last executing test programs: 46.278575419s ago: executing program 1 (id=298): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c6e66732c616c6c6f775f7574696d653d30303030303030303000303004000000000000003030302c6e6f646f74732c646f74732c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,\x00'], 0x1, 0x22d, &(0x7f0000000300)="$eJzs3b2KE1EYBuDP3exu2MatxWLAxiqodzDICuKAEJlCKwdWm10RZpvRKpfhNXhJXsZW6UbMhPwZbTQes/M8EOaFl8B3mpwU5yRv73+4vPh4/b799iWGwywGEZOYRpzFQRxG5878eTDLx7FqEgDAvhmPqzz1DOxWXefVUUSc/NSUX5MMBAAAAAAAAAAAwB9z/h8A+sf5/9uvrvPqdP79bZ3z/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA607a92/7mlXo+AODvs/8DQP/Y/wGgf+z/ANA/r16/eZEXxfk4y4YRN5OmbMru2fXPnhfnj7KZs+W7bpqmPFz0j7s+W++P4nTeP9naH8fDB13/o3v6stjoT+Ji98sHAAAAAAAAAAAAAAAAAACA/8IoW9h6v380+lXfpZXfB9i4vz+Ie4N/tgwAAAAAAAAAAAAAAAAAAADYa9efPl9WV1fvakEQhEVI/ckEAAAAAAAAAAAAAAAAAAD9s7z0m3oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhn+f//uwup1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w/cAAAD//wu+k9A=") r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0xfffffffd) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000002590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 45.254500648s ago: executing program 1 (id=325): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x0, 0xf, 0x21, "03914ea04f52a0756debe60a459882da488c80ca5127fbb863e339481efa5557ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 41.433284164s ago: executing program 1 (id=381): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x20060400) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 40.528311514s ago: executing program 1 (id=396): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file4\x00', 0x800, &(0x7f0000000180), 0x21, 0x5554, &(0x7f000000ae40)="$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") r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001440)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xa060, 0x2, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000002004ddb49a000000000000000000f8ff00080000000000001ae60000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd0000003d0325fe000000010000001000"}}) 40.0929179s ago: executing program 1 (id=398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@allocspi={0x1dc, 0x16, 0x1, 0x70bd28, 0x25dfdbfe, {{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, 0x4e24, 0x5, 0x4e22, 0xffc, 0x0, 0x20, 0x20, 0x62}, {@in6=@private1={0xfc, 0x1, '\x00', 0xfd}, 0x4d6, 0x32}, @in=@loopback, {0xc, 0x80000010, 0x1000000000000101, 0xfffffffffffffff7, 0x1, 0x8, 0x6, 0xaad0}, {0x800000000000b2, 0x3, 0xc, 0x3}, {0x3, 0x0, 0x6}, 0x80, 0x3500, 0x6, 0x0, 0xde, 0x11}, 0x3, 0x1ff}, [@sa={0xe4, 0x6, {{@in6=@mcast1, @in=@empty, 0x4e22, 0x0, 0x4e21, 0xff, 0xa, 0x20, 0x20, 0x28d89383f5e46238}, {@in=@broadcast, 0x4d2, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x8000000000000000, 0x2, 0xffff, 0x200, 0xffff, 0x8, 0x9, 0x1000}, {0x1, 0x800, 0x1ff, 0x1}, {0x7, 0x0, 0x5688}, 0x70bd2a, 0x0, 0xa, 0x4, 0x2, 0x20}}]}, 0x1dc}}, 0x20000084) 39.713355028s ago: executing program 1 (id=405): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x40, 0xffff, 0x3ff, 0x3ff}, 0x10) 39.641319724s ago: executing program 32 (id=405): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000001c0)=@req={0x40, 0xffff, 0x3ff, 0x3ff}, 0x10) 4.551033901s ago: executing program 3 (id=991): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) utime(0x0, &(0x7f0000001d40)={0xfffffffffffffffe, 0xfff}) 4.461516525s ago: executing program 3 (id=992): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b70500000000000061108a0000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9805837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8afef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb246ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4030b34c27a2f7fcd66ddde687c1255d0779ffec72ada8598e222d66bc90dacf240fe12755f780048804400f49d77b81534a8f1b0de80c49c7d9c87888801d819daaddb0c57513fdf7d0e942a799143dccc213cac7e8092d691a7894678472ba1970b4d6e393158dafeebae0a9d89e6e639115ddc7b54139b5b47f3d583c16b4d2da0a5c7b5ea751d03cc71fdd61140d66ff1ccfcbe83e40156854900"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 4.406690172s ago: executing program 3 (id=993): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(&(0x7f0000000140)=""/237, 0xed) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 3.520951342s ago: executing program 3 (id=996): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0xd, &(0x7f0000000300)={0x80, 0xb21}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r3 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', 0x0, 0x408, &(0x7f0000000440)={[{@uuid_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@context={'context', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, 'syz1\x00'}}]}) 2.614181822s ago: executing program 3 (id=1010): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 2.206801954s ago: executing program 0 (id=1023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x8004745a, &(0x7f0000000180)) 2.206714264s ago: executing program 0 (id=1024): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) 2.206593554s ago: executing program 0 (id=1025): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0xfd, 0x11a3, &(0x7f0000001280)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="31830000000000000000190000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1.608013532s ago: executing program 4 (id=1031): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000001c0)=""/220, 0x3, 0xdc, 0x0, 0x6}, 0x28) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 1.493239478s ago: executing program 4 (id=1035): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x70bd27, 0xa, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0/file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 624.13166ms ago: executing program 0 (id=1038): syz_emit_ethernet(0x212, &(0x7f0000000c40)={@local, @multicast, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x1d4, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x20}, @mcast2, {[@hopopts={0x2f, 0x31, '\x00', [@pad1, @generic={0x3, 0xdb, "73e31544cbcc6a47bc01dcd171c3c132b8d4a48dac5ff2d3e0d9a19cb7229ee5f6614f36fc6d21bb02fe9b56f8b5a3203d4e9cf443fd36dcda33763ff606c605ad45ada8a448576285e1f6fb34348e0194864cf225a91a9b1a9c5dce8115d7a31d028c371b0809bd1861220452da63c961982bd8cb076620b3d0d9a2fceb2634396391c8fd6d7a61d70222b5393d91b248f14a1077381bee7da63c1d90bf180d4e42c08b827bf89c93426c0c5f30ecac19f8fecf49862d1f67b03b63786c8c9ea6fecfabd9cb2ea64fe1195e50edd3d6fa8b7f497f8240e928cc40"}, @pad1, @enc_lim={0x4, 0x1, 0x4}, @generic={0x2, 0x9d, "ed1a395bae81b19037dfac89cf2054bda64b86429b4bd2dd1fd394c3a98b7db94991ace4fa1aa61ba83fa1f1cce04a79d79fdd19a7bfcdfe6ac919910bf792f7bfcce1384b2dcbefb5156d66e7ea1505230f424b4db9bd8e0c424ad896f00c68df672080c15e064e9745166061edba23cf83c0d838518c42415c87605f469900e766ca6cb2ee6b0614b1eb46378c9651d8c2b63681044c68de6d37a151"}, @pad1]}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}}}}}}}}, 0x0) 602.133481ms ago: executing program 4 (id=1039): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x4000002, 0x4) 532.123596ms ago: executing program 0 (id=1040): mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000180000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000075000/0x3000)=nil) 532.015825ms ago: executing program 0 (id=1041): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 531.957725ms ago: executing program 5 (id=1042): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7c, 0xdc, 0x2, 0x3}, {0x6, 0x8, 0x60, 0x5}]}) 499.105042ms ago: executing program 5 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/4096, 0x1000) 471.275726ms ago: executing program 4 (id=1044): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xe05, 0x3a, '/selin\x87\x00\x00\x00ccess\x00', 0x3a, 'kfree\x00', 0x3a, './file0'}, 0x3d) 362.719669ms ago: executing program 5 (id=1045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 362.64071ms ago: executing program 4 (id=1046): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) 362.56509ms ago: executing program 5 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8}, @TCA_PIE_ALPHA={0x8}]}}]}, 0x40}}, 0x0) 353.413414ms ago: executing program 4 (id=1048): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf, 0x4]}, 0x45c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 317.876642ms ago: executing program 2 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 270.698305ms ago: executing program 5 (id=1050): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 211.866775ms ago: executing program 2 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000002ec0)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xd}, {0xa, 0xc}, {0xa}}}, 0x24}}, 0x0) 193.899353ms ago: executing program 2 (id=1052): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000900), 0x10, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000600)='ip_vti0\x00', 0x10) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 42.640508ms ago: executing program 2 (id=1053): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 42.528508ms ago: executing program 2 (id=1054): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r1, r0, 0x0) 19.76261ms ago: executing program 2 (id=1055): clock_adjtime(0xffffffd3, &(0x7f00000004c0)={0x767, 0x4, 0x26, 0x100000000000009, 0x8, 0x1, 0x8000000064a, 0x0, 0x9657, 0xcd15, 0xd2e, 0xd3b0, 0x0, 0xb, 0x5, 0xcc4, 0x2efa, 0x1, 0x2, 0x4, 0x1, 0x6, 0x11, 0xfffffffffffffffa, 0x1, 0x2000008000000}) 17.133581ms ago: executing program 5 (id=1056): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000140)={0xfa, 0x8}) 0s ago: executing program 3 (id=1057): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 0s ago: executing program 5 (id=1058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.861538][ T30] audit: type=1400 audit(1768012213.321:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 21.218956][ T30] audit: type=1400 audit(1768012220.731:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.222483][ T273] cgroup: Unknown subsys name 'net' [ 21.241838][ T30] audit: type=1400 audit(1768012220.731:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.269080][ T30] audit: type=1400 audit(1768012220.761:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.269551][ T273] cgroup: Unknown subsys name 'devices' [ 21.412933][ T273] cgroup: Unknown subsys name 'hugetlb' [ 21.418571][ T273] cgroup: Unknown subsys name 'rlimit' [ 21.677676][ T30] audit: type=1400 audit(1768012221.191:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.701028][ T30] audit: type=1400 audit(1768012221.191:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.725917][ T30] audit: type=1400 audit(1768012221.191:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.732734][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.757921][ T30] audit: type=1400 audit(1768012221.271:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.774576][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.783995][ T30] audit: type=1400 audit(1768012221.271:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.818359][ T30] audit: type=1400 audit(1768012221.281:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.844158][ T30] audit: type=1400 audit(1768012221.281:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.462490][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.469578][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.477243][ T281] device bridge_slave_0 entered promiscuous mode [ 23.487550][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.494966][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.502457][ T281] device bridge_slave_1 entered promiscuous mode [ 23.522197][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.529264][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.536765][ T282] device bridge_slave_0 entered promiscuous mode [ 23.544636][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.551770][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.559122][ T282] device bridge_slave_1 entered promiscuous mode [ 23.629513][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.636664][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.644189][ T284] device bridge_slave_0 entered promiscuous mode [ 23.658772][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.666112][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.673826][ T284] device bridge_slave_1 entered promiscuous mode [ 23.732010][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.739078][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.746582][ T283] device bridge_slave_0 entered promiscuous mode [ 23.764633][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.771865][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.779368][ T283] device bridge_slave_1 entered promiscuous mode [ 23.830108][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.837197][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.844646][ T285] device bridge_slave_0 entered promiscuous mode [ 23.864777][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.871936][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.879360][ T285] device bridge_slave_1 entered promiscuous mode [ 23.948274][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.955527][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.962840][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.970002][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.003354][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.010450][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.017743][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.024804][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.034527][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.041659][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.048975][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.056064][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.069527][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.076772][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.084243][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.091300][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.130916][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.138361][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.145628][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.154620][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.162046][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.169399][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.176772][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.184261][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.191815][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.214446][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.222790][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.229971][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.251737][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.259662][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.267282][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.274783][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.283120][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.290169][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.297668][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.305880][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.312946][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.320370][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.328513][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.335590][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.343074][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.351700][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.358737][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.392142][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.402561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.411131][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.418173][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.425709][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.433752][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.441745][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.449877][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.456967][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.464436][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.472817][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.479843][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.487277][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.495272][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.503334][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.511545][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.535837][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.544040][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.554311][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.563437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.578564][ T282] device veth0_vlan entered promiscuous mode [ 24.589699][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.598077][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.606610][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.614815][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.623304][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.630857][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.638242][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.646745][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.655127][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.662804][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.677682][ T284] device veth0_vlan entered promiscuous mode [ 24.688035][ T281] device veth0_vlan entered promiscuous mode [ 24.696837][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.705329][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.713539][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.720601][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.728711][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.737334][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.745787][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.754422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.762813][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.769933][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.777416][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.785458][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.793669][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.801958][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.811052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.819390][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.827772][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.835477][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.843166][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.850784][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.858216][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.872384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.880686][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.888718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.897103][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.906877][ T282] device veth1_macvtap entered promiscuous mode [ 24.922029][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.929759][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.938631][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.949003][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.957066][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.968523][ T284] device veth1_macvtap entered promiscuous mode [ 24.981574][ T283] device veth0_vlan entered promiscuous mode [ 24.988445][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.996149][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.004192][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.012961][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.021367][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.028933][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.037367][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.045865][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.054376][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.062890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.071510][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.079902][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.088178][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.096402][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.104059][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.115788][ T281] device veth1_macvtap entered promiscuous mode [ 25.123688][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.131993][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.140111][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.151440][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.159634][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.182506][ T285] device veth0_vlan entered promiscuous mode [ 25.183329][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 25.197425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.206542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.215059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.223797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.232427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.240826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.249512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.258027][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.277741][ T283] device veth1_macvtap entered promiscuous mode [ 25.304112][ T336] loop3: detected capacity change from 0 to 512 [ 25.308873][ T285] device veth1_macvtap entered promiscuous mode [ 25.323523][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.334176][ T336] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.348692][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.381718][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.383711][ T336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 25.396546][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.408063][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.415442][ T336] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.417892][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.430072][ T336] EXT4-fs (loop3): 1 truncate cleaned up [ 25.439300][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.443020][ T336] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000066,nodioread_nolock,nodiscard,noquota,,errors=continue. Quota mode: none. [ 25.452994][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.478934][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.487772][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.497913][ T336] EXT4-fs warning (device loop3): ext4_group_extend:1852: can't read last block, resize aborted [ 25.534673][ T348] loop4: detected capacity change from 0 to 512 [ 25.564909][ T348] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 25.685101][ T362] loop3: detected capacity change from 0 to 256 [ 26.792652][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 26.792667][ T30] audit: type=1400 audit(1768012226.311:121): avc: denied { prog_run } for pid=381 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.844614][ T30] audit: type=1400 audit(1768012226.361:122): avc: denied { create } for pid=391 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 26.878772][ T388] loop4: detected capacity change from 0 to 512 [ 26.885867][ T30] audit: type=1400 audit(1768012226.381:123): avc: denied { read write } for pid=389 comm="syz.0.22" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.910598][ T30] audit: type=1400 audit(1768012226.381:124): avc: denied { open } for pid=389 comm="syz.0.22" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.911971][ T388] ======================================================= [ 26.911971][ T388] WARNING: The mand mount option has been deprecated and [ 26.911971][ T388] and is ignored by this kernel. Remove the mand [ 26.911971][ T388] option from the mount to silence this warning. [ 26.911971][ T388] ======================================================= [ 26.934827][ T30] audit: type=1400 audit(1768012226.381:125): avc: denied { mount } for pid=387 comm="syz.4.21" name="/" dev="ramfs" ino=15847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.003725][ T30] audit: type=1400 audit(1768012226.381:126): avc: denied { remount } for pid=387 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 27.031475][ T388] EXT4-fs (loop4): dax option not supported [ 27.036994][ T30] audit: type=1400 audit(1768012226.391:127): avc: denied { mounton } for pid=387 comm="syz.4.21" path="/2/file0" dev="ramfs" ino=15847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 27.133453][ T30] audit: type=1400 audit(1768012226.421:128): avc: denied { create } for pid=393 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.156494][ T30] audit: type=1400 audit(1768012226.511:129): avc: denied { write } for pid=393 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.177714][ T30] audit: type=1400 audit(1768012226.511:130): avc: denied { read } for pid=393 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.432233][ T413] loop4: detected capacity change from 0 to 16 [ 27.652480][ T413] erofs: (device loop4): mounted with root inode @ nid 36. [ 28.077967][ T428] loop2: detected capacity change from 0 to 256 [ 28.130862][ T428] exfat: Deprecated parameter 'namecase' [ 28.142340][ T428] exfat: Unknown parameter 'keep_last_dots' [ 28.302375][ T434] netlink: 'syz.2.40': attribute type 4 has an invalid length. [ 28.404134][ T439] loop2: detected capacity change from 0 to 1024 [ 28.440125][ T436] loop3: detected capacity change from 0 to 2048 [ 28.510185][ T439] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.571490][ T436] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.640334][ T436] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.852247][ T456] loop2: detected capacity change from 0 to 1024 [ 28.866819][ T459] fs-verity: sha512 using implementation "sha512-avx2" [ 28.954505][ T456] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 28.954505][ T456] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 28.954505][ T456] [ 29.030498][ T456] EXT4-fs (loop2): Unrecognized mount option "permit_directio" or missing value [ 29.228766][ T459] syz.3.41 (459) used greatest stack depth: 20896 bytes left [ 29.616999][ T490] loop1: detected capacity change from 0 to 256 [ 29.839958][ T501] loop4: detected capacity change from 0 to 256 [ 29.860655][ T501] exfat: Unknown parameter 'keep_last_dots' [ 30.151418][ T508] loop2: detected capacity change from 0 to 40427 [ 30.172861][ T508] F2FS-fs (loop2): invalid crc value [ 30.186878][ T508] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.237958][ T508] F2FS-fs (loop2): Start checkpoint disabled! [ 30.244964][ T508] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 30.285501][ T332] attempt to access beyond end of device [ 30.285501][ T332] loop2: rw=2049, want=40992, limit=40427 [ 30.406155][ T334] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.144710][ T518] loop3: detected capacity change from 0 to 40427 [ 31.178786][ T530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 31.187718][ T334] usb 5-1: Using ep0 maxpacket: 8 [ 31.194999][ T518] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 31.218028][ T518] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 31.248786][ T518] F2FS-fs (loop3): invalid crc value [ 31.273269][ T518] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.314140][ T518] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 31.320564][ T334] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 31.321321][ T518] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 31.330397][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.359941][ T282] attempt to access beyond end of device [ 31.359941][ T282] loop3: rw=2049, want=45112, limit=40427 [ 31.417384][ T544] loop2: detected capacity change from 0 to 128 [ 31.433090][ T544] FAT-fs (loop2): Unrecognized mount option "dos1xfloppy=win95" or missing value [ 31.608391][ T559] loop3: detected capacity change from 0 to 256 [ 31.703469][ T559] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 31.920273][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 31.920292][ T30] audit: type=1400 audit(1768012231.421:168): avc: denied { ioctl } for pid=558 comm="syz.3.81" path="/11/file0/blkio.bfq.io_queued" dev="loop3" ino=1048608 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.117091][ T30] audit: type=1400 audit(1768012231.631:169): avc: denied { bind } for pid=566 comm="syz.1.89" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.137152][ T30] audit: type=1400 audit(1768012231.631:170): avc: denied { name_bind } for pid=566 comm="syz.1.89" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 32.158354][ T30] audit: type=1400 audit(1768012231.631:171): avc: denied { node_bind } for pid=566 comm="syz.1.89" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 32.190480][ T30] audit: type=1400 audit(1768012231.711:172): avc: denied { read write } for pid=570 comm="syz.1.91" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.218961][ T30] audit: type=1400 audit(1768012231.711:173): avc: denied { open } for pid=570 comm="syz.1.91" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.242237][ T30] audit: type=1400 audit(1768012231.711:174): avc: denied { ioctl } for pid=570 comm="syz.1.91" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 32.308197][ T30] audit: type=1400 audit(1768012231.821:175): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.527624][ T582] bridge0: port 3(syz_tun) entered blocking state [ 32.534274][ T582] bridge0: port 3(syz_tun) entered disabled state [ 32.543214][ T582] device syz_tun entered promiscuous mode [ 32.549500][ T582] bridge0: port 3(syz_tun) entered blocking state [ 32.555990][ T582] bridge0: port 3(syz_tun) entered forwarding state [ 32.824670][ T30] audit: type=1400 audit(1768012232.341:176): avc: denied { create } for pid=576 comm="syz.0.95" dev="anon_inodefs" ino=16098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.869035][ T30] audit: type=1400 audit(1768012232.341:177): avc: denied { ioctl } for pid=576 comm="syz.0.95" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16098 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.915742][ T592] loop3: detected capacity change from 0 to 256 [ 33.127667][ T583] usb 5-1: USB disconnect, device number 2 [ 33.529422][ T638] loop4: detected capacity change from 0 to 512 [ 33.603349][ T646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 33.630517][ T646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'. [ 33.645210][ T651] loop4: detected capacity change from 0 to 512 [ 33.661363][ T651] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.709853][ T651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.125: iget: bad extra_isize 90 (inode size 256) [ 33.757463][ T651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.125: error while reading EA inode 11 err=-117 [ 33.802883][ T651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.125: iget: bad extra_isize 90 (inode size 256) [ 33.830477][ T651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.125: error while reading EA inode 11 err=-117 [ 33.889508][ T651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #18: comm syz.4.125: iget: bad extra_isize 90 (inode size 256) [ 33.904681][ T651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.125: error while reading EA inode 18 err=-117 [ 33.917925][ T651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #18: comm syz.4.125: iget: bad extra_isize 90 (inode size 256) [ 33.931632][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.940708][ T651] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.125: error while reading EA inode 18 err=-117 [ 33.953543][ T651] EXT4-fs (loop4): 1 orphan inode deleted [ 33.959402][ T651] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,acl,debug_want_extra_isize=0x000000000000005a,noinit_itable,lazytime,acl,dioread_nolock,quota,nodiscard,,errors=continue. Quota mode: writeback. [ 34.040025][ T669] loop4: detected capacity change from 0 to 256 [ 36.533425][ T702] netlink: 'syz.1.140': attribute type 3 has an invalid length. [ 36.566056][ T708] loop3: detected capacity change from 0 to 128 [ 36.888239][ T720] loop1: detected capacity change from 0 to 40427 [ 36.931962][ T720] F2FS-fs (loop1): fault_injection options not supported [ 36.950379][ T720] F2FS-fs (loop1): fault_type options not supported [ 36.960836][ T720] F2FS-fs (loop1): invalid crc value [ 36.977807][ T720] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.989784][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 36.989797][ T30] audit: type=1400 audit(1768012236.501:193): avc: denied { read } for pid=746 comm="syz.3.163" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.004901][ T747] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 37.042799][ T30] audit: type=1400 audit(1768012236.521:194): avc: denied { open } for pid=746 comm="syz.3.163" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.078463][ T30] audit: type=1400 audit(1768012236.521:195): avc: denied { ioctl } for pid=746 comm="syz.3.163" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.106663][ T720] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.141851][ T30] audit: type=1400 audit(1768012236.661:196): avc: denied { create } for pid=719 comm="syz.1.154" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 37.169637][ T281] attempt to access beyond end of device [ 37.169637][ T281] loop1: rw=2049, want=45112, limit=40427 [ 37.197416][ T30] audit: type=1400 audit(1768012236.681:197): avc: denied { unlink } for pid=282 comm="syz-executor" name="file0" dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 37.255190][ T30] audit: type=1400 audit(1768012236.701:198): avc: denied { write } for pid=752 comm="syz.3.164" path="socket:[16338]" dev="sockfs" ino=16338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.503113][ T30] audit: type=1400 audit(1768012236.931:199): avc: denied { read } for pid=758 comm="syz.3.168" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.730261][ T30] audit: type=1400 audit(1768012236.931:200): avc: denied { open } for pid=758 comm="syz.3.168" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.770804][ T771] tap0: tun_chr_ioctl cmd 35108 [ 37.779765][ T775] loop2: detected capacity change from 0 to 512 [ 37.889712][ T30] audit: type=1400 audit(1768012237.171:201): avc: denied { write } for pid=766 comm="syz.2.172" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 37.925009][ T775] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 37.954028][ T775] EXT4-fs (loop2): invalid journal inode [ 37.994701][ T775] EXT4-fs (loop2): can't get journal size [ 38.051167][ T775] EXT4-fs (loop2): 1 truncate cleaned up [ 38.056887][ T775] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,grpquota,sysvgroups,lazytime,,errors=continue. Quota mode: writeback. [ 38.134633][ T30] audit: type=1400 audit(1768012237.651:202): avc: denied { create } for pid=793 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.206130][ T798] loop1: detected capacity change from 0 to 512 [ 38.315622][ T798] EXT4-fs (loop1): Test dummy encryption mode enabled [ 38.325122][ T798] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.338736][ T798] EXT4-fs (loop1): 1 truncate cleaned up [ 38.345747][ T798] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,max_dir_size_kb=0x0000000000000006,,errors=continue. Quota mode: none. [ 38.415720][ T815] process 'syz.0.187' launched './file0' with NULL argv: empty string added [ 38.442653][ T798] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 38.460512][ T798] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 38.472778][ T798] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz.1.183: Siphash requires key [ 38.567328][ T829] loop3: detected capacity change from 0 to 128 [ 38.602057][ T829] FAT-fs (loop3): bogus sectors per cluster 0 [ 38.608506][ T829] FAT-fs (loop3): Can't find a valid FAT filesystem [ 38.696625][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.290337][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 39.440505][ T26] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 39.472561][ T26] usb 5-1: config 0 has no interface number 0 [ 39.629998][ T26] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 39.641013][ T26] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 39.780323][ T26] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 39.789608][ T26] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 39.862997][ T26] usb 5-1: Product: syz [ 39.867225][ T26] usb 5-1: SerialNumber: syz [ 39.980562][ T26] usb 5-1: config 0 descriptor?? [ 40.385173][ T26] usb 5-1: USB disconnect, device number 3 [ 40.603974][ T920] loop3: detected capacity change from 0 to 128 [ 40.641995][ T920] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.653433][ T920] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.719757][ T920] syz.3.234 (pid 920) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 40.733052][ T920] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 40.743678][ T920] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 41.710765][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 42.945111][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 42.945126][ T30] audit: type=1326 audit(1768012242.461:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=979 comm="syz.1.257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda28b1c749 code=0x0 [ 42.983803][ T982] netlink: 44 bytes leftover after parsing attributes in process `syz.4.258'. [ 42.993229][ T982] netlink: 43 bytes leftover after parsing attributes in process `syz.4.258'. [ 43.002735][ T982] netlink: 'syz.4.258': attribute type 6 has an invalid length. [ 43.010816][ T982] netlink: 'syz.4.258': attribute type 5 has an invalid length. [ 43.018473][ T982] netlink: 43 bytes leftover after parsing attributes in process `syz.4.258'. [ 43.190301][ T39] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 43.206102][ T39] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 43.223584][ T39] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.236953][ T39] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 43.246645][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.291475][ T39] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 43.340333][ T960] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 43.493672][ T39] usb 4-1: USB disconnect, device number 2 [ 43.710282][ T960] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 43.720727][ T960] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 43.729849][ T960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.822828][ T960] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 44.015852][ T960] usb 5-1: USB disconnect, device number 4 [ 44.055609][ T30] audit: type=1400 audit(1768012243.571:214): avc: denied { setopt } for pid=971 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.159704][ T1020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 44.266445][ T1012] loop1: detected capacity change from 0 to 40427 [ 44.371976][ T1012] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 44.390288][ T1012] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.454965][ T1012] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.553823][ T1027] loop2: detected capacity change from 0 to 40427 [ 44.565321][ T1027] F2FS-fs (loop2): fault_injection options not supported [ 44.574566][ T1027] F2FS-fs (loop2): fault_type options not supported [ 44.582578][ T1012] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.589681][ T1027] F2FS-fs (loop2): invalid crc value [ 44.594473][ T1027] F2FS-fs (loop2): Found nat_bits in checkpoint [ 44.595295][ T1012] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.804612][ T1027] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 44.966049][ T281] attempt to access beyond end of device [ 44.966049][ T281] loop1: rw=2049, want=45104, limit=40427 [ 44.981947][ T284] attempt to access beyond end of device [ 44.981947][ T284] loop2: rw=2049, want=45104, limit=40427 [ 45.145732][ T1044] device syzkaller0 entered promiscuous mode [ 45.252101][ T30] audit: type=1400 audit(1768012244.771:215): avc: denied { read } for pid=1047 comm="syz.1.282" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.276597][ T30] audit: type=1400 audit(1768012244.801:216): avc: denied { open } for pid=1047 comm="syz.1.282" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.308069][ T30] audit: type=1400 audit(1768012244.821:217): avc: denied { mount } for pid=1051 comm="syz.2.286" name="/" dev="pstore" ino=13824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 45.544264][ T30] audit: type=1400 audit(1768012245.041:218): avc: denied { read } for pid=1058 comm="syz.4.288" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.633993][ T1066] loop3: detected capacity change from 0 to 16 [ 45.642509][ T30] audit: type=1400 audit(1768012245.041:219): avc: denied { open } for pid=1058 comm="syz.4.288" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.696930][ T1066] erofs: (device loop3): mounted with root inode @ nid 36. [ 45.799735][ T30] audit: type=1400 audit(1768012245.041:220): avc: denied { ioctl } for pid=1058 comm="syz.4.288" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 45.828778][ T30] audit: type=1400 audit(1768012245.041:221): avc: denied { set_context_mgr } for pid=1058 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 45.849242][ T30] audit: type=1400 audit(1768012245.111:222): avc: denied { nlmsg_write } for pid=1060 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 45.999331][ T1070] attempt to access beyond end of device [ 45.999331][ T1070] loop3: rw=0, want=40, limit=16 [ 46.012461][ T1070] attempt to access beyond end of device [ 46.012461][ T1070] loop3: rw=0, want=40, limit=16 [ 46.354983][ T1077] loop4: detected capacity change from 0 to 1024 [ 46.380350][ T1077] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.400739][ T1077] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.407324][ T1077] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.296: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.430457][ T1077] EXT4-fs (loop4): 1 orphan inode deleted [ 46.437361][ T1077] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.449675][ T1082] loop1: detected capacity change from 0 to 128 [ 46.560109][ T1088] loop3: detected capacity change from 0 to 256 [ 46.632904][ T1088] exfat: Deprecated parameter 'namecase' [ 46.647897][ T1097] loop2: detected capacity change from 0 to 512 [ 46.663038][ T1088] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 47.147060][ T1122] /dev/loop0: Can't open blockdev [ 47.631915][ T1151] fuse: root generation should be zero [ 48.172891][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 48.172906][ T30] audit: type=1400 audit(1768012247.691:236): avc: denied { listen } for pid=1162 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.199594][ T1163] Zero length message leads to an empty skb [ 48.927166][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 48.959106][ T1197] loop3: detected capacity change from 0 to 512 [ 49.018136][ T30] audit: type=1400 audit(1768012248.531:237): avc: denied { mount } for pid=1204 comm="syz.0.348" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 49.098921][ T1197] EXT4-fs (loop3): Ignoring removed bh option [ 49.114319][ T1197] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 49.343802][ T30] audit: type=1400 audit(1768012248.861:238): avc: denied { setopt } for pid=1212 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.390251][ T1197] EXT4-fs (loop3): 1 truncate cleaned up [ 49.430327][ T1197] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,abort,,errors=continue. Quota mode: writeback. [ 49.606728][ T1197] EXT4-fs warning (device loop3): verify_group_input:147: Cannot add at group 25 (only 1 groups) [ 49.631154][ T1228] overlayfs: failed to resolve './bus': -2 [ 49.690960][ T30] audit: type=1326 audit(1768012249.191:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1231 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda82ea749 code=0x7ffc0000 [ 49.714498][ T30] audit: type=1326 audit(1768012249.201:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1231 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fcda82ea749 code=0x7ffc0000 [ 49.747642][ T30] audit: type=1326 audit(1768012249.201:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1231 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda82ea749 code=0x7ffc0000 [ 49.810269][ T20] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 49.824669][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.875832][ T1245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.366'. [ 49.890708][ T20] usb 2-1: config 0 descriptor?? [ 50.054733][ T1256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 50.240261][ T372] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 50.401644][ T30] audit: type=1400 audit(1768012249.921:242): avc: denied { ioctl } for pid=1261 comm="syz.2.372" path="socket:[19018]" dev="sockfs" ino=19018 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.438549][ T1264] sock: sock_timestamping_bind_phc: sock not bind to device [ 50.458363][ T30] audit: type=1400 audit(1768012249.971:243): avc: denied { bind } for pid=1265 comm="syz.2.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.490253][ T372] usb 4-1: Using ep0 maxpacket: 8 [ 50.620289][ T372] usb 4-1: config 0 has no interfaces? [ 50.793356][ T372] usb 4-1: New USB device found, idVendor=19d2, idProduct=0167, bcdDevice=bc.89 [ 50.802517][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.810941][ T372] usb 4-1: Product: syz [ 50.815188][ T372] usb 4-1: Manufacturer: syz [ 50.819823][ T372] usb 4-1: SerialNumber: syz [ 50.831299][ T372] usb 4-1: config 0 descriptor?? [ 51.213520][ T39] usb 2-1: USB disconnect, device number 2 [ 51.522080][ T372] usb 4-1: USB disconnect, device number 3 [ 51.561256][ T30] audit: type=1400 audit(1768012251.071:244): avc: denied { mounton } for pid=1288 comm="syz.2.382" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 51.792252][ T30] audit: type=1400 audit(1768012251.311:245): avc: denied { read } for pid=1292 comm="syz.2.384" path="socket:[19060]" dev="sockfs" ino=19060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.045121][ T1309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=1309 comm=syz.2.391 [ 52.432715][ T1319] loop1: detected capacity change from 0 to 40427 [ 52.453836][ T1319] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 52.470866][ T1319] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 52.482805][ T1319] F2FS-fs (loop1): invalid crc value [ 52.489900][ T1319] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.546209][ T1319] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 52.553654][ T1319] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 52.574817][ T281] attempt to access beyond end of device [ 52.574817][ T281] loop1: rw=524288, want=45072, limit=40427 [ 52.586917][ T281] attempt to access beyond end of device [ 52.586917][ T281] loop1: rw=0, want=45072, limit=40427 [ 52.612442][ T281] attempt to access beyond end of device [ 52.612442][ T281] loop1: rw=2049, want=45104, limit=40427 [ 52.628249][ T1330] loop4: detected capacity change from 0 to 512 [ 52.657512][ T1330] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.672126][ T1330] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.684458][ T1330] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.399: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 52.705971][ T1330] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 12: comm syz.4.399: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 52.727126][ T1330] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.399: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 52.748775][ T1330] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 14: comm syz.4.399: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.771082][ T1330] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 15: comm syz.4.399: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 52.792172][ T1330] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.399: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 52.813743][ T1330] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 17: comm syz.4.399: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 52.850795][ T1330] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 18: comm syz.4.399: lblock 23 mapped to illegal pblock 18 (length 1) [ 52.872079][ T1330] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 19: comm syz.4.399: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 52.893038][ T1340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 52.910464][ T1330] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 20: comm syz.4.399: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 53.423865][ T1359] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.438439][ T1368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 53.456381][ T1359] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.470306][ T1368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.414'. [ 53.477435][ T1359] device bridge_slave_0 entered promiscuous mode [ 53.488764][ T45] device bridge_slave_1 left promiscuous mode [ 53.495694][ T285] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 53.510758][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.523049][ T45] device bridge_slave_0 left promiscuous mode [ 53.546533][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.560390][ T45] device veth1_macvtap left promiscuous mode [ 53.566506][ T45] device veth0_vlan left promiscuous mode [ 53.683324][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 53.683339][ T30] audit: type=1400 audit(1768012253.201:248): avc: denied { create } for pid=1375 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.708853][ T1359] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.718440][ T1359] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.721637][ T30] audit: type=1400 audit(1768012253.221:249): avc: denied { setopt } for pid=1375 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.736615][ T1359] device bridge_slave_1 entered promiscuous mode [ 53.890490][ T30] audit: type=1400 audit(1768012253.411:250): avc: denied { write } for pid=1397 comm="syz.4.425" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.919128][ T1400] capability: warning: `syz.0.426' uses 32-bit capabilities (legacy support in use) [ 53.928275][ T30] audit: type=1400 audit(1768012253.431:251): avc: denied { open } for pid=1397 comm="syz.4.425" path="/dev/input/event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.958883][ T1359] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.966007][ T1359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.973330][ T1359] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.980427][ T1359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.047002][ T30] audit: type=1400 audit(1768012253.431:252): avc: denied { mount } for pid=1399 comm="syz.0.426" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.075286][ T30] audit: type=1400 audit(1768012253.431:253): avc: denied { ioctl } for pid=1397 comm="syz.4.425" path="/dev/input/event2" dev="devtmpfs" ino=270 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.101513][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.119141][ T1409] loop4: detected capacity change from 0 to 8192 [ 54.127456][ T687] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.135521][ T687] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.161086][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.169905][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.179349][ T687] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.186465][ T687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.203086][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.211702][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.220059][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.227149][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.327139][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.344699][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.358854][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.367162][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.511163][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.519874][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.541174][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.551229][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.566682][ T1359] device veth0_vlan entered promiscuous mode [ 54.576217][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.590838][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.611591][ T1359] device veth1_macvtap entered promiscuous mode [ 54.624464][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.633553][ T30] audit: type=1400 audit(1768012254.091:254): avc: denied { getopt } for pid=1439 comm="syz.0.443" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.664037][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.694193][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.705532][ T30] audit: type=1400 audit(1768012254.091:255): avc: denied { map } for pid=1439 comm="syz.0.443" path="socket:[19264]" dev="sockfs" ino=19264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.729099][ T30] audit: type=1400 audit(1768012254.091:256): avc: denied { read accept } for pid=1439 comm="syz.0.443" path="socket:[19264]" dev="sockfs" ino=19264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.745049][ T1450] loop4: detected capacity change from 0 to 512 [ 54.759718][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.768198][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.776762][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.785110][ T1421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.797240][ T1450] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.812614][ T30] audit: type=1400 audit(1768012254.331:257): avc: denied { mounton } for pid=1359 comm="syz-executor" path="/root/syzkaller.nqdpCK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.841415][ T1450] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.446: Invalid block bitmap block 0 in block_group 0 [ 54.856171][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 54.864674][ T1450] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 54.873864][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 54.880655][ T1450] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.446: attempt to clear invalid blocks 983261 len 1 [ 54.900380][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 54.907126][ T1450] EXT4-fs error (device loop4): __ext4_get_inode_loc:4358: comm syz.4.446: Invalid inode table block 0 in block_group 0 [ 54.920917][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 54.927517][ T1450] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5881: Corrupt filesystem [ 54.937494][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 54.944087][ T1450] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 54.953659][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 54.960309][ T1450] EXT4-fs error (device loop4): __ext4_get_inode_loc:4358: comm syz.4.446: Invalid inode table block 0 in block_group 0 [ 54.973412][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 54.980007][ T1450] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5881: Corrupt filesystem [ 54.997128][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 55.004707][ T1450] EXT4-fs error (device loop4): ext4_truncate:4310: inode #11: comm syz.4.446: mark_inode_dirty error [ 55.022982][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 55.029629][ T1450] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 55.038982][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 55.045654][ T1450] EXT4-fs error (device loop4): __ext4_get_inode_loc:4358: comm syz.4.446: Invalid inode table block 0 in block_group 0 [ 55.058711][ T1450] EXT4-fs (loop4): Remounting filesystem read-only [ 55.065672][ T1450] EXT4-fs (loop4): 1 truncate cleaned up [ 55.071696][ T1450] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001fc,noblock_validity,. Quota mode: none. [ 55.660231][ T372] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 55.920239][ T372] usb 5-1: Using ep0 maxpacket: 8 [ 56.046098][ T1501] loop5: detected capacity change from 0 to 40427 [ 56.053206][ T372] usb 5-1: config 6 has an invalid interface number: 218 but max is 0 [ 56.062045][ T372] usb 5-1: config 6 has no interface number 0 [ 56.068253][ T372] usb 5-1: config 6 interface 218 has no altsetting 0 [ 56.138249][ T1514] loop3: detected capacity change from 0 to 256 [ 56.246898][ T1514] FAT-fs (loop3): Directory bread(block 64) failed [ 56.257219][ T1501] F2FS-fs (loop5): Found nat_bits in checkpoint [ 56.270454][ T372] usb 5-1: New USB device found, idVendor=0403, idProduct=fad0, bcdDevice= 1.42 [ 56.292839][ T1514] FAT-fs (loop3): Directory bread(block 65) failed [ 56.299533][ T1514] FAT-fs (loop3): Directory bread(block 66) failed [ 56.306780][ T372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.329740][ T372] usb 5-1: Product: syz [ 56.342143][ T1514] FAT-fs (loop3): Directory bread(block 67) failed [ 56.350385][ T372] usb 5-1: Manufacturer: syz [ 56.355036][ T372] usb 5-1: SerialNumber: syz [ 56.367759][ T1514] FAT-fs (loop3): Directory bread(block 68) failed [ 56.380794][ T1501] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 56.389858][ T1514] FAT-fs (loop3): Directory bread(block 69) failed [ 56.410150][ T1514] FAT-fs (loop3): Directory bread(block 70) failed [ 56.492994][ T1501] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 56.500953][ T1514] FAT-fs (loop3): Directory bread(block 71) failed [ 56.536345][ T1514] FAT-fs (loop3): Directory bread(block 72) failed [ 56.571578][ T1514] FAT-fs (loop3): Directory bread(block 73) failed [ 57.775543][ T1514] attempt to access beyond end of device [ 57.775543][ T1514] loop3: rw=2049, want=1324, limit=256 [ 57.890881][ T372] ftdi_sio 5-1:6.218: FTDI USB Serial Device converter detected [ 57.899089][ T372] usb 5-1: Detected SIO [ 57.916883][ T372] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 57.945887][ T372] usb 5-1: USB disconnect, device number 5 [ 57.985406][ T372] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 58.005447][ T372] ftdi_sio 5-1:6.218: device disconnected [ 58.087778][ T1558] loop3: detected capacity change from 0 to 256 [ 58.135113][ T1558] exfat: Deprecated parameter 'utf8' [ 58.150623][ T1558] exfat: Unknown parameter 'keep_last_dots' [ 58.837088][ T1583] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 58.861220][ T1593] tipc: Started in network mode [ 58.866223][ T1593] tipc: Node identity 4, cluster identity 4711 [ 58.986219][ T1593] tipc: Node number set to 4 [ 59.090029][ T1609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.507'. [ 59.099384][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 59.099418][ T30] audit: type=1400 audit(1768012258.601:278): avc: denied { nlmsg_read } for pid=1597 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.935249][ T30] audit: type=1400 audit(1768012259.441:279): avc: denied { create } for pid=1623 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.650720][ T30] audit: type=1400 audit(1768012260.161:280): avc: denied { accept } for pid=1658 comm="syz.5.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.586454][ T30] audit: type=1400 audit(1768012261.101:281): avc: denied { write } for pid=1685 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 61.632199][ T30] audit: type=1400 audit(1768012261.141:282): avc: denied { create } for pid=1686 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.652032][ T30] audit: type=1400 audit(1768012261.141:283): avc: denied { ioctl } for pid=1686 comm="syz.0.542" path="socket:[20604]" dev="sockfs" ino=20604 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.896677][ T1720] tipc: Started in network mode [ 61.901743][ T291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 61.909353][ T1720] tipc: Node identity a26dd3c919bb, cluster identity 4711 [ 61.916727][ T1720] tipc: Enabled bearer , priority 0 [ 61.924014][ T1720] device syzkaller0 entered promiscuous mode [ 61.934598][ T1720] tipc: Resetting bearer [ 61.941159][ T1714] tipc: Resetting bearer [ 61.947742][ T1714] tipc: Disabling bearer [ 62.034521][ T30] audit: type=1400 audit(1768012261.551:284): avc: denied { sys_admin } for pid=1721 comm="syz.4.558" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 62.133062][ T30] audit: type=1400 audit(1768012261.651:285): avc: denied { append } for pid=1728 comm="syz.4.561" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.170234][ T30] audit: type=1400 audit(1768012261.651:286): avc: denied { map } for pid=1728 comm="syz.4.561" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 62.310379][ T291] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.319173][ T291] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 62.333801][ T291] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.343229][ T291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 62.354646][ T291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 62.408474][ T30] audit: type=1326 audit(1768012261.921:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1738 comm="syz.0.565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcda82ea749 code=0x0 [ 62.490316][ T291] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.499469][ T291] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.507524][ T291] usb 4-1: Product: syz [ 62.511821][ T291] usb 4-1: Manufacturer: syz [ 62.550911][ T291] cdc_wdm 4-1:1.0: skipping garbage [ 62.556302][ T291] cdc_wdm 4-1:1.0: skipping garbage [ 62.563249][ T291] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 62.752676][ T583] usb 4-1: USB disconnect, device number 4 [ 63.142278][ T1761] kvm: pic: single mode not supported [ 63.142375][ T1761] kvm: pic: non byte read [ 63.152866][ T1761] kvm: pic: non byte read [ 63.157483][ T1761] kvm: pic: single mode not supported [ 63.157496][ T1761] kvm: pic: level sensitive irq not supported [ 63.163209][ T1761] kvm: pic: non byte read [ 63.174104][ T1761] kvm: pic: single mode not supported [ 63.174159][ T1761] kvm: pic: non byte read [ 63.184655][ T1761] kvm: pic: non byte read [ 63.189441][ T1761] kvm: pic: non byte read [ 63.600275][ T1785] loop3: detected capacity change from 0 to 40427 [ 63.650858][ T1785] F2FS-fs (loop3): fault_injection options not supported [ 63.665744][ T1785] F2FS-fs (loop3): fault_type options not supported [ 63.682696][ T1785] F2FS-fs (loop3): invalid crc value [ 63.698161][ T1785] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 63.713214][ T1785] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 63.953568][ T1791] loop4: detected capacity change from 0 to 1024 [ 64.050806][ T1791] EXT4-fs (loop4): Ignoring removed nobh option [ 64.062059][ T1791] EXT4-fs (loop4): Ignoring removed bh option [ 64.068317][ T1791] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.125441][ T1791] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,quota,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 64.171033][ T30] audit: type=1400 audit(1768012263.691:288): avc: denied { mounton } for pid=1790 comm="syz.4.585" path="/97/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.280393][ T1791] loop_set_status: loop4 () has still dirty pages (nrpages=3) [ 64.289694][ T30] audit: type=1400 audit(1768012263.801:289): avc: denied { map } for pid=1790 comm="syz.4.585" path="/97/bus/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.317230][ T30] audit: type=1400 audit(1768012263.831:290): avc: denied { rmdir } for pid=285 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.340321][ T30] audit: type=1400 audit(1768012263.831:291): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.362862][ T30] audit: type=1400 audit(1768012263.831:292): avc: denied { unlink } for pid=285 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 64.605242][ T30] audit: type=1400 audit(1768012263.831:293): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 64.625561][ T30] audit: type=1400 audit(1768012263.861:294): avc: denied { unlink } for pid=285 comm="syz-executor" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.916177][ T1824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 64.939151][ T1826] loop4: detected capacity change from 0 to 512 [ 64.957778][ T1826] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 64.968562][ T1826] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 64.979575][ T1826] EXT4-fs (loop4): Unrecognized mount option "euid<00000000000000000000" or missing value [ 65.621043][ T1851] overlayfs: conflicting options: userxattr,metacopy=on [ 65.659383][ T30] audit: type=1400 audit(1768012265.171:295): avc: denied { connect } for pid=1852 comm="syz.4.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.843000][ T30] audit: type=1400 audit(1768012265.361:296): avc: denied { append } for pid=1866 comm="syz.3.615" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.869714][ T1867] loop6: detected capacity change from 0 to 7 [ 65.888537][ T1869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 65.905440][ T30] audit: type=1400 audit(1768012265.381:297): avc: denied { create } for pid=1866 comm="syz.3.615" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.988239][ T1872] loop5: detected capacity change from 0 to 512 [ 66.018756][ T1872] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.052418][ T1872] EXT4-fs (loop5): 1 truncate cleaned up [ 66.058591][ T1872] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nombcache,debug_want_extra_isize=0x0000000000000068,i_version,bsdgroups,nodioread_nolock,,errors=continue. Quota mode: none. [ 66.717687][ T1886] netlink: 280 bytes leftover after parsing attributes in process `syz.2.622'. [ 66.880530][ T1900] fuse: Bad value for 'fd' [ 67.041934][ T1910] netlink: 9 bytes leftover after parsing attributes in process `syz.5.630'. [ 67.102126][ T1910] device gretap0 entered promiscuous mode [ 67.134373][ T1910] device gretap0 left promiscuous mode [ 67.406217][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 67.425055][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.481118][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 67.536151][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.559958][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.620765][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.642539][ T1934] loop3: detected capacity change from 0 to 2048 [ 67.674726][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.683210][ T687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.118400][ T1944] netlink: 'syz.5.648': attribute type 9 has an invalid length. [ 68.126633][ T1944] netlink: 'syz.5.648': attribute type 6 has an invalid length. [ 68.134564][ T1944] netlink: 'syz.5.648': attribute type 7 has an invalid length. [ 68.142524][ T1944] netlink: 'syz.5.648': attribute type 8 has an invalid length. [ 68.921192][ T6] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 68.941681][ T1979] overlayfs: failed to clone lowerpath [ 68.952998][ T1979] overlayfs: failed to clone lowerpath [ 68.955425][ T1981] syz.4.662[1981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.958640][ T1981] syz.4.662[1981] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.963224][ T1979] overlayfs: failed to clone lowerpath [ 69.004379][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 70.230046][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 70.230062][ T30] audit: type=1400 audit(1768012269.741:304): avc: denied { mounton } for pid=2015 comm="syz.5.677" path="/35/file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.286492][ T2022] overlayfs: failed to clone upperpath [ 70.310380][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.321669][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.331492][ T6] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 70.340836][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.354852][ T6] usb 4-1: config 0 descriptor?? [ 70.620249][ T960] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 70.890239][ T960] usb 5-1: Using ep0 maxpacket: 8 [ 71.010442][ T960] usb 5-1: config 162 has an invalid interface number: 97 but max is 0 [ 71.018911][ T960] usb 5-1: config 162 has no interface number 0 [ 71.025421][ T960] usb 5-1: config 162 interface 97 has no altsetting 0 [ 71.190501][ T960] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 71.199730][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.207996][ T960] usb 5-1: Product: syz [ 71.212293][ T960] usb 5-1: Manufacturer: syz [ 71.216973][ T960] usb 5-1: SerialNumber: syz [ 71.253372][ T6] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 71.275031][ T6] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 71.461205][ T6] usb 4-1: USB disconnect, device number 5 [ 72.023368][ T2078] loop3: detected capacity change from 0 to 512 [ 72.052026][ T2078] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 72.062237][ T2078] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 72.072098][ T2078] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 72.082924][ T2078] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.090954][ T2078] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 72.099310][ T2078] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.106364][ T2078] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.703: bg 0: block 34: padding at end of block bitmap is not set [ 72.121027][ T2078] Quota error (device loop3): write_blk: dquota write failed [ 72.128445][ T2078] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 72.138379][ T2078] EXT4-fs error (device loop3): ext4_acquire_dquot:6200: comm syz.3.703: Failed to acquire dquot type 1 [ 72.150439][ T2078] EXT4-fs (loop3): 1 truncate cleaned up [ 72.156385][ T2078] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 72.510149][ T2108] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 72.735638][ T2118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 73.013015][ T2104] loop3: detected capacity change from 0 to 40427 [ 73.052546][ T2104] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 73.060857][ T2104] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 73.073505][ T2104] F2FS-fs (loop3): invalid crc value [ 73.120924][ T2104] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.188546][ T2104] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 73.195808][ T2104] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.225426][ T2104] attempt to access beyond end of device [ 73.225426][ T2104] loop3: rw=2049, want=45184, limit=40427 [ 73.237686][ T2104] attempt to access beyond end of device [ 73.237686][ T2104] loop3: rw=2049, want=77872, limit=40427 [ 73.249389][ T2104] attempt to access beyond end of device [ 73.249389][ T2104] loop3: rw=2049, want=45184, limit=40427 [ 73.277696][ T8] attempt to access beyond end of device [ 73.277696][ T8] loop3: rw=1, want=77864, limit=40427 [ 73.288904][ T8] attempt to access beyond end of device [ 73.288904][ T8] loop3: rw=1, want=45184, limit=40427 [ 73.299994][ T8] attempt to access beyond end of device [ 73.299994][ T8] loop3: rw=1, want=77872, limit=40427 [ 73.471478][ T960] usb 5-1: USB disconnect, device number 6 [ 73.950233][ T583] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 74.190215][ T583] usb 6-1: Using ep0 maxpacket: 8 [ 74.349166][ T30] audit: type=1400 audit(1768012273.864:305): avc: denied { connect } for pid=2173 comm="syz.0.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.360503][ T583] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 74.419618][ T583] usb 6-1: config 179 has no interface number 0 [ 74.431701][ T583] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 74.793626][ T583] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 74.836071][ T583] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 74.977742][ T2190] loop3: detected capacity change from 0 to 1024 [ 75.008571][ T583] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 75.036805][ T583] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 75.054951][ T2190] EXT4-fs (loop3): Ignoring removed bh option [ 75.158992][ T2190] EXT4-fs (loop3): dax option not supported [ 75.272860][ T583] usb 6-1: config 179 interface 65 has no altsetting 0 [ 75.588847][ T583] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 75.606308][ T583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.662231][ T583] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input5 [ 75.693576][ T30] audit: type=1400 audit(1768012275.204:306): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=744 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.720999][ T30] audit: type=1400 audit(1768012275.204:307): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=744 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.744437][ T30] audit: type=1400 audit(1768012275.204:308): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=744 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.249424][ T6] usb 6-1: USB disconnect, device number 2 [ 76.260220][ T6] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 76.505807][ T2235] tmpfs: Unsupported parameter 'mpol' [ 76.650640][ T2262] loop4: detected capacity change from 0 to 128 [ 76.863033][ T2275] loop4: detected capacity change from 0 to 2048 [ 76.888057][ T2275] EXT4-fs (loop4): dax option not supported [ 77.016419][ T2293] capability: warning: `syz.5.793' uses deprecated v2 capabilities in a way that may be insecure [ 77.037788][ T2295] loop4: detected capacity change from 0 to 128 [ 77.112696][ T2295] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.124048][ T2295] ext4 filesystem being mounted at /142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.198331][ T30] audit: type=1400 audit(1768012276.704:309): avc: denied { ioctl } for pid=2294 comm="syz.4.794" path="/142/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop4" ino=13 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.011634][ T2339] loop5: detected capacity change from 0 to 128 [ 78.140940][ T2339] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.166446][ T2339] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.276085][ T2356] loop5: detected capacity change from 0 to 128 [ 78.321369][ T30] audit: type=1400 audit(1768012277.844:310): avc: denied { remount } for pid=2354 comm="syz.5.815" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.381045][ T2365] fuse: Bad value for 'fd' [ 78.431211][ T2356] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2845019697 (182081260608 ns) > initial count (97066405824 ns). Using initial count to start timer. [ 78.850023][ T2397] netlink: 216 bytes leftover after parsing attributes in process `syz.4.833'. [ 79.050316][ T2049] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 79.147549][ T2421] loop5: detected capacity change from 0 to 256 [ 79.315975][ T30] audit: type=1400 audit(1768012278.834:311): avc: denied { read write } for pid=2428 comm="syz.5.849" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.325457][ T583] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.347195][ T30] audit: type=1400 audit(1768012278.834:312): avc: denied { open } for pid=2428 comm="syz.5.849" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.351343][ T583] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.450316][ T2049] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.460516][ T2049] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 79.469558][ T2049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.478691][ T2049] usb 4-1: config 0 descriptor?? [ 79.650267][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 80.010303][ T20] usb 6-1: config 0 has no interfaces? [ 80.090359][ T20] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.099569][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.107603][ T20] usb 6-1: SerialNumber: syz [ 80.112946][ T20] usb 6-1: config 0 descriptor?? [ 80.503291][ T2459] netlink: 40 bytes leftover after parsing attributes in process `syz.4.861'. [ 80.512970][ T2459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2459 comm=syz.4.861 [ 80.543356][ T30] audit: type=1326 audit(1768012280.064:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2462 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed5bf749 code=0x7ffc0000 [ 80.567942][ T30] audit: type=1326 audit(1768012280.094:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2462 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe9ed5bf749 code=0x7ffc0000 [ 80.591521][ T30] audit: type=1326 audit(1768012280.094:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2462 comm="syz.4.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ed5bf749 code=0x7ffc0000 [ 80.676721][ T2476] loop4: detected capacity change from 0 to 256 [ 80.707071][ T2476] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 80.715592][ T2476] FAT-fs (loop4): Filesystem has been set read-only [ 80.722299][ T2476] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 80.730268][ T2476] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 80.738301][ T2476] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 80.798874][ T2049] usb 4-1: USB disconnect, device number 6 [ 80.829932][ T2488] 9pnet: p9_errstr2errno: server reported unknown error [ 80.909930][ T2501] loop4: detected capacity change from 0 to 1024 [ 80.955167][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 80.955180][ T30] audit: type=1326 audit(1768012280.464:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad910b749 code=0x7ffc0000 [ 80.985217][ T30] audit: type=1326 audit(1768012280.464:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ad910b749 code=0x7ffc0000 [ 81.008845][ T30] audit: type=1326 audit(1768012280.464:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad910b749 code=0x7ffc0000 [ 81.034999][ T30] audit: type=1326 audit(1768012280.464:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f9ad910b749 code=0x7ffc0000 [ 81.141088][ T30] audit: type=1326 audit(1768012280.464:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad910b749 code=0x7ffc0000 [ 81.170286][ T30] audit: type=1326 audit(1768012280.464:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ad910b749 code=0x7ffc0000 [ 81.204760][ T30] audit: type=1326 audit(1768012280.464:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2504 comm="syz.3.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad910b749 code=0x7ffc0000 [ 81.228337][ T30] audit: type=1400 audit(1768012280.674:326): avc: denied { write } for pid=2513 comm="syz.3.885" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.294411][ T30] audit: type=1400 audit(1768012280.684:327): avc: denied { ioctl } for pid=2513 comm="syz.3.885" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 81.398177][ T2501] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.509934][ T30] audit: type=1326 audit(1768012280.724:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2496 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda82ea749 code=0x7fc00000 [ 82.126958][ T2555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 82.177663][ T2557] tipc: Started in network mode [ 82.188270][ T2557] tipc: Node identity ac14140f, cluster identity 4711 [ 82.202869][ T2557] tipc: New replicast peer: 255.255.255.255 [ 82.215646][ T2557] tipc: Enabled bearer , priority 10 [ 82.228901][ T2558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 82.247603][ T2558] tipc: Disabling bearer [ 82.297736][ T2548] loop3: detected capacity change from 0 to 40427 [ 82.318967][ T2049] usb 6-1: USB disconnect, device number 3 [ 82.356208][ T2548] F2FS-fs (loop3): invalid crc value [ 82.396212][ T2548] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.522690][ T2548] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.705068][ T282] attempt to access beyond end of device [ 82.705068][ T282] loop3: rw=2049, want=45104, limit=40427 [ 84.014588][ T2597] tipc: Enabled bearer , priority 0 [ 84.188806][ T2597] device syzkaller0 entered promiscuous mode [ 84.201835][ T2597] tipc: Resetting bearer [ 84.213308][ T2595] tipc: Resetting bearer [ 84.221273][ T2595] tipc: Disabling bearer [ 84.765809][ T2627] loop5: detected capacity change from 0 to 512 [ 84.773061][ T2627] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 84.781728][ T2627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 84.798643][ T2627] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.926: invalid indirect mapped block 2683928664 (level 1) [ 84.820276][ T20] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 84.836067][ T2627] EXT4-fs (loop5): Remounting filesystem read-only [ 84.845558][ T2627] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.926: bg 0: block 361: padding at end of block bitmap is not set [ 84.910676][ T2627] EXT4-fs (loop5): Remounting filesystem read-only [ 84.918322][ T2627] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 84.939533][ T2627] EXT4-fs (loop5): Remounting filesystem read-only [ 84.947737][ T2627] EXT4-fs (loop5): 1 truncate cleaned up [ 84.953569][ T2627] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,grpquota,nomblk_io_submit,data_err=ignore,errors=remount-ro,noblock_validity,noauto_da_alloc,. Quota mode: writeback. [ 84.984138][ T2627] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #2: block 5: comm syz.5.926: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 85.010354][ T2627] EXT4-fs (loop5): Remounting filesystem read-only [ 85.024160][ T2627] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #2: comm syz.5.926: directory missing '.' [ 85.130202][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 85.155291][ T2641] fuse: Bad value for 'fd' [ 85.187924][ T2644] overlayfs: failed to clone upperpath [ 85.260299][ T20] usb 5-1: config 0 has no interfaces? [ 85.279582][ T20] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 85.358888][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.379930][ T20] usb 5-1: config 0 descriptor?? [ 85.660039][ T2049] usb 5-1: USB disconnect, device number 7 [ 85.780251][ T960] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 85.902101][ T2684] syz.0.951 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 86.051230][ T960] usb 6-1: Using ep0 maxpacket: 32 [ 86.310475][ T960] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 86.377701][ T960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 86.416614][ T960] usb 6-1: config 0 interface 0 has no altsetting 1 [ 86.820470][ T2711] syz.0.961 uses obsolete (PF_INET,SOCK_PACKET) [ 86.850314][ T960] usb 6-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 86.859531][ T960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.869361][ T960] usb 6-1: Product: syz [ 86.874396][ T960] usb 6-1: Manufacturer: syz [ 86.879619][ T960] usb 6-1: SerialNumber: syz [ 86.887372][ T960] usb 6-1: config 0 descriptor?? [ 87.448056][ T60] usb 6-1: USB disconnect, device number 4 [ 87.925755][ T2765] device veth0 entered promiscuous mode [ 87.943408][ T2767] loop3: detected capacity change from 0 to 512 [ 87.995370][ T2767] EXT4-fs (loop3): 1 truncate cleaned up [ 88.071904][ T2767] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 88.093660][ T2767] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.987: bg 0: block 465: padding at end of block bitmap is not set [ 88.130218][ T60] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 88.380214][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 88.420437][ T372] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 88.510418][ T60] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 88.518721][ T60] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 88.529793][ T60] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 88.540918][ T60] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 88.554120][ T60] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.563938][ T2742] device veth0 left promiscuous mode [ 88.730243][ T60] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 88.739387][ T60] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 88.747914][ T60] usb 5-1: Product: syz [ 88.752149][ T60] usb 5-1: Manufacturer: syz [ 88.756894][ T60] usb 5-1: SerialNumber: syz [ 88.762648][ T60] usb 5-1: config 0 descriptor?? [ 88.790306][ T372] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.799481][ T372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.809212][ T372] usb 6-1: config 0 descriptor?? [ 89.002961][ T372] usb 5-1: USB disconnect, device number 8 [ 89.095801][ T2790] loop3: detected capacity change from 0 to 512 [ 89.118000][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 89.118016][ T30] audit: type=1400 audit(1768012288.634:338): avc: denied { create } for pid=2791 comm="syz.0.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.163167][ T2790] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 89.174564][ T2790] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.349879][ T30] audit: type=1400 audit(1768012288.864:339): avc: denied { mount } for pid=2789 comm="syz.3.996" name="/" dev="configfs" ino=13681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 89.372821][ T30] audit: type=1400 audit(1768012288.864:340): avc: denied { search } for pid=2789 comm="syz.3.996" name="/" dev="configfs" ino=13681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.811346][ T2816] loop4: detected capacity change from 0 to 512 [ 89.886259][ T2816] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 89.920476][ T2816] ext4 filesystem being mounted at /178/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.954024][ T2816] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz.4.1006: invalid size [ 90.138953][ T30] audit: type=1400 audit(1768012289.654:341): avc: denied { bind } for pid=2829 comm="syz.4.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.169407][ T2834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 90.529503][ T60] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 90.810237][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 90.930270][ T60] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 90.938474][ T60] usb 4-1: config 0 has no interface number 1 [ 91.066816][ T1810] usb 6-1: USB disconnect, device number 5 [ 91.082160][ T30] audit: type=1400 audit(1768012290.604:342): avc: denied { connect } for pid=2876 comm="syz.5.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.100567][ T60] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 91.111593][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.119823][ T60] usb 4-1: Product: syz [ 91.124553][ T60] usb 4-1: Manufacturer: syz [ 91.129296][ T60] usb 4-1: SerialNumber: syz [ 91.140822][ T2881] bridge0: port 4(veth1_to_team) entered blocking state [ 91.145707][ T60] usb 4-1: config 0 descriptor?? [ 91.148430][ T2881] bridge0: port 4(veth1_to_team) entered disabled state [ 91.160391][ T2881] device veth1_to_team entered promiscuous mode [ 91.194628][ T2887] loop4: detected capacity change from 0 to 512 [ 91.212226][ T2887] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 91.236763][ T2887] ext4 filesystem being mounted at /184/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.273684][ T2887] EXT4-fs error (device loop4): ext4_do_update_inode:5249: inode #2: comm syz.4.1035: corrupted inode contents [ 91.286372][ T2887] EXT4-fs error (device loop4): ext4_dirty_inode:6085: inode #2: comm syz.4.1035: mark_inode_dirty error [ 91.298284][ T2887] EXT4-fs error (device loop4): ext4_do_update_inode:5249: inode #2: comm syz.4.1035: corrupted inode contents [ 91.310607][ T2887] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.1035: mark_inode_dirty error [ 91.326261][ T30] audit: type=1400 audit(1768012290.844:343): avc: denied { rmdir } for pid=2886 comm="syz.4.1035" name=1C dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 92.043645][ T60] usb 4-1: USB disconnect, device number 7 [ 92.109381][ T30] audit: type=1326 audit(1768012291.624:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2899 comm="syz.5.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f283c00b749 code=0x0 [ 92.199224][ T30] audit: type=1400 audit(1768012291.714:345): avc: denied { mounton } for pid=2904 comm="syz.5.1043" path="/66/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.234187][ T30] audit: type=1400 audit(1768012291.754:346): avc: denied { getattr } for pid=2904 comm="syz.5.1043" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.534604][ T2927] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 92.600900][ T2931] tipc: Failed to remove unknown binding: 66,1,1/0:3284914231/3284914233 [ 92.609486][ T2931] tipc: Failed to remove unknown binding: 66,1,1/0:3284914231/3284914233 [ 92.701702][ T2939] ================================================================== [ 92.709834][ T2939] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 92.718045][ T2939] Read of size 8 at addr ffff8881196b2ac0 by task syz.5.1058/2939 [ 92.725876][ T2939] [ 92.728240][ T2939] CPU: 0 PID: 2939 Comm: syz.5.1058 Not tainted syzkaller #0 [ 92.735657][ T2939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.745764][ T2939] Call Trace: [ 92.749071][ T2939] [ 92.752023][ T2939] __dump_stack+0x21/0x30 [ 92.756391][ T2939] dump_stack_lvl+0xee/0x150 [ 92.761036][ T2939] ? show_regs_print_info+0x20/0x20 [ 92.766274][ T2939] ? load_image+0x3a0/0x3a0 [ 92.770838][ T2939] print_address_description+0x7f/0x2c0 [ 92.776427][ T2939] ? tc_setup_flow_action+0x870/0x3240 [ 92.781941][ T2939] kasan_report+0xf1/0x140 [ 92.786390][ T2939] ? tc_setup_flow_action+0x870/0x3240 [ 92.791880][ T2939] __asan_report_load8_noabort+0x14/0x20 [ 92.797551][ T2939] tc_setup_flow_action+0x870/0x3240 [ 92.802877][ T2939] mall_replace_hw_filter+0x293/0x820 [ 92.808288][ T2939] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 92.814402][ T2939] ? mall_set_parms+0x520/0x520 [ 92.819290][ T2939] ? tcf_exts_destroy+0xb0/0xb0 [ 92.824185][ T2939] ? mall_set_parms+0x1e8/0x520 [ 92.829209][ T2939] mall_change+0x526/0x740 [ 92.833660][ T2939] ? __kasan_check_write+0x14/0x20 [ 92.838808][ T2939] ? mall_get+0xa0/0xa0 [ 92.843015][ T2939] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 92.848943][ T2939] tc_new_tfilter+0x12a2/0x1870 [ 92.853926][ T2939] ? tcf_gate_entry_destructor+0x20/0x20 [ 92.859602][ T2939] ? security_capable+0x87/0xb0 [ 92.864491][ T2939] ? ns_capable+0x8c/0xf0 [ 92.868843][ T2939] ? netlink_net_capable+0x125/0x160 [ 92.874268][ T2939] ? tcf_gate_entry_destructor+0x20/0x20 [ 92.879937][ T2939] rtnetlink_rcv_msg+0x81b/0xb90 [ 92.885030][ T2939] ? rtnetlink_bind+0x80/0x80 [ 92.889749][ T2939] ? memcpy+0x56/0x70 [ 92.893764][ T2939] ? avc_has_perm_noaudit+0x2f4/0x460 [ 92.899178][ T2939] ? arch_stack_walk+0xee/0x140 [ 92.904067][ T2939] ? avc_denied+0x1b0/0x1b0 [ 92.908607][ T2939] ? stack_trace_save+0x98/0xe0 [ 92.913493][ T2939] ? avc_has_perm+0x158/0x240 [ 92.918212][ T2939] ? avc_has_perm_noaudit+0x460/0x460 [ 92.923609][ T2939] ? x64_sys_call+0x4b/0x9a0 [ 92.928223][ T2939] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 92.933627][ T2939] netlink_rcv_skb+0x1e0/0x430 [ 92.938425][ T2939] ? rtnetlink_bind+0x80/0x80 [ 92.943147][ T2939] ? netlink_ack+0xb60/0xb60 [ 92.947762][ T2939] ? __netlink_lookup+0x387/0x3b0 [ 92.952812][ T2939] rtnetlink_rcv+0x1c/0x20 [ 92.957266][ T2939] netlink_unicast+0x876/0xa40 [ 92.962064][ T2939] netlink_sendmsg+0x86a/0xb70 [ 92.966991][ T2939] ? netlink_getsockopt+0x530/0x530 [ 92.972239][ T2939] ? security_socket_sendmsg+0x82/0xa0 [ 92.977730][ T2939] ? netlink_getsockopt+0x530/0x530 [ 92.982959][ T2939] ____sys_sendmsg+0x5a2/0x8c0 [ 92.987752][ T2939] ? __sys_sendmsg_sock+0x40/0x40 [ 92.992809][ T2939] ? import_iovec+0x7c/0xb0 [ 92.997346][ T2939] ___sys_sendmsg+0x1f0/0x260 [ 93.002064][ T2939] ? __sys_sendmsg+0x250/0x250 [ 93.007059][ T2939] ? asm_exc_page_fault+0x27/0x30 [ 93.012149][ T2939] ? __fdget+0x1a1/0x230 [ 93.016436][ T2939] __x64_sys_sendmsg+0x1e2/0x2a0 [ 93.021543][ T2939] ? ___sys_sendmsg+0x260/0x260 [ 93.026468][ T2939] ? __kasan_check_write+0x14/0x20 [ 93.031620][ T2939] ? switch_fpu_return+0x15d/0x2c0 [ 93.036761][ T2939] x64_sys_call+0x4b/0x9a0 [ 93.041216][ T2939] do_syscall_64+0x4c/0xa0 [ 93.045674][ T2939] ? clear_bhb_loop+0x50/0xa0 [ 93.050378][ T2939] ? clear_bhb_loop+0x50/0xa0 [ 93.055195][ T2939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.061137][ T2939] RIP: 0033:0x7f283c00b749 [ 93.066020][ T2939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.085762][ T2939] RSP: 002b:00007f283aa73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.094297][ T2939] RAX: ffffffffffffffda RBX: 00007f283c261fa0 RCX: 00007f283c00b749 [ 93.102475][ T2939] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 93.110477][ T2939] RBP: 00007f283c08ff91 R08: 0000000000000000 R09: 0000000000000000 [ 93.118475][ T2939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.126486][ T2939] R13: 00007f283c262038 R14: 00007f283c261fa0 R15: 00007ffffb362ad8 [ 93.134485][ T2939] [ 93.137525][ T2939] [ 93.139872][ T2939] Allocated by task 2939: [ 93.144215][ T2939] __kasan_kmalloc+0xda/0x110 [ 93.148921][ T2939] __kmalloc+0x13d/0x2c0 [ 93.153196][ T2939] tcf_idr_create+0x5f/0x790 [ 93.157817][ T2939] tcf_idr_create_from_flags+0x61/0x70 [ 93.163300][ T2939] tcf_gact_init+0x346/0x580 [ 93.168048][ T2939] tcf_action_init_1+0x3f7/0x6a0 [ 93.173025][ T2939] tcf_action_init+0x1e9/0x710 [ 93.177950][ T2939] tcf_exts_validate+0x217/0x520 [ 93.183004][ T2939] mall_set_parms+0x48/0x520 [ 93.187622][ T2939] mall_change+0x45a/0x740 [ 93.192066][ T2939] tc_new_tfilter+0x12a2/0x1870 [ 93.196952][ T2939] rtnetlink_rcv_msg+0x81b/0xb90 [ 93.201918][ T2939] netlink_rcv_skb+0x1e0/0x430 [ 93.206709][ T2939] rtnetlink_rcv+0x1c/0x20 [ 93.211148][ T2939] netlink_unicast+0x876/0xa40 [ 93.215931][ T2939] netlink_sendmsg+0x86a/0xb70 [ 93.220722][ T2939] ____sys_sendmsg+0x5a2/0x8c0 [ 93.225515][ T2939] ___sys_sendmsg+0x1f0/0x260 [ 93.230223][ T2939] __x64_sys_sendmsg+0x1e2/0x2a0 [ 93.235199][ T2939] x64_sys_call+0x4b/0x9a0 [ 93.239646][ T2939] do_syscall_64+0x4c/0xa0 [ 93.244097][ T2939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.250024][ T2939] [ 93.252369][ T2939] The buggy address belongs to the object at ffff8881196b2a00 [ 93.252369][ T2939] which belongs to the cache kmalloc-192 of size 192 [ 93.266483][ T2939] The buggy address is located 0 bytes to the right of [ 93.266483][ T2939] 192-byte region [ffff8881196b2a00, ffff8881196b2ac0) [ 93.280133][ T2939] The buggy address belongs to the page: [ 93.285785][ T2939] page:ffffea000465ac80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881196b2600 pfn:0x1196b2 [ 93.297346][ T2939] flags: 0x4000000000000200(slab|zone=1) [ 93.303022][ T2939] raw: 4000000000000200 0000000000000000 0000000100000001 ffff888100042c00 [ 93.311630][ T2939] raw: ffff8881196b2600 000000008010000b 00000001ffffffff 0000000000000000 [ 93.320225][ T2939] page dumped because: kasan: bad access detected [ 93.326698][ T2939] page_owner tracks the page as allocated [ 93.332425][ T2939] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 101, ts 6149911631, free_ts 0 [ 93.347587][ T2939] post_alloc_hook+0x192/0x1b0 [ 93.352376][ T2939] prep_new_page+0x1c/0x110 [ 93.356896][ T2939] get_page_from_freelist+0x2cc5/0x2d50 [ 93.362451][ T2939] __alloc_pages+0x18f/0x440 [ 93.367048][ T2939] new_slab+0xa1/0x4d0 [ 93.371131][ T2939] ___slab_alloc+0x381/0x810 [ 93.375737][ T2939] __slab_alloc+0x49/0x90 [ 93.380105][ T2939] kmem_cache_alloc_trace+0x146/0x270 [ 93.385497][ T2939] kernfs_fop_open+0x343/0xb30 [ 93.390274][ T2939] do_dentry_open+0x834/0x1010 [ 93.395047][ T2939] vfs_open+0x73/0x80 [ 93.399057][ T2939] path_openat+0x2646/0x2f10 [ 93.403658][ T2939] do_filp_open+0x1b3/0x3e0 [ 93.408171][ T2939] do_sys_openat2+0x14c/0x7b0 [ 93.412860][ T2939] __x64_sys_openat+0x136/0x160 [ 93.417739][ T2939] x64_sys_call+0x219/0x9a0 [ 93.422259][ T2939] page_owner free stack trace missing [ 93.427630][ T2939] [ 93.429966][ T2939] Memory state around the buggy address: [ 93.435601][ T2939] ffff8881196b2980: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.443670][ T2939] ffff8881196b2a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.451754][ T2939] >ffff8881196b2a80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 93.459821][ T2939] ^ [ 93.466022][ T2939] ffff8881196b2b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.474096][ T2939] ffff8881196b2b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 93.482164][ T2939] ================================================================== [ 93.490231][ T2939] Disabling lock debugging due to kernel taint [ 93.570423][ T30] audit: type=1326 audit(1768012293.084:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2953 comm="syz.0.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda82ea749 code=0x7ffc0000 [ 93.725310][ T2954] loop3: detected capacity change from 0 to 40427 [ 93.774685][ T2954] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 93.785374][ T2954] F2FS-fs (loop3): invalid crc value [ 93.792094][ T2954] F2FS-fs (loop3): Found nat_bits in checkpoint [ 93.825716][ T2954] F2FS-fs (loop3): recover fsync data on readonly fs [ 93.832985][ T2954] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 93.839661][ T2954] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 93.846694][ T2954] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5