last executing test programs: 23.908074867s ago: executing program 1 (id=112): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./bus\x00', 0x2000884, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=winnt,iocharset=cp850,shname=win95,shortname=win95,shortname=lower,shortname=win95,shortname=winnt,uni_xlate=0,utf8=1,utf8=1,tz=UTC,shortname=lower,iocharset=cp775,shortname=winnt,check=strict,nnonumtail=1,\x00\x00\x00\x00'], 0x1, 0x289, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x4008851) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r3, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r3, 0x0, 0x0) 22.984101196s ago: executing program 1 (id=131): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'veth0_to_bridge\x00', {0x2, 0x4e24, @multicast1}}) 22.941846197s ago: executing program 1 (id=132): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00') lseek(r0, 0x400, 0x0) 22.859502639s ago: executing program 1 (id=133): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus/file0\x00') 22.587295287s ago: executing program 1 (id=138): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x3328}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 21.934483338s ago: executing program 1 (id=147): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd3, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xe8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYRES16=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1c8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 21.889469199s ago: executing program 32 (id=147): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd3, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0xe8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYRES16=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1c8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.843416403s ago: executing program 0 (id=261): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = dup3(r0, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40010140, 0x0) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 10.747721956s ago: executing program 0 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 10.704782427s ago: executing program 0 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) recvmmsg(r3, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) 9.709697808s ago: executing program 0 (id=275): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) 9.272795871s ago: executing program 0 (id=280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) 7.799404847s ago: executing program 0 (id=295): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x2ba312165397e03d, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x0, 0x1b3e, 0x4, 0x40000000000001a, 0x6, 0x6, 0xb, 0x100fff}) 7.799222297s ago: executing program 33 (id=295): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x2ba312165397e03d, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x0, 0x1b3e, 0x4, 0x40000000000001a, 0x6, 0x6, 0xb, 0x100fff}) 6.492158728s ago: executing program 6 (id=296): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 6.210517627s ago: executing program 6 (id=308): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) ioperm(0xc, 0x8, 0xa) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) 6.10139367s ago: executing program 6 (id=310): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 5.879247187s ago: executing program 6 (id=314): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x60, r2, 0x1, 0x70ad2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6d5}, @NL80211_ATTR_PMKID={0x14, 0x55, "f4917f9d306af541fdfb1c3cae4a8e6c"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4a41e669}, @NL80211_ATTR_PMK={0x14, 0xfe, "c085485f183a06fd7c40a6435b518e2a"}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000840) 5.78105236s ago: executing program 4 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) tkill(r3, 0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000300)={[{@debug}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@nobh}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x482, &(0x7f0000001340)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) r4 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) syz_open_procfs(r3, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000500)=r3) socket$inet_udp(0x2, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000440)) 5.77793844s ago: executing program 6 (id=316): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a0001007678"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.067499856s ago: executing program 6 (id=321): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001780)={@cgroup, 0x13, 0x1, 0x521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="34ab000000000000ce77cd70"], 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) dup2(r1, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 1.980257618s ago: executing program 4 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000006000000450000000010"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x800, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffc}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000321, 0xe, 0x0, &(0x7f00000007c0)="63eced8e460100000001acb82304", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.824842073s ago: executing program 2 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') 1.704272467s ago: executing program 4 (id=328): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 1.255372501s ago: executing program 4 (id=329): socketpair(0x28, 0x800, 0x800, &(0x7f0000000000)) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x8}, 0x8) socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@remote, r4}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="00080000075005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.237313511s ago: executing program 2 (id=330): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file7\x00', 0x10, &(0x7f00000002c0)=ANY=[], 0x13, 0x152d, &(0x7f0000004bc0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x80) 1.082430516s ago: executing program 4 (id=331): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1, 0x100, &(0x7f00000004c0)="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"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.073320226s ago: executing program 2 (id=332): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/521], 0x6, 0x2ca, &(0x7f0000000600)="$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") syz_open_dev$mouse(0x0, 0x0, 0x2042) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f0000000340)) 1.073015046s ago: executing program 4 (id=333): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) 984.605219ms ago: executing program 3 (id=334): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 983.954989ms ago: executing program 5 (id=335): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x40082, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4f0}}}, 0x108) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16=r0, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000800) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 887.432742ms ago: executing program 3 (id=336): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xfffc, 0x1}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x4000000) 887.253122ms ago: executing program 3 (id=337): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 887.158932ms ago: executing program 3 (id=338): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 827.652344ms ago: executing program 3 (id=339): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0xd58}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 360.732708ms ago: executing program 5 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 275.419791ms ago: executing program 3 (id=341): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) 275.194251ms ago: executing program 5 (id=342): preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001040)=ANY=[@ANYBLOB="240000002500090122bd7000fcffffff5c0000000800030047"], 0x24}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 253.973662ms ago: executing program 5 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xd5e52a39dc1e9bf4}, 0x8090) 99.300886ms ago: executing program 5 (id=344): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b52, &(0x7f0000000000)=""/14) 98.780797ms ago: executing program 2 (id=345): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x48, 0x10000}, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 60.957507ms ago: executing program 5 (id=346): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x578410eb) 356.9µs ago: executing program 2 (id=347): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="6310", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)="ff5f", 0x2}], 0x1}}], 0x2, 0x40048804) 0s ago: executing program 2 (id=348): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x20000044) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x7, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): rocess permissive=1 [ 13.895854][ T30] audit: type=1400 audit(1782142876.327:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 21.154488][ T30] audit: type=1400 audit(1782142883.597:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.155547][ T277] cgroup: Unknown subsys name 'net' [ 21.177203][ T30] audit: type=1400 audit(1782142883.597:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.204426][ T30] audit: type=1400 audit(1782142883.627:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.204584][ T277] cgroup: Unknown subsys name 'devices' [ 21.343246][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.348859][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.456164][ T30] audit: type=1400 audit(1782142883.897:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.479364][ T30] audit: type=1400 audit(1782142883.897:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.484907][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.504212][ T30] audit: type=1400 audit(1782142883.897:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.535708][ T30] audit: type=1400 audit(1782142883.957:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.561080][ T30] audit: type=1400 audit(1782142883.957:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.591621][ T30] audit: type=1400 audit(1782142884.027:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.617148][ T30] audit: type=1400 audit(1782142884.037:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.617205][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.102915][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.109997][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.117494][ T285] device bridge_slave_0 entered promiscuous mode [ 22.125208][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.132311][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.139551][ T285] device bridge_slave_1 entered promiscuous mode [ 22.186282][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.193432][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.200708][ T286] device bridge_slave_0 entered promiscuous mode [ 22.209204][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.216333][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.223649][ T286] device bridge_slave_1 entered promiscuous mode [ 22.249056][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.256184][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.263569][ T289] device bridge_slave_0 entered promiscuous mode [ 22.271339][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.278434][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.285857][ T289] device bridge_slave_1 entered promiscuous mode [ 22.342581][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.349636][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.357029][ T287] device bridge_slave_0 entered promiscuous mode [ 22.363907][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.370937][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.378489][ T287] device bridge_slave_1 entered promiscuous mode [ 22.492150][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.499210][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.506604][ T288] device bridge_slave_0 entered promiscuous mode [ 22.513421][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.520446][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.528013][ T288] device bridge_slave_1 entered promiscuous mode [ 22.534637][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.541678][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.548923][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.556084][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.569201][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.576266][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.583542][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.590567][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.606037][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.613108][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.620383][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.627451][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.666121][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.673196][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.680467][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.687512][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.715596][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.723011][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.730203][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.737728][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.745133][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.752340][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.759556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.767225][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.774425][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.784355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.791894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.828454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.837093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.845433][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.852468][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.860390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.868753][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.875805][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.883228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.891340][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.898371][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.905835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.914011][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.921145][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.928615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.936640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.944937][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.951979][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.959354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.967339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.975463][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.982495][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.005479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.014416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.022473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.029827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.037719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.046071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.069700][ T287] device veth0_vlan entered promiscuous mode [ 23.076016][ T285] device veth0_vlan entered promiscuous mode [ 23.086368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.095030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.103450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.111306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.118857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.127353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.135464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.153724][ T287] device veth1_macvtap entered promiscuous mode [ 23.160540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.169135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.177723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.196515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.205074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.213424][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.220476][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.227946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.236477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.244641][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.251674][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.259003][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.266690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.274192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.282554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.290617][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.297701][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.305051][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.313493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.321841][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.328859][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.336393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.346102][ T285] device veth1_macvtap entered promiscuous mode [ 23.358003][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.366359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.374577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.382596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.390931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.399503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.407664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.415711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.424020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.444590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.452869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.461105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.470052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.478536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.486703][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.494735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.503158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.527529][ T289] device veth0_vlan entered promiscuous mode [ 23.533954][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 23.535076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.549669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.557655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.565987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.574020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.581984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.590187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.598509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.606363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.614462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.621947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.629320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.636748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.648576][ T286] device veth0_vlan entered promiscuous mode [ 23.685521][ T289] device veth1_macvtap entered promiscuous mode [ 23.696451][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.705502][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.714103][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.722764][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.733744][ T286] device veth1_macvtap entered promiscuous mode [ 23.748038][ T288] device veth0_vlan entered promiscuous mode [ 23.762351][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.782285][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.790726][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.810973][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.830697][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.839194][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.847070][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.856719][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.867161][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.876767][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.895886][ T288] device veth1_macvtap entered promiscuous mode [ 23.904559][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.914165][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.923277][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.938094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.946981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.988160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.992052][ T317] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.997313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.020659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.029509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.110491][ T326] loop2: detected capacity change from 0 to 512 [ 24.152624][ T326] EXT4-fs (loop2): Ignoring removed nobh option [ 24.159200][ T326] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 24.172766][ T326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 24.195574][ T326] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 24.221171][ T326] EXT4-fs (loop2): 1 truncate cleaned up [ 24.227666][ T326] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 24.304034][ T333] netlink: 'syz.4.8': attribute type 13 has an invalid length. [ 24.353294][ T333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8'. [ 24.394350][ T333] device veth0_to_batadv entered promiscuous mode [ 24.469840][ T333] syz.4.8 (333) used greatest stack depth: 21600 bytes left [ 24.518763][ T345] loop0: detected capacity change from 0 to 512 [ 24.535619][ T345] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 24.592436][ T345] fs-verity: sha512 using implementation "sha512-avx2" [ 24.611196][ T345] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.13: bg 0: block 228: padding at end of block bitmap is not set [ 24.651631][ T6] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 24.677599][ T343] loop4: detected capacity change from 0 to 40427 [ 24.696312][ T343] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 24.704154][ T343] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 24.713680][ T343] F2FS-fs (loop4): invalid crc value [ 24.720385][ T343] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.744932][ T343] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 24.754300][ T343] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.057734][ T6] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 25.066843][ T6] usb 3-1: config 0 has no interface number 0 [ 25.095584][ T6] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 25.107673][ T6] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 25.127373][ T6] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 25.146681][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.159922][ T6] usb 3-1: config 0 descriptor?? [ 25.181656][ T335] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 25.410446][ T42] usb 3-1: USB disconnect, device number 2 [ 25.487820][ T373] tipc: Started in network mode [ 25.492776][ T373] tipc: Node identity 4, cluster identity 4711 [ 25.498963][ T373] tipc: Node number set to 4 [ 25.786080][ T379] tipc: Started in network mode [ 25.791372][ T379] tipc: Node identity 0000000000000000002e00000000407f, cluster identity 4711 [ 27.181842][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 27.181859][ T30] audit: type=1400 audit(1782142889.547:160): avc: denied { read } for pid=388 comm="syz.3.25" dev="nsfs" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.194514][ T395] binder: BINDER_SET_CONTEXT_MGR already set [ 27.214793][ T395] binder: 394:395 ioctl 4018620d 2000000002c0 returned -16 [ 27.226522][ T391] device syzkaller0 entered promiscuous mode [ 27.239344][ T391] tipc: Started in network mode [ 27.240494][ T30] audit: type=1400 audit(1782142889.547:161): avc: denied { open } for pid=388 comm="syz.3.25" path="net:[4026532378]" dev="nsfs" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 27.267433][ T30] audit: type=1400 audit(1782142889.617:162): avc: denied { read write } for pid=382 comm="syz.0.23" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.288436][ T391] tipc: Node identity 0ed752d3acc1, cluster identity 4711 [ 27.290880][ T30] audit: type=1400 audit(1782142889.617:163): avc: denied { open } for pid=382 comm="syz.0.23" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.318269][ T391] tipc: Enabled bearer , priority 0 [ 27.321023][ T30] audit: type=1400 audit(1782142889.617:164): avc: denied { ioctl } for pid=382 comm="syz.0.23" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.352896][ T397] tipc: Resetting bearer [ 27.353562][ T30] audit: type=1400 audit(1782142889.627:165): avc: denied { set_context_mgr } for pid=394 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 27.378514][ T30] audit: type=1400 audit(1782142889.627:166): avc: denied { map } for pid=394 comm="syz.1.26" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.402144][ T30] audit: type=1400 audit(1782142889.807:167): avc: denied { setopt } for pid=398 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.428750][ T390] tipc: Resetting bearer [ 27.441917][ T390] tipc: Disabling bearer [ 28.785243][ T414] loop0: detected capacity change from 0 to 512 [ 29.035026][ T414] EXT4-fs (loop0): Ignoring removed nobh option [ 29.188206][ T414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 29.196418][ T414] System zones: 1-12 [ 29.242323][ T414] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz.0.28: corrupted in-inode xattr [ 29.254426][ T414] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.28: couldn't read orphan inode 15 (err -117) [ 29.268750][ T414] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,nobh,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 29.289571][ T30] audit: type=1400 audit(1782142891.727:168): avc: denied { mount } for pid=405 comm="syz.0.28" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.350045][ T412] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 29.489977][ T413] loop2: detected capacity change from 0 to 40427 [ 29.541613][ T30] audit: type=1400 audit(1782142891.977:169): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.623435][ T413] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 29.635403][ T413] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 29.660804][ T413] F2FS-fs (loop2): invalid crc value [ 29.662650][ T411] loop3: detected capacity change from 0 to 40427 [ 29.692553][ T413] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 29.707459][ T411] F2FS-fs (loop3): invalid crc value [ 29.968431][ T411] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.998739][ T430] loop0: detected capacity change from 0 to 16 [ 30.063910][ T430] erofs: (device loop0): mounted with root inode @ nid 36. [ 30.071173][ T430] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 36 is not supported yet [ 30.081199][ T430] SELinux: (dev loop0, type erofs) has no security xattr handler [ 30.095405][ T411] F2FS-fs (loop3): Start checkpoint disabled! [ 30.105246][ T413] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 30.116303][ T411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 30.133098][ T413] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.337373][ T288] attempt to access beyond end of device [ 30.337373][ T288] loop2: rw=2049, want=45104, limit=40427 [ 31.518488][ T45] attempt to access beyond end of device [ 31.518488][ T45] loop3: rw=1, want=81920, limit=40427 [ 31.562217][ T45] attempt to access beyond end of device [ 31.562217][ T45] loop3: rw=1, want=53248, limit=40427 [ 31.947950][ T450] fuse: Bad value for 'fd' [ 31.953418][ T450] process 'syz.0.40' launched './file0' with NULL argv: empty string added [ 31.966475][ T45] attempt to access beyond end of device [ 31.966475][ T45] loop3: rw=1, want=65536, limit=40427 [ 31.980124][ T45] attempt to access beyond end of device [ 31.980124][ T45] loop3: rw=1, want=69640, limit=40427 [ 31.991318][ T45] attempt to access beyond end of device [ 31.991318][ T45] loop3: rw=1, want=69648, limit=40427 [ 32.197469][ T455] loop2: detected capacity change from 0 to 512 [ 32.702169][ T455] EXT4-fs (loop2): Ignoring removed nobh option [ 32.778367][ T45] attempt to access beyond end of device [ 32.778367][ T45] loop3: rw=1, want=69656, limit=40427 [ 32.817726][ T455] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 32.825884][ T455] System zones: 1-12 [ 32.875202][ T455] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #15: comm syz.2.37: corrupted in-inode xattr [ 32.887745][ T455] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.37: couldn't read orphan inode 15 (err -117) [ 32.908857][ T455] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,nobh,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 33.171686][ T454] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 33.187902][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 33.188470][ T30] audit: type=1400 audit(1782142895.617:173): avc: denied { unlink } for pid=458 comm="syz.0.43" name="#1" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 33.222023][ T45] attempt to access beyond end of device [ 33.222023][ T45] loop3: rw=1, want=69664, limit=40427 [ 33.234475][ T45] attempt to access beyond end of device [ 33.234475][ T45] loop3: rw=1, want=69672, limit=40427 [ 33.246670][ T45] attempt to access beyond end of device [ 33.246670][ T45] loop3: rw=1, want=69680, limit=40427 [ 33.264141][ T441] loop1: detected capacity change from 0 to 40427 [ 33.306214][ T441] F2FS-fs (loop1): invalid crc value [ 33.409488][ T449] loop4: detected capacity change from 0 to 40427 [ 33.416587][ T441] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 33.458419][ T449] F2FS-fs (loop4): invalid crc value [ 33.503493][ T449] F2FS-fs (loop4): Found nat_bits in checkpoint [ 33.515122][ T30] audit: type=1326 audit(1782142895.957:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=466 comm="syz.2.44" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301b407e59 code=0x7ffc0000 [ 33.725151][ T30] audit: type=1326 audit(1782142895.987:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=466 comm="syz.2.44" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301b407e59 code=0x7ffc0000 [ 33.771634][ T449] F2FS-fs (loop4): Start checkpoint disabled! [ 33.789261][ T30] audit: type=1326 audit(1782142895.987:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=466 comm="syz.2.44" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301b407e59 code=0x7ffc0000 [ 33.805348][ T449] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 33.831624][ T30] audit: type=1326 audit(1782142895.987:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=466 comm="syz.2.44" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301b407e59 code=0x7ffc0000 [ 33.911828][ T30] audit: type=1326 audit(1782142895.987:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=466 comm="syz.2.44" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f301b407e59 code=0x7ffc0000 [ 33.942734][ T30] audit: type=1326 audit(1782142895.987:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=466 comm="syz.2.44" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301b407e59 code=0x7ffc0000 [ 33.967775][ T30] audit: type=1326 audit(1782142895.987:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=466 comm="syz.2.44" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301b407e59 code=0x7ffc0000 [ 33.993358][ T30] audit: type=1326 audit(1782142895.987:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=466 comm="syz.2.44" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301b407e59 code=0x7ffc0000 [ 34.017977][ T30] audit: type=1326 audit(1782142895.997:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=466 comm="syz.2.44" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f301b407e59 code=0x7ffc0000 [ 35.111668][ T307] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.191643][ T299] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.216942][ T486] 9pnet: Insufficient options for proto=fd [ 35.328079][ T486] syz.0.50 (486) used greatest stack depth: 21000 bytes left [ 35.351679][ T10] handle_bad_sector: 3148 callbacks suppressed [ 35.351698][ T10] attempt to access beyond end of device [ 35.351698][ T10] loop4: rw=1, want=82720, limit=40427 [ 35.403912][ T10] attempt to access beyond end of device [ 35.403912][ T10] loop4: rw=1, want=82728, limit=40427 [ 35.441671][ T299] usb 3-1: Using ep0 maxpacket: 32 [ 35.447866][ T490] loop0: detected capacity change from 0 to 2048 [ 35.454986][ T10] attempt to access beyond end of device [ 35.454986][ T10] loop4: rw=1, want=82736, limit=40427 [ 35.466195][ T10] attempt to access beyond end of device [ 35.466195][ T10] loop4: rw=1, want=82744, limit=40427 [ 35.477357][ T10] attempt to access beyond end of device [ 35.477357][ T10] loop4: rw=1, want=82752, limit=40427 [ 35.488617][ T10] attempt to access beyond end of device [ 35.488617][ T10] loop4: rw=1, want=82760, limit=40427 [ 35.499956][ T10] attempt to access beyond end of device [ 35.499956][ T10] loop4: rw=1, want=82768, limit=40427 [ 35.511243][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.511422][ T10] attempt to access beyond end of device [ 35.511422][ T10] loop4: rw=1, want=82776, limit=40427 [ 35.522544][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 35.541093][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.542245][ T10] attempt to access beyond end of device [ 35.542245][ T10] loop4: rw=1, want=82784, limit=40427 [ 35.551331][ T307] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.562544][ T10] attempt to access beyond end of device [ 35.562544][ T10] loop4: rw=1, want=82792, limit=40427 [ 35.575132][ T299] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 35.593937][ T490] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,max_dir_size_kb=0x000000000000f2a5,errors=remount-ro,sb=0x0000000000000001,. Quota mode: none. [ 35.594218][ T299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.621001][ T307] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.641722][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.661938][ T307] usb 2-1: config 0 descriptor?? [ 35.681951][ T299] usb 3-1: config 0 has no interface number 0 [ 35.688152][ T299] usb 3-1: config 0 interface 8 altsetting 248 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 35.699405][ T299] usb 3-1: config 0 interface 8 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 35.699858][ T490] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Out of memory [ 35.722615][ T490] EXT4-fs (loop0): Remounting filesystem read-only [ 35.722850][ T299] usb 3-1: config 0 interface 8 has no altsetting 0 [ 35.729133][ T490] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #15: comm syz.0.52: mark_inode_dirty error [ 35.747065][ T490] EXT4-fs (loop0): Remounting filesystem read-only [ 35.765577][ T490] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Out of memory [ 35.774894][ T490] EXT4-fs (loop0): Remounting filesystem read-only [ 35.783864][ T490] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #15: comm syz.0.52: mark_inode_dirty error [ 35.797832][ T490] EXT4-fs (loop0): Remounting filesystem read-only [ 35.819211][ T496] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Out of memory [ 35.828919][ T496] EXT4-fs (loop0): Remounting filesystem read-only [ 35.835974][ T496] EXT4-fs error (device loop0): ext4_dirty_inode:6108: inode #15: comm syz.0.52: mark_inode_dirty error [ 35.848353][ T496] EXT4-fs (loop0): Remounting filesystem read-only [ 35.901721][ T299] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 35.910818][ T299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.919732][ T299] usb 3-1: Product: syz [ 35.924407][ T299] usb 3-1: Manufacturer: syz [ 35.931070][ T299] usb 3-1: SerialNumber: syz [ 35.939136][ T505] loop0: detected capacity change from 0 to 512 [ 35.950732][ T299] usb 3-1: config 0 descriptor?? [ 35.956070][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 36.020698][ T505] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 36.039349][ T505] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.055177][ T6] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 36.142835][ T307] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 36.150577][ T307] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 36.158154][ T307] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 36.165841][ T307] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 36.173824][ T307] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 36.181274][ T307] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 36.189187][ T307] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 36.197033][ T307] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 36.207390][ T307] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 36.215289][ T527] loop4: detected capacity change from 0 to 40427 [ 36.275621][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 36.286506][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.294621][ T6] usb 4-1: Product: syz [ 36.298800][ T6] usb 4-1: Manufacturer: syz [ 36.303448][ T6] usb 4-1: SerialNumber: syz [ 36.372314][ T527] F2FS-fs (loop4): invalid crc value [ 36.456534][ T527] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.586224][ T527] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.682387][ T6] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 36.706078][ T6] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 36.720821][ T299] usb 3-1: USB disconnect, device number 3 [ 36.723887][ T540] kvm [539]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 36.737397][ T540] kvm [539]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 36.801377][ T6] usb 4-1: failed to enable PITCH for EP 0x82 [ 36.869551][ T6] usb 4-1: USB disconnect, device number 2 [ 37.227964][ T552] syz.2.65 (552): /proc/551/oom_adj is deprecated, please use /proc/551/oom_score_adj instead. [ 37.570961][ T568] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 37.606392][ T572] ======================================================= [ 37.606392][ T572] WARNING: The mand mount option has been deprecated and [ 37.606392][ T572] and is ignored by this kernel. Remove the mand [ 37.606392][ T572] option from the mount to silence this warning. [ 37.606392][ T572] ======================================================= [ 37.607808][ T568] kvm: pic: non byte read [ 38.214736][ T600] loop0: detected capacity change from 0 to 256 [ 38.253461][ T603] xt_hashlimit: size too large, truncated to 1048576 [ 38.406583][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 38.406606][ T30] audit: type=1400 audit(1782142900.847:225): avc: denied { mount } for pid=599 comm="syz.0.81" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.695156][ T30] audit: type=1400 audit(1782142900.987:226): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.778030][ T30] audit: type=1400 audit(1782142901.117:227): avc: denied { unmount } for pid=617 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.778136][ T375] usb 2-1: USB disconnect, device number 2 [ 38.888148][ T621] loop3: detected capacity change from 0 to 512 [ 38.915067][ T621] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.973951][ T621] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 39.035381][ T621] ext4 filesystem being mounted at /11/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.092190][ T621] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.88: corrupted xattr block 33 [ 39.135932][ T621] EXT4-fs (loop3): Remounting filesystem read-only [ 39.145965][ T621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 39.155060][ T621] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.88: corrupted xattr block 33 [ 39.171854][ T621] EXT4-fs (loop3): Remounting filesystem read-only [ 39.203691][ T625] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.88: Unrecognised inode hash code 20 [ 39.217240][ T621] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 39.231667][ T625] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.88: Corrupt directory, running e2fsck is recommended [ 39.458736][ T632] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 39.596542][ T629] loop1: detected capacity change from 0 to 40427 [ 39.621525][ T629] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 39.639738][ T629] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 39.655280][ T629] F2FS-fs (loop1): fault_type options not supported [ 39.667203][ T629] F2FS-fs (loop1): fault_injection options not supported [ 39.680129][ T629] F2FS-fs (loop1): invalid crc value [ 39.687571][ T629] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.693190][ T30] audit: type=1400 audit(1782142902.077:228): avc: denied { ioctl } for pid=634 comm="syz.2.92" path="socket:[17417]" dev="sockfs" ino=17417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.726605][ T30] audit: type=1400 audit(1782142902.167:229): avc: denied { create } for pid=637 comm="syz.4.93" dev="anon_inodefs" ino=17420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.748356][ T30] audit: type=1400 audit(1782142902.177:230): avc: denied { ioctl } for pid=637 comm="syz.4.93" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17420 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.774451][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.783436][ T629] F2FS-fs (loop1): Start checkpoint disabled! [ 39.790945][ T629] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 39.798075][ T629] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 39.798281][ T644] loop4: detected capacity change from 0 to 1024 [ 39.828405][ T30] audit: type=1400 audit(1782142902.267:231): avc: denied { append } for pid=628 comm="syz.1.90" path="/10/file2/cpuacct.usage_percpu" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.864147][ T644] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 39.893910][ T30] audit: type=1400 audit(1782142902.337:232): avc: denied { setattr } for pid=643 comm="syz.4.94" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.061599][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 40.083875][ T656] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 40.085928][ T664] loop3: detected capacity change from 0 to 1024 [ 40.114473][ T656] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 40.124999][ T665] loop1: detected capacity change from 0 to 128 [ 40.153847][ T664] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.186240][ T30] audit: type=1400 audit(1782142902.627:233): avc: denied { append } for pid=663 comm="syz.3.102" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.211897][ T60] usb 1-1: config 0 has no interfaces? [ 40.253835][ T668] loop4: detected capacity change from 0 to 1024 [ 40.418738][ T668] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,noload,grpjquota=,journal_ioprio=0x0000000000000001,acl,auto_da_alloc=0x0000000000040343,,errors=continue. Quota mode: none. [ 40.424534][ T672] device syzkaller0 entered promiscuous mode [ 40.449465][ T60] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 40.471624][ T60] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 40.480114][ T60] usb 1-1: Product: syz [ 40.482037][ T672] tipc: Enabled bearer , priority 0 [ 40.491135][ T60] usb 1-1: Manufacturer: syz [ 40.495858][ T60] usb 1-1: SerialNumber: syz [ 40.503081][ T60] usb 1-1: config 0 descriptor?? [ 40.572212][ T678] tipc: Resetting bearer [ 40.595142][ T671] tipc: Resetting bearer [ 41.042231][ T60] usb 1-1: USB disconnect, device number 2 [ 41.088747][ T671] tipc: Disabling bearer [ 41.199895][ T689] input: syz0 as /devices/virtual/input/input4 [ 41.248204][ T691] loop2: detected capacity change from 0 to 128 [ 41.287518][ T691] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.308466][ T30] audit: type=1400 audit(1782142903.747:234): avc: denied { write } for pid=693 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.310464][ T691] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.354368][ T699] loop1: detected capacity change from 0 to 256 [ 41.362083][ T699] FAT-fs (loop1): Unrecognized mount option "shname=win95" or missing value [ 41.440729][ T704] loop2: detected capacity change from 0 to 4096 [ 41.465029][ T704] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.589287][ T713] loop3: detected capacity change from 0 to 16 [ 41.623689][ T715] device syzkaller0 entered promiscuous mode [ 41.634177][ T713] erofs: (device loop3): mounted with root inode @ nid 36. [ 41.683101][ T720] loop2: detected capacity change from 0 to 512 [ 41.711182][ T720] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.121: missing EA_INODE flag [ 41.728413][ T720] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.121: error while reading EA inode 12 err=-117 [ 41.741276][ T720] EXT4-fs (loop2): 1 orphan inode deleted [ 41.747155][ T720] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 42.168802][ T743] loop4: detected capacity change from 0 to 2048 [ 42.282994][ T743] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.347996][ T751] loop1: detected capacity change from 0 to 1024 [ 42.407829][ T757] netlink: 140 bytes leftover after parsing attributes in process `syz.3.135'. [ 42.426916][ T757] netlink: 56 bytes leftover after parsing attributes in process `syz.3.135'. [ 42.436867][ T751] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 42.608746][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 42.627596][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 42.649732][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 42.670990][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 42.682209][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 42.723865][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 42.767297][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 42.813879][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 42.834843][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 42.868550][ T287] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 43.150177][ T772] loop4: detected capacity change from 0 to 40427 [ 43.164221][ T10] tipc: Left network mode [ 43.225447][ T772] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 43.242842][ T772] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 43.256696][ T772] F2FS-fs (loop4): invalid crc value [ 43.282806][ T772] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 43.357799][ T772] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 43.381613][ T772] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.567737][ T289] handle_bad_sector: 898 callbacks suppressed [ 43.567773][ T289] attempt to access beyond end of device [ 43.567773][ T289] loop4: rw=2049, want=45104, limit=40427 [ 43.635472][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 43.635485][ T30] audit: type=1400 audit(1782142906.077:268): avc: denied { mounton } for pid=795 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 43.649911][ T463] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.918532][ T795] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.942031][ T795] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.969846][ T795] device bridge_slave_0 entered promiscuous mode [ 43.994396][ T795] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.021614][ T795] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.052800][ T795] device bridge_slave_1 entered promiscuous mode [ 44.073053][ T805] input: syz1 as /devices/virtual/input/input5 [ 44.092605][ T10] device bridge_slave_1 left promiscuous mode [ 44.098746][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.145456][ T10] device bridge_slave_0 left promiscuous mode [ 44.151749][ T463] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.159546][ T30] audit: type=1400 audit(1782142906.597:269): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=664 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.211143][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.215534][ T802] loop4: detected capacity change from 0 to 40427 [ 44.225330][ T10] device veth1_macvtap left promiscuous mode [ 44.227996][ T808] loop0: detected capacity change from 0 to 1024 [ 44.238020][ T10] device veth0_vlan left promiscuous mode [ 44.238418][ T30] audit: type=1400 audit(1782142906.597:270): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=664 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.261699][ T463] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 44.269185][ T802] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 44.291680][ T802] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 44.300893][ T802] F2FS-fs (loop4): invalid crc value [ 44.309682][ T30] audit: type=1400 audit(1782142906.597:271): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=664 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.318437][ T814] binder: 810:814 ioctl c0306201 0 returned -14 [ 44.336710][ T802] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 44.349009][ T814] binder: 810:814 ioctl 4018620d 0 returned -22 [ 44.363204][ T808] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 44.388438][ T802] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 44.396296][ T802] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.416293][ T802] attempt to access beyond end of device [ 44.416293][ T802] loop4: rw=34817, want=79920, limit=40427 [ 44.432609][ T802] attempt to access beyond end of device [ 44.432609][ T802] loop4: rw=2049, want=53256, limit=40427 [ 44.438853][ T819] binder: 810:819 ioctl c0306201 0 returned -14 [ 44.453968][ T289] attempt to access beyond end of device [ 44.453968][ T289] loop4: rw=2049, want=45104, limit=40427 [ 44.463871][ T463] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 44.471744][ T819] binder: 810:819 ioctl 4018620d 0 returned -22 [ 44.480818][ T463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.496286][ T819] binder: 810:819 ioctl c0306201 0 returned -14 [ 44.502051][ T463] usb 4-1: Product: syz [ 44.506702][ T463] usb 4-1: Manufacturer: syz [ 44.518939][ T463] usb 4-1: SerialNumber: syz [ 44.524971][ T823] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.536427][ T823] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.580240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.589514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.608765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.622833][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.631269][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.638325][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.662161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.671723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.680428][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.687517][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.730066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.750504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.759544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.824295][ T463] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.829664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.853059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.862430][ T463] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 44.869461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.878773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.900539][ T463] usb 4-1: USB disconnect, device number 3 [ 44.901978][ T795] device veth0_vlan entered promiscuous mode [ 44.928562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.938513][ T795] device veth1_macvtap entered promiscuous mode [ 44.947886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.959893][ T30] audit: type=1400 audit(1782142907.397:272): avc: denied { remount } for pid=832 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.969519][ T837] binder: 836:837 ioctl c0306201 0 returned -14 [ 44.990771][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.003016][ T30] audit: type=1400 audit(1782142907.437:273): avc: denied { create } for pid=838 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.030315][ T30] audit: type=1326 audit(1782142907.467:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=840 comm="syz.4.163" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f0b2e59 code=0x7ffc0000 [ 45.055148][ T30] audit: type=1326 audit(1782142907.467:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=840 comm="syz.4.163" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f0b2e59 code=0x7ffc0000 [ 45.097600][ T846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.157'. [ 45.102664][ T30] audit: type=1326 audit(1782142907.467:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=840 comm="syz.4.163" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f0e9f0b2e59 code=0x7ffc0000 [ 45.131537][ T30] audit: type=1326 audit(1782142907.467:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=840 comm="syz.4.163" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f0b2e59 code=0x7ffc0000 [ 45.158560][ T308] udevd[308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.297740][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'. [ 45.835966][ T865] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 45.848348][ T865] overlayfs: failed to look up (tracing) for ino (-66) [ 47.091884][ T899] tmpfs: Unsupported parameter 'mpol' [ 47.172698][ T901] device syzkaller0 entered promiscuous mode [ 47.188273][ T901] tipc: Started in network mode [ 47.193680][ T901] tipc: Node identity 8a7d841b7b1c, cluster identity 4711 [ 47.201315][ T901] tipc: Enabled bearer , priority 0 [ 47.215591][ T901] tipc: Resetting bearer [ 47.224249][ T900] tipc: Resetting bearer [ 47.235895][ T900] tipc: Disabling bearer [ 47.455642][ T905] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 47.563269][ T915] set_capacity_and_notify: 4 callbacks suppressed [ 47.563284][ T915] loop0: detected capacity change from 0 to 16 [ 47.626513][ T915] erofs: (device loop0): mounted with root inode @ nid 36. [ 48.494418][ T928] loop0: detected capacity change from 0 to 256 [ 48.515046][ T931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.196'. [ 48.775550][ T928] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 48.860075][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 48.860089][ T30] audit: type=1400 audit(1782142911.297:297): avc: denied { ioctl } for pid=941 comm="syz.3.200" path="socket:[18777]" dev="sockfs" ino=18777 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.868678][ T942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 48.921291][ T30] audit: type=1400 audit(1782142911.317:298): avc: denied { connect } for pid=941 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.922620][ T966] capability: warning: `syz.2.206' uses deprecated v2 capabilities in a way that may be insecure [ 50.157626][ T973] loop0: detected capacity change from 0 to 4096 [ 50.175585][ T973] EXT4-fs (loop0): Test dummy encryption mode enabled [ 50.183839][ T973] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 50.212606][ T973] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 50.224910][ T973] System zones: 0-5 [ 50.231621][ T463] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 50.242329][ T973] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,test_dummy_encryption,grpjquota=,auto_da_alloc,delalloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 50.244831][ T952] loop5: detected capacity change from 0 to 131072 [ 50.315081][ T952] F2FS-fs (loop5): invalid crc value [ 50.345599][ T952] F2FS-fs (loop5): Found nat_bits in checkpoint [ 50.378903][ T976] loop3: detected capacity change from 0 to 40427 [ 50.388339][ T952] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 50.393429][ T982] loop0: detected capacity change from 0 to 8192 [ 50.402744][ T976] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 50.414425][ T952] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 50.422584][ T976] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.435920][ T976] F2FS-fs (loop3): invalid crc value [ 50.449444][ T976] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.487050][ T976] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 50.494295][ T976] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.601668][ T463] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 50.635317][ T463] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7 [ 50.689630][ T1006] loop3: detected capacity change from 0 to 512 [ 50.718232][ T1006] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.738342][ T1006] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.215: iget: bad i_size value: 38620345925642 [ 50.751361][ T1006] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.215: couldn't read orphan inode 15 (err -117) [ 50.763380][ T1006] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback. [ 50.882776][ T463] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 50.892142][ T463] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.900223][ T463] usb 3-1: Product: syz [ 50.904656][ T463] usb 3-1: Manufacturer: syz [ 50.909298][ T463] usb 3-1: SerialNumber: syz [ 51.071614][ T960] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 51.191704][ T1011] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 51.321836][ T463] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 51.375315][ T463] usb 3-1: USB disconnect, device number 4 [ 51.388259][ T1032] loop5: detected capacity change from 0 to 256 [ 51.409293][ T1032] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.424115][ T1032] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 51.434110][ T1032] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 51.458423][ T30] audit: type=1400 audit(1782142913.897:299): avc: denied { write } for pid=1029 comm="syz.5.227" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.459247][ T1032] exFAT-fs (loop5): hint_cluster is invalid (17) [ 51.495112][ T1032] exFAT-fs (loop5): error, invalid access to FAT (entry 0xffffffff) [ 51.503260][ T30] audit: type=1400 audit(1782142913.897:300): avc: denied { add_name } for pid=1029 comm="syz.5.227" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.503455][ T1032] exFAT-fs (loop5): Filesystem has been set read-only [ 51.553280][ T10] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 65 with error 28 [ 51.566217][ T10] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.566217][ T10] [ 51.576326][ T10] EXT4-fs (loop3): Total free blocks count 0 [ 51.586976][ T30] audit: type=1400 audit(1782142913.897:301): avc: denied { create } for pid=1029 comm="syz.5.227" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.608659][ T10] EXT4-fs (loop3): Free/Dirty block details [ 51.618081][ T10] EXT4-fs (loop3): free_blocks=0 [ 51.623105][ T10] EXT4-fs (loop3): dirty_blocks=65 [ 51.632528][ T10] EXT4-fs (loop3): Block reservation details [ 51.638641][ T10] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 51.644953][ T30] audit: type=1400 audit(1782142913.897:302): avc: denied { associate } for pid=1029 comm="syz.5.227" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.669808][ T30] audit: type=1400 audit(1782142913.897:303): avc: denied { read write } for pid=1029 comm="syz.5.227" name="file1" dev="loop5" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.671750][ T960] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 51.702157][ T30] audit: type=1400 audit(1782142913.897:304): avc: denied { open } for pid=1029 comm="syz.5.227" path="/12/file0/file1" dev="loop5" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.768478][ T960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.805362][ T960] usb 5-1: Product: syz [ 51.817837][ T960] usb 5-1: Manufacturer: syz [ 51.838338][ T960] usb 5-1: SerialNumber: syz [ 52.101179][ T1049] loop0: detected capacity change from 0 to 256 [ 52.184987][ T1046] loop3: detected capacity change from 0 to 40427 [ 52.193022][ T1046] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 52.199712][ T1046] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 52.208800][ T1046] F2FS-fs (loop3): invalid crc value [ 52.216711][ T1046] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.253199][ T1046] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 52.260371][ T1046] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.308181][ T30] audit: type=1400 audit(1782142914.747:305): avc: denied { write open } for pid=1045 comm="syz.3.233" path="/38/bus/file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.332792][ T1046] attempt to access beyond end of device [ 52.332792][ T1046] loop3: rw=2049, want=53256, limit=40427 [ 52.351244][ T286] attempt to access beyond end of device [ 52.351244][ T286] loop3: rw=2049, want=45104, limit=40427 [ 52.363439][ T30] audit: type=1400 audit(1782142914.777:306): avc: denied { ioctl } for pid=1045 comm="syz.3.233" path="/38/bus/file1" dev="loop3" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.620236][ T1055] virtio-fs: tag not found [ 52.629088][ T960] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 52.658851][ T1063] 9pnet: Insufficient options for proto=fd [ 52.697296][ T960] usb 5-1: USB disconnect, device number 2 [ 52.758843][ T1069] loop3: detected capacity change from 0 to 512 [ 52.774450][ T960] usblp0: removed [ 52.795076][ T1061] loop4: detected capacity change from 0 to 40427 [ 52.846169][ T1061] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 52.885838][ T1061] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 52.904333][ T1069] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 52.938968][ T1069] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.939497][ T1061] F2FS-fs (loop4): invalid crc value [ 52.961474][ T1069] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 53.095599][ T1061] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 53.398065][ T1087] loop0: detected capacity change from 0 to 256 [ 53.462832][ T1090] loop3: detected capacity change from 0 to 128 [ 53.475980][ T1090] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 53.505826][ T1087] FAT-fs (loop0): Directory bread(block 64) failed [ 53.515029][ T1061] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 53.517317][ T1087] FAT-fs (loop0): Directory bread(block 65) failed [ 53.544763][ T1087] FAT-fs (loop0): Directory bread(block 66) failed [ 53.551340][ T1087] FAT-fs (loop0): Directory bread(block 67) failed [ 53.558583][ T1087] FAT-fs (loop0): Directory bread(block 68) failed [ 53.565253][ T1087] FAT-fs (loop0): Directory bread(block 69) failed [ 53.572005][ T1087] FAT-fs (loop0): Directory bread(block 70) failed [ 53.578550][ T1087] FAT-fs (loop0): Directory bread(block 71) failed [ 53.585355][ T1087] FAT-fs (loop0): Directory bread(block 72) failed [ 53.592061][ T1087] FAT-fs (loop0): Directory bread(block 73) failed [ 53.598663][ T1061] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 53.720530][ T1096] tipc: Enabled bearer , priority 0 [ 53.765843][ T289] attempt to access beyond end of device [ 53.765843][ T289] loop4: rw=2049, want=45104, limit=40427 [ 53.780126][ T1096] device syzkaller0 entered promiscuous mode [ 53.919230][ T1095] tipc: Resetting bearer [ 53.933815][ T1095] tipc: Disabling bearer [ 53.958146][ T1110] loop3: detected capacity change from 0 to 4096 [ 53.968863][ T1110] EXT4-fs (loop3): Test dummy encryption mode enabled [ 53.975927][ T1110] EXT4-fs (loop3): Ignoring removed oldalloc option [ 54.027898][ T1114] Zero length message leads to an empty skb [ 54.072784][ T1110] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003] [ 54.101804][ T1110] System zones: 0-5 [ 54.108612][ T1110] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback. [ 54.111746][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 54.111758][ T30] audit: type=1400 audit(1782142916.547:327): avc: denied { bind } for pid=1117 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.412213][ T1129] tipc: Cannot configure node identity twice [ 54.768642][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 54.777547][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 54.787275][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 54.796399][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 54.805416][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 54.814431][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 54.823400][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 54.832424][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 54.841439][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 54.850458][ T1144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 54.936093][ T1145] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 54.944757][ T1145] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 55.136596][ T1121] loop4: detected capacity change from 0 to 40427 [ 55.169813][ T30] audit: type=1400 audit(1782142917.607:328): avc: denied { ioctl } for pid=1152 comm="syz.3.270" path="socket:[19231]" dev="sockfs" ino=19231 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.496163][ T1121] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 55.608339][ T1121] F2FS-fs (loop4): invalid crc value [ 55.620767][ T1169] loop0: detected capacity change from 0 to 1024 [ 55.779496][ T30] audit: type=1400 audit(1782142918.057:329): avc: denied { create } for pid=1162 comm="syz.5.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 55.783426][ T1121] F2FS-fs (loop4): invalid crc value [ 55.805018][ T1121] F2FS-fs (loop4): Failed to get valid F2FS checkpoint [ 55.816558][ T1169] EXT4-fs (loop0): Ignoring removed bh option [ 55.877050][ T1169] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 55.909516][ T30] audit: type=1400 audit(1782142918.347:330): avc: denied { mounton } for pid=1165 comm="syz.0.275" path="/75/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.934022][ T30] audit: type=1400 audit(1782142918.347:331): avc: denied { rename } for pid=1165 comm="syz.0.275" name="#8" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.955693][ T30] audit: type=1400 audit(1782142918.347:332): avc: denied { unlink } for pid=1165 comm="syz.0.275" name="#9" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.955956][ T285] EXT4-fs error (device loop0): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 56.510793][ T285] EXT4-fs (loop0): Remounting filesystem read-only [ 56.518981][ T285] EXT4-fs error (device loop0): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 56.528719][ T30] audit: type=1400 audit(1782142918.347:333): avc: denied { setattr } for pid=1165 comm="syz.0.275" path="/75/file1/file0" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.601087][ T285] EXT4-fs (loop0): Remounting filesystem read-only [ 56.636172][ T285] EXT4-fs error (device loop0): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 56.673238][ T285] EXT4-fs (loop0): Remounting filesystem read-only [ 56.679805][ T285] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 56.761960][ T285] EXT4-fs error (device loop0): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 56.802998][ T285] EXT4-fs (loop0): Remounting filesystem read-only [ 56.809576][ T285] EXT4-fs error (device loop0): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 56.831930][ T285] EXT4-fs (loop0): Remounting filesystem read-only [ 56.838952][ T285] EXT4-fs error (device loop0): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 56.862339][ T1201] loop4: detected capacity change from 0 to 128 [ 56.872958][ T285] EXT4-fs (loop0): Remounting filesystem read-only [ 56.879639][ T285] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 56.909471][ T285] EXT4-fs error (device loop0): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 56.943142][ T285] EXT4-fs (loop0): Remounting filesystem read-only [ 56.944712][ T1201] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 56.949711][ T285] EXT4-fs error (device loop0): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 56.963406][ T1201] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.017801][ T285] EXT4-fs (loop0): Remounting filesystem read-only [ 57.024461][ T285] EXT4-fs error (device loop0): empty_inline_dir:1887: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 57.044395][ T285] EXT4-fs (loop0): Remounting filesystem read-only [ 57.050980][ T285] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.065581][ T285] EXT4-fs error (device loop0): ext4_read_inline_dir:1632: inode #12: block 7: comm syz-executor: path /75/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 57.087866][ T285] EXT4-fs (loop0): Remounting filesystem read-only [ 57.094782][ T285] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.109941][ T285] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.124828][ T285] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.139107][ T307] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 57.147288][ T285] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.174154][ T1217] loop4: detected capacity change from 0 to 512 [ 57.183124][ T285] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.202574][ T285] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.221022][ T285] EXT4-fs warning (device loop0): empty_inline_dir:1894: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 57.222088][ T1217] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 57.248480][ T1217] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.289805][ T30] audit: type=1400 audit(1782142919.727:334): avc: denied { create } for pid=1216 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 57.312205][ T8] tipc: Left network mode [ 57.381641][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 57.423244][ T30] audit: type=1400 audit(1782142919.867:335): avc: denied { watch } for pid=1223 comm="syz.4.297" path="/62" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.501686][ T307] usb 4-1: config 0 has no interfaces? [ 57.521857][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.528903][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.536480][ T1225] device bridge_slave_0 entered promiscuous mode [ 57.546010][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.553089][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.560598][ T1225] device bridge_slave_1 entered promiscuous mode [ 57.643616][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.650664][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.657983][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.661694][ T307] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 57.665025][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.674331][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.689510][ T307] usb 4-1: Product: syz [ 57.693854][ T307] usb 4-1: Manufacturer: syz [ 57.698456][ T307] usb 4-1: SerialNumber: syz [ 57.704209][ T307] usb 4-1: config 0 descriptor?? [ 57.831539][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.858384][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.876701][ T30] audit: type=1400 audit(1782142920.317:336): avc: denied { ioctl } for pid=1241 comm="syz.2.302" path="socket:[20570]" dev="sockfs" ino=20570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.902558][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.927956][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.958791][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.965887][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.975173][ T8] device bridge_slave_1 left promiscuous mode [ 57.981289][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.990498][ T8] device bridge_slave_0 left promiscuous mode [ 57.996964][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.009421][ T8] device veth1_macvtap left promiscuous mode [ 58.015803][ T8] device veth0_vlan left promiscuous mode [ 58.427398][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.436733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.445065][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.452121][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.463434][ T1255] loop4: detected capacity change from 0 to 512 [ 58.466744][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.478240][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.484354][ T1255] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.306: missing EA_INODE flag [ 58.486899][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.497812][ T1255] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.306: error while reading EA inode 12 err=-117 [ 58.506213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.517934][ T1255] EXT4-fs (loop4): 1 orphan inode deleted [ 58.531512][ T1255] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 58.535130][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.553874][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.566009][ T1225] device veth0_vlan entered promiscuous mode [ 58.572851][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.580807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.589444][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.596983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.609070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.617828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.627661][ T1225] device veth1_macvtap entered promiscuous mode [ 58.655590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.663415][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.671683][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.680124][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.688575][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.001356][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.009006][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.016704][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.024656][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.039276][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.049396][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.056976][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.065737][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.065958][ T1265] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.073366][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.088480][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.096180][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.096731][ T670] usb 4-1: USB disconnect, device number 4 [ 59.104067][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.124487][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.146730][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.155952][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.169834][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.264594][ T463] hid-generic 0006:0008:0001.0002: unknown main item tag 0x0 [ 59.288098][ T463] hid-generic 0006:0008:0001.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 59.386495][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 59.386508][ T30] audit: type=1400 audit(1782142921.827:342): avc: denied { ioctl } for pid=1281 comm="syz.6.314" path="socket:[20647]" dev="sockfs" ino=20647 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.474543][ T1290] fido_id[1290]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.156713][ T1302] loop4: detected capacity change from 0 to 512 [ 62.254787][ T1293] loop5: detected capacity change from 0 to 512 [ 62.278512][ T1305] loop3: detected capacity change from 0 to 512 [ 62.381587][ T1302] EXT4-fs (loop4): Ignoring removed nobh option [ 62.404705][ T1293] EXT4-fs (loop5): Ignoring removed nobh option [ 62.414632][ T1305] EXT4-fs (loop3): Ignoring removed nobh option [ 62.539192][ T1302] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 62.547450][ T1302] System zones: 1-12 [ 62.556392][ T1293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 62.564589][ T1293] System zones: 1-12 [ 62.573526][ T1305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 62.581657][ T1305] System zones: 1-12 [ 62.616331][ T1305] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz.3.318: corrupted in-inode xattr [ 62.629099][ T1293] EXT4-fs error (device loop5): ext4_iget_extra_inode:4604: inode #15: comm syz.5.317: corrupted in-inode xattr [ 62.642735][ T1293] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.317: couldn't read orphan inode 15 (err -117) [ 62.655317][ T1305] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.318: couldn't read orphan inode 15 (err -117) [ 62.668245][ T1305] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,nobh,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 62.759620][ T1293] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,nobh,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 62.856232][ T1293] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 62.873392][ T1302] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.315: corrupted in-inode xattr [ 62.886600][ T1302] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.315: couldn't read orphan inode 15 (err -117) [ 62.899652][ T1302] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,nobh,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 63.002866][ T1302] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 63.245849][ T1315] loop2: detected capacity change from 0 to 1024 [ 63.284064][ T1315] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 63.301255][ T1321] loop3: detected capacity change from 0 to 128 [ 63.303366][ T1315] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback. [ 63.317838][ T1325] loop5: detected capacity change from 0 to 512 [ 63.326902][ T30] audit: type=1400 audit(1782142925.767:343): avc: denied { remount } for pid=1313 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.330415][ T1315] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 63.380408][ T1321] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 63.392333][ T1321] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.396450][ T1325] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.326: missing EA_INODE flag [ 63.443569][ T1325] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.326: error while reading EA inode 12 err=-117 [ 63.471209][ T1325] EXT4-fs (loop5): 1 orphan inode deleted [ 63.479348][ T1325] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 63.501631][ T463] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 63.532995][ T1332] loop4: detected capacity change from 0 to 512 [ 63.576119][ T1332] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 63.601194][ T1336] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 63.720463][ T1332] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.328: Unimplemented hash flags: 0x0001 [ 63.732266][ T1332] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.328: Corrupt directory, running e2fsck is recommended [ 64.030951][ T1340] loop2: detected capacity change from 0 to 256 [ 64.072011][ T1342] __nla_validate_parse: 19 callbacks suppressed [ 64.072028][ T1342] netlink: 88 bytes leftover after parsing attributes in process `syz.4.329'. [ 64.081435][ T1340] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 64.099347][ T1342] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.106571][ T1342] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.173904][ T1348] loop2: detected capacity change from 0 to 256 [ 64.229964][ T463] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.239797][ T463] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.258538][ T463] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 64.359716][ T463] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.698755][ T30] audit: type=1400 audit(1782142927.137:344): avc: denied { getopt } for pid=1347 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.973178][ T1371] loop3: detected capacity change from 0 to 1024 [ 65.119343][ T1371] EXT4-fs (loop3): Ignoring removed bh option [ 65.179833][ T1371] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 65.209256][ T1386] ================================================================== [ 65.217375][ T1386] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200 [ 65.225559][ T1386] Read of size 8 at addr ffff8881168e81c0 by task syz.2.348/1386 [ 65.233282][ T1386] [ 65.235638][ T1386] CPU: 0 PID: 1386 Comm: syz.2.348 Not tainted syzkaller #0 [ 65.242918][ T1386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 65.252976][ T1386] Call Trace: [ 65.256255][ T1386] [ 65.259186][ T1386] __dump_stack+0x21/0x30 [ 65.263521][ T1386] dump_stack_lvl+0x110/0x170 [ 65.268287][ T1386] ? show_regs_print_info+0x20/0x20 [ 65.273482][ T1386] ? load_image+0x3f0/0x3f0 [ 65.277989][ T1386] print_address_description+0x7f/0x2c0 [ 65.283601][ T1386] ? tc_setup_flow_action+0x88e/0x3200 [ 65.289064][ T1386] kasan_report+0x10f/0x150 [ 65.293573][ T1386] ? tc_setup_flow_action+0x88e/0x3200 [ 65.299127][ T1386] __asan_report_load8_noabort+0x14/0x20 [ 65.304777][ T1386] tc_setup_flow_action+0x88e/0x3200 [ 65.310116][ T1386] mall_replace_hw_filter+0x2db/0x8d0 [ 65.315501][ T1386] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 65.321679][ T1386] ? mall_set_parms+0x520/0x520 [ 65.326538][ T1386] ? tcf_exts_destroy+0xb0/0xb0 [ 65.331396][ T1386] ? pcpu_alloc+0x1118/0x16f0 [ 65.336093][ T1386] ? mall_set_parms+0x1e4/0x520 [ 65.340946][ T1386] mall_change+0x544/0x760 [ 65.345360][ T1386] ? __kasan_check_write+0x14/0x20 [ 65.350493][ T1386] ? mall_get+0xa0/0xa0 [ 65.354648][ T1386] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 65.360543][ T1386] ? mall_get+0xa0/0xa0 [ 65.364699][ T1386] tc_new_tfilter+0x13df/0x1990 [ 65.369558][ T1386] ? tcf_gate_entry_destructor+0x20/0x20 [ 65.375195][ T1386] ? 0xffffffffa0032000 [ 65.379452][ T1386] ? security_capable+0x87/0xb0 [ 65.384307][ T1386] ? ns_capable+0x8c/0xf0 [ 65.388637][ T1386] ? netlink_net_capable+0x125/0x160 [ 65.393924][ T1386] ? tcf_gate_entry_destructor+0x20/0x20 [ 65.399559][ T1386] rtnetlink_rcv_msg+0x83c/0xcb0 [ 65.404589][ T1386] ? 0xffffffffa0032000 [ 65.408735][ T1386] ? rtnetlink_bind+0x80/0x80 [ 65.413414][ T1386] ? avc_has_perm_noaudit+0x390/0x490 [ 65.418789][ T1386] ? memcpy+0x56/0x70 [ 65.422771][ T1386] ? avc_has_perm_noaudit+0x30a/0x490 [ 65.428225][ T1386] ? arch_stack_walk+0xee/0x140 [ 65.433084][ T1386] ? avc_denied+0x1b0/0x1b0 [ 65.437592][ T1386] ? stack_trace_save+0xa6/0xf0 [ 65.442449][ T1386] ? avc_has_perm+0x163/0x250 [ 65.447128][ T1386] ? avc_has_perm_noaudit+0x490/0x490 [ 65.452499][ T1386] ? x64_sys_call+0x4b/0x9a0 [ 65.457272][ T1386] ? selinux_nlmsg_lookup+0x39d/0x440 [ 65.462829][ T1386] netlink_rcv_skb+0x1e9/0x430 [ 65.467593][ T1386] ? rtnetlink_bind+0x80/0x80 [ 65.472273][ T1386] ? netlink_ack+0xb10/0xb10 [ 65.476862][ T1386] ? _copy_from_iter+0x4a4/0x10a0 [ 65.481890][ T1386] ? __netlink_lookup+0x387/0x3b0 [ 65.486922][ T1386] rtnetlink_rcv+0x1c/0x20 [ 65.491343][ T1386] netlink_unicast+0x86c/0xa30 [ 65.496112][ T1386] netlink_sendmsg+0x879/0xb80 [ 65.500873][ T1386] ? netlink_getsockopt+0x530/0x530 [ 65.506058][ T1386] ? security_socket_sendmsg+0x82/0xa0 [ 65.511505][ T1386] ? netlink_getsockopt+0x530/0x530 [ 65.516690][ T1386] ____sys_sendmsg+0x5be/0x8f0 [ 65.521440][ T1386] ? __sys_sendmsg_sock+0x40/0x40 [ 65.526535][ T1386] ? import_iovec+0x7c/0xb0 [ 65.531024][ T1386] ___sys_sendmsg+0x236/0x2e0 [ 65.535683][ T1386] ? __sys_sendmsg+0x280/0x280 [ 65.540434][ T1386] ? sock_show_fdinfo+0xa0/0xa0 [ 65.545271][ T1386] ? __fdget+0x1a1/0x230 [ 65.549495][ T1386] __x64_sys_sendmsg+0x201/0x2d0 [ 65.554414][ T1386] ? ___sys_sendmsg+0x2e0/0x2e0 [ 65.559251][ T1386] ? __kasan_check_write+0x14/0x20 [ 65.564346][ T1386] ? switch_fpu_return+0x15d/0x2c0 [ 65.569446][ T1386] x64_sys_call+0x4b/0x9a0 [ 65.573849][ T1386] do_syscall_64+0x4c/0xa0 [ 65.578255][ T1386] ? clear_bhb_loop+0x50/0xa0 [ 65.582916][ T1386] ? clear_bhb_loop+0x50/0xa0 [ 65.587577][ T1386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.593464][ T1386] RIP: 0033:0x7f301b407e59 [ 65.597867][ T1386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.617544][ T1386] RSP: 002b:00007f3019e62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.625949][ T1386] RAX: ffffffffffffffda RBX: 00007f301b680fa0 RCX: 00007f301b407e59 [ 65.633903][ T1386] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 65.641858][ T1386] RBP: 00007f301b49de6f R08: 0000000000000000 R09: 0000000000000000 [ 65.649815][ T1386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.657793][ T1386] R13: 00007f301b681038 R14: 00007f301b680fa0 R15: 00007ffe11ca7858 [ 65.665754][ T1386] [ 65.668756][ T1386] [ 65.671057][ T1386] Allocated by task 1386: [ 65.675362][ T1386] __kasan_kmalloc+0xd4/0x100 [ 65.680025][ T1386] __kmalloc+0x13d/0x2c0 [ 65.684252][ T1386] tcf_idr_create+0x5f/0x790 [ 65.688832][ T1386] tcf_idr_create_from_flags+0x61/0x70 [ 65.694296][ T1386] tcf_gact_init+0x342/0x570 [ 65.698873][ T1386] tcf_action_init_1+0x3fd/0x6b0 [ 65.703809][ T1386] tcf_action_init+0x233/0x7a0 [ 65.708571][ T1386] tcf_exts_validate+0x24a/0x580 [ 65.713495][ T1386] mall_set_parms+0x48/0x520 [ 65.718065][ T1386] mall_change+0x478/0x760 [ 65.722461][ T1386] tc_new_tfilter+0x13df/0x1990 [ 65.727293][ T1386] rtnetlink_rcv_msg+0x83c/0xcb0 [ 65.732215][ T1386] netlink_rcv_skb+0x1e9/0x430 [ 65.736970][ T1386] rtnetlink_rcv+0x1c/0x20 [ 65.741368][ T1386] netlink_unicast+0x86c/0xa30 [ 65.746110][ T1386] netlink_sendmsg+0x879/0xb80 [ 65.750854][ T1386] ____sys_sendmsg+0x5be/0x8f0 [ 65.755601][ T1386] ___sys_sendmsg+0x236/0x2e0 [ 65.760255][ T1386] __x64_sys_sendmsg+0x201/0x2d0 [ 65.765173][ T1386] x64_sys_call+0x4b/0x9a0 [ 65.769572][ T1386] do_syscall_64+0x4c/0xa0 [ 65.773978][ T1386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.779852][ T1386] [ 65.782160][ T1386] The buggy address belongs to the object at ffff8881168e8100 [ 65.782160][ T1386] which belongs to the cache kmalloc-192 of size 192 [ 65.796191][ T1386] The buggy address is located 0 bytes to the right of [ 65.796191][ T1386] 192-byte region [ffff8881168e8100, ffff8881168e81c0) [ 65.809793][ T1386] The buggy address belongs to the page: [ 65.815405][ T1386] page:ffffea00045a3a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1168e8 [ 65.825628][ T1386] flags: 0x4000000000000200(slab|zone=1) [ 65.831254][ T1386] raw: 4000000000000200 ffffea0004480bc0 0000000900000009 ffff888100042c00 [ 65.839922][ T1386] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 65.848480][ T1386] page dumped because: kasan: bad access detected [ 65.854869][ T1386] page_owner tracks the page as allocated [ 65.860558][ T1386] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 105, ts 4839862111, free_ts 4839107726 [ 65.876335][ T1386] post_alloc_hook+0x192/0x1b0 [ 65.881088][ T1386] prep_new_page+0x1c/0x110 [ 65.885573][ T1386] get_page_from_freelist+0x2c3a/0x2cd0 [ 65.891102][ T1386] __alloc_pages+0x1a2/0x460 [ 65.895674][ T1386] new_slab+0xa0/0x4d0 [ 65.899809][ T1386] ___slab_alloc+0x3ac/0x840 [ 65.904382][ T1386] __slab_alloc+0x49/0x90 [ 65.908692][ T1386] kmem_cache_alloc_trace+0x146/0x270 [ 65.914055][ T1386] kernfs_fop_open+0x375/0xbb0 [ 65.918826][ T1386] do_dentry_open+0x82a/0x1010 [ 65.923576][ T1386] vfs_open+0x73/0x80 [ 65.927549][ T1386] path_openat+0x26e6/0x2f80 [ 65.932132][ T1386] do_filp_open+0x1df/0x400 [ 65.936616][ T1386] do_sys_openat2+0x15e/0x7f0 [ 65.941310][ T1386] __x64_sys_openat+0x136/0x160 [ 65.946148][ T1386] x64_sys_call+0x219/0x9a0 [ 65.950637][ T1386] page last free stack trace: [ 65.955562][ T1386] free_unref_page_prepare+0x5fa/0x600 [ 65.961008][ T1386] free_unref_page+0xae/0x540 [ 65.965669][ T1386] __free_pages+0x6c/0x100 [ 65.970072][ T1386] free_pages+0x82/0x90 [ 65.974209][ T1386] selinux_genfs_get_sid+0x20b/0x250 [ 65.979497][ T1386] inode_doinit_with_dentry+0x884/0xd90 [ 65.985144][ T1386] selinux_d_instantiate+0x27/0x40 [ 65.990246][ T1386] security_d_instantiate+0x9e/0xf0 [ 65.995430][ T1386] d_splice_alias+0x6d/0x390 [ 66.000004][ T1386] kernfs_iop_lookup+0x2c2/0x310 [ 66.004923][ T1386] __lookup_slow+0x2b8/0x410 [ 66.009494][ T1386] lookup_slow+0x57/0x70 [ 66.013725][ T1386] walk_component+0x326/0x460 [ 66.018387][ T1386] path_lookupat+0x155/0x430 [ 66.022960][ T1386] filename_lookup+0x21e/0x550 [ 66.027706][ T1386] user_path_at_empty+0x46/0x1c0 [ 66.032629][ T1386] [ 66.034938][ T1386] Memory state around the buggy address: [ 66.040557][ T1386] ffff8881168e8080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 66.049021][ T1386] ffff8881168e8100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.057159][ T1386] >ffff8881168e8180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 66.065213][ T1386] ^ [ 66.071356][ T1386] ffff8881168e8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 66.079403][ T1386] ffff8881168e8280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 66.087489][ T1386] ================================================================== [ 66.096139][ T1386] Disabling lock debugging due to kernel taint [ 66.140623][ T30] audit: type=1400 audit(1782142928.557:345): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[14968]" dev="pipefs" ino=14968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 66.184262][ T30] audit: type=1400 audit(1782142928.577:346): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 66.206518][ T30] audit: type=1400 audit(1782142928.577:347): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.228814][ T30] audit: type=1400 audit(1782142928.577:348): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.250544][ T30] audit: type=1400 audit(1782142928.577:349): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.271431][ T30] audit: type=1400 audit(1782142928.577:350): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.292486][ T30] audit: type=1400 audit(1782142928.577:351): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.315508][ T30] audit: type=1400 audit(1782142928.577:352): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.376077][ T8] tipc: Left network mode [ 66.682133][ T1185] usb 7-1: USB disconnect, device number 2 [ 66.842235][ T8] device bridge_slave_1 left promiscuous mode [ 66.848339][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.855695][ T8] device bridge_slave_0 left promiscuous mode [ 66.861804][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.869460][ T8] device veth1_macvtap left promiscuous mode [ 66.875511][ T8] device veth0_vlan left promiscuous mode [ 67.105850][ T8] tipc: Left network mode [ 67.682746][ T8] device bridge_slave_1 left promiscuous mode [ 67.688860][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.696351][ T8] device bridge_slave_0 left promiscuous mode [ 67.702552][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.710279][ T8] device bridge_slave_1 left promiscuous mode [ 67.716455][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.723865][ T8] device bridge_slave_0 left promiscuous mode [ 67.729946][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.737723][ T8] device bridge_slave_1 left promiscuous mode [ 67.743833][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.751137][ T8] device bridge_slave_0 left promiscuous mode [ 67.757398][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.765164][ T8] device bridge_slave_1 left promiscuous mode [ 67.771261][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.778758][ T8] device bridge_slave_0 left promiscuous mode [ 67.784913][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.793124][ T8] device veth1_macvtap left promiscuous mode [ 67.799109][ T8] device veth0_vlan left promiscuous mode [ 67.805203][ T8] device veth1_macvtap left promiscuous mode [ 67.811180][ T8] device veth0_vlan left promiscuous mode [ 67.817144][ T8] device veth1_macvtap left promiscuous mode [ 67.823174][ T8] device veth0_vlan left promiscuous mode [ 67.829076][ T8] device veth1_macvtap left promiscuous mode [ 67.835084][ T8] device veth0_vlan left promiscuous mode