: executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/21, 0x15}}], 0x1, 0x12141, 0x0) 1.35786544s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) 1.35424159s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x5000) 996.521336ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) 960.981231ms ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0xffffffffffffffff) 945.842333ms ago: executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000080800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000002001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000000d0800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000002001"], 0x80}}, 0x0) 850.226608ms ago: executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 784.818458ms ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2040400) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000004c0), 0x4) 676.723195ms ago: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) 639.884811ms ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r2, &(0x7f00000004c0)={0xa0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) 488.974144ms ago: executing program 1: syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{}, [{}]}}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 422.135354ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r5) 421.853664ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r1}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 400.025527ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=@framed={{}, [@map_idx_val, @tail_call, @printk={@ld}, @initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = dup3(r2, r3, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r4]) 295.908354ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=@framed={{}, [@map_idx_val, @tail_call, @printk={@ld}, @initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = dup3(r2, r3, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r4]) 113.542522ms ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x90) r0 = io_uring_setup(0x4822, &(0x7f0000000180)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r1, 0x0) accept(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340), 0xffffff46) close(0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.269668ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_da_update_reserve_space\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[], 0x7) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. 2024/06/01 11:55:56 fuzzer started 2024/06/01 11:55:56 dialing manager at 10.128.0.163:30012 [ 22.610529][ T28] audit: type=1400 audit(1717242956.600:66): avc: denied { node_bind } for pid=285 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.630836][ T28] audit: type=1400 audit(1717242956.600:67): avc: denied { name_bind } for pid=285 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 22.687303][ T28] audit: type=1400 audit(1717242956.680:68): avc: denied { setattr } for pid=297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.695266][ T294] cgroup: Unknown subsys name 'net' [ 22.726239][ T294] cgroup: Unknown subsys name 'devices' [ 22.733971][ T28] audit: type=1400 audit(1717242956.680:69): avc: denied { mounton } for pid=294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.754264][ T298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.756587][ T28] audit: type=1400 audit(1717242956.680:70): avc: denied { mount } for pid=294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.787189][ T28] audit: type=1400 audit(1717242956.710:71): avc: denied { mounton } for pid=296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.812007][ T28] audit: type=1400 audit(1717242956.710:72): avc: denied { mount } for pid=296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.820755][ T295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.835187][ T28] audit: type=1400 audit(1717242956.710:73): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.863211][ T28] audit: type=1400 audit(1717242956.760:74): avc: denied { relabelto } for pid=298 comm="mkswap" name="swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.888513][ T28] audit: type=1400 audit(1717242956.760:75): avc: denied { write } for pid=298 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.939268][ T294] cgroup: Unknown subsys name 'hugetlb' [ 22.944724][ T294] cgroup: Unknown subsys name 'rlimit' 2024/06/01 11:55:57 starting 5 executor processes [ 23.462356][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.469311][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.476522][ T309] device bridge_slave_0 entered promiscuous mode [ 23.484620][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.491670][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.499049][ T309] device bridge_slave_1 entered promiscuous mode [ 23.608287][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.615139][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.622501][ T310] device bridge_slave_0 entered promiscuous mode [ 23.639478][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.646315][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.653743][ T310] device bridge_slave_1 entered promiscuous mode [ 23.694692][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.701593][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.709053][ T314] device bridge_slave_0 entered promiscuous mode [ 23.729165][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.736011][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.743373][ T314] device bridge_slave_1 entered promiscuous mode [ 23.764442][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.771360][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.778637][ T312] device bridge_slave_0 entered promiscuous mode [ 23.795567][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.802425][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.809775][ T312] device bridge_slave_1 entered promiscuous mode [ 23.836407][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.843283][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.850666][ T315] device bridge_slave_0 entered promiscuous mode [ 23.869117][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.875961][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.883330][ T315] device bridge_slave_1 entered promiscuous mode [ 23.988168][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.995473][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.002655][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.009448][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.042435][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.049309][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.056381][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.063203][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.093387][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.100247][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.107343][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.114123][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.164327][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.171183][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.178263][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.185055][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.196089][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.202967][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.210046][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.216815][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.231341][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.238410][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.245544][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.252979][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.260175][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.267759][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.274745][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.281784][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.288875][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.295884][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.303138][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.330878][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.338199][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.345464][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.353746][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.360612][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.389526][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.397349][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.405505][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.413583][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.420441][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.427710][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.435680][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.442535][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.449675][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.457747][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.464577][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.471925][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.480001][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.486818][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.494160][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.502270][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.509118][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.516265][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.524151][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.532151][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.539001][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.557097][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.565135][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.573311][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.581302][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.589165][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.597429][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.620550][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.628827][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.636549][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.644549][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.652624][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.660258][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.667564][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.675621][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.683641][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.690491][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.697679][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.705769][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.713835][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.720684][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.742021][ T314] device veth0_vlan entered promiscuous mode [ 24.748977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.757402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.765523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.773515][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.781432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.788688][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.803409][ T310] device veth0_vlan entered promiscuous mode [ 24.816157][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.824386][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.833270][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.841279][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.849173][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.856793][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.864660][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.872686][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.880499][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.888619][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.896633][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.903477][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.910619][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.918569][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.926531][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.933958][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.947014][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.954939][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.971002][ T309] device veth0_vlan entered promiscuous mode [ 24.981222][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.989538][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.997756][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.005644][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.013694][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.021343][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.034843][ T309] device veth1_macvtap entered promiscuous mode [ 25.043372][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.051529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.059522][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.067881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.075764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.083802][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.091746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.101691][ T310] device veth1_macvtap entered promiscuous mode [ 25.108719][ T314] device veth1_macvtap entered promiscuous mode [ 25.125685][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.134180][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.142233][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.150370][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.158869][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.166831][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.183540][ T312] device veth0_vlan entered promiscuous mode [ 25.189804][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.197930][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.205330][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.212694][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.220756][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.228991][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.237060][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.245163][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.253284][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.266913][ T315] device veth0_vlan entered promiscuous mode [ 25.280329][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.288175][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.295406][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.302920][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.311027][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.319190][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.327394][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.352707][ T312] device veth1_macvtap entered promiscuous mode [ 25.373735][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.390936][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.408352][ T315] device veth1_macvtap entered promiscuous mode [ 25.422200][ T342] overlayfs: statfs failed on './file0' [ 25.427309][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.435652][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.465866][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.473985][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.482247][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.494222][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.505030][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.521744][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.725123][ T384] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 25.749084][ T386] syz-executor.1[386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.749173][ T386] syz-executor.1[386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 25.762208][ T382] device veth1_macvtap left promiscuous mode [ 25.849508][ T396] device veth1_macvtap entered promiscuous mode [ 25.900582][ T396] syz-executor.2 (396) used greatest stack depth: 21672 bytes left [ 26.087379][ T424] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.268252][ T374] loop0: detected capacity change from 0 to 40427 [ 26.297428][ T374] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 26.308154][ T438] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 26.326190][ T438] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 26.335488][ T374] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 26.381494][ T447] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 26.408707][ T374] F2FS-fs (loop0): Found nat_bits in checkpoint [ 26.443324][ T453] loop4: detected capacity change from 0 to 512 [ 26.468447][ T453] EXT4-fs: journaled quota format not specified [ 26.506173][ T374] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 26.515570][ T460] loop2: detected capacity change from 0 to 512 [ 26.548903][ T374] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 26.555943][ T460] EXT4-fs: journaled quota format not specified [ 26.558001][ T374] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 26.632115][ T472] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 26.660392][ T474] syz-executor.2 (474) used greatest stack depth: 21520 bytes left [ 26.780526][ T488] SELinux: Context $ is not valid (left unmapped). [ 26.820498][ T493] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 26.838553][ T495] syz-executor.3[495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.838629][ T495] syz-executor.3[495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.853369][ T496] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 26.967610][ T518] loop1: detected capacity change from 0 to 128 [ 26.975418][ T516] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 26.988536][ T518] ======================================================= [ 26.988536][ T518] WARNING: The mand mount option has been deprecated and [ 26.988536][ T518] and is ignored by this kernel. Remove the mand [ 26.988536][ T518] option from the mount to silence this warning. [ 26.988536][ T518] ======================================================= [ 27.065016][ T518] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 27.122399][ T532] loop2: detected capacity change from 0 to 16 [ 27.148347][ T532] erofs: (device loop2): mounted with root inode @ nid 36. [ 27.156714][ T532] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 27.166095][ T532] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 27.179960][ T532] incfs_lookup_dentry err:-117 [ 27.184631][ T532] incfs: Can't find or create .index dir in ./file0 [ 27.196226][ T532] incfs: mount failed -117 [ 27.328806][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 27.383147][ T555] loop2: detected capacity change from 0 to 128 [ 27.418383][ T555] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 27.599829][ T560] loop3: detected capacity change from 0 to 128 [ 27.621781][ T562] overlayfs: invalid origin (0000) [ 27.719391][ T570] futex_wake_op: syz-executor.1 tries to shift op by 32; fix this program [ 27.728718][ T24] usb 1-1: string descriptor 0 read error: -22 [ 27.734919][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 27.744495][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.824410][ T580] SELinux: Context d is not valid (left unmapped). [ 27.833094][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 27.833107][ T28] audit: type=1400 audit(1717242961.820:140): avc: denied { create } for pid=579 comm="syz-executor.1" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="d" [ 27.866879][ T28] audit: type=1400 audit(1717242961.850:141): avc: denied { mounton } for pid=579 comm="syz-executor.1" path="/root/syzkaller-testdir3462330172/syzkaller.4jGmeb/35/bus" dev="sda1" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="d" [ 27.895312][ T28] audit: type=1400 audit(1717242961.850:142): avc: denied { write } for pid=579 comm="syz-executor.1" name="bus" dev="sda1" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="d" [ 27.918683][ T28] audit: type=1400 audit(1717242961.850:143): avc: denied { add_name } for pid=579 comm="syz-executor.1" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="d" [ 27.941047][ T28] audit: type=1400 audit(1717242961.850:144): avc: denied { setattr } for pid=579 comm="syz-executor.1" name="work" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="d" [ 27.966246][ T28] audit: type=1400 audit(1717242961.850:145): avc: denied { write open } for pid=579 comm="syz-executor.1" path=2F202864656C6574656429 dev="sda1" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="d" [ 28.001516][ T39] usb 1-1: USB disconnect, device number 2 [ 28.029256][ T591] overlayfs: invalid origin (0000) [ 28.037702][ T28] audit: type=1400 audit(1717242961.850:146): avc: denied { create } for pid=579 comm="syz-executor.1" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="d" [ 28.090214][ T28] audit: type=1400 audit(1717242961.860:147): avc: denied { remove_name } for pid=579 comm="syz-executor.1" name="#5" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="d" [ 28.114200][ T28] audit: type=1400 audit(1717242961.860:148): avc: denied { rename } for pid=579 comm="syz-executor.1" name="#5" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="d" [ 28.153481][ T28] audit: type=1400 audit(1717242961.860:149): avc: denied { unlink } for pid=579 comm="syz-executor.1" name="#5" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="d" [ 28.534372][ T613] overlayfs: invalid origin (0000) [ 28.771875][ T628] SELinux: Context @ is not valid (left unmapped). [ 29.106510][ T642] overlayfs: invalid origin (0000) [ 29.266238][ T651] loop0: detected capacity change from 0 to 128 [ 29.337498][ T333] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 29.377660][ T661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 29.379131][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 29.394715][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.401964][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.411122][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.418386][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.425536][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.433155][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 29.442653][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.450000][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 29.457283][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.464443][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.474740][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.482005][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.489479][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 29.496718][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.510159][ T666] loop4: detected capacity change from 0 to 2048 [ 29.517017][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.533754][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.541161][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.551561][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.552169][ T666] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz-executor.4: casefold flag without casefold feature [ 29.559578][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.572808][ T666] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 29.579607][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.591682][ T666] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 29.595755][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.603359][ T666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.610506][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.626616][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.634206][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.641259][ T666] incfs: Can't find or create .index dir in ./file0 [ 29.641731][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.648647][ T666] incfs: mount failed -22 [ 29.655725][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.667146][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.674348][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.675490][ T309] EXT4-fs (loop4): unmounting filesystem. [ 29.681906][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.694397][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.701639][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.708916][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.716265][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.723603][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.731349][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.738571][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.745741][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.753057][ T333] usb 3-1: string descriptor 0 read error: -22 [ 29.759091][ T333] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 29.768413][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.776456][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 29.957361][ T694] loop1: detected capacity change from 0 to 2048 [ 29.967666][ T692] Driver unsupported XDP return value 0 on prog (id 110) dev N/A, expect packet loss! [ 30.012229][ T701] tipc: Failed to remove unknown binding: 66,1,1/0:1082417048/1082417050 [ 30.020947][ T701] tipc: Failed to remove unknown binding: 66,1,1/0:1082417048/1082417050 [ 30.029529][ T699] tipc: Failed to remove unknown binding: 66,1,1/0:1082417048/1082417050 [ 30.037988][ T699] tipc: Failed to remove unknown binding: 66,1,1/0:1082417048/1082417050 [ 30.041507][ T39] usb 3-1: USB disconnect, device number 2 [ 30.053856][ T694] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz-executor.1: casefold flag without casefold feature [ 30.074361][ T694] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 30.088375][ T694] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 30.096696][ T694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.150797][ T694] incfs: Can't find or create .index dir in ./file0 [ 30.177092][ T694] incfs: mount failed -22 [ 30.213180][ T312] EXT4-fs (loop1): unmounting filesystem. [ 31.292042][ T734] device syzkaller0 entered promiscuous mode [ 31.566066][ T768] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 31.657658][ T778] device syzkaller0 entered promiscuous mode [ 31.747316][ T331] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 31.870488][ T796] loop1: detected capacity change from 0 to 2048 [ 31.912219][ T796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.937232][ T796] ext4 filesystem being mounted at /root/syzkaller-testdir3462330172/syzkaller.4jGmeb/55/file0 supports timestamps until 2038 (0x7fffffff) [ 31.975621][ T796] fs-verity: sha256 using implementation "sha256-avx2" [ 31.999000][ T796] fs-verity (loop1, inode 13): Error -14 reading file data [ 32.021543][ T796] fs-verity (loop1, inode 13): Error -14 building Merkle tree [ 32.044974][ T807] device syzkaller0 entered promiscuous mode [ 32.060423][ T312] EXT4-fs (loop1): unmounting filesystem. [ 32.187069][ T331] usb 4-1: string descriptor 0 read error: -22 [ 32.193109][ T331] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 32.228015][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.285464][ T823] loop1: detected capacity change from 0 to 2048 [ 32.318308][ T831] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 32.331678][ T823] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz-executor.1: casefold flag without casefold feature [ 32.347039][ T823] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 32.359644][ T823] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 32.367084][ T823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.754342][ T339] usb 4-1: USB disconnect, device number 2 [ 32.830239][ T823] incfs: Can't find or create .index dir in ./file0 [ 32.863911][ T823] incfs: mount failed -22 [ 32.979495][ T312] EXT4-fs (loop1): unmounting filesystem. [ 33.024082][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 33.024097][ T28] audit: type=1400 audit(1717242967.010:225): avc: denied { mount } for pid=847 comm="syz-executor.1" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.052631][ T28] audit: type=1400 audit(1717242967.020:226): avc: denied { mounton } for pid=847 comm="syz-executor.1" path="/root/syzkaller-testdir3462330172/syzkaller.4jGmeb/60/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 33.079374][ T28] audit: type=1400 audit(1717242967.050:227): avc: denied { unmount } for pid=312 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.110573][ T851] device syzkaller0 entered promiscuous mode [ 33.123030][ T28] audit: type=1400 audit(1717242967.110:228): avc: denied { nlmsg_read } for pid=853 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.132439][ T854] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 33.207367][ T28] audit: type=1400 audit(1717242967.190:229): avc: denied { create } for pid=857 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.230084][ T28] audit: type=1400 audit(1717242967.200:230): avc: denied { write } for pid=857 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.251336][ T28] audit: type=1400 audit(1717242967.200:231): avc: denied { read } for pid=857 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.370986][ T28] audit: type=1400 audit(1717242967.360:232): avc: denied { setattr } for pid=872 comm="syz-executor.0" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.450336][ T881] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 33.571002][ T894] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 33.577058][ T28] audit: type=1400 audit(1717242967.560:233): avc: denied { mounton } for pid=893 comm="syz-executor.0" path="/root/syzkaller-testdir1460156398/syzkaller.3h4n9x/46/file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 33.587108][ T894] EXT4-fs (loop0): unable to read superblock [ 33.636608][ T898] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 33.656312][ T28] audit: type=1400 audit(1717242967.640:234): avc: denied { name_bind } for pid=899 comm="syz-executor.2" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 33.732204][ T867] loop1: detected capacity change from 0 to 40427 [ 33.746994][ T867] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 33.769147][ T867] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 33.806826][ T867] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.846981][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 33.890682][ T930] loop2: detected capacity change from 0 to 1024 [ 33.895922][ T931] TCP: tcp_parse_options: Illegal window scaling value 189 > 14 received [ 33.908580][ T867] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 33.915572][ T867] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.915583][ T930] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 33.935398][ T931] syz-executor.3 (931) used greatest stack depth: 21488 bytes left [ 33.983359][ T867] syz-executor.1: attempt to access beyond end of device [ 33.983359][ T867] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 33.987808][ T938] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 33.998334][ T867] syz-executor.1: attempt to access beyond end of device [ 33.998334][ T867] loop1: rw=34817, sector=45096, nr_sectors = 16 limit=40427 [ 34.417129][ T947] syz-executor.0[947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.417242][ T947] syz-executor.0[947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.583270][ T963] TCP: tcp_parse_options: Illegal window scaling value 189 > 14 received [ 34.625401][ T969] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 34.637102][ T24] usb 5-1: string descriptor 0 read error: -22 [ 34.643583][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 34.652583][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.731489][ T976] loop2: detected capacity change from 0 to 16 [ 34.740157][ T976] erofs: (device loop2): mounted with root inode @ nid 36. [ 34.868095][ T992] loop3: detected capacity change from 0 to 512 [ 34.874743][ T992] ext4: Unknown parameter 'nouser_xattr' [ 35.036796][ T840] usb 5-1: USB disconnect, device number 2 [ 35.302593][ T1006] syz-executor.2[1006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.302674][ T1006] syz-executor.2[1006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.352637][ T1010] syz-executor.3[1010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.364366][ T1010] syz-executor.3[1010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.495355][ T1030] loop3: detected capacity change from 0 to 512 [ 35.520526][ T1030] ext4: Unknown parameter 'nouser_xattr' [ 35.897091][ T1054] syz-executor.4[1054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.897171][ T1054] syz-executor.4[1054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.007808][ T1057] syz-executor.4[1057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.019906][ T1057] syz-executor.4[1057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.634969][ T1075] loop3: detected capacity change from 0 to 8192 [ 36.670130][ T1075] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.686963][ T939] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.692894][ T970] Bluetooth: hci0: command 0x1003 tx timeout [ 36.755609][ T1037] loop2: detected capacity change from 0 to 131072 [ 36.803330][ T1037] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (2049, 24) [ 36.849570][ T1037] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 36.875365][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.883120][ T24] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 36.892582][ T1037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 36.897315][ T24] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 36.962187][ T840] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 36.982034][ T840] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 36.998569][ T840] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.068793][ T1037] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 37.077713][ T1096] loop3: detected capacity change from 0 to 1024 [ 37.079341][ T1037] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 37.094693][ T1096] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only [ 37.122664][ T1037] syz-executor.2 (pid 1037) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 37.148380][ T338] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.271098][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.286990][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 37.309225][ T24] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.408335][ T1108] loop0: detected capacity change from 0 to 8192 [ 37.426000][ T1108] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.551977][ T1122] loop0: detected capacity change from 0 to 1024 [ 37.573086][ T1122] EXT4-fs (loop0): required journal recovery suppressed and not mounted read-only [ 37.578381][ T1068] loop4: detected capacity change from 0 to 131072 [ 37.603093][ T1068] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (2049, 24) [ 37.611496][ T1068] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 37.638493][ T1068] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.719107][ T1068] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 37.726171][ T1068] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 37.767908][ T1138] device veth1 entered promiscuous mode [ 37.847199][ T1137] device veth1 left promiscuous mode [ 38.011652][ T1164] loop3: detected capacity change from 0 to 256 [ 38.052293][ T1166] loop2: detected capacity change from 0 to 2048 [ 38.067037][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 38.067075][ T28] audit: type=1400 audit(1717242972.050:258): avc: denied { getopt } for pid=1163 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.125163][ T1166] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 38.142200][ T28] audit: type=1400 audit(1717242972.130:259): avc: denied { mounton } for pid=1165 comm="syz-executor.2" path="/root/syzkaller-testdir935555387/syzkaller.EUjF05/82/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.174332][ T1168] device veth1 entered promiscuous mode [ 38.187479][ T315] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.190121][ T28] audit: type=1400 audit(1717242972.130:260): avc: denied { append } for pid=1165 comm="syz-executor.2" name="loop2" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.231188][ T28] audit: type=1400 audit(1717242972.180:261): avc: denied { remove_name } for pid=315 comm="syz-executor.2" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.231925][ T315] EXT4-fs error (device loop2): __ext4_iget:5046: inode #13: block 127754: comm syz-executor.2: invalid block [ 38.254735][ T28] audit: type=1400 audit(1717242972.180:262): avc: denied { rmdir } for pid=315 comm="syz-executor.2" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.285018][ T315] EXT4-fs error (device loop2): __ext4_iget:5046: inode #13: block 127754: comm syz-executor.2: invalid block [ 38.327450][ T1167] device veth1 left promiscuous mode [ 38.345272][ T1178] loop3: detected capacity change from 0 to 8192 [ 38.359041][ T1178] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.362741][ T315] EXT4-fs (loop2): unmounting filesystem. [ 38.395036][ T315] syz-executor.2 (315) used greatest stack depth: 21200 bytes left [ 38.416482][ T28] audit: type=1400 audit(1717242972.400:263): avc: denied { create } for pid=1184 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.451359][ T28] audit: type=1400 audit(1717242972.440:264): avc: denied { setopt } for pid=1184 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.620570][ T1202] loop3: detected capacity change from 0 to 2048 [ 38.630746][ T28] audit: type=1400 audit(1717242972.620:265): avc: denied { read } for pid=1205 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.691173][ T1202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.726775][ T1211] loop0: detected capacity change from 0 to 256 [ 38.730972][ T310] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.762665][ T310] EXT4-fs error (device loop3): __ext4_iget:5046: inode #13: block 127754: comm syz-executor.3: invalid block [ 38.781494][ T310] EXT4-fs error (device loop3): __ext4_iget:5046: inode #13: block 127754: comm syz-executor.3: invalid block [ 38.813960][ T1217] loop0: detected capacity change from 0 to 256 [ 38.864416][ T310] EXT4-fs (loop3): unmounting filesystem. [ 38.890289][ T1219] loop4: detected capacity change from 0 to 2048 [ 38.926807][ T1219] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.966275][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.986348][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.993998][ T1213] device bridge_slave_0 entered promiscuous mode [ 39.003941][ T309] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.021364][ T309] EXT4-fs error (device loop4): __ext4_iget:5046: inode #13: block 127754: comm syz-executor.4: invalid block [ 39.022541][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.037634][ T309] EXT4-fs error (device loop4): __ext4_iget:5046: inode #13: block 127754: comm syz-executor.4: invalid block [ 39.062887][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.070899][ T1213] device bridge_slave_1 entered promiscuous mode [ 39.096556][ T10] device bridge_slave_1 left promiscuous mode [ 39.112411][ T1235] loop0: detected capacity change from 0 to 2048 [ 39.118780][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.120384][ T309] EXT4-fs (loop4): unmounting filesystem. [ 39.131488][ T10] device bridge_slave_0 left promiscuous mode [ 39.152390][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.160546][ T10] device veth1_macvtap left promiscuous mode [ 39.166397][ T10] device veth0_vlan left promiscuous mode [ 39.178212][ T1235] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.206218][ T314] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.227401][ T314] EXT4-fs error (device loop0): __ext4_iget:5046: inode #13: block 127754: comm syz-executor.0: invalid block [ 39.239913][ T314] EXT4-fs error (device loop0): __ext4_iget:5046: inode #13: block 127754: comm syz-executor.0: invalid block [ 39.399113][ T314] EXT4-fs (loop0): unmounting filesystem. [ 39.442352][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.454486][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.473744][ T1240] device bridge_slave_0 entered promiscuous mode [ 39.492850][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.499845][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.506988][ T1213] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.513849][ T1213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.542849][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.549851][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.557793][ T1240] device bridge_slave_1 entered promiscuous mode [ 39.587910][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.594855][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.603446][ T1236] device bridge_slave_0 entered promiscuous mode [ 39.628505][ T28] audit: type=1400 audit(1717242973.620:266): avc: denied { read write } for pid=1252 comm="syz-executor.1" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.636044][ T1253] input: syz0 as /devices/virtual/input/input4 [ 39.656063][ T28] audit: type=1400 audit(1717242973.620:267): avc: denied { open } for pid=1252 comm="syz-executor.1" path="/dev/uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.683713][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.690716][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.698208][ T1236] device bridge_slave_1 entered promiscuous mode [ 39.743229][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.750604][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.758014][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.780901][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.789116][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.797303][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.804149][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.827622][ T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.835831][ T840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.843894][ T840] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.850749][ T840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.883479][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.890444][ T1249] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.904297][ T1249] device bridge_slave_0 entered promiscuous mode [ 39.934389][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.947026][ T1249] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.954356][ T1249] device bridge_slave_1 entered promiscuous mode [ 39.984689][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.993024][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.000890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.009578][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.072740][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.081026][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.092117][ T1213] device veth0_vlan entered promiscuous mode [ 40.110670][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.118536][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.126616][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.134132][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.205162][ T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.213649][ T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.222035][ T1213] device veth1_macvtap entered promiscuous mode [ 40.266429][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.273459][ T1262] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.281103][ T1262] device bridge_slave_0 entered promiscuous mode [ 40.288700][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.295536][ T1262] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.303152][ T1262] device bridge_slave_1 entered promiscuous mode [ 40.342557][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.350441][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.358641][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.366806][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.374696][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.397029][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.405149][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.413361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.421523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.429599][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.436433][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.443688][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.451848][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.459938][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.466759][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.487195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.524798][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.536748][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.544218][ T1268] bpf_get_probe_write_proto: 2 callbacks suppressed [ 40.544233][ T1268] syz-executor.2[1268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.557068][ T1268] syz-executor.2[1268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.597200][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.617553][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.625283][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.633854][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.641847][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.648690][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.655847][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.664024][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.672218][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.679063][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.687324][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.723844][ T1270] loop2: detected capacity change from 0 to 16 [ 40.730521][ T1270] erofs: Unknown parameter 'ÿÿÿÿ)|' [ 40.759789][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.770466][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.778889][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.786653][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.812645][ T1236] device veth0_vlan entered promiscuous mode [ 40.824189][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.831614][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.838902][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.847971][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.855890][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.862996][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.870291][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.878420][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.886348][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.893198][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.900338][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.908076][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.915852][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.923346][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.930764][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.950704][ T1240] device veth0_vlan entered promiscuous mode [ 40.957246][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.965121][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.973044][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.982093][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.989975][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.997655][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.005966][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.013258][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.028572][ T10] device bridge_slave_1 left promiscuous mode [ 41.034490][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.041865][ T10] device bridge_slave_0 left promiscuous mode [ 41.047914][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.055610][ T10] device bridge_slave_1 left promiscuous mode [ 41.061774][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.069564][ T10] device bridge_slave_0 left promiscuous mode [ 41.075506][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.086478][ T10] device bridge_slave_1 left promiscuous mode [ 41.092547][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.099883][ T10] device bridge_slave_0 left promiscuous mode [ 41.105801][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.114025][ T10] device veth1_macvtap left promiscuous mode [ 41.120358][ T10] device veth0_vlan left promiscuous mode [ 41.126431][ T10] device veth1_macvtap left promiscuous mode [ 41.132298][ T10] device veth0_vlan left promiscuous mode [ 41.138171][ T10] device veth1_macvtap left promiscuous mode [ 41.144008][ T10] device veth0_vlan left promiscuous mode [ 41.415243][ T1240] device veth1_macvtap entered promiscuous mode [ 41.427179][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.435143][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.443472][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.451738][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.460120][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.468075][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.475952][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.484675][ T1236] device veth1_macvtap entered promiscuous mode [ 41.504301][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.511923][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.520050][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.526999][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 41.528250][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.543497][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.555944][ T1249] device veth0_vlan entered promiscuous mode [ 41.571221][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.579064][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.586833][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.594930][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.603139][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.611390][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.619467][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.626617][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.643863][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.656234][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.661876][ T1287] syz-executor.4[1287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.663557][ T1287] syz-executor.4[1287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.663605][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.695646][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.703835][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.710733][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.718536][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.726763][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.734899][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.741763][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.763361][ T1249] device veth1_macvtap entered promiscuous mode [ 41.788490][ T1262] device veth0_vlan entered promiscuous mode [ 41.799412][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.807740][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.815691][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.824707][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.832976][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.843069][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.856510][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.864728][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.872748][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.885835][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.887407][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.894548][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.904563][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.912397][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.921764][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.930750][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.948639][ T24] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 41.949491][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.957671][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.975891][ T24] usb 3-1: config 0 descriptor?? [ 41.983515][ T840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.991754][ T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.003126][ T840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.012086][ T840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.068977][ T1262] device veth1_macvtap entered promiscuous mode [ 42.077763][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.086101][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.094139][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.111845][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.120378][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.166529][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.269311][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.509326][ T1322] syz-executor.1[1322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.509437][ T1322] syz-executor.1[1322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.519442][ T24] acrux 0003:1A34:0802.0005: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 42.549472][ T24] acrux 0003:1A34:0802.0005: no inputs found [ 42.555792][ T24] acrux 0003:1A34:0802.0005: Failed to enable force feedback support, error: -19 [ 42.641284][ T1334] loop1: detected capacity change from 0 to 256 [ 42.643670][ T1332] input: syz0 as /devices/virtual/input/input5 [ 42.661605][ T1336] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 42.786032][ T334] usb 3-1: USB disconnect, device number 3 [ 43.549300][ T10] device bridge_slave_1 left promiscuous mode [ 43.555259][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.562664][ T10] device bridge_slave_0 left promiscuous mode [ 43.568824][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.576768][ T10] device veth1_macvtap left promiscuous mode [ 43.600848][ T10] device veth0_vlan left promiscuous mode [ 43.743090][ T1423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 44.247023][ T334] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.551059][ T1480] syz-executor.0[1480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.551147][ T1480] syz-executor.0[1480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.586525][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 44.586541][ T28] audit: type=1400 audit(1717242978.570:279): avc: denied { create } for pid=1479 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 44.649797][ T1492] syz-executor.3[1492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.649857][ T1492] syz-executor.3[1492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.667017][ T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.689777][ T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.699534][ T334] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.712284][ T334] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 44.721230][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.729620][ T334] usb 5-1: config 0 descriptor?? [ 45.248865][ T334] acrux 0003:1A34:0802.0006: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 45.259917][ T334] acrux 0003:1A34:0802.0006: no inputs found [ 45.265735][ T334] acrux 0003:1A34:0802.0006: Failed to enable force feedback support, error: -19 [ 45.604235][ T1524] syz-executor.2[1524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.604389][ T1524] syz-executor.2[1524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.673721][ T334] usb 5-1: USB disconnect, device number 3 [ 45.788172][ T1538] loop0: detected capacity change from 0 to 16 [ 45.809421][ T1538] erofs: (device loop0): erofs_read_superblock: dirblkbits 255 isn't supported [ 46.891237][ T1553] overlayfs: missing 'lowerdir' [ 46.897822][ T28] audit: type=1400 audit(1717242980.890:280): avc: denied { ioctl } for pid=1537 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 46.948111][ T1558] syz-executor.3[1558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.950560][ T1558] syz-executor.3[1558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.962357][ T28] audit: type=1400 audit(1717242980.940:281): avc: denied { mount } for pid=1556 comm="syz-executor.0" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 47.000365][ T28] audit: type=1400 audit(1717242980.970:282): avc: denied { unmount } for pid=1249 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 47.116458][ T1575] overlayfs: missing 'lowerdir' [ 47.213718][ T28] audit: type=1400 audit(1717242981.200:283): avc: denied { create } for pid=1578 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.586864][ T1583] loop2: detected capacity change from 0 to 16 [ 47.603430][ T1583] erofs: (device loop2): erofs_read_superblock: dirblkbits 255 isn't supported [ 47.641859][ T1587] overlayfs: missing 'lowerdir' [ 47.701610][ T338] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.724555][ T1591] SELinux: Context system_u:object_r:urandom_device_t:s0 is not valid (left unmapped). [ 47.737096][ T28] audit: type=1400 audit(1717242981.730:284): avc: denied { relabelto } for pid=1592 comm="syz-executor.4" name="file0" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:urandom_device_t:s0" [ 47.768058][ T28] audit: type=1400 audit(1717242981.760:285): avc: denied { unlink } for pid=1240 comm="syz-executor.4" name="file0" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:urandom_device_t:s0" [ 48.259363][ T28] audit: type=1400 audit(1717242982.240:286): avc: denied { write } for pid=1609 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.878261][ T1630] syz-executor.3[1630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.878339][ T1630] syz-executor.3[1630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.223381][ T28] audit: type=1326 audit(1717242984.210:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5147cee9 code=0x7ffc0000 [ 50.291801][ T28] audit: type=1326 audit(1717242984.250:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5147cee9 code=0x7ffc0000 [ 50.315983][ T28] audit: type=1326 audit(1717242984.250:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee5147cee9 code=0x7ffc0000 [ 50.339904][ T28] audit: type=1326 audit(1717242984.250:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5147cee9 code=0x7ffc0000 [ 50.365403][ T28] audit: type=1326 audit(1717242984.250:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee5147cee9 code=0x7ffc0000 [ 51.152789][ T28] audit: type=1326 audit(1717242984.280:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5147cee9 code=0x7ffc0000 [ 51.180753][ T28] audit: type=1326 audit(1717242984.280:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fee5147cee9 code=0x7ffc0000 [ 51.180786][ T28] audit: type=1326 audit(1717242984.280:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5147cee9 code=0x7ffc0000 [ 51.206631][ T1672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=273 sclass=netlink_route_socket pid=1672 comm=syz-executor.0 [ 51.265952][ T1665] syz-executor.3 (1665) used greatest stack depth: 20936 bytes left [ 51.627008][ T333] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 51.656280][ T1707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=273 sclass=netlink_route_socket pid=1707 comm=syz-executor.2 [ 51.694396][ T1711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=273 sclass=netlink_route_socket pid=1711 comm=syz-executor.4 [ 51.717401][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 51.778758][ T1727] syz-executor.4[1727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.778839][ T1727] syz-executor.4[1727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.927559][ T28] audit: type=1326 audit(1717242985.920:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1736 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503567cee9 code=0x7fc00000 [ 52.017059][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.028218][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.038204][ T333] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.057151][ T333] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 52.071608][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.099003][ T333] usb 4-1: config 0 descriptor?? [ 52.142635][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 52.151238][ T28] audit: type=1400 audit(1717242986.140:296): avc: denied { map } for pid=1747 comm="syz-executor.4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.247905][ T1760] syz-executor.4[1760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.247990][ T1760] syz-executor.4[1760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.448018][ T311] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 52.468852][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.476892][ T311] usb 1-1: Product: syz [ 52.481254][ T311] usb 1-1: Manufacturer: syz [ 52.485695][ T311] usb 1-1: SerialNumber: syz [ 52.493815][ T311] usb 1-1: config 0 descriptor?? [ 52.537674][ T311] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 52.545275][ T311] usb 1-1: Detected FT232H [ 52.567867][ T333] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 52.574977][ T333] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 52.582013][ T333] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 52.589698][ T333] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 52.596751][ T333] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 52.609585][ T333] prodikeys 0003:041E:2801.0007: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input0 [ 52.637022][ T840] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 52.758970][ T311] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 52.770826][ T334] usb 4-1: USB disconnect, device number 3 [ 52.976975][ T333] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 53.017080][ T840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.027831][ T840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.037393][ T840] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 53.046175][ T840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.054700][ T840] usb 2-1: config 0 descriptor?? [ 53.156985][ T339] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 53.217005][ T333] usb 5-1: Using ep0 maxpacket: 32 [ 53.237024][ T311] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 53.244324][ T311] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 53.253184][ T311] usb 1-1: USB disconnect, device number 3 [ 53.260359][ T311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 53.269839][ T311] ftdi_sio 1-1:0.0: device disconnected [ 53.337070][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.348404][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.358347][ T333] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 53.367416][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.375990][ T333] usb 5-1: config 0 descriptor?? [ 53.557044][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.567831][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.577507][ T339] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 53.586305][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.594873][ T339] usb 3-1: config 0 descriptor?? [ 53.761053][ T1821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=273 sclass=netlink_route_socket pid=1821 comm=syz-executor.0 [ 53.808758][ T1827] loop0: detected capacity change from 0 to 128 [ 53.858612][ T333] elecom 0003:056E:00FF.0009: item fetching failed at offset 0/2 [ 53.866382][ T333] elecom: probe of 0003:056E:00FF.0009 failed with error -22 [ 54.996916][ C1] sched: RT throttling activated [ 55.006828][ T311] usb 5-1: USB disconnect, device number 4 [ 55.037030][ T840] usb 2-1: string descriptor 0 read error: -71 [ 55.998677][ T840] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 56.007341][ T840] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 56.015293][ T840] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 56.023658][ T840] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 56.031105][ T840] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 56.039470][ T840] usb 2-1: USB disconnect, device number 2 [ 56.310228][ T339] usb 3-1: string descriptor 0 read error: -71 [ 56.327021][ T339] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 56.335886][ T339] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 56.344116][ T339] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 56.352057][ T339] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 56.359361][ T339] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 56.451004][ T1857] loop4: detected capacity change from 0 to 128 [ 56.560384][ T339] usb 3-1: USB disconnect, device number 4 [ 56.611687][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 56.611701][ T28] audit: type=1400 audit(1717242990.600:306): avc: denied { name_bind } for pid=1873 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 56.681322][ T28] audit: type=1400 audit(1717242990.670:307): avc: denied { mounton } for pid=1878 comm="syz-executor.1" path="/root/syzkaller-testdir1632431090/syzkaller.tDiNvc/45/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.721009][ T28] audit: type=1400 audit(1717242990.710:308): avc: denied { unmount } for pid=1262 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.857068][ T840] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 56.927986][ T1899] process 'syz-executor.0' launched './file0' with NULL argv: empty string added [ 56.941261][ T28] audit: type=1400 audit(1717242990.930:309): avc: denied { unmount } for pid=1262 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 57.267019][ T840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.277935][ T840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.287610][ T840] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 57.296488][ T840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.305101][ T840] usb 4-1: config 0 descriptor?? [ 57.696980][ T339] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 57.957933][ T28] audit: type=1400 audit(1717242991.950:310): avc: denied { read } for pid=1931 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.008423][ T28] audit: type=1400 audit(1717242992.000:311): avc: denied { shutdown } for pid=1931 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.077029][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.087809][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.097324][ T339] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 58.106115][ T339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.114658][ T339] usb 3-1: config 0 descriptor?? [ 58.287013][ T840] usb 4-1: string descriptor 0 read error: -71 [ 58.317286][ T840] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 58.325945][ T840] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 58.334050][ T840] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 58.341998][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 58.349250][ T840] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 58.356521][ T840] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 58.364795][ T840] usb 4-1: USB disconnect, device number 4 [ 58.747036][ T311] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 58.837049][ T311] usb 1-1: Dual-Role OTG device on HNP port [ 58.857099][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.866110][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.874361][ T311] usb 1-1: SerialNumber: syz [ 58.937658][ T311] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 59.056976][ T333] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 59.127070][ T339] usb 3-1: string descriptor 0 read error: -71 [ 59.140209][ T311] usb 1-1: USB disconnect, device number 4 [ 59.157282][ T339] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 59.165981][ T339] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 59.173983][ T339] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 59.182060][ T339] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 59.189723][ T339] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 59.202122][ T339] usb 3-1: USB disconnect, device number 5 [ 59.416978][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.436949][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.446499][ T333] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 59.476937][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.485490][ T333] usb 4-1: config 0 descriptor?? [ 59.678829][ T1967] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 59.695096][ T1969] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 61.170556][ T28] audit: type=1326 audit(1717242995.160:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503567cee9 code=0x7ffc0000 [ 61.194601][ T28] audit: type=1326 audit(1717242995.160:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503567cee9 code=0x7ffc0000 [ 61.220113][ T2000] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 61.239023][ T28] audit: type=1326 audit(1717242995.160:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f503567cee9 code=0x7ffc0000 [ 61.276021][ T28] audit: type=1326 audit(1717242995.160:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1995 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f503567cee9 code=0x7ffc0000 [ 61.527018][ T333] usb 4-1: string descriptor 0 read error: -71 [ 61.547034][ T333] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #200: -71 [ 61.555794][ T333] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71 [ 61.563997][ T333] uclogic 0003:256C:006D.000D: failed probing pen v2 parameters: -71 [ 61.572606][ T333] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 61.580125][ T333] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 61.588766][ T333] usb 4-1: USB disconnect, device number 5 [ 62.996957][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 63.052038][ T2018] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 63.129623][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 63.129638][ T28] audit: type=1400 audit(1717242997.120:345): avc: denied { connect } for pid=2025 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.169124][ T28] audit: type=1326 audit(1717242997.150:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd2c7cee9 code=0x7ffc0000 [ 63.262974][ T28] audit: type=1326 audit(1717242997.150:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fd2c7cee9 code=0x7ffc0000 [ 63.338652][ T28] audit: type=1326 audit(1717242997.150:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd2c7cee9 code=0x7ffc0000 [ 63.393145][ T28] audit: type=1326 audit(1717242997.150:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fd2c7cee9 code=0x7ffc0000 [ 63.417397][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 63.460145][ T28] audit: type=1326 audit(1717242997.150:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd2c7cee9 code=0x7ffc0000 [ 63.508294][ T2038] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.3'. [ 63.522128][ T28] audit: type=1326 audit(1717242997.150:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2fd2c7a667 code=0x7ffc0000 [ 63.553434][ T28] audit: type=1326 audit(1717242997.150:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2fd2c40329 code=0x7ffc0000 [ 63.577218][ T311] usb 2-1: Dual-Role OTG device on HNP port [ 63.587121][ T28] audit: type=1326 audit(1717242997.150:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2fd2c7cee9 code=0x7ffc0000 [ 63.614384][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.631390][ T28] audit: type=1326 audit(1717242997.150:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2029 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2fd2c7a667 code=0x7ffc0000 [ 63.659588][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 63.677824][ T311] usb 2-1: SerialNumber: syz [ 63.724636][ T2040] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 63.750070][ T311] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 63.952967][ T311] usb 2-1: USB disconnect, device number 3 [ 64.074887][ T2055] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 64.116610][ T2061] serio: Serial port pts0 [ 64.125263][ T2063] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.4'. [ 64.376980][ T333] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 64.747061][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.786976][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.796565][ T333] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 64.857339][ T333] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.891187][ T333] usb 3-1: config 0 descriptor?? [ 65.347013][ T840] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 65.557062][ C0] softirq: huh, entered softirq 3 NET_RX ffffffff840b9700 with preempt_count 00000102, exited with 00000101? [ 65.568492][ T1249] ================================================================================ [ 65.577607][ T1249] UBSAN: array-index-out-of-bounds in kernel/bpf/helpers.c:779:13 [ 65.585312][ T1249] index -1 is out of range for type 'char[3][512]' [ 65.591650][ T1249] CPU: 0 PID: 1249 Comm: syz-executor.0 Not tainted 6.1.78-syzkaller-00133-g74c507aab139 #0 [ 65.601523][ T1249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 65.611415][ T1249] Call Trace: [ 65.614629][ T1249] [ 65.617407][ T1249] dump_stack_lvl+0x151/0x1b7 [ 65.621922][ T1249] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 65.627215][ T1249] dump_stack+0x15/0x1b [ 65.631206][ T1249] __ubsan_handle_out_of_bounds+0x13a/0x160 [ 65.636939][ T1249] bpf_bprintf_prepare+0x132e/0x1360 [ 65.642144][ T1249] ? do_wait+0x863/0xa10 [ 65.646222][ T1249] ? bpf_bprintf_cleanup+0x60/0x60 [ 65.651170][ T1249] ? put_pid+0xc3/0x110 [ 65.655160][ T1249] ? kernel_wait4+0x313/0x3d0 [ 65.659674][ T1249] bpf_trace_printk+0x14a/0x300 [ 65.664363][ T1249] ? bpf_trace_run2+0xe9/0x290 [ 65.668961][ T1249] ? bpf_probe_write_user+0xf0/0xf0 [ 65.673993][ T1249] ? kernel_waitid+0x520/0x520 [ 65.678595][ T1249] ? bpf_trace_run2+0xe9/0x290 [ 65.683200][ T1249] bpf_prog_6e404e794a29e2b2+0x35/0x39 [ 65.688492][ T1249] bpf_trace_run2+0x133/0x290 [ 65.693022][ T1249] ? bpf_trace_run1+0x240/0x240 [ 65.697693][ T1249] __bpf_trace_sys_enter+0x62/0x70 [ 65.702638][ T1249] __traceiter_sys_enter+0x2a/0x40 [ 65.707585][ T1249] syscall_enter_from_user_mode+0x12c/0x190 [ 65.713312][ T1249] do_syscall_64+0x1e/0xb0 [ 65.717569][ T1249] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.723296][ T1249] RIP: 0033:0x7f2fd2ca82b3 [ 65.727547][ T1249] Code: 00 00 00 00 0f 1f 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 4e fc 0d 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 65.746991][ T1249] RSP: 002b:00007fff54642788 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 2024/06/01 11:56:39 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 65.755234][ T1249] RAX: ffffffffffffffda RBX: 00000000000000ae RCX: 00007f2fd2ca82b3 [ 65.763049][ T1249] RDX: 00007fff546427a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.770855][ T1249] RBP: 00007fff5464282c R08: 00007fff54683080 R09: 00007fff546830b0 [ 65.778670][ T1249] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 65.786482][ T1249] R13: 000000000000fe71 R14: 000000000000fe56 R15: 000000000000000c [ 65.794305][ T1249] [ 65.797271][ T1249] ================================================================================ [ 65.806379][ T1249] BUG: scheduling while atomic: syz-executor.0/1249/0x00000002 [ 65.813700][ T1249] Modules linked in: [ 65.817406][ T1249] Preemption disabled at: [ 65.817416][ T1249] [] remove_wait_queue+0x26/0x140 [ 65.828285][ T1249] CPU: 0 PID: 1249 Comm: syz-executor.0 Not tainted 6.1.78-syzkaller-00133-g74c507aab139 #0 [ 65.838127][ T1249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 65.848117][ T1249] Call Trace: [ 65.851235][ T1249] [ 65.854012][ T1249] dump_stack_lvl+0x151/0x1b7 [ 65.858521][ T1249] ? remove_wait_queue+0x26/0x140 [ 65.863386][ T1249] ? remove_wait_queue+0x26/0x140 [ 65.868250][ T1249] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 65.873542][ T1249] ? remove_wait_queue+0x26/0x140 [ 65.878402][ T1249] dump_stack+0x15/0x1b [ 65.882391][ T1249] __schedule_bug+0x195/0x260 [ 65.886908][ T1249] ? vprintk+0x74/0x80 [ 65.890813][ T1249] ? cpu_util_update_eff+0x10e0/0x10e0 [ 65.896102][ T1249] ? _printk+0xd1/0x111 [ 65.900101][ T1249] __schedule+0xcf7/0x1550 [ 65.904349][ T1249] ? timerqueue_add+0x250/0x270