last executing test programs: 2.369160641s ago: executing program 2 (id=964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000340), 0x10106, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000003c0)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f0000000480), 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="f7", 0x101d0}], 0x1}, 0x0) 1.435422145s ago: executing program 0 (id=967): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x0) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c9002000000008003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800"]) 1.374333461s ago: executing program 0 (id=970): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @loopback, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 1.364250153s ago: executing program 3 (id=972): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000a40)={'wlan1\x00', @random="010000000700"}) 1.282473861s ago: executing program 3 (id=974): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) 1.269648612s ago: executing program 3 (id=977): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x808680, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x10000, 0xa9, &(0x7f0000000300)=""/169, 0x41100, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x52e8a908}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000100000000000000801800"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) socketpair(0xb, 0x1, 0x8, &(0x7f0000000900)) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000000)={'batadv_slave_0\x00', 0x10}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x1}) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) close(0x4) 1.251025494s ago: executing program 4 (id=978): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x80) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x6) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x2) setrlimit(0xf, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)="f6ccc2624119718c0c7c3bad7df20902fe67e86fb26956f3dde984374e9f9496436b35da77400b5fae11ce0517598fd596164c6896f84c785efea33db443065609846b6d64fb406a968a7f974941cbcd77846212f13173b4630485a2701921e5cea7a8541e6822d056fe6b11c40baca790a1e8ea6af1a7d6474a7298a2302e02ad4d45daa60dd5baf737fac7a4ee81c3dd96b63c8ada38118bf933be1e57fa3deb1d8f25b671c6502442e6fee50ee5a96a0dba7c7e9c30b44537823081c64794c0e16c632d6c21ef81f898af3377523d337d71c20f8dc474dece1fc7af6c8843", 0x0}, 0x38) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) 1.174721032s ago: executing program 1 (id=980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001b80)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r1) 1.174077332s ago: executing program 0 (id=981): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002180), 0x6f) 301.08216ms ago: executing program 1 (id=982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f00000017c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000001880)="b9ff0300600d698cff9e14f008004de7f9c7643600000088ff", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 300.79636ms ago: executing program 2 (id=983): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000010000000000000000000000711819000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 284.312191ms ago: executing program 0 (id=984): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x6, 0x13, 0x0, &(0x7f0000002200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002240)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 282.975422ms ago: executing program 3 (id=985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x7) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 276.267772ms ago: executing program 4 (id=986): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r0}, 0x8) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r5], 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup=r2, r6, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r1}, 0x20) 220.157668ms ago: executing program 2 (id=987): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) 219.939488ms ago: executing program 1 (id=988): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}]}}, 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000000a00)=@framed, &(0x7f0000000dc0)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000e00)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r1, 0xde, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) 219.797458ms ago: executing program 4 (id=989): syz_clone(0x80001200, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) close(0x3) 211.089269ms ago: executing program 0 (id=990): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xa, 0x6, &(0x7f0000000f00)=ANY=[], &(0x7f0000000f40)='GPL\x00', 0x5, 0xc3, &(0x7f0000000f80)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 171.961303ms ago: executing program 2 (id=991): close(0x4) 171.714323ms ago: executing program 1 (id=992): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x37eb}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 171.563773ms ago: executing program 0 (id=993): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000780)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x80015b11, 0x0) syz_usb_disconnect(r0) 171.337223ms ago: executing program 4 (id=994): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000037c0)=@newsa={0x134, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@mcast1, @in=@empty, 0x0, 0x6, 0x0, 0xfffd, 0x0, 0x80, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x202, 0x5f, 0xa}, {0x1}, 0x70bd25, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x20040}, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffc, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) 130.513878ms ago: executing program 3 (id=995): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004a80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x10) 130.398038ms ago: executing program 2 (id=996): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) preadv(r0, &(0x7f00000028c0), 0x0, 0x1be, 0x0) 83.336462ms ago: executing program 3 (id=997): lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1c, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000001000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xe000, 0x2000, &(0x7f000012e000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000280)=""/126, 0x7e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x1000000a, 0x5, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_delete(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) timer_create(0x1, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000067c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000006800)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) syz_usb_connect$uac3(0x3, 0x0, 0x0, 0x0) timer_getoverrun(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 83.147282ms ago: executing program 2 (id=998): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x5, 0x0, 0x2}]}, 0x8) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r7, 0x40047459, 0x0) getsockopt$inet_pktinfo(r4, 0x3a, 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/rt_acct\x00') getdents(r8, &(0x7f0000000040)=""/31, 0x1f) socket$igmp6(0xa, 0x3, 0x2) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x9, 0x1}, 0x1c) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001100)={'gre0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000480)="cd", 0x1, 0x20044090, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 83.077422ms ago: executing program 4 (id=999): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000022c0)={0x1, &(0x7f0000002300)=[{0x6, 0x40, 0x37, 0x7fffffff}]}) mkdir(&(0x7f0000002380)='./control\x00', 0x5) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000002440)='./control\x00', 0xa4000960) 57.160175ms ago: executing program 1 (id=1000): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x15, 0x6, 0xdc) getsockopt$inet6_buf(r1, 0x29, 0x2b, &(0x7f0000000340)=""/93, &(0x7f00000003c0)=0x5d) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$thread_pidfd(0xffffff9c, &(0x7f0000000240), 0x200a00, 0x0) pipe2(0x0, 0x80000) timer_delete(r0) 51.264665ms ago: executing program 4 (id=1001): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x7, 0x12, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x7, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 0s ago: executing program 1 (id=1002): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) kernel console output (not intermixed with test programs): rocess permissive=1 [ 15.532839][ T24] audit: type=1400 audit(1793085696.100:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 22.834989][ T24] audit: type=1400 audit(1793085703.450:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.838450][ T271] cgroup: Unknown subsys name 'net' [ 22.858308][ T24] audit: type=1400 audit(1793085703.450:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.885509][ T24] audit: type=1400 audit(1793085703.480:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.885979][ T271] cgroup: Unknown subsys name 'devices' [ 23.062809][ T271] cgroup: Unknown subsys name 'hugetlb' [ 23.068420][ T271] cgroup: Unknown subsys name 'rlimit' [ 23.209274][ T24] audit: type=1400 audit(1793085703.820:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.232487][ T24] audit: type=1400 audit(1793085703.820:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.257318][ T24] audit: type=1400 audit(1793085703.820:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.261321][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.289364][ T24] audit: type=1400 audit(1793085703.900:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.314880][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.315128][ T24] audit: type=1400 audit(1793085703.900:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.349253][ T24] audit: type=1400 audit(1793085703.920:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.374965][ T24] audit: type=1400 audit(1793085703.920:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.896634][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.903814][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.911399][ T279] device bridge_slave_0 entered promiscuous mode [ 23.919338][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.926480][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.933848][ T279] device bridge_slave_1 entered promiscuous mode [ 24.011604][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.018663][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.026093][ T280] device bridge_slave_0 entered promiscuous mode [ 24.035377][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.042442][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.049841][ T280] device bridge_slave_1 entered promiscuous mode [ 24.068328][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.075431][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.082955][ T283] device bridge_slave_0 entered promiscuous mode [ 24.109257][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.116459][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.123917][ T283] device bridge_slave_1 entered promiscuous mode [ 24.159244][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.166382][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.173975][ T281] device bridge_slave_0 entered promiscuous mode [ 24.183616][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.190785][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.198292][ T281] device bridge_slave_1 entered promiscuous mode [ 24.212846][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.219987][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.227502][ T282] device bridge_slave_0 entered promiscuous mode [ 24.237308][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.244441][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.251859][ T282] device bridge_slave_1 entered promiscuous mode [ 24.386801][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.393888][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.401200][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.408225][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.422933][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.429996][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.437358][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.444427][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.454672][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.461840][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.469239][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.476317][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.484798][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.491907][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.499154][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.506268][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.532456][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.539548][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.546891][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.553964][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.569741][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.577069][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.584416][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.592829][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.599995][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.607425][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.614726][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.622076][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.629237][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.636467][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.643653][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.672329][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.680179][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.687771][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.695975][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.704606][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.711689][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.719180][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.727645][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.734725][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.742105][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.750218][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.757438][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.764858][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.773250][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.780278][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.802207][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.810374][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.817476][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.825483][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.834353][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.841418][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.848761][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.856864][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.885766][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.894340][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.902392][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.910451][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.919806][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.927998][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.936157][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.943940][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.951551][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.959840][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.968156][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.975210][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.982838][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.991315][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.999617][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.006707][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.014242][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.022828][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.031182][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.039340][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.047646][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.060266][ T280] device veth0_vlan entered promiscuous mode [ 25.069168][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.077274][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.085480][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.093423][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.101978][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.109410][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.125957][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.134513][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.143270][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.150679][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.163471][ T280] device veth1_macvtap entered promiscuous mode [ 25.171894][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.180148][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.188784][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.198444][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.207105][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.215583][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.222683][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.237353][ T281] device veth0_vlan entered promiscuous mode [ 25.249685][ T283] device veth0_vlan entered promiscuous mode [ 25.257278][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.266020][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.274512][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.282326][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.289795][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.297992][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.306235][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.314374][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.322491][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.329946][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.337965][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.345793][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.355017][ T279] device veth0_vlan entered promiscuous mode [ 25.370604][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.379271][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.388161][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.395257][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.402862][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.411417][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.419687][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.428133][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.436508][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.444643][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.460289][ T283] device veth1_macvtap entered promiscuous mode [ 25.469074][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.477569][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.486677][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.503591][ T281] device veth1_macvtap entered promiscuous mode [ 25.512055][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 25.523034][ T279] device veth1_macvtap entered promiscuous mode [ 25.532714][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.540442][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.540459][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.559640][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.568320][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.577299][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.585995][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.594808][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.603518][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.630447][ T282] device veth0_vlan entered promiscuous mode [ 25.643999][ T282] device veth1_macvtap entered promiscuous mode [ 25.709121][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.718797][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.728853][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.738919][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.747912][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.760737][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.769453][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.778148][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.786448][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.795009][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.803937][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.818517][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.827112][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.835760][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.844441][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.853125][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.861719][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.891896][ T309] erofs: (device loop4): mounted with root inode @ nid 36. [ 25.978421][ T309] attempt to access beyond end of device [ 25.978421][ T309] loop4: rw=0, want=40, limit=16 [ 25.990851][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.999163][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.100953][ T51] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.301713][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.341043][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.452598][ T349] Zero length message leads to an empty skb [ 26.481086][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.496704][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.506918][ T51] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 26.516126][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.525172][ T51] usb 1-1: config 0 descriptor?? [ 26.561209][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 26.681279][ T5] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.692586][ T5] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.701187][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.703290][ T5] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.713067][ T25] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 26.726328][ T5] usb 3-1: config 0 interface 0 has no altsetting 0 [ 26.745023][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 26.754111][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.764698][ T5] usb 3-1: config 0 descriptor?? [ 26.772690][ T318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.890987][ T25] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 26.900073][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.908569][ T25] usb 2-1: Product: syz [ 26.912933][ T25] usb 2-1: Manufacturer: syz [ 26.917615][ T25] usb 2-1: SerialNumber: syz [ 26.961725][ T25] usb-storage 2-1:1.0: USB Mass Storage device detected [ 26.969832][ T25] scsi host1: usb-storage 2-1:1.0 [ 27.002548][ T51] hid-generic 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 27.010418][ T51] hid-generic 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 27.023410][ T51] hid-generic 0003:0D8C:0022.0001: hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 27.141168][ T318] usb 4-1: Using ep0 maxpacket: 8 [ 27.167666][ T25] usb 2-1: USB disconnect, device number 2 [ 27.215712][ T51] usb 1-1: USB disconnect, device number 2 [ 27.263467][ T5] input: HID 046d:c215 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C215.0002/input/input4 [ 27.281002][ T318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.291264][ T318] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 27.300316][ T318] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 27.309590][ T318] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 27.320437][ T318] usb 4-1: config 1 interface 1 has no altsetting 0 [ 27.343648][ T5] logitech 0003:046D:C215.0002: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.2-1/input0 [ 27.481261][ T318] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 27.490480][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.498746][ T318] usb 4-1: Product: syz [ 27.502965][ T318] usb 4-1: Manufacturer: syz [ 27.507587][ T318] usb 4-1: SerialNumber: syz [ 27.721296][ T368] ====================================================== [ 27.721296][ T368] WARNING: the mand mount option is being deprecated and [ 27.721296][ T368] will be removed in v5.15! [ 27.721296][ T368] ====================================================== [ 27.748890][ T368] EXT4-fs error (device loop1): ext4_get_journal_inode:5247: comm syz.1.24: inode #2147418112: comm syz.1.24: iget: illegal inode # [ 27.764399][ T368] EXT4-fs (loop1): no journal found [ 27.771044][ T368] EXT4-fs (loop1): can't get journal size [ 27.778802][ T368] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 27.790056][ T368] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 27.790056][ T368] [ 27.800159][ T368] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue [ 27.832223][ T371] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,data_err=ignore,,errors=continue [ 27.849597][ T371] EXT4-fs (loop0): shut down requested (2) [ 27.856555][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 27.856567][ T24] audit: type=1400 audit(1793085708.470:125): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 27.884210][ T382] capability: warning: `syz.4.28' uses 32-bit capabilities (legacy support in use) [ 27.886372][ T24] audit: type=1400 audit(1793085708.470:126): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.896200][ T318] usb 4-1: selecting invalid altsetting 0 [ 27.928239][ T24] audit: type=1400 audit(1793085708.470:127): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.940419][ T318] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 27.956973][ T24] audit: type=1400 audit(1793085708.470:128): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.961827][ T318] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 27.986336][ T25] usb 3-1: USB disconnect, device number 2 [ 27.996348][ T318] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 28.003666][ T24] audit: type=1400 audit(1793085708.470:129): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.003685][ T24] audit: type=1400 audit(1793085708.470:130): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.003840][ T24] audit: type=1400 audit(1793085708.470:131): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.003886][ T24] audit: type=1400 audit(1793085708.600:132): avc: denied { name_bind } for pid=385 comm="syz.4.31" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 28.024894][ T318] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 28.049097][ T24] audit: type=1400 audit(1793085708.610:133): avc: denied { create } for pid=385 comm="syz.4.31" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.091422][ T318] usb 4-1: selecting invalid altsetting 0 [ 28.124022][ T318] usb 4-1: 0:2 : does not exist [ 28.136238][ T318] usb 4-1: USB disconnect, device number 2 [ 28.145594][ T24] audit: type=1400 audit(1793085708.610:134): avc: denied { write } for pid=385 comm="syz.4.31" name="file0" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.169304][ T384] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 28.199627][ T384] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.405352][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.577589][ T405] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 28.660969][ T5] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.180931][ T5] usb 2-1: unable to get BOS descriptor or descriptor too short [ 29.221042][ T5] usb 2-1: not running at top speed; connect to a high speed hub [ 29.255364][ T416] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.301040][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.311603][ T15] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.319482][ T5] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 29.329722][ T5] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 29.342778][ T457] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.58: inode has both inline data and extents flags [ 29.356097][ T457] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.58: couldn't read orphan inode 15 (err -117) [ 29.368154][ T457] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue [ 29.381178][ T457] EXT4-fs (loop2): shut down requested (1) [ 29.438159][ T462] FAULT_INJECTION: forcing a failure. [ 29.438159][ T462] name failslab, interval 1, probability 0, space 0, times 1 [ 29.451312][ T462] CPU: 0 PID: 462 Comm: syz.2.59 Not tainted syzkaller #0 [ 29.458455][ T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.468555][ T462] Call Trace: [ 29.471887][ T462] __dump_stack+0x21/0x24 [ 29.476234][ T462] dump_stack_lvl+0x1a7/0x208 [ 29.480945][ T462] ? show_regs_print_info+0x18/0x18 [ 29.486172][ T462] ? slab_post_alloc_hook+0x7d/0x2f0 [ 29.491477][ T462] dump_stack+0x15/0x1c [ 29.495657][ T462] should_fail+0x3ab/0x500 [ 29.500118][ T462] ? proc_alloc_inode+0x1d/0xb0 [ 29.504999][ T462] __should_failslab+0xa4/0xe0 [ 29.509789][ T462] should_failslab+0x9/0x20 [ 29.514320][ T462] kmem_cache_alloc+0x3d/0x2d0 [ 29.519116][ T462] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 29.525470][ T462] proc_alloc_inode+0x1d/0xb0 [ 29.530175][ T462] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 29.536520][ T462] new_inode_pseudo+0x62/0x210 [ 29.541310][ T462] new_inode+0x28/0x1e0 [ 29.545503][ T462] ? __d_instantiate+0x439/0x780 [ 29.550478][ T462] proc_setup_self+0xe3/0x310 [ 29.555187][ T462] ? _raw_spin_unlock+0x4d/0x70 [ 29.560076][ T462] proc_fill_super+0x516/0x750 [ 29.564866][ T462] get_tree_nodev+0xb3/0x160 [ 29.569457][ T462] ? proc_reconfigure+0x3c0/0x3c0 [ 29.574481][ T462] proc_get_tree+0x1c/0x20 [ 29.578893][ T462] vfs_get_tree+0x89/0x260 [ 29.583433][ T462] do_new_mount+0x25a/0xa30 [ 29.587932][ T462] path_mount+0x581/0xca0 [ 29.592256][ T462] __se_sys_mount+0x320/0x390 [ 29.596936][ T462] ? __x64_sys_mount+0xd0/0xd0 [ 29.601707][ T462] __x64_sys_mount+0xbf/0xd0 [ 29.606300][ T462] do_syscall_64+0x31/0x40 [ 29.610739][ T462] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 29.616627][ T462] RIP: 0033:0x7fc8590a7559 [ 29.621040][ T462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.640646][ T462] RSP: 002b:00007fc857aff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.649253][ T462] RAX: ffffffffffffffda RBX: 00007fc85932dfa0 RCX: 00007fc8590a7559 [ 29.657225][ T462] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000000000000000 [ 29.665286][ T462] RBP: 00007fc85913eb20 R08: 0000000000000000 R09: 0000000000000000 [ 29.673267][ T462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.681239][ T462] R13: 00007fc85932e038 R14: 00007fc85932dfa0 R15: 00007ffc118132d8 [ 29.689962][ T462] proc_fill_super: can't allocate /proc/self [ 29.731076][ T15] usb 1-1: Using ep0 maxpacket: 16 [ 29.741656][ T5] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.750862][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.759034][ T5] usb 2-1: Product: syz [ 29.763359][ T5] usb 2-1: Manufacturer: syz [ 29.767993][ T5] usb 2-1: SerialNumber: syz [ 29.787988][ T468] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 29.797227][ T468] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.811226][ T416] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.870966][ T15] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.882258][ T15] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.895205][ T15] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.905156][ T15] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 29.918575][ T15] usb 1-1: config 0 interface 0 has no altsetting 0 [ 29.927586][ T15] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 29.937010][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.955985][ T15] usb 1-1: config 0 descriptor?? [ 30.016687][ T483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 30.120991][ T416] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 30.130129][ T416] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 30.138545][ T416] usb 4-1: Product: syz [ 30.142853][ T416] usb 4-1: Manufacturer: syz [ 30.147456][ T416] usb 4-1: SerialNumber: syz [ 30.152764][ T416] usb 4-1: config 0 descriptor?? [ 30.161109][ T5] usb 2-1: 0:2 : does not exist [ 30.170389][ T5] usb 2-1: USB disconnect, device number 3 [ 30.372028][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.455029][ T318] usb 4-1: USB disconnect, device number 3 [ 30.462448][ T15] logitech-djreceiver 0003:046D:C53A.0003: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 30.504385][ T501] fuse: Unknown parameter 'fd0x0000000000000004' [ 30.682337][ T523] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,noblock_validity,quota, [ 30.696788][ T523] EXT4-fs error (device loop1): ext4_find_extent:928: inode #2: comm syz.1.85: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 30.713240][ T523] EXT4-fs (loop1): Remounting filesystem read-only [ 31.051495][ T416] usb 1-1: USB disconnect, device number 3 [ 31.072478][ T538] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 31.081635][ T538] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.097852][ T538] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.89: Failed to acquire dquot type 0 [ 31.148896][ T551] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 31.230970][ T318] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 31.631042][ T318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.675768][ T558] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x0000000000000002,,errors=continue [ 31.689242][ T318] usb 4-1: not running at top speed; connect to a high speed hub [ 31.711392][ T558] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.347288][ T562] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 32.379370][ T562] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,journal_ioprio=0x0000000000000005,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 32.402623][ T318] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.440924][ T318] usb 4-1: config 1 interface 0 has no altsetting 0 [ 32.571946][ T579] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 32.591968][ T579] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.624381][ T318] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 32.639155][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.650267][ T318] usb 4-1: Product: syz [ 32.654825][ T318] usb 4-1: Manufacturer: syz [ 32.659544][ T318] usb 4-1: SerialNumber: syz [ 32.677500][ T579] process 'syz.1.104' launched './file1' with NULL argv: empty string added [ 32.679810][ T577] netlink: 84 bytes leftover after parsing attributes in process `syz.0.103'. [ 32.768130][ T600] SELinux: policydb string does not match my string SE Linux [ 32.775996][ T600] SELinux: failed to load policy [ 33.053948][ T318] usb 4-1: USB disconnect, device number 4 [ 33.508484][ T620] syz.1.119 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.611065][ T641] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 33.715064][ T652] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.731747][ T652] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue [ 33.746236][ T24] kauditd_printk_skb: 85 callbacks suppressed [ 33.746279][ T24] audit: type=1400 audit(1793085714.350:218): avc: denied { read } for pid=655 comm="syz.4.134" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.803246][ T658] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.835891][ T658] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.846357][ T24] audit: type=1400 audit(1793085714.460:219): avc: denied { mount } for pid=657 comm="syz.3.133" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.871663][ T24] audit: type=1400 audit(1793085714.480:220): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.981273][ T667] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.998857][ T24] audit: type=1400 audit(1793085714.610:221): avc: denied { mounton } for pid=669 comm="syz.0.137" path="/proc/37/task" dev="proc" ino=15282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 34.105898][ T24] audit: type=1400 audit(1793085714.720:222): avc: denied { read } for pid=674 comm="syz.2.139" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.129632][ T675] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.151063][ T24] audit: type=1400 audit(1793085714.720:223): avc: denied { open } for pid=674 comm="syz.2.139" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.195446][ T24] audit: type=1400 audit(1793085714.740:224): avc: denied { ioctl } for pid=674 comm="syz.2.139" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.256679][ T670] loop0: p1 p3 < > [ 34.346985][ T24] audit: type=1400 audit(1793085714.960:225): avc: denied { create } for pid=683 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.367138][ T24] audit: type=1400 audit(1793085714.980:226): avc: denied { bind } for pid=683 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.386642][ T24] audit: type=1400 audit(1793085714.980:227): avc: denied { setopt } for pid=683 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.474136][ T358] udevd[358]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 34.477745][ T312] udevd[312]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 34.514699][ T697] ip_tables: iptables: counters copy to user failed while replacing table [ 34.525840][ T697] ip_tables: iptables: counters copy to user failed while replacing table [ 34.554250][ T700] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.562395][ T700] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 34.579128][ T704] capability: warning: `syz.0.150' uses deprecated v2 capabilities in a way that may be insecure [ 34.591178][ T416] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 34.673606][ T723] 9pnet: Insufficient options for proto=fd [ 34.751961][ T727] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 34.762113][ T727] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.765815][ T734] netlink: 120 bytes leftover after parsing attributes in process `syz.0.164'. [ 34.783911][ T734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 34.793254][ T734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 34.802411][ T734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 34.812503][ T727] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock, [ 34.831268][ T727] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.862143][ T741] input: syz1 as /devices/virtual/input/input6 [ 34.868405][ T741] input: failed to attach handler leds to device input6, error: -6 [ 34.881852][ T305] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 34.933039][ T745] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 35.081340][ T743] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 35.091366][ T416] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.141096][ T416] usb 3-1: not running at top speed; connect to a high speed hub [ 35.231065][ T416] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.245703][ T416] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 35.255063][ T305] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 35.271155][ T305] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.284454][ T416] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 35.294292][ T305] usb 4-1: config 0 interface 0 has no altsetting 0 [ 35.301083][ T305] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 35.310424][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.330254][ T305] usb 4-1: config 0 descriptor?? [ 35.350990][ T705] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 36.200070][ T416] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.209352][ T416] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.217594][ T416] usb 3-1: Product: syz [ 36.222190][ T416] usb 3-1: Manufacturer: syz [ 36.226798][ T416] usb 3-1: SerialNumber: syz [ 36.241804][ T305] belkin 0003:1020:0006.0004: ignoring exceeding usage max [ 36.257483][ T305] belkin 0003:1020:0006.0004: No inputs registered, leaving [ 36.275369][ T305] belkin 0003:1020:0006.0004: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.3-1/input0 [ 36.405320][ T783] udc-core: couldn't find an available UDC or it's busy [ 36.412423][ T783] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.441733][ T305] usb 4-1: USB disconnect, device number 5 [ 36.660956][ T416] usb 3-1: 0:2 : does not exist [ 36.681832][ T416] usb 3-1: USB disconnect, device number 3 [ 37.285415][ T816] EXT4-fs (loop2): Test dummy encryption mode enabled [ 37.300331][ T816] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.314674][ T816] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.325982][ T816] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.194: bad orphan inode 131083 [ 37.336794][ T816] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,inlinecrypt,usrquota,discard,resgid=0x0000000000000000,nodelalloc,test_dummy_encryption=v1,noblock_validity,errors=continue,,errors=continue [ 37.373905][ T816] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 37.651115][ T828] netlink: 32 bytes leftover after parsing attributes in process `syz.2.196'. [ 38.023115][ T812] netlink: 'syz.0.192': attribute type 8 has an invalid length. [ 38.030823][ T812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 38.550860][ C0] sched: RT throttling activated [ 38.821004][ T305] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.102248][ T305] usb 3-1: Using ep0 maxpacket: 8 [ 39.170956][ T416] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 39.220986][ T305] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.231170][ T305] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.240950][ T318] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.350941][ T287] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 39.420398][ T305] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 39.429854][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.437919][ T305] usb 3-1: Product: syz [ 39.442184][ T305] usb 3-1: Manufacturer: syz [ 39.446811][ T305] usb 3-1: SerialNumber: syz [ 39.600965][ T416] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.640991][ T416] usb 4-1: not running at top speed; connect to a high speed hub [ 39.720991][ T416] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.733976][ T416] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.743421][ T416] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 39.819231][ T305] usb 3-1: unit 6 not found! [ 39.833600][ T305] usb 3-1: USB disconnect, device number 4 [ 39.842910][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.911003][ T416] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.920083][ T416] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.928581][ T416] usb 4-1: Product: syz [ 39.933218][ T416] usb 4-1: Manufacturer: syz [ 39.937834][ T416] usb 4-1: SerialNumber: syz [ 39.971035][ T318] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.982087][ T318] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.995054][ T318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 40.002062][ T318] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 40.011197][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.031363][ T318] usb 1-1: config 0 descriptor?? [ 40.081017][ T287] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 40.094021][ T287] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.107434][ T287] usb 2-1: config 0 interface 0 has no altsetting 0 [ 40.114149][ T287] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 40.123261][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.144719][ T287] usb 2-1: config 0 descriptor?? [ 40.160995][ T844] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 40.356382][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 40.356395][ T24] audit: type=1400 audit(1793085720.960:252): avc: denied { write } for pid=864 comm="syz.2.211" name="file1" dev="loop2" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.386227][ T24] audit: type=1400 audit(1793085720.960:253): avc: denied { open } for pid=864 comm="syz.2.211" name="file1" dev="loop2" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.392530][ T861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.209'. [ 40.413009][ T868] exFAT-fs (loop2): hint_cluster is invalid (17) [ 40.424345][ T24] audit: type=1400 audit(1793085720.970:254): avc: denied { write } for pid=864 comm="syz.2.211" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.447347][ T24] audit: type=1400 audit(1793085720.970:255): avc: denied { add_name } for pid=864 comm="syz.2.211" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.468256][ T24] audit: type=1400 audit(1793085720.970:256): avc: denied { associate } for pid=864 comm="syz.2.211" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.489878][ T24] audit: type=1400 audit(1793085720.970:257): avc: denied { mounton } for pid=864 comm="syz.2.211" path="/43/file0/bus" dev="loop2" ino=1048642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.513759][ T24] audit: type=1400 audit(1793085721.020:258): avc: denied { read } for pid=864 comm="syz.2.211" name="file1" dev="loop2" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.537597][ T318] hid-picolcd 0003:04D8:F002.0005: unbalanced collection at end of report description [ 40.547688][ T865] loop_set_status: loop2 () has still dirty pages (nrpages=4) [ 40.548382][ T318] hid-picolcd 0003:04D8:F002.0005: device report parse failed [ 40.563292][ T318] hid-picolcd: probe of 0003:04D8:F002.0005 failed with error -22 [ 40.610979][ T416] usb 4-1: 0:2 : does not exist [ 40.620380][ T416] usb 4-1: USB disconnect, device number 6 [ 40.651903][ T287] belkin 0003:1020:0006.0006: ignoring exceeding usage max [ 40.663555][ T24] audit: type=1400 audit(1793085721.280:259): avc: denied { remove_name } for pid=283 comm="syz-executor" name="file0" dev="loop2" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.686862][ T287] belkin 0003:1020:0006.0006: No inputs registered, leaving [ 40.692590][ T24] audit: type=1400 audit(1793085721.300:260): avc: denied { unlink } for pid=283 comm="syz-executor" name="file0" dev="loop2" ino=1048648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.717553][ T24] audit: type=1400 audit(1793085721.300:261): avc: denied { rmdir } for pid=283 comm="syz-executor" name="file0" dev="loop2" ino=1048646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.718013][ T287] belkin 0003:1020:0006.0006: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 40.772254][ T287] usb 1-1: USB disconnect, device number 4 [ 40.835511][ T886] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 40.844714][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.867171][ T844] udc-core: couldn't find an available UDC or it's busy [ 40.882498][ T844] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.890109][ T886] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.975073][ T318] usb 2-1: USB disconnect, device number 4 [ 40.984494][ T883] F2FS-fs (loop2): fault_injection options not supported [ 41.000936][ T883] F2FS-fs (loop2): fault_type options not supported [ 41.024812][ T883] F2FS-fs (loop2): invalid crc value [ 41.041635][ T883] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.084797][ T883] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.132768][ T897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.223'. [ 41.307298][ T913] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 41.318787][ T934] 9pnet: p9_fd_create_unix (934): problem connecting socket: ./file0: -111 [ 41.335299][ T913] EXT4-fs warning (device loop3): ext4_rmdir:3355: inode #11: comm syz.3.230: empty directory 'file1' has too many links (111) [ 41.509175][ T953] device-mapper: table: 253:1: crypt: Bad cipher specification [ 41.522554][ T953] device-mapper: ioctl: error adding target to table [ 41.911656][ T966] EXT4-fs (loop1): Ignoring removed nobh option [ 41.922726][ T966] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.938759][ T966] EXT4-fs (loop1): Ignoring removed bh option [ 41.951960][ T966] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue [ 42.064788][ T977] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.102184][ T977] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000 [ 42.131920][ T977] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.253: missing EA_INODE flag [ 42.143770][ T977] EXT4-fs (loop1): Remounting filesystem read-only [ 42.150339][ T977] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.253: error while reading EA inode 11 err=-117 [ 42.162940][ T977] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.360926][ T305] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 42.372548][ T1011] tipc: Enabling of bearer rejected, failed to enable media [ 42.761327][ T305] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 42.779765][ T1024] EXT4-fs (loop1): Ignoring removed nobh option [ 42.786496][ T305] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.787441][ T1024] EXT4-fs (loop1): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 42.801818][ T305] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.817464][ T305] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 42.827410][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.837289][ T305] usb 1-1: config 0 descriptor?? [ 42.851195][ T51] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.861181][ T982] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 42.936469][ T1024] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.948818][ T1024] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 42.957452][ T1024] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.964911][ T1024] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3357: comm syz.1.271: Allocating blocks 42-43 which overlap fs metadata [ 42.980022][ T1024] EXT4-fs (loop1): Remounting filesystem read-only [ 42.987132][ T1024] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.271: Failed to acquire dquot type 0 [ 42.999753][ T1024] EXT4-fs (loop1): 1 truncate cleaned up [ 43.005731][ T1024] EXT4-fs (loop1): pa ffff88812bf68c78: logic 1, phys. 41, len 23 [ 43.013672][ T1024] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4367: group 0, free 21, pa_free 22 [ 43.024370][ T1024] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,errors=remount-ro,data_err=ignore,debug,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x0000000000000afb2 [ 43.090971][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 43.212107][ T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.224953][ T51] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 43.233989][ T51] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 43.243059][ T51] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 43.253878][ T51] usb 3-1: config 1 interface 1 has no altsetting 0 [ 43.341373][ T1059] netlink: 32 bytes leftover after parsing attributes in process `syz.4.284'. [ 43.421055][ T305] usbhid 1-1:0.0: can't add hid device: -71 [ 43.427490][ T305] usbhid: probe of 1-1:0.0 failed with error -71 [ 43.435201][ T305] usb 1-1: USB disconnect, device number 5 [ 43.461003][ T51] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 43.470132][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.478215][ T51] usb 3-1: Product: syz [ 43.482435][ T51] usb 3-1: Manufacturer: syz [ 43.487039][ T51] usb 3-1: SerialNumber: syz [ 43.620944][ T1051] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.860960][ T1051] usb 4-1: Using ep0 maxpacket: 32 [ 43.860979][ T51] usb 3-1: selecting invalid altsetting 0 [ 43.872287][ T51] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 43.880137][ T51] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 43.887649][ T51] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 43.895966][ T51] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 43.902156][ T51] usb 3-1: selecting invalid altsetting 0 [ 43.908217][ T51] usb 3-1: 0:2 : does not exist [ 43.925751][ T51] usb 3-1: USB disconnect, device number 5 [ 43.981014][ T1051] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 43.990713][ T1051] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.001317][ T1051] usb 4-1: config 0 has no interface number 0 [ 44.072609][ T1084] netlink: 104 bytes leftover after parsing attributes in process `syz.4.294'. [ 44.531697][ T1051] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 44.547281][ T1051] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 44.557219][ T1051] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.570235][ T1051] usb 4-1: config 0 interface 196 has no altsetting 0 [ 44.623886][ T1093] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 44.633611][ T1093] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.297: bg 0: block 104: invalid block bitmap [ 44.646317][ T1093] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 44.655502][ T1093] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.297: invalid indirect mapped block 1 (level 1) [ 44.668929][ T1093] EXT4-fs (loop2): 1 truncate cleaned up [ 44.674767][ T1093] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 44.687731][ T1093] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.696798][ T1093] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.707014][ T1093] overlayfs: failed to look up (fi) for ino (-13) [ 44.730992][ T1051] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 44.740227][ T1051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.748517][ T1051] usb 4-1: Product: syz [ 44.752990][ T1051] usb 4-1: Manufacturer: syz [ 44.757647][ T1051] usb 4-1: SerialNumber: syz [ 44.763589][ T1051] usb 4-1: config 0 descriptor?? [ 44.792644][ T1098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.298'. [ 45.150966][ T51] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 45.282781][ T1051] ipheth 4-1:0.196: Unable to find endpoints [ 45.298068][ T1051] usb 4-1: USB disconnect, device number 7 [ 45.350961][ T314] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 45.410917][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 45.437481][ T303] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.437828][ T24] kauditd_printk_skb: 17 callbacks suppressed [ 45.437870][ T24] audit: type=1400 audit(1793610014.047:277): avc: denied { ioctl } for pid=1139 comm="syz.1.314" path="socket:[18209]" dev="sockfs" ino=18209 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.550989][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.562027][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.572014][ T51] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 45.581321][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.589949][ T51] usb 3-1: config 0 descriptor?? [ 45.600951][ T314] usb 1-1: Invalid ep0 maxpacket: 64 [ 45.631781][ T51] hub 3-1:0.0: USB hub found [ 45.750968][ T314] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 45.789899][ T1125] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 45.940986][ T51] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 45.990941][ T314] usb 1-1: Invalid ep0 maxpacket: 64 [ 45.996391][ T314] usb usb1-port1: attempt power cycle [ 46.231074][ T1125] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 46.240161][ T1125] usb 4-1: config 127 has no interface number 0 [ 46.246622][ T1125] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 46.271089][ T51] usbhid 3-1:0.0: can't add hid device: -71 [ 46.277435][ T51] usbhid: probe of 3-1:0.0 failed with error -71 [ 46.349580][ T51] usb 3-1: USB disconnect, device number 6 [ 46.420996][ T1125] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 46.430173][ T1125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.438238][ T1125] usb 4-1: Product: syz [ 46.442475][ T1125] usb 4-1: Manufacturer: syz [ 46.447096][ T1125] usb 4-1: SerialNumber: syz [ 46.471126][ T1144] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.690981][ T314] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 46.780991][ T314] usb 1-1: Invalid ep0 maxpacket: 64 [ 46.911246][ T1144] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.932407][ T314] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 47.020933][ T1051] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 47.031188][ T314] usb 1-1: Invalid ep0 maxpacket: 64 [ 47.036533][ T314] usb usb1-port1: unable to enumerate USB device [ 47.151093][ T1125] asix 4-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 47.371013][ T1125] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 47.381249][ T1051] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 47.381745][ T1125] asix 4-1:127.57 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffb9 [ 47.392912][ T1051] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.415790][ T1051] usb 3-1: config 0 interface 0 has no altsetting 0 [ 47.422475][ T1051] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 47.431194][ T1125] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 47.431638][ T1051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.442667][ T1125] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 47.452318][ T1051] usb 3-1: config 0 descriptor?? [ 47.481168][ T1168] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 47.491198][ T287] Bluetooth: hci0: command 0x1003 tx timeout [ 47.497356][ T1142] Bluetooth: hci0: sending frame failed (-49) [ 47.650989][ T1125] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 47.661541][ T1125] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 47.799593][ T1175] overlayfs: failed to clone upperpath [ 47.852646][ T1125] asix 4-1:127.57 eth1: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, e6:57:cb:55:7a:c6 [ 47.959699][ T1125] usb 4-1: USB disconnect, device number 8 [ 48.059074][ T1125] asix 4-1:127.57 eth1: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet [ 48.130970][ T1051] usbhid 3-1:0.0: can't add hid device: -71 [ 48.140007][ T1051] usbhid: probe of 3-1:0.0 failed with error -71 [ 48.147872][ T1051] usb 3-1: USB disconnect, device number 7 [ 48.181631][ T24] audit: type=1400 audit(1793610016.797:278): avc: denied { connect } for pid=1188 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.202343][ T24] audit: type=1400 audit(1793610016.817:279): avc: denied { shutdown } for pid=1188 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.311093][ T1193] tipc: Failed to remove local publication {66,0,0}/1129376204 [ 48.318776][ T1193] tipc: Failed to remove local publication {66,0,0}/1129376203 [ 48.333213][ T24] audit: type=1400 audit(1793610016.947:280): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.442338][ T1198] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 48.452956][ T24] audit: type=1400 audit(1793610017.067:281): avc: denied { write } for pid=1197 comm="syz.3.335" name="arp" dev="proc" ino=4026532389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.607537][ T1217] syz.2.338 uses obsolete (PF_INET,SOCK_PACKET) [ 49.565637][ T24] audit: type=1400 audit(1793610018.177:282): avc: denied { create } for pid=1220 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.585619][ T15] Bluetooth: hci0: command 0x1001 tx timeout [ 49.591337][ T1125] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 49.731972][ T1142] Bluetooth: hci0: sending frame failed (-49) [ 49.747197][ T24] audit: type=1400 audit(1793610018.177:283): avc: denied { bind } for pid=1220 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.766509][ T24] audit: type=1400 audit(1793610018.177:284): avc: denied { connect } for pid=1220 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.786404][ T24] audit: type=1400 audit(1793610018.337:285): avc: denied { connect } for pid=1225 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.900934][ T1125] usb 1-1: Using ep0 maxpacket: 32 [ 49.936762][ T24] audit: type=1400 audit(1793610018.547:286): avc: denied { write } for pid=1237 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.031099][ T1125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.042085][ T1125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.052073][ T1125] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.061182][ T1125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.069843][ T1125] usb 1-1: config 0 descriptor?? [ 50.080943][ T15] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 50.111518][ T1125] hub 1-1:0.0: USB hub found [ 50.230941][ T1086] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 50.471169][ T1125] hub 1-1:0.0: 5 ports detected [ 50.490978][ T1086] usb 3-1: Using ep0 maxpacket: 16 [ 50.496328][ T1125] hub 1-1:0.0: insufficient power available to use all downstream ports [ 50.631029][ T1086] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.641823][ T1086] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.680973][ T1125] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 50.687404][ T1125] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 50.730981][ T15] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.791018][ T1125] usbhid 1-1:0.0: can't add hid device: -71 [ 50.797266][ T1125] usbhid: probe of 1-1:0.0 failed with error -71 [ 50.810986][ T15] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.811127][ T1086] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.821373][ T15] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.830530][ T1086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.847839][ T1125] usb 1-1: USB disconnect, device number 10 [ 50.854410][ T1086] usb 3-1: Product: syz [ 50.859350][ T1086] usb 3-1: Manufacturer: syz [ 50.864056][ T1086] usb 3-1: SerialNumber: syz [ 51.071023][ T15] usb 4-1: string descriptor 0 read error: -22 [ 51.077331][ T15] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 51.086651][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.181429][ T24] audit: type=1400 audit(1793610019.797:287): avc: denied { create } for pid=1246 comm="syz.4.352" dev="anon_inodefs" ino=18657 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.210059][ T1086] usb 3-1: 0:2 : does not exist [ 51.218107][ T24] audit: type=1400 audit(1793610019.817:288): avc: denied { ioctl } for pid=1246 comm="syz.4.352" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18657 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 51.226496][ T1086] usb 3-1: USB disconnect, device number 8 [ 51.345644][ T15] usb 4-1: USB disconnect, device number 9 [ 51.540994][ T1125] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 51.780898][ T1125] usb 1-1: Using ep0 maxpacket: 16 [ 51.798187][ T24] audit: type=1400 audit(1793610020.407:289): avc: denied { create } for pid=1266 comm="syz.4.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 51.811922][ T1051] Bluetooth: hci0: command 0x1009 tx timeout [ 51.911043][ T1125] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.921672][ T1125] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.943170][ T24] audit: type=1400 audit(1793610020.547:290): avc: denied { sys_admin } for pid=1266 comm="syz.4.361" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 52.130968][ T1086] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 52.141387][ T1125] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.151806][ T1125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.159930][ T1125] usb 1-1: Product: syz [ 52.165329][ T1125] usb 1-1: Manufacturer: syz [ 52.170034][ T1125] usb 1-1: SerialNumber: syz [ 52.371009][ T1086] usb 4-1: Using ep0 maxpacket: 8 [ 52.491083][ T1086] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.502009][ T1086] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.514268][ T1086] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.541302][ T1125] usb 1-1: 0:2 : does not exist [ 52.583770][ T1125] usb 1-1: USB disconnect, device number 11 [ 52.751061][ T1086] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.760680][ T1086] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.768975][ T1086] usb 4-1: Product: syz [ 52.773451][ T1086] usb 4-1: Manufacturer: syz [ 52.778068][ T1086] usb 4-1: SerialNumber: syz [ 52.891312][ T1279] overlayfs: failed to clone upperpath [ 52.931708][ T24] audit: type=1400 audit(1793610021.547:291): avc: denied { getopt } for pid=1284 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.979660][ T1291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.371'. [ 52.988688][ T1291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 53.230963][ T1125] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 53.439918][ T24] audit: type=1400 audit(1793610022.047:292): avc: denied { read write } for pid=1304 comm="syz.0.377" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 53.464501][ T24] audit: type=1400 audit(1793610022.047:293): avc: denied { open } for pid=1304 comm="syz.0.377" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 53.640986][ T1125] usb 3-1: unable to get BOS descriptor or descriptor too short [ 53.680974][ T1125] usb 3-1: not running at top speed; connect to a high speed hub [ 53.761062][ T1125] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.771294][ T1125] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.780284][ T1125] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 53.931060][ T1086] cdc_ncm 4-1:1.0: bind() failure [ 53.951176][ T1086] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 53.957713][ T1125] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.966965][ T1125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.975128][ T1086] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 53.981683][ T1125] usb 3-1: Product: syz [ 53.985869][ T1125] usb 3-1: Manufacturer: syz [ 53.990453][ T1125] usb 3-1: SerialNumber: syz [ 53.998318][ T1086] usb 4-1: USB disconnect, device number 10 [ 54.361007][ T1125] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 54.368844][ T1125] usb 3-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 54.377343][ T1125] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 54.400961][ T1125] usb 3-1: 0:2 : does not exist [ 54.412319][ T1125] usb 3-1: USB disconnect, device number 9 [ 54.516414][ T24] audit: type=1400 audit(1793610023.127:294): avc: denied { getopt } for pid=1328 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.651656][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.890934][ T1051] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 55.050969][ T1086] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 55.130937][ T1051] usb 4-1: Using ep0 maxpacket: 32 [ 55.261011][ T1051] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.272029][ T1051] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 55.285234][ T1051] usb 4-1: config 0 interface 0 has no altsetting 0 [ 55.291950][ T1051] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 55.301159][ T1051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.310070][ T1051] usb 4-1: config 0 descriptor?? [ 55.452371][ T24] audit: type=1400 audit(1793610024.067:295): avc: denied { nlmsg_read } for pid=1347 comm="syz.4.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.481026][ T1086] usb 3-1: unable to get BOS descriptor or descriptor too short [ 55.520945][ T1086] usb 3-1: not running at top speed; connect to a high speed hub [ 55.761053][ T1086] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 55.770494][ T1086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.778761][ T1086] usb 3-1: Product: syz [ 55.783796][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.787762][ T1086] usb 3-1: Manufacturer: syz [ 55.795707][ T1086] usb 3-1: SerialNumber: syz [ 55.801039][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.801671][ T1373] EXT4-fs (loop1): Ignoring removed nobh option [ 55.809182][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.822028][ T1373] EXT4-fs (loop1): Ignoring removed orlov option [ 55.828528][ T1373] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 55.838174][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.845774][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.853182][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.853653][ T1373] EXT4-fs (loop1): too many log groups per flexible block group [ 55.860536][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.868772][ T1373] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 55.875848][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.883032][ T1373] EXT4-fs (loop1): mount failed [ 55.889958][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.901801][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.909056][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.916476][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.923689][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.930996][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.938157][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.945726][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.952919][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.960121][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.967332][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.974557][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.981766][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.988914][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 55.996121][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 56.003278][ T1051] konepure 0003:1E7D:2DB4.0007: unknown main item tag 0x0 [ 56.011091][ T1051] konepure 0003:1E7D:2DB4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 56.025616][ T1051] usb 4-1: USB disconnect, device number 11 [ 56.046477][ T1377] fido_id[1377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 56.441126][ T1397] device syz_tun entered promiscuous mode [ 56.447225][ T1397] device vlan2 entered promiscuous mode [ 56.453135][ T1086] usb 3-1: MIDIStreaming interface descriptor not found [ 56.486166][ T1086] usb 3-1: USB disconnect, device number 10 [ 56.531995][ T1407] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.733023][ T24] audit: type=1400 audit(1793610025.337:296): avc: denied { create } for pid=1425 comm="syz.3.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 56.853622][ T24] audit: type=1400 audit(1793610025.457:297): avc: denied { setopt } for pid=1438 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.995461][ T1444] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.021543][ T24] audit: type=1400 audit(1793610025.627:298): avc: denied { search } for pid=1447 comm="syz.2.438" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 57.090301][ T24] audit: type=1400 audit(1793610025.697:299): avc: denied { read append } for pid=1463 comm="syz.2.445" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.134671][ T24] audit: type=1400 audit(1793610025.727:300): avc: denied { ioctl open } for pid=1463 comm="syz.2.445" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.237135][ T1481] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 57.301508][ T1490] erofs: (device loop1): mounted with root inode @ nid 36. [ 57.320254][ T1490] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 57.341877][ T1490] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 57.351823][ T1497] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.361308][ T1490] attempt to access beyond end of device [ 57.361308][ T1490] loop1: rw=524288, want=32, limit=16 [ 57.382393][ T1490] attempt to access beyond end of device [ 57.382393][ T1490] loop1: rw=524288, want=14425508776, limit=16 [ 57.448309][ T1501] netlink: 180 bytes leftover after parsing attributes in process `syz.1.462'. [ 57.547940][ T1507] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 57.557023][ T1507] SELinux: security_context_str_to_sid(system_u) failed for (dev loop3, type ext4) errno=-22 [ 57.696374][ T1476] F2FS-fs (loop2): invalid crc value [ 57.723192][ T1476] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.762883][ T1476] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 57.800954][ T1086] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 57.916951][ T24] audit: type=1400 audit(1793610026.527:301): avc: denied { create } for pid=1530 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.948097][ T24] audit: type=1400 audit(1793610026.527:302): avc: denied { getopt } for pid=1530 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.040934][ T1086] usb 2-1: Using ep0 maxpacket: 32 [ 58.170953][ T1086] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 58.179282][ T1086] usb 2-1: config 0 has no interface number 0 [ 58.185707][ T1086] usb 2-1: config 0 interface 184 has no altsetting 0 [ 58.288059][ T1555] kvm: pic: non byte write [ 58.360935][ T1051] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 58.370970][ T1086] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 58.380131][ T1086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.388175][ T1086] usb 2-1: Product: syz [ 58.392418][ T1086] usb 2-1: Manufacturer: syz [ 58.397021][ T1086] usb 2-1: SerialNumber: syz [ 58.402265][ T1086] usb 2-1: config 0 descriptor?? [ 58.441431][ T1086] smsc75xx v1.0.0 [ 58.610922][ T1051] usb 3-1: Using ep0 maxpacket: 32 [ 58.687370][ T1570] netlink: 136 bytes leftover after parsing attributes in process `syz.3.489'. [ 58.724280][ T24] audit: type=1400 audit(1793610027.337:303): avc: denied { name_bind } for pid=1575 comm="syz.3.492" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 58.731216][ T1051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.756790][ T1051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.766769][ T1051] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.786331][ T1051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.802383][ T1051] usb 3-1: config 0 descriptor?? [ 58.841888][ T1051] hub 3-1:0.0: USB hub found [ 59.113662][ T1051] hub 3-1:0.0: 1 port detected [ 59.211145][ T1086] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 59.222550][ T1086] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 59.740668][ T24] audit: type=1400 audit(1793610028.347:304): avc: denied { map } for pid=1589 comm="syz.3.496" path="socket:[20698]" dev="sockfs" ino=20698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.270950][ T1051] hub 3-1:0.0: config failed, can't get hub status (err -5) [ 60.390976][ T1051] usbhid 3-1:0.0: can't add hid device: -71 [ 60.397077][ T1051] usbhid: probe of 3-1:0.0 failed with error -71 [ 60.431535][ T1051] usb 3-1: USB disconnect, device number 11 [ 61.187025][ T1628] device gretap0 entered promiscuous mode [ 61.192877][ T1628] device vlan2 entered promiscuous mode [ 61.450998][ T1086] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 61.462322][ T1086] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 61.472547][ T1086] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 61.482115][ T1086] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 61.491808][ T1086] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 61.499730][ T1086] usb 2-1: USB disconnect, device number 5 [ 62.766793][ T1051] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 63.042637][ T1665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.522'. [ 63.100927][ T1051] usb 4-1: Using ep0 maxpacket: 16 [ 63.120986][ T314] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 63.221008][ T1051] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.231432][ T1051] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.372283][ T314] usb 3-1: Using ep0 maxpacket: 32 [ 63.465239][ T1051] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.475334][ T1051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.483614][ T1051] usb 4-1: Product: syz [ 63.487803][ T1051] usb 4-1: Manufacturer: syz [ 63.492690][ T1051] usb 4-1: SerialNumber: syz [ 63.501921][ T1673] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.528: bad orphan inode 15 [ 63.512217][ T1673] ext4_test_bit(bit=14, block=5) = 0 [ 63.517555][ T1673] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 63.591050][ T314] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.602153][ T314] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 63.615111][ T314] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.621760][ T314] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 63.631053][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.639692][ T314] usb 3-1: config 0 descriptor?? [ 63.654595][ T24] audit: type=1400 audit(1793610032.267:305): avc: denied { listen } for pid=1672 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.674016][ T24] audit: type=1400 audit(1793610032.267:306): avc: denied { accept } for pid=1672 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.810995][ T1051] usb 4-1: 0:2 : does not exist [ 63.856881][ T1051] usb 4-1: USB disconnect, device number 12 [ 64.081958][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.170977][ T314] usbhid 3-1:0.0: can't add hid device: -71 [ 64.177451][ T314] usbhid: probe of 3-1:0.0 failed with error -71 [ 64.185135][ T314] usb 3-1: USB disconnect, device number 12 [ 64.514851][ T1700] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 64.524905][ T1700] FAT-fs (loop3): Filesystem has been set read-only [ 65.402393][ T1714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.538'. [ 66.076249][ T1741] netlink: 83 bytes leftover after parsing attributes in process `syz.4.551'. [ 66.127716][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 66.458482][ T24] audit: type=1400 audit(1793610035.067:307): avc: denied { setopt } for pid=1748 comm="syz.0.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.505171][ T1761] fuse: Bad value for 'fd' [ 66.614438][ T24] audit: type=1326 audit(1793610035.227:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.568" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3ea73559 code=0x7ffc0000 [ 66.640735][ T303] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.649496][ T24] audit: type=1326 audit(1793610035.237:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.568" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3ea73559 code=0x7ffc0000 [ 66.675414][ T24] audit: type=1326 audit(1793610035.237:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.568" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5d3ea73559 code=0x7ffc0000 [ 66.700307][ T24] audit: type=1326 audit(1793610035.237:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.568" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3ea73559 code=0x7ffc0000 [ 66.725941][ T24] audit: type=1326 audit(1793610035.237:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.568" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3ea73559 code=0x7ffc0000 [ 66.752086][ T24] audit: type=1326 audit(1793610035.237:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.568" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f5d3ea73559 code=0x7ffc0000 [ 66.777086][ T24] audit: type=1326 audit(1793610035.237:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1777 comm="syz.4.568" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3ea73559 code=0x7ffc0000 [ 66.871002][ T15] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 66.980714][ T1787] netlink: 168 bytes leftover after parsing attributes in process `syz.4.572'. [ 67.110989][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 67.231077][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.242093][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.252211][ T15] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 67.255214][ T1793] fuse: Bad value for 'fd' [ 67.261457][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.274524][ T15] usb 3-1: config 0 descriptor?? [ 67.311752][ T15] hub 3-1:0.0: USB hub found [ 67.611089][ T15] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 67.711090][ T1715] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 67.873705][ T15] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 68.041082][ T287] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 68.081103][ T1715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.091700][ T1715] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 68.191230][ T15] usb 3-1: USB disconnect, device number 13 [ 68.261154][ T1715] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 68.270216][ T1715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.278401][ T1715] usb 1-1: Product: syz [ 68.282647][ T1715] usb 1-1: Manufacturer: syz [ 68.287307][ T1715] usb 1-1: SerialNumber: syz [ 68.300982][ T287] usb 2-1: Using ep0 maxpacket: 16 [ 68.317003][ T1856] Dead loop on virtual device ip6_vti0, fix it urgently! [ 68.421128][ T287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.431360][ T287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.591169][ T287] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.600661][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.609704][ T287] usb 2-1: Product: syz [ 68.614393][ T287] usb 2-1: Manufacturer: syz [ 68.619021][ T287] usb 2-1: SerialNumber: syz [ 68.691042][ T15] Bluetooth: hci0: command 0x1003 tx timeout [ 68.697197][ T1142] Bluetooth: hci0: sending frame failed (-49) [ 68.931120][ T287] usb 2-1: 0:2 : does not exist [ 68.954346][ T287] usb 2-1: USB disconnect, device number 6 [ 69.236790][ T1913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.627'. [ 69.821002][ T15] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 69.831149][ T287] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 70.071115][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 70.221182][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.232380][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.243544][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.254370][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.264710][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 70.276036][ T15] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.285478][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.293951][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 70.309715][ T15] usb 3-1: config 0 descriptor?? [ 70.315223][ T287] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.324802][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.338603][ T287] usb 2-1: config 0 descriptor?? [ 70.372109][ T15] hub 3-1:0.0: USB hub found [ 70.449334][ T1662] usb 1-1: USB disconnect, device number 12 [ 70.496193][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 70.496207][ T24] audit: type=1400 audit(1793610039.107:322): avc: denied { mount } for pid=1935 comm="syz.4.638" name="/" dev="ramfs" ino=22570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.661108][ T15] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 70.751117][ T1955] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.771145][ T1051] Bluetooth: hci0: command 0x1001 tx timeout [ 70.777275][ T1142] Bluetooth: hci0: sending frame failed (-49) [ 70.881071][ T287] usbhid 2-1:0.0: can't add hid device: -71 [ 70.887289][ T287] usbhid: probe of 2-1:0.0 failed with error -71 [ 70.896082][ T287] usb 2-1: USB disconnect, device number 7 [ 70.932760][ T15] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1 [ 70.951637][ T15] hid-generic: probe of 0003:046D:C31C.0009 failed with error -22 [ 71.034360][ T1991] netlink: 112 bytes leftover after parsing attributes in process `syz.4.665'. [ 71.063168][ T1995] device syzkaller0 entered promiscuous mode [ 71.143061][ T24] audit: type=1400 audit(1793610039.757:323): avc: denied { listen } for pid=2007 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.164309][ T24] audit: type=1400 audit(1793610039.777:324): avc: denied { accept } for pid=2007 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.215979][ T24] audit: type=1400 audit(1793610039.827:325): avc: denied { read } for pid=2007 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.271356][ T1662] usb 3-1: USB disconnect, device number 14 [ 71.321710][ T2020] IPv6: NLM_F_CREATE should be specified when creating new route [ 71.369990][ T24] audit: type=1400 audit(1793610039.977:326): avc: denied { create } for pid=2021 comm="syz.1.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 71.681067][ T287] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 71.794154][ T2050] netlink: 32 bytes leftover after parsing attributes in process `syz.2.692'. [ 72.554177][ T287] usb 2-1: Using ep0 maxpacket: 8 [ 72.625088][ T2086] device bridge_slave_1 left promiscuous mode [ 72.631489][ T2086] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.639527][ T2086] device bridge_slave_0 left promiscuous mode [ 72.646630][ T2086] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.671071][ T287] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 72.679678][ T287] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.690006][ T287] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.700624][ T287] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.711559][ T287] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.725118][ T287] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.734543][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.824951][ T2102] device batadv_slave_1 entered promiscuous mode [ 72.832745][ T2101] device batadv_slave_1 left promiscuous mode [ 72.851112][ T287] Bluetooth: hci0: command 0x1009 tx timeout [ 73.826257][ T2146] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.170989][ T1662] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 74.218115][ T2178] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 74.411034][ T1662] usb 3-1: Using ep0 maxpacket: 16 [ 74.531484][ T1662] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.539988][ T287] usb 2-1: USB disconnect, device number 8 [ 74.542360][ T1662] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.721053][ T1662] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.730159][ T1662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.750969][ T1662] usb 3-1: Product: syz [ 74.755210][ T1662] usb 3-1: Manufacturer: syz [ 74.759889][ T1662] usb 3-1: SerialNumber: syz [ 74.845098][ T2220] mmap: syz.1.770 (2220) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 74.947613][ T2222] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=91 (364 ns) > initial count (20 ns). Using initial count to start timer. [ 75.081074][ T1662] usb 3-1: 0:2 : does not exist [ 75.099108][ T1662] usb 3-1: USB disconnect, device number 15 [ 75.121607][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.175514][ T24] audit: type=1400 audit(1793610043.787:327): avc: denied { read write } for pid=2241 comm="syz.0.780" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.199350][ T24] audit: type=1400 audit(1793610043.807:328): avc: denied { open } for pid=2241 comm="syz.0.780" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.225192][ T24] audit: type=1400 audit(1793610043.837:329): avc: denied { ioctl } for pid=2241 comm="syz.0.780" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.801047][ T287] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 76.051224][ T287] usb 3-1: Using ep0 maxpacket: 16 [ 76.221621][ T287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.234386][ T287] usb 3-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.247814][ T287] usb 3-1: config 0 interface 0 has no altsetting 0 [ 76.254855][ T287] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 76.264409][ T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.277887][ T287] usb 3-1: config 0 descriptor?? [ 76.301143][ T15] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 76.321974][ T287] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 76.550946][ T15] usb 2-1: Using ep0 maxpacket: 32 [ 76.671033][ T15] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.682092][ T15] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 76.695116][ T15] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.701801][ T15] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 76.711343][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.729333][ T15] usb 2-1: config 0 descriptor?? [ 76.898279][ T2251] input: syz1 as /devices/virtual/input/input9 [ 77.016100][ T24] audit: type=1400 audit(1793610045.627:330): avc: denied { create } for pid=2281 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.181006][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 77.271067][ T15] usbhid 2-1:0.0: can't add hid device: -71 [ 77.277347][ T15] usbhid: probe of 2-1:0.0 failed with error -71 [ 77.294519][ T15] usb 2-1: USB disconnect, device number 9 [ 77.440986][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 77.591088][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.611851][ T25] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.638967][ T25] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.665126][ T25] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 77.697950][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 77.721176][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 77.743108][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.762603][ T25] usb 4-1: config 0 descriptor?? [ 77.901293][ T2302] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 78.038168][ T2310] fuse: Bad value for 'group_id' [ 78.041291][ T1715] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 78.246680][ T25] logitech-djreceiver 0003:046D:C53A.000A: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 78.411176][ T1715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.428476][ T1715] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 78.459577][ T287] usb 4-1: USB disconnect, device number 13 [ 78.545925][ T25] usb 3-1: USB disconnect, device number 16 [ 78.611090][ T1715] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 78.620629][ T1715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.629015][ T1715] usb 2-1: Product: syz [ 78.633616][ T1715] usb 2-1: Manufacturer: syz [ 78.638586][ T1715] usb 2-1: SerialNumber: syz [ 78.735419][ T2325] netlink: 32 bytes leftover after parsing attributes in process `syz.2.816'. [ 79.539143][ T2335] fuse: Bad value for 'group_id' [ 79.791676][ T2369] netlink: 32 bytes leftover after parsing attributes in process `syz.0.831'. [ 80.884316][ T2406] device bridge0 entered promiscuous mode [ 81.095835][ T2426] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 81.111739][ T2426] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 81.885508][ T24] audit: type=1400 audit(1793610050.497:331): avc: denied { relabelfrom } for pid=2479 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 81.921903][ T24] audit: type=1400 audit(1793610050.497:332): avc: denied { relabelto } for pid=2479 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 82.209125][ T287] usb 2-1: USB disconnect, device number 10 [ 82.333057][ T2521] device syzkaller0 entered promiscuous mode [ 82.350649][ T2528] netlink: 'syz.2.909': attribute type 8 has an invalid length. [ 82.412341][ T24] audit: type=1400 audit(1793610051.027:333): avc: denied { ioctl } for pid=2535 comm="syz.2.913" path="socket:[23884]" dev="sockfs" ino=23884 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.704982][ T2592] xt_hashlimit: size too large, truncated to 1048576 [ 82.750390][ T24] audit: type=1400 audit(1793610051.357:334): avc: denied { create } for pid=2599 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.788251][ T24] audit: type=1400 audit(1793610051.387:335): avc: denied { ioctl } for pid=2599 comm="syz.3.945" path="socket:[24845]" dev="sockfs" ino=24845 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.814811][ T24] audit: type=1400 audit(1793610051.387:336): avc: denied { ioctl } for pid=2599 comm="syz.3.945" path="cgroup:[4026532368]" dev="nsfs" ino=4026532368 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.894905][ T24] audit: type=1400 audit(1793610051.387:337): avc: denied { write } for pid=2599 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.101488][ T24] audit: type=1400 audit(1793610051.717:338): avc: denied { create } for pid=2626 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.142067][ T2634] fuse: Unknown parameter 'grou00000000000000000000' [ 83.299082][ T2643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.960'. [ 84.235253][ T2664] fuse: Unknown parameter 'grou00000000000000000000' [ 84.296095][ T24] audit: type=1400 audit(1793610052.907:339): avc: denied { create } for pid=2669 comm="syz.3.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 84.460434][ T2679] netlink: 32 bytes leftover after parsing attributes in process `syz.4.978'. [ 85.286070][ T2690] tun0: tun_chr_ioctl cmd 1074812117 [ 85.297130][ T2692] fuse: Unknown parameter 'group_i00000000000000000000' [ 85.377204][ T2712] netlink: 68 bytes leftover after parsing attributes in process `syz.4.994'. [ 85.379535][ T2709] 8021q: VLANs not supported on ip6gre0 [ 85.422940][ T24] audit: type=1400 audit(1793610054.037:340): avc: denied { ioctl } for pid=2713 comm="syz.2.998" path="socket:[24206]" dev="sockfs" ino=24206 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 85.457803][ T2717] tpacket_rcv: packet too big, clamped from 4080 to 3936. macoff=96 [ 85.489213][ T24] audit: type=1400 audit(1793610054.037:341): avc: denied { getopt } for pid=2713 comm="syz.2.998" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.536772][ T24] audit: type=1400 audit(1793610054.067:342): avc: denied { watch } for pid=2716 comm="syz.4.999" path="/392/control" dev="tmpfs" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.541972][ C0] ================================================================== [ 85.567422][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 85.569009][ T2726] fuse: Unknown parameter 'group_i00000000000000000000' [ 85.574809][ C0] Read of size 8 at addr ffff888125ff5d90 by task ksoftirqd/0/12 [ 85.574813][ C0] [ 85.574827][ C0] CPU: 0 PID: 12 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 85.574834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.574840][ C0] Call Trace: [ 85.574856][ C0] __dump_stack+0x21/0x24 [ 85.574867][ C0] dump_stack_lvl+0x1a7/0x208 [ 85.574878][ C0] ? show_regs_print_info+0x18/0x18 [ 85.574893][ C0] ? thaw_kernel_threads+0x220/0x220 [ 85.574907][ C0] print_address_description+0x7f/0x2c0 [ 85.574919][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 85.574937][ C0] kasan_report+0x100/0x140 [ 85.574949][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 85.574962][ C0] __asan_report_load8_noabort+0x14/0x20 [ 85.574974][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 85.574985][ C0] rcu_do_batch+0x448/0xaf0 [ 85.574999][ C0] ? local_bh_enable+0x20/0x20 [ 85.575013][ C0] ? __traceiter_rcu_stall_warning+0xb0/0xb0 [ 85.575029][ C0] ? trace_buffer_unlock_commit_regs+0x13d/0x6a0 [ 85.575041][ C0] rcu_core+0x50a/0xca0 [ 85.575088][ C0] ? trace_event_raw_event_softirq+0x130/0x1b0 [ 85.695191][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 85.700433][ C0] ? perf_trace_irq_handler_exit+0x300/0x300 [ 85.706449][ C0] ? tasklet_action_common+0x33a/0x560 [ 85.711926][ C0] ? rh_string+0x400/0x400 [ 85.716381][ C0] rcu_core_si+0x9/0x10 [ 85.720572][ C0] __do_softirq+0x255/0x563 [ 85.725105][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 85.730329][ C0] run_ksoftirqd+0x23/0x30 [ 85.734775][ C0] smpboot_thread_fn+0x464/0x820 [ 85.739744][ C0] kthread+0x324/0x3b0 [ 85.743841][ C0] ? cpu_report_death+0x1b0/0x1b0 [ 85.749034][ C0] ? kthread_blkcg+0xd0/0xd0 [ 85.753651][ C0] ret_from_fork+0x1f/0x30 [ 85.758084][ C0] [ 85.760442][ C0] Allocated by task 2717: [ 85.764794][ C0] __kasan_kmalloc+0xd4/0x100 [ 85.769581][ C0] __kmalloc+0x19f/0x330 [ 85.773857][ C0] l2tp_session_create+0x39/0xb60 [ 85.778911][ C0] pppol2tp_connect+0xbf5/0x1640 [ 85.783877][ C0] __sys_connect+0x3ce/0x450 [ 85.788495][ C0] __x64_sys_connect+0x7a/0x90 [ 85.793285][ C0] do_syscall_64+0x31/0x40 [ 85.797730][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.803631][ C0] [ 85.805984][ C0] Freed by task 49: [ 85.809814][ C0] kasan_set_track+0x4a/0x70 [ 85.814433][ C0] kasan_set_free_info+0x23/0x40 [ 85.819390][ C0] ____kasan_slab_free+0x125/0x160 [ 85.824529][ C0] __kasan_slab_free+0x11/0x20 [ 85.829312][ C0] slab_free_freelist_hook+0xc5/0x190 [ 85.834705][ C0] kfree+0xc0/0x270 [ 85.838534][ C0] l2tp_session_put+0xb2/0x1a0 [ 85.843321][ C0] l2tp_session_delete+0x3a9/0x4a0 [ 85.848453][ C0] l2tp_tunnel_del_work+0x180/0x3d0 [ 85.853671][ C0] process_one_work+0x6fd/0xbc0 [ 85.858550][ C0] worker_thread+0xa8e/0x13c0 [ 85.863253][ C0] kthread+0x324/0x3b0 [ 85.867351][ C0] ret_from_fork+0x1f/0x30 [ 85.871790][ C0] [ 85.874141][ C0] Last potentially related work creation: [ 85.879883][ C0] kasan_save_stack+0x3a/0x60 [ 85.884580][ C0] __kasan_record_aux_stack+0xd2/0x100 [ 85.890063][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 85.895992][ C0] call_rcu+0x11a/0x1090 [ 85.900269][ C0] pppol2tp_release+0x1e3/0x2b0 [ 85.905139][ C0] sock_close+0xb8/0x200 [ 85.909394][ C0] __fput+0x2dc/0x730 [ 85.913419][ C0] ____fput+0x15/0x20 [ 85.917420][ C0] task_work_run+0x127/0x190 [ 85.922024][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 85.927236][ C0] exit_to_user_mode_prepare+0x76/0xa0 [ 85.933059][ C0] syscall_exit_to_user_mode+0x1d/0x40 [ 85.938527][ C0] do_syscall_64+0x3d/0x40 [ 85.942957][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.948863][ C0] [ 85.951206][ C0] The buggy address belongs to the object at ffff888125ff5c00 [ 85.951206][ C0] which belongs to the cache kmalloc-512 of size 512 [ 85.965274][ C0] The buggy address is located 400 bytes inside of [ 85.965274][ C0] 512-byte region [ffff888125ff5c00, ffff888125ff5e00) [ 85.978555][ C0] The buggy address belongs to the page: [ 85.984221][ C0] page:ffffea000497fd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x125ff4 [ 85.994498][ C0] head:ffffea000497fd00 order:2 compound_mapcount:0 compound_pincount:0 [ 86.002833][ C0] flags: 0x4000000000010200(slab|head) [ 86.008324][ C0] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043080 [ 86.016918][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 86.025516][ C0] page dumped because: kasan: bad access detected [ 86.031986][ C0] page_owner tracks the page as allocated [ 86.037827][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 282, ts 23867461267, free_ts 0 [ 86.056077][ C0] prep_new_page+0x176/0x190 [ 86.060690][ C0] get_page_from_freelist+0x225f/0x23f0 [ 86.066247][ C0] __alloc_pages_nodemask+0x29a/0x640 [ 86.071648][ C0] new_slab+0x84/0x3f0 [ 86.075731][ C0] ___slab_alloc+0x2f8/0x4c0 [ 86.080473][ C0] __slab_alloc+0x63/0xa0 [ 86.084916][ C0] kmem_cache_alloc_trace+0x1a8/0x2e0 [ 86.090301][ C0] fqdir_init+0x59/0x180 [ 86.094572][ C0] nf_ct_net_init+0x2f/0x2f0 [ 86.099746][ C0] ops_init+0x2c0/0x470 [ 86.103927][ C0] setup_net+0x34f/0xae0 [ 86.108184][ C0] copy_net_ns+0x314/0x520 [ 86.112621][ C0] create_new_namespaces+0x3a8/0x650 [ 86.117916][ C0] unshare_nsproxy_namespaces+0x120/0x170 [ 86.123657][ C0] ksys_unshare+0x4fa/0x820 [ 86.128261][ C0] __x64_sys_unshare+0x38/0x40 [ 86.133115][ C0] page_owner free stack trace missing [ 86.138492][ C0] [ 86.140825][ C0] Memory state around the buggy address: [ 86.146465][ C0] ffff888125ff5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.154538][ C0] ffff888125ff5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.162610][ C0] >ffff888125ff5d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.170680][ C0] ^ [ 86.175386][ C0] ffff888125ff5e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.183459][ C0] ffff888125ff5e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.191548][ C0] ================================================================== [ 86.199615][ C0] Disabling lock debugging due to kernel taint [ 86.281000][ T287] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 86.521003][ T287] usb 1-1: Using ep0 maxpacket: 8 [ 86.641125][ T287] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 86.649495][ T287] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.659361][ T287] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 86.669757][ T287] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 86.679764][ T287] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.692795][ T287] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 86.701939][ T287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.517958][ T15] usb 1-1: USB disconnect, device number 13