last executing test programs: 5.542061503s ago: executing program 0 (id=1060): mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000f80)='./proc_mnt\x00', &(0x7f0000000fc0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) 5.439951993s ago: executing program 0 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0x7, 0x8, [@multicast2]}, @rr={0x7, 0xf, 0xa, [@private=0xa010101, @private=0xa010102, @broadcast]}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x98, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [{0x8, 0x4}], {0x2}, {0x2}}, 0x2c, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x2) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x50000) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'wg2\x00', &(0x7f0000000380)=@ethtool_cmd={0x2c, 0x2, 0x4, 0x0, 0x2, 0x14, 0x40, 0x0, 0xff, 0x0, 0x0, 0x5, 0x2, 0x4, 0x0, 0x7, [0x0, 0x3]}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'veth0_to_team\x00', 0x800}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x8, {{0x6, 0x4, 0x0, 0x25, 0x18, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @empty, {[@noop, @rr={0x7, 0x3, 0xce}]}}}}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x300000e, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000180)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') pread64(r7, &(0x7f0000000980)=""/102356, 0x18fd4, 0xc2a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x24080) 4.20921607s ago: executing program 0 (id=1065): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = dup(r0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) write$vga_arbiter(r1, 0x0, 0x0) 3.149388448s ago: executing program 0 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001940), 0x22080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001980)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000019c0)=[@text32={0x20, &(0x7f0000001a00)="2e660f32360fae89000000000f780ff30f1ed90f01df66ba2100b0baee06b805000000b9005800000f01c10f0d2c8f1601527e", 0x32}], 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.140186239s ago: executing program 1 (id=1074): syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000880)=ANY=[@ANYRES8=0x0], 0x5, 0x152d, &(0x7f0000003700)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000002f00)='./file0\x00', 0x0, 0x0) 3.081786885s ago: executing program 1 (id=1077): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000700), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000a80)=0x1800, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) 3.02913989s ago: executing program 1 (id=1078): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0x3, 0x577, &(0x7f0000002000)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x1ef) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) 2.791539655s ago: executing program 1 (id=1080): syz_mount_image$ext4(&(0x7f0000001180)='ext4\x00', &(0x7f0000001200)='./file1\x00', 0x0, &(0x7f0000001300), 0x1, 0x50f, &(0x7f0000001340)="$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") r0 = creat(&(0x7f0000001880)='./file1\x00', 0x8) r1 = openat(0xffffffffffffff9c, 0x0, 0xa0c42, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000001940)='2', 0x1, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000900)={0xc, r0, 0x2, 0x0, 0x2, 0xfffffffffdffffff}) 2.523729742s ago: executing program 4 (id=1088): mkdirat(0xffffffffffffff9c, &(0x7f0000005b40)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000005b80)='./tracing\x00', &(0x7f0000005bc0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000005c00)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000005c40), 0x0) 2.413973953s ago: executing program 4 (id=1089): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) write$cgroup_int(r1, &(0x7f0000000040), 0x1) 2.413712863s ago: executing program 1 (id=1090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000007c0), 0x400000000000041, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x48200, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x400000000000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000007111aa00000000008510000002000000850000000000000095000000000000009500a50500000000d7b06b96630540912cb88e219c005c66e23980dbefd0"], &(0x7f0000000240)='GPL\x00', 0x5, 0x29e, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)='l', 0x1}], 0x1, 0x7fffffffffffffff, 0x7) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) 2.407571024s ago: executing program 4 (id=1091): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) creat(&(0x7f0000001500)='./file0\x00', 0xdafbe5d6891b6e4) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x400, 0x70bd2d, 0x25dfdbfb, {0x38, 0x1, 0x2, 0x0, 0x80, 0x1, 0x1, 0x6, 0x0, 0x1, 0x10006}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) 2.243625971s ago: executing program 0 (id=1092): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x800080, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16], 0x9, 0x105ea, &(0x7f0000009c00)="$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") timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8000, 0x402}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x1ffffffff000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f000001e700)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f000001e740)={@desc={0x4100, 0x0, @desc3}}) truncate(&(0x7f000001a200)='./file1\x00', 0x2fffffd) 1.542766102s ago: executing program 2 (id=1100): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000d00)={0x4, 0x0, 0x0, 0x178, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '3\x00'}}, [@snap_origin={0x0, 0x1400, 0x0, 0x40, 'snapshot-origin\x00', @ram_num={'1:', 0x1}}]}) 1.449961322s ago: executing program 2 (id=1101): syz_mount_image$ext4(&(0x7f0000001180)='ext4\x00', &(0x7f0000001200)='./file1\x00', 0x0, &(0x7f0000001300), 0x1, 0x50f, &(0x7f0000001340)="$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") r0 = creat(&(0x7f0000001880)='./file1\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file2\x00', 0xa0c42, 0x100) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r2, &(0x7f0000001940)='2', 0x1, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000900)={0xc, r0, 0x2, 0x0, 0x2, 0xfffffffffdffffff}) 1.423269204s ago: executing program 1 (id=1102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.362081051s ago: executing program 4 (id=1103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001940), 0x22080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001980)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000019c0)=[@text32={0x20, &(0x7f0000001a00)="2e660f32360fae89000000000f780ff30f1ed90f01df66ba2100b0baee06b805000000b9005800000f01c10f0d2c8f1601527e", 0x32}], 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.344701863s ago: executing program 3 (id=1104): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000480)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000500)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) 1.315540166s ago: executing program 2 (id=1105): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000194c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000019540)=ANY=[@ANYBLOB="820000007002080008000f00080000001800128008000100a8d674000c000280060012aa", @ANYBLOB="0400140008001d"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) 1.315020086s ago: executing program 3 (id=1106): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) openat$dir(0xffffffffffffff9c, 0x0, 0x10800, 0x40) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200048d0}, 0x4000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000"], 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='\x1b\v\xe7\x8a\xbb\\\x8dE;\x9b\x1f\x9c\x1c\x13\x11>ob\xb4*E\xba\xa7\xdf\xc48\xe3\x02l\xf7\xa3\x91:\xf1\b2\x06\xf8\x9f\xd7\x10\xb7\xd5\xf2L\xfb\x15\x94\xce\xf1\xa4h\xa8\xa0^H\xcc[=\xb5\x06qb\xc9\x1b]\t7\xfd\xe6\xf6*y\x03C\xde\"K\xb5\xb0\xad\xbac\xc82\xbf\xb1\xe4H\x88\xb3\xbdNS\xc7U\xe3\xdc\xe87kMi-\x1dg{5w\xf4\x03ID\x00PHm\xcf[\x8aF\xb9\xaf\xfb)\xf2\xe0\xe19CY\xfc\x03h\x11\x81/\x7f\xaa\xbaa\xb5\xc5\x9a\xfb\xb6\xd7\xc0i\xee\xe1i\v\xc0$E\x1a\bJ\xe2\x94\x1e2\xdc6\xb7\x1f\b\xa0I\xd7\xf6\xb2n\xab\xfe\xdb>\x9a!\xc9\xd1%E\xdf\xd44\xba\x00)\xbc\x85\xbc%\xbe\xf0\b\xe4\x1a\x02\xce^\xe1V+\n\xda\x81\x14\xc0`\xd2i)\x0e]\xe3\x88|=\xda\xa3\xe8, 4\xe70\xe4\xbe88\xfe\a\x88\xbcGy~lS2\xff\xb0\r\x95\xcab7\x8b&\xf8 \xb6\a!\x95]9\x91JH\xb0\xe55\xdf\x00'/278) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f00000001c0)={'security\x00', 0x0, [0x39, 0x8001, 0x4, 0xfff, 0x7]}, &(0x7f0000000240)=0x54) 1.314497246s ago: executing program 4 (id=1107): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000001140)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000001180), 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004600)={0x2020}, 0x2020) 1.253913972s ago: executing program 3 (id=1108): mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./proc_mnt\x00', 0x1cc) mount(0x0, &(0x7f0000000f80)='./proc_mnt\x00', &(0x7f0000000fc0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000001040)={'#! ', './proc_mnt/irq/1/smp_affinity'}, 0x21) 1.232829964s ago: executing program 2 (id=1109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000014000/0x4000)=nil, 0x4000, 0x8, 0x30, r1, 0x9) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.210572706s ago: executing program 3 (id=1110): mkdirat(0xffffffffffffff9c, &(0x7f0000005b40)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000005b80)='./tracing\x00', &(0x7f0000005bc0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000005c00)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000005c40), 0x0) 1.209698556s ago: executing program 0 (id=1111): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000001b00)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r8 = dup(r2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r3}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1.132119464s ago: executing program 3 (id=1112): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpid() syz_emit_ethernet(0x86, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x80002c1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r4 = socket(0x2, 0x3, 0x8000ffff) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r5, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x30ee10c1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x801) r6 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f00000001c0)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f00000008c0)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f0000000b40)={@desc={0x1, 0x0, @desc4}, 0x40, 0x0, '\x00', @a}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, 0x0) chdir(&(0x7f0000000cc0)='mnt/encrypted_dir\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='memory.events.local\x00', 0x275a, 0x0) readahead(0xffffffffffffffff, 0xa282, 0x3) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) writev(r8, &(0x7f0000000580)=[{&(0x7f0000000b00)="343a06", 0x3}, {0x0}], 0x2) 755.089943ms ago: executing program 2 (id=1113): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x2800700, &(0x7f0000000580)={[], [{@seclabel}]}, 0x2, 0x460, &(0x7f00000005c0)="$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") mount$incfs(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x404, 0x0) syz_mount_image$fuse(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x820, &(0x7f0000000b80)=ANY=[], 0x4, 0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 252.085475ms ago: executing program 4 (id=1114): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]}) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) r2 = epoll_create1(0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000240)={{0x548, 0x0, 0x896a}, 'syz0\x00', 0x1c}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_DEV_DESTROY(r3, 0x5502) chdir(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x2a080d6, &(0x7f0000000140), 0x1, 0x4dc, &(0x7f0000000440)="$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") lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x1, 0x2, 0x4, 0xfffffffffffffff9}) 3.90174ms ago: executing program 2 (id=1115): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000005c0)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f0000000600)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000640)) timer_settime(0x0, 0x0, &(0x7f0000000680)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f00000006c0)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 0s ago: executing program 3 (id=1116): syz_mount_image$ext4(&(0x7f0000001180)='ext4\x00', &(0x7f0000001200)='./file1\x00', 0x0, &(0x7f0000001300), 0x1, 0x50f, &(0x7f0000001340)="$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") r0 = creat(&(0x7f0000001880)='./file1\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file2\x00', 0xa0c42, 0x100) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r2, &(0x7f0000001940)='2', 0x1, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000900)={0xc, r0, 0x2, 0x0, 0x2, 0xfffffffffdffffff}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 22.506362][ T28] audit: type=1400 audit(1793251867.508:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.511030][ T279] cgroup: Unknown subsys name 'net' [ 22.529026][ T28] audit: type=1400 audit(1793251867.508:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.556464][ T28] audit: type=1400 audit(1793251867.538:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.556911][ T279] cgroup: Unknown subsys name 'devices' [ 22.710698][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.716349][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.821544][ T28] audit: type=1400 audit(1793251867.828:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.844832][ T28] audit: type=1400 audit(1793251867.828:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.869590][ T28] audit: type=1400 audit(1793251867.828:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.899780][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.908687][ T28] audit: type=1400 audit(1793251867.918:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.934152][ T28] audit: type=1400 audit(1793251867.918:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.958094][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.962896][ T28] audit: type=1400 audit(1793251867.938:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.993971][ T28] audit: type=1400 audit(1793251867.938:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.278175][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.285357][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.292903][ T289] device bridge_slave_0 entered promiscuous mode [ 24.300355][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.307410][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.314920][ T289] device bridge_slave_1 entered promiscuous mode [ 24.383704][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.391033][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.399144][ T287] device bridge_slave_0 entered promiscuous mode [ 24.409295][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.416344][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.423858][ T290] device bridge_slave_0 entered promiscuous mode [ 24.430889][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.437960][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.445606][ T290] device bridge_slave_1 entered promiscuous mode [ 24.452148][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.459245][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.466639][ T287] device bridge_slave_1 entered promiscuous mode [ 24.495752][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.502875][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.510501][ T288] device bridge_slave_0 entered promiscuous mode [ 24.548980][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.556049][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.563589][ T288] device bridge_slave_1 entered promiscuous mode [ 24.626911][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.634458][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.641978][ T291] device bridge_slave_0 entered promiscuous mode [ 24.650792][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.657846][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.665394][ T291] device bridge_slave_1 entered promiscuous mode [ 24.771681][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.778777][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.786083][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.793210][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.839220][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.846290][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.853652][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.860729][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.869272][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.876328][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.883670][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.890819][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.899143][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.906193][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.913511][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.920583][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.945062][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.952345][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.959607][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.967301][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.975011][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.982400][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.989770][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.996972][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.004347][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.014833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.023291][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.030370][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.063468][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.071722][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.078790][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.106155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.114158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.122516][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.129593][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.151207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.159500][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.166546][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.179369][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.187424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.209330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.217931][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.226111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.234235][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.242619][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.249717][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.257694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.266061][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.273110][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.296807][ T288] device veth0_vlan entered promiscuous mode [ 25.305840][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.313782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.321346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.330316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.338858][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.345908][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.353426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.362760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.371157][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.378214][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.385729][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.394048][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.402179][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.410398][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.418718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.427114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.435722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.444042][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.452487][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.460142][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.484482][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.492738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.501020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.510135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.518132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.527179][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.535630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.544094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.560693][ T287] device veth0_vlan entered promiscuous mode [ 25.573637][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.581262][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.589626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.598001][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.606860][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.613987][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.621648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.630248][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.638763][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.645899][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.653635][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.662261][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.670566][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.678807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.688948][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.696739][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.704351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.712086][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.720499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.729396][ T288] device veth1_macvtap entered promiscuous mode [ 25.739993][ T290] device veth0_vlan entered promiscuous mode [ 25.746588][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.754488][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.762319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.770317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.779283][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.793153][ T287] device veth1_macvtap entered promiscuous mode [ 25.803094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.811929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.820652][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.833782][ T289] device veth0_vlan entered promiscuous mode [ 25.847511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.855996][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.864876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.872976][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.881202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.889773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.898146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.906516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.914929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.922618][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.943879][ T290] device veth1_macvtap entered promiscuous mode [ 25.950896][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.958813][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.966915][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.975176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.984789][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.993231][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.001225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.009713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.018088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.026472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.038026][ T289] device veth1_macvtap entered promiscuous mode [ 26.054772][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 26.067677][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.079684][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.088139][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.104610][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.113019][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.121641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.130176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.139022][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.147268][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.164490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.205361][ T291] device veth0_vlan entered promiscuous mode [ 26.214260][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.223302][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.231832][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.247345][ T291] device veth1_macvtap entered promiscuous mode [ 26.257531][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.284109][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.299838][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.328208][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.337075][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.414528][ T337] ./dev/sda1: Can't open blockdev [ 26.478435][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.598410][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.668401][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 26.674866][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.689796][ T347] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.694148][ T337] syz.3.11 (337) used greatest stack depth: 20648 bytes left [ 26.713495][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.723599][ T19] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 26.733416][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.746372][ T19] usb 1-1: config 0 descriptor?? [ 26.788397][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 26.794898][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.810577][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.828659][ T60] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.843264][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.855034][ T60] usb 3-1: Product: syz [ 26.861012][ T60] usb 3-1: Manufacturer: syz [ 26.865789][ T60] usb 3-1: SerialNumber: syz [ 27.080129][ T60] usb 3-1: 0:2 : does not exist [ 27.090422][ T60] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 27.128579][ T60] usb 3-1: USB disconnect, device number 2 [ 27.179495][ T19] hid-generic 0003:0403:6030.0001: unknown main item tag 0x0 [ 27.187230][ T19] hid-generic 0003:0403:6030.0001: unknown main item tag 0x0 [ 27.338475][ T19] hid-generic 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 27.386883][ T19] usb 1-1: USB disconnect, device number 2 [ 27.411514][ T387] fido_id[387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 28.078359][ T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.268355][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 28.277216][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 28.301035][ T60] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 28.322070][ T60] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 28.336205][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.344872][ T60] usb 3-1: Product: syz [ 28.349178][ T60] usb 3-1: Manufacturer: syz [ 28.353970][ T60] usb 3-1: SerialNumber: syz [ 28.360260][ T60] usb 3-1: config 0 descriptor?? [ 28.367159][ T60] hub 3-1:0.0: bad descriptor, ignoring hub [ 28.373308][ T60] hub: probe of 3-1:0.0 failed with error -5 [ 28.467456][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 28.467481][ T28] audit: type=1400 audit(1793251873.468:151): avc: denied { write } for pid=407 comm="syz.4.39" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.671445][ T412] tipc: Started in network mode [ 28.694603][ T412] tipc: Node identity 4, cluster identity 4711 [ 28.709017][ T60] usb 3-1: USB disconnect, device number 3 [ 28.756773][ T412] tipc: Node number set to 4 [ 28.766698][ T413] tipc: Enabled bearer , priority 0 [ 28.804670][ T28] audit: type=1400 audit(1793251873.808:152): avc: denied { name_bind } for pid=416 comm="syz.3.42" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.839981][ T28] audit: type=1400 audit(1793251873.838:153): avc: denied { node_bind } for pid=416 comm="syz.3.42" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.068461][ T60] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 29.152821][ T425] process 'syz.2.46' launched './file0' with NULL argv: empty string added [ 29.163148][ T28] audit: type=1400 audit(1793251874.168:154): avc: denied { execute } for pid=424 comm="syz.2.46" name="file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.249893][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 29.261993][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.276203][ T60] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 29.286059][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.307567][ T60] usb 1-1: config 0 descriptor?? [ 29.318425][ T418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 29.362685][ T435] netlink: 'syz.1.51': attribute type 3 has an invalid length. [ 29.371481][ T435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 29.380402][ T435] ------------[ cut here ]------------ [ 29.385917][ T435] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 29.400613][ T435] WARNING: CPU: 1 PID: 435 at net/sched/cls_u32.c:853 u32_change+0x1c11/0x2300 [ 29.409711][ T435] Modules linked in: [ 29.413683][ T435] CPU: 1 PID: 435 Comm: syz.1.51 Not tainted syzkaller #0 [ 29.420884][ T435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.431028][ T435] RIP: 0010:u32_change+0x1c11/0x2300 [ 29.436378][ T435] Code: fc ff ff e8 31 d7 5d fd c6 05 11 13 7c 03 01 b9 10 00 00 00 48 c7 c7 60 15 ff 85 4c 89 e6 48 c7 c2 e0 15 ff 85 e8 cf 56 2e fd <0f> 0b e9 09 f0 ff ff e8 03 d7 5d fd be 02 00 00 00 eb 0a e8 f7 d6 [ 29.456405][ T435] RSP: 0018:ffffc9000f046e40 EFLAGS: 00010246 [ 29.462558][ T435] RAX: e90ac915edf86d00 RBX: ffff88811419e6c0 RCX: 0000000000080000 [ 29.470600][ T435] RDX: ffffc90001349000 RSI: 0000000000005e6f RDI: 0000000000005e70 [ 29.478639][ T435] RBP: ffffc9000f046ff8 R08: ffffc9000f046a27 R09: 1ffff92001e08d44 [ 29.486653][ T435] R10: dffffc0000000000 R11: fffff52001e08d45 R12: 0000000000000020 [ 29.494869][ T435] R13: ffff88811419f800 R14: ffff88811419f8c0 R15: 0000000000000001 [ 29.502935][ T435] FS: 00007efd64baa6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 29.511968][ T435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.518637][ T435] CR2: 00007f51b9abbff8 CR3: 000000011039b000 CR4: 00000000003506a0 [ 29.526663][ T435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.534721][ T435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.542787][ T435] Call Trace: [ 29.546109][ T435] [ 29.549114][ T435] ? x64_sys_call+0x783/0x9a0 [ 29.553866][ T435] ? __cfi_u32_change+0x10/0x10 [ 29.558835][ T435] ? __kasan_check_write+0x14/0x20 [ 29.564002][ T435] ? mutex_unlock+0x8f/0x230 [ 29.568662][ T435] ? __cfi_mutex_unlock+0x10/0x10 [ 29.573738][ T435] ? __cfi_u32_change+0x10/0x10 [ 29.578662][ T435] tc_new_tfilter+0x1488/0x1a30 [ 29.583596][ T435] ? __cfi_tc_new_tfilter+0x10/0x10 [ 29.588878][ T435] ? security_capable+0x99/0xc0 [ 29.593808][ T435] ? ns_capable+0x8c/0xf0 [ 29.598187][ T435] ? netlink_net_capable+0x125/0x160 [ 29.603597][ T435] ? __cfi_tc_new_tfilter+0x10/0x10 [ 29.609213][ T435] rtnetlink_rcv_msg+0xa9a/0xde0 [ 29.614270][ T435] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 29.619848][ T435] ? avc_has_perm_noaudit+0x390/0x490 [ 29.625307][ T435] ? memcpy+0x56/0x70 [ 29.629439][ T435] ? avc_has_perm_noaudit+0x30a/0x490 [ 29.634876][ T435] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 29.640678][ T435] ? avc_has_perm+0x163/0x250 [ 29.645447][ T435] ? __alloc_skb+0x226/0x4a0 [ 29.650130][ T435] ? netlink_sendmsg+0x635/0xbd0 [ 29.655140][ T435] ? ____sys_sendmsg+0x5fb/0x9c0 [ 29.660159][ T435] ? __cfi_avc_has_perm+0x10/0x10 [ 29.665252][ T435] ? selinux_nlmsg_lookup+0x39d/0x440 [ 29.670713][ T435] netlink_rcv_skb+0x200/0x450 [ 29.675544][ T435] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 29.681093][ T435] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 29.686451][ T435] ? __netlink_lookup+0x387/0x3b0 [ 29.691825][ T435] rtnetlink_rcv+0x1c/0x20 [ 29.696318][ T435] netlink_unicast+0x8c1/0xa60 [ 29.701207][ T435] netlink_sendmsg+0x8b9/0xbd0 [ 29.706054][ T435] ? __cfi_netlink_sendmsg+0x10/0x10 [ 29.711435][ T435] ? irqentry_exit+0x37/0x40 [ 29.716098][ T435] ? security_socket_sendmsg+0x93/0xb0 [ 29.721650][ T435] ? __cfi_netlink_sendmsg+0x10/0x10 [ 29.727004][ T435] ____sys_sendmsg+0x5fb/0x9c0 [ 29.731850][ T435] ? __sys_sendmsg_sock+0x40/0x40 [ 29.736967][ T435] ? import_iovec+0x7c/0xb0 [ 29.741556][ T435] ___sys_sendmsg+0x2a2/0x360 [ 29.746290][ T435] ? __sys_sendmsg+0x290/0x290 [ 29.751137][ T435] ? __cfi_futex_wait+0x10/0x10 [ 29.756065][ T435] ? __fdget+0x19c/0x220 [ 29.760470][ T435] __sys_sendmmsg+0x2cc/0x4e0 [ 29.765206][ T435] ? __cfi___sys_sendmmsg+0x10/0x10 [ 29.770519][ T435] ? fpregs_restore_userregs+0x128/0x260 [ 29.776223][ T435] __x64_sys_sendmmsg+0xa0/0xb0 [ 29.781154][ T435] x64_sys_call+0x3f5/0x9a0 [ 29.785736][ T435] do_syscall_64+0x4c/0xa0 [ 29.790249][ T435] ? clear_bhb_loop+0x30/0x80 [ 29.795004][ T435] ? clear_bhb_loop+0x30/0x80 [ 29.799796][ T435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.805856][ T435] RIP: 0033:0x7efd63d9f559 [ 29.810364][ T435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.830076][ T435] RSP: 002b:00007efd64baa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 29.838588][ T435] RAX: ffffffffffffffda RBX: 00007efd64025fa0 RCX: 00007efd63d9f559 [ 29.846652][ T435] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 29.854913][ T435] RBP: 00007efd63e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 29.862966][ T435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.871015][ T435] R13: 00007efd64026038 R14: 00007efd64025fa0 R15: 00007ffeeaa56e98 [ 29.879064][ T435] [ 29.882143][ T435] ---[ end trace 0000000000000000 ]--- [ 29.890254][ T28] audit: type=1400 audit(1793251874.898:155): avc: denied { mount } for pid=432 comm="syz.4.50" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 29.909699][ T435] Zero length message leads to an empty skb [ 29.974292][ T28] audit: type=1400 audit(1793251874.978:156): avc: denied { mmap_zero } for pid=441 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 30.021208][ T28] audit: type=1400 audit(1793251874.978:157): avc: denied { map } for pid=441 comm="syz.3.54" path="socket:[16639]" dev="sockfs" ino=16639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 30.118942][ T60] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 30.130575][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 30.141447][ T60] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input4 [ 30.187346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 30.200735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 30.230157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 30.238050][ T28] audit: type=1400 audit(1793251875.238:158): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=593 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.249780][ T60] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.20 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 30.275744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 30.297427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.306063][ T28] audit: type=1400 audit(1793251875.238:159): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=593 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.354804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 30.383827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.409171][ T28] audit: type=1400 audit(1793251875.248:160): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=593 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.413608][ T467] ======================================================= [ 30.413608][ T467] WARNING: The mand mount option has been deprecated and [ 30.413608][ T467] and is ignored by this kernel. Remove the mand [ 30.413608][ T467] option from the mount to silence this warning. [ 30.413608][ T467] ======================================================= [ 30.436940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 30.568990][ T478] loop2: detected capacity change from 0 to 128 [ 30.587053][ T490] ./dev/sda1: Can't open blockdev [ 30.593101][ T489] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 30.639703][ T496] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 30.738514][ T19] usb 1-1: USB disconnect, device number 3 [ 32.780219][ T570] netlink: 'syz.4.102': attribute type 3 has an invalid length. [ 32.796630][ T570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 33.111113][ T621] tipc: Failed to remove unknown binding: 66,0,2/0:2588476432/2588476433 [ 33.120746][ T621] tipc: Failed to remove unknown binding: 66,0,2/0:2588476432/2588476433 [ 33.492714][ T658] netlink: 196 bytes leftover after parsing attributes in process `syz.2.137'. [ 33.808380][ T295] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.988361][ T295] usb 1-1: Using ep0 maxpacket: 8 [ 33.996087][ T295] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 34.005325][ T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.013454][ T295] usb 1-1: Product: syz [ 34.017710][ T295] usb 1-1: Manufacturer: syz [ 34.022385][ T295] usb 1-1: SerialNumber: syz [ 34.027851][ T295] usb 1-1: config 0 descriptor?? [ 34.123721][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 34.123737][ T28] audit: type=1400 audit(1793251879.128:200): avc: denied { create } for pid=669 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.023144][ T28] audit: type=1400 audit(1793251880.028:201): avc: denied { write } for pid=696 comm="syz.2.157" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.133172][ T708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.140478][ T708] IPv6: NLM_F_CREATE should be set when creating new route [ 35.147779][ T708] IPv6: NLM_F_CREATE should be set when creating new route [ 35.209225][ T712] FAULT_INJECTION: forcing a failure. [ 35.209225][ T712] name failslab, interval 1, probability 0, space 0, times 0 [ 35.233583][ T714] overlayfs: failed to clone upperpath [ 35.247372][ T712] CPU: 1 PID: 712 Comm: syz.2.158 Tainted: G W syzkaller #0 [ 35.256114][ T712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.266214][ T712] Call Trace: [ 35.269530][ T712] [ 35.272492][ T712] __dump_stack+0x21/0x24 [ 35.276861][ T712] dump_stack_lvl+0x110/0x170 [ 35.281580][ T712] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.286681][ T712] ? __cfi_avc_has_perm+0x10/0x10 [ 35.291778][ T712] ? stack_trace_save+0xa6/0xf0 [ 35.296710][ T712] dump_stack+0x15/0x24 [ 35.300951][ T712] should_fail_ex+0x3bf/0x510 [ 35.305687][ T712] __should_failslab+0xac/0xf0 [ 35.310525][ T712] should_failslab+0x9/0x20 [ 35.315180][ T712] __kmem_cache_alloc_node+0x3d/0x2d0 [ 35.320636][ T712] ? proc_self_get_link+0xe6/0x180 [ 35.325849][ T712] ? proc_self_get_link+0xe6/0x180 [ 35.331008][ T712] kmalloc_trace+0x29/0xb0 [ 35.335464][ T712] proc_self_get_link+0xe6/0x180 [ 35.340497][ T712] ? __cfi_proc_self_get_link+0x10/0x10 [ 35.346091][ T712] pick_link+0x728/0xe30 [ 35.350382][ T712] step_into+0xc27/0xf00 [ 35.354697][ T712] ? __d_lookup_rcu+0x37b/0x400 [ 35.359594][ T712] ? set_root+0x400/0x400 [ 35.363967][ T712] ? lookup_fast+0x15f/0x520 [ 35.368598][ T712] ? inode_permission+0xef/0x4b0 [ 35.373588][ T712] link_path_walk+0x744/0xeb0 [ 35.378320][ T712] ? handle_lookup_down+0x130/0x130 [ 35.383570][ T712] path_openat+0x27f/0x2f30 [ 35.388124][ T712] ? slab_post_alloc_hook+0x4f/0x2d0 [ 35.393494][ T712] ? kmem_cache_alloc+0x166/0x320 [ 35.398579][ T712] ? getname_flags+0xba/0x510 [ 35.403310][ T712] ? getname+0x19/0x20 [ 35.407462][ T712] ? do_sys_openat2+0xeb/0x820 [ 35.412370][ T712] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.418525][ T712] ? do_filp_open+0x420/0x420 [ 35.423291][ T712] do_filp_open+0x1ee/0x420 [ 35.428117][ T712] ? __cfi_do_filp_open+0x10/0x10 [ 35.433376][ T712] ? alloc_fd+0x4c1/0x570 [ 35.437758][ T712] do_sys_openat2+0x15e/0x820 [ 35.442505][ T712] ? __se_sys_futex+0x136/0x310 [ 35.447405][ T712] ? do_sys_open+0xe0/0xe0 [ 35.451877][ T712] ? __this_cpu_preempt_check+0x13/0x20 [ 35.457481][ T712] ? xfd_validate_state+0x70/0x150 [ 35.462649][ T712] __x64_sys_openat+0x136/0x160 [ 35.467562][ T712] x64_sys_call+0x783/0x9a0 [ 35.472115][ T712] do_syscall_64+0x4c/0xa0 [ 35.476596][ T712] ? clear_bhb_loop+0x30/0x80 [ 35.481316][ T712] ? clear_bhb_loop+0x30/0x80 [ 35.486036][ T712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.492007][ T712] RIP: 0033:0x7ff97ab5fd8e [ 35.496463][ T712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 35.516458][ T712] RSP: 002b:00007ff97b9d2ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 35.525319][ T712] RAX: ffffffffffffffda RBX: 00007ff97b9d36c0 RCX: 00007ff97ab5fd8e [ 35.533361][ T712] RDX: 0000000000000002 RSI: 00007ff97b9d2f90 RDI: ffffffffffffff9c [ 35.541371][ T712] RBP: 00007ff97ac36b20 R08: 0000000000000000 R09: 0000000000000000 [ 35.549395][ T712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.557403][ T712] R13: 00007ff97ae26038 R14: 00007ff97ae25fa0 R15: 00007ffe6a31d1e8 [ 35.565422][ T712] [ 35.712343][ T731] loop2: detected capacity change from 0 to 16 [ 35.734169][ T731] erofs: (device loop2): mounted with root inode @ nid 36. [ 35.804501][ T739] loop1: detected capacity change from 0 to 512 [ 35.830348][ T739] EXT4-fs: Ignoring removed bh option [ 35.857277][ T741] FAULT_INJECTION: forcing a failure. [ 35.857277][ T741] name fail_futex, interval 1, probability 0, space 0, times 1 [ 35.870349][ T741] CPU: 0 PID: 741 Comm: syz.2.173 Tainted: G W syzkaller #0 [ 35.879125][ T741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.889218][ T741] Call Trace: [ 35.892526][ T741] [ 35.895488][ T741] __dump_stack+0x21/0x24 [ 35.899858][ T741] dump_stack_lvl+0x110/0x170 [ 35.904781][ T741] ? __cfi_dump_stack_lvl+0x8/0x8 [ 35.910052][ T741] dump_stack+0x15/0x24 [ 35.914286][ T741] should_fail_ex+0x3bf/0x510 [ 35.919048][ T741] should_fail+0xb/0x10 [ 35.923338][ T741] get_futex_key+0x143/0xb10 [ 35.927985][ T741] ? __cfi_get_futex_key+0x10/0x10 [ 35.933154][ T741] futex_wake+0x150/0x8e0 [ 35.937547][ T741] ? __cfi_futex_wake+0x10/0x10 [ 35.941538][ T739] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.172: inode #13: comm syz.1.172: iget: illegal inode # [ 35.942442][ T741] ? percpu_counter_add_batch+0x13c/0x160 [ 35.960606][ T741] ? alloc_file+0x82/0x600 [ 35.965104][ T741] ? memcpy+0x56/0x70 [ 35.968249][ T739] EXT4-fs (loop1): Remounting filesystem read-only [ 35.975633][ T741] ? alloc_file+0x49d/0x600 [ 35.980189][ T741] do_futex+0x2bf/0x430 [ 35.980205][ T739] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.172: couldn't read orphan inode 13 (err -117) [ 35.984375][ T741] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 36.001681][ T741] ? __cfi_do_futex+0x10/0x10 [ 36.006407][ T741] ? fd_install+0x1b9/0x2d0 [ 36.010960][ T741] __se_sys_futex+0x136/0x310 [ 36.015706][ T741] ? __x64_sys_futex+0x100/0x100 [ 36.019764][ T739] EXT4-fs (loop1): Remounting filesystem read-only [ 36.020695][ T741] ? __x64_sys_signalfd4+0x157/0x1a0 [ 36.032525][ T741] __x64_sys_futex+0xe5/0x100 [ 36.036496][ T739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.037241][ T741] x64_sys_call+0x7ec/0x9a0 [ 36.050203][ T741] do_syscall_64+0x4c/0xa0 [ 36.054654][ T741] ? clear_bhb_loop+0x30/0x80 [ 36.059385][ T741] ? clear_bhb_loop+0x30/0x80 [ 36.064113][ T741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.070061][ T741] RIP: 0033:0x7ff97ab9f559 [ 36.074530][ T741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.094173][ T741] RSP: 002b:00007ff97b9d30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.103099][ T741] RAX: ffffffffffffffda RBX: 00007ff97ae25fa8 RCX: 00007ff97ab9f559 [ 36.111300][ T741] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff97ae25fac [ 36.118486][ T60] usb 1-1: USB disconnect, device number 4 [ 36.119345][ T741] RBP: 00007ff97ae25fa0 R08: 0030a9d24e8bb212 R09: 0000000000000000 [ 36.119365][ T741] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 36.141266][ T741] R13: 00007ff97ae26038 R14: 00007ffe6a31d100 R15: 00007ffe6a31d1e8 [ 36.149291][ T741] [ 36.161513][ T739] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 36.175444][ T288] EXT4-fs (loop1): unmounting filesystem. [ 36.203851][ T748] overlayfs: unrecognized mount option "verity=on" or missing value [ 36.239323][ T753] FAULT_INJECTION: forcing a failure. [ 36.239323][ T753] name failslab, interval 1, probability 0, space 0, times 0 [ 36.270728][ T753] CPU: 0 PID: 753 Comm: syz.1.178 Tainted: G W syzkaller #0 [ 36.279562][ T753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.289652][ T753] Call Trace: [ 36.292962][ T753] [ 36.296034][ T753] __dump_stack+0x21/0x24 [ 36.300408][ T753] dump_stack_lvl+0x110/0x170 [ 36.305131][ T753] ? __cfi_dump_stack_lvl+0x8/0x8 [ 36.310214][ T753] ? __cfi_avc_has_perm+0x10/0x10 [ 36.315316][ T753] ? stack_trace_save+0xa6/0xf0 [ 36.320225][ T753] dump_stack+0x15/0x24 [ 36.324414][ T753] should_fail_ex+0x3bf/0x510 [ 36.329142][ T753] __should_failslab+0xac/0xf0 [ 36.333957][ T753] should_failslab+0x9/0x20 [ 36.338506][ T753] __kmem_cache_alloc_node+0x3d/0x2d0 [ 36.343950][ T753] ? proc_self_get_link+0xe6/0x180 [ 36.349136][ T753] ? proc_self_get_link+0xe6/0x180 [ 36.354321][ T753] kmalloc_trace+0x29/0xb0 [ 36.358776][ T753] proc_self_get_link+0xe6/0x180 [ 36.363759][ T753] ? __cfi_proc_self_get_link+0x10/0x10 [ 36.369348][ T753] pick_link+0x728/0xe30 [ 36.373627][ T753] step_into+0xc27/0xf00 [ 36.377918][ T753] ? __d_lookup_rcu+0x37b/0x400 [ 36.382803][ T753] ? set_root+0x400/0x400 [ 36.387171][ T753] ? lookup_fast+0x15f/0x520 [ 36.391828][ T753] ? inode_permission+0xef/0x4b0 [ 36.396851][ T753] link_path_walk+0x744/0xeb0 [ 36.401574][ T753] ? handle_lookup_down+0x130/0x130 [ 36.407007][ T753] path_openat+0x27f/0x2f30 [ 36.412453][ T753] ? slab_post_alloc_hook+0x4f/0x2d0 [ 36.417817][ T753] ? kmem_cache_alloc+0x166/0x320 [ 36.422904][ T753] ? getname_flags+0xba/0x510 [ 36.427624][ T753] ? getname+0x19/0x20 [ 36.431729][ T753] ? do_sys_openat2+0xeb/0x820 [ 36.436533][ T753] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.442688][ T753] ? do_filp_open+0x420/0x420 [ 36.447406][ T753] do_filp_open+0x1ee/0x420 [ 36.451954][ T753] ? __cfi_do_filp_open+0x10/0x10 [ 36.457118][ T753] ? alloc_fd+0x4c1/0x570 [ 36.461486][ T753] do_sys_openat2+0x15e/0x820 [ 36.466210][ T753] ? __se_sys_futex+0x136/0x310 [ 36.471098][ T753] ? do_sys_open+0xe0/0xe0 [ 36.475558][ T753] ? __this_cpu_preempt_check+0x13/0x20 [ 36.481149][ T753] ? xfd_validate_state+0x70/0x150 [ 36.486312][ T753] __x64_sys_openat+0x136/0x160 [ 36.491213][ T753] x64_sys_call+0x783/0x9a0 [ 36.495759][ T753] do_syscall_64+0x4c/0xa0 [ 36.500278][ T753] ? clear_bhb_loop+0x30/0x80 [ 36.505072][ T753] ? clear_bhb_loop+0x30/0x80 [ 36.509848][ T753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 36.515892][ T753] RIP: 0033:0x7efd63d5fd8e [ 36.520356][ T753] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 36.540003][ T753] RSP: 002b:00007efd64ba9ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 36.548462][ T753] RAX: ffffffffffffffda RBX: 00007efd64baa6c0 RCX: 00007efd63d5fd8e [ 36.556474][ T753] RDX: 0000000000000002 RSI: 00007efd64ba9f90 RDI: ffffffffffffff9c [ 36.564490][ T753] RBP: 00007efd63e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 36.572510][ T753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.580523][ T753] R13: 00007efd64026038 R14: 00007efd64025fa0 R15: 00007ffeeaa56e98 [ 36.588545][ T753] [ 37.089826][ T791] fuse: Bad value for 'fd' [ 37.145155][ T28] audit: type=1400 audit(1793251882.148:202): avc: denied { create } for pid=802 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.164966][ T295] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 37.180184][ T28] audit: type=1400 audit(1793251882.148:203): avc: denied { bind } for pid=802 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.393716][ T28] audit: type=1400 audit(1793251882.398:204): avc: denied { create } for pid=812 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.529371][ T28] audit: type=1400 audit(1793251882.438:205): avc: denied { connect } for pid=812 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.549321][ T28] audit: type=1400 audit(1793251882.448:206): avc: denied { write } for pid=812 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.792867][ T832] xt_hashlimit: size too large, truncated to 1048576 [ 38.299603][ T28] audit: type=1400 audit(1793251882.798:207): avc: denied { connect } for pid=831 comm="syz.3.213" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.326165][ T295] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.344911][ T295] usb 3-1: not running at top speed; connect to a high speed hub [ 38.364016][ T295] usb 3-1: config 2 has an invalid interface number: 38 but max is 0 [ 38.376741][ T28] audit: type=1400 audit(1793251883.348:208): avc: denied { ioctl } for pid=835 comm="syz.4.215" path="socket:[17082]" dev="sockfs" ino=17082 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.404548][ T295] usb 3-1: config 2 has no interface number 0 [ 38.429658][ T295] usb 3-1: config 2 interface 38 has no altsetting 0 [ 38.453124][ T295] usb 3-1: New USB device found, idVendor=2013, idProduct=0245, bcdDevice=c1.13 [ 38.480657][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.501565][ T295] usb 3-1: Product: syz [ 38.511236][ T295] usb 3-1: Manufacturer: syz [ 38.521330][ T295] usb 3-1: SerialNumber: syz [ 38.789539][ T295] usb 3-1: USB disconnect, device number 4 [ 38.996311][ T870] loop0: detected capacity change from 0 to 40427 [ 39.014471][ T870] F2FS-fs (loop0): fault_injection options not supported [ 39.030467][ T870] F2FS-fs (loop0): fault_type options not supported [ 39.046646][ T870] F2FS-fs (loop0): invalid crc value [ 39.063128][ T870] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.107681][ T870] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 39.414970][ T28] audit: type=1400 audit(1793251884.408:209): avc: denied { write } for pid=888 comm="syz.2.235" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.438090][ T28] audit: type=1400 audit(1793251884.408:210): avc: denied { open } for pid=888 comm="syz.2.235" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.464170][ T326] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 39.472179][ T28] audit: type=1400 audit(1793251884.408:211): avc: denied { ioctl } for pid=888 comm="syz.2.235" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.500719][ T28] audit: type=1400 audit(1793251884.508:212): avc: denied { read } for pid=890 comm="syz.2.236" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 39.524098][ T28] audit: type=1400 audit(1793251884.508:213): avc: denied { open } for pid=890 comm="syz.2.236" path="/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 39.548615][ T28] audit: type=1400 audit(1793251884.508:214): avc: denied { ioctl } for pid=890 comm="syz.2.236" path="/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 39.591839][ T894] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 39.699544][ T326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.709895][ T326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.741434][ T326] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.750885][ T326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.759149][ T326] usb 2-1: SerialNumber: syz [ 39.785058][ T896] ./dev/sda1: Can't open blockdev [ 39.809398][ T28] audit: type=1400 audit(1793251884.818:215): avc: denied { connect } for pid=897 comm="syz.3.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.843327][ T900] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 39.887158][ T902] overlayfs: failed to clone lowerpath [ 39.898926][ T28] audit: type=1400 audit(1793251884.888:216): avc: denied { execute_no_trans } for pid=901 comm="syz.4.241" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.969963][ T326] usb 2-1: 0:2 : does not exist [ 39.985351][ T326] usb 2-1: USB disconnect, device number 2 [ 40.071697][ T509] udevd[509]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.927340][ T944] xt_hashlimit: size too large, truncated to 1048576 [ 41.160664][ T958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=958 comm=syz.3.265 [ 41.222862][ T939] netlink: 136 bytes leftover after parsing attributes in process `syz.1.257'. [ 41.232307][ T939] netlink: 136 bytes leftover after parsing attributes in process `syz.1.257'. [ 41.288451][ T295] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.355247][ T963] ./dev/sda1: Can't open blockdev [ 41.368341][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 41.478359][ T295] usb 1-1: Using ep0 maxpacket: 32 [ 41.484774][ T295] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 41.493678][ T295] usb 1-1: config 0 has no interface number 0 [ 41.499887][ T295] usb 1-1: config 0 interface 12 has no altsetting 0 [ 41.509245][ T295] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 41.518429][ T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.526514][ T295] usb 1-1: Product: syz [ 41.531130][ T295] usb 1-1: Manufacturer: syz [ 41.535831][ T295] usb 1-1: SerialNumber: syz [ 41.541634][ T295] usb 1-1: config 0 descriptor?? [ 41.558376][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 41.564893][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.575928][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.585743][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.598723][ T6] usb 3-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 41.607840][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.616986][ T6] usb 3-1: config 0 descriptor?? [ 42.025050][ T6] hid-generic 0003:18D1:503C.0003: unexpected long global item [ 42.032862][ T6] hid-generic: probe of 0003:18D1:503C.0003 failed with error -22 [ 42.057603][ T975] capability: warning: `syz.4.272' uses deprecated v2 capabilities in a way that may be insecure [ 42.070244][ T975] overlayfs: failed to clone upperpath [ 42.226029][ T6] usb 3-1: USB disconnect, device number 5 [ 42.358580][ T28] audit: type=1400 audit(1793251887.368:217): avc: denied { write } for pid=1021 comm="syz.1.290" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 42.389579][ T1022] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(14) [ 42.796219][ T1050] FAULT_INJECTION: forcing a failure. [ 42.796219][ T1050] name failslab, interval 1, probability 0, space 0, times 0 [ 42.810336][ T1050] CPU: 1 PID: 1050 Comm: syz.2.301 Tainted: G W syzkaller #0 [ 42.819334][ T1050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 42.829807][ T1050] Call Trace: [ 42.833175][ T1050] [ 42.836193][ T1050] __dump_stack+0x21/0x24 [ 42.840838][ T1050] dump_stack_lvl+0x110/0x170 [ 42.845565][ T1050] ? __cfi_dump_stack_lvl+0x8/0x8 [ 42.851451][ T1050] dump_stack+0x15/0x24 [ 42.855661][ T1050] should_fail_ex+0x3bf/0x510 [ 42.860395][ T1050] ? mas_alloc_nodes+0x2d8/0x850 [ 42.865433][ T1050] __should_failslab+0xac/0xf0 [ 42.870257][ T1050] should_failslab+0x9/0x20 [ 42.874812][ T1050] kmem_cache_alloc+0x3b/0x320 [ 42.879632][ T1050] mas_alloc_nodes+0x2d8/0x850 [ 42.884454][ T1050] mas_preallocate+0xe3d/0x1430 [ 42.889453][ T1050] ? __cfi_mas_preallocate+0x10/0x10 [ 42.894801][ T1050] __vma_adjust+0x622/0x1f10 [ 42.899458][ T1050] ? __cfi___anon_vma_interval_tree_augment_rotate+0x10/0x10 [ 42.906953][ T1050] ? __cfi___vma_adjust+0x10/0x10 [ 42.912085][ T1050] ? rwsem_write_trylock+0x136/0x300 [ 42.917434][ T1050] __split_vma+0x725/0x980 [ 42.922026][ T1060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=1060 comm=syz.3.305 [ 42.922014][ T1050] do_mas_align_munmap+0x787/0x1330 [ 42.922066][ T1050] ? mas_state_walk+0x7ab/0xa80 [ 42.944430][ T1050] ? do_mas_munmap+0x2b0/0x2b0 [ 42.949272][ T1050] ? mas_walk+0x207/0x250 [ 42.953667][ T1050] do_mas_munmap+0x23d/0x2b0 [ 42.958313][ T1050] do_munmap+0xeb/0x140 [ 42.962568][ T1050] ? __cfi_do_munmap+0x10/0x10 [ 42.967406][ T1050] mremap_to+0x321/0x600 [ 42.971701][ T1050] __se_sys_mremap+0x475/0xc90 [ 42.976519][ T1050] ? __cfi_do_futex+0x10/0x10 [ 42.981238][ T1050] ? __kasan_check_write+0x14/0x20 [ 42.986400][ T1050] ? mutex_unlock+0x8f/0x230 [ 42.991071][ T1050] ? __x64_sys_mremap+0xd0/0xd0 [ 42.995994][ T1050] ? __se_sys_futex+0x136/0x310 [ 43.000904][ T1050] ? __this_cpu_preempt_check+0x13/0x20 [ 43.006522][ T1050] ? xfd_validate_state+0x70/0x150 [ 43.011721][ T1050] ? __kasan_check_write+0x14/0x20 [ 43.016934][ T1050] ? fpregs_restore_userregs+0x128/0x260 [ 43.022628][ T1050] __x64_sys_mremap+0xbf/0xd0 [ 43.027360][ T1050] x64_sys_call+0x989/0x9a0 [ 43.031916][ T1050] do_syscall_64+0x4c/0xa0 [ 43.036388][ T1050] ? clear_bhb_loop+0x30/0x80 [ 43.041134][ T1050] ? clear_bhb_loop+0x30/0x80 [ 43.045849][ T1050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.051787][ T1050] RIP: 0033:0x7ff97ab9f559 [ 43.056218][ T1050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.075847][ T1050] RSP: 002b:00007ff97b9d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 43.084282][ T1050] RAX: ffffffffffffffda RBX: 00007ff97ae25fa0 RCX: 00007ff97ab9f559 [ 43.092286][ T1050] RDX: 000000000000faff RSI: 0000000000002000 RDI: 0000200000ffc000 [ 43.100300][ T1050] RBP: 00007ff97ac36b20 R08: 0000200000006000 R09: 0000000000000000 [ 43.108352][ T1050] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 43.116544][ T1050] R13: 00007ff97ae26038 R14: 00007ff97ae25fa0 R15: 00007ffe6a31d1e8 [ 43.124576][ T1050] [ 43.168244][ T28] audit: type=1400 audit(1793251888.168:218): avc: denied { mounton } for pid=1071 comm="syz.1.310" path="/proc/127/task" dev="proc" ino=17343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 43.204390][ T1077] ip_tables: iptables: counters copy to user failed while replacing table [ 43.375236][ T1108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 43.879521][ T19] usb 1-1: USB disconnect, device number 5 [ 44.045433][ T1131] loop1: detected capacity change from 0 to 512 [ 44.481007][ T1131] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.511944][ T1131] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.532090][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 44.532107][ T28] audit: type=1400 audit(1793251889.538:220): avc: denied { view } for pid=1144 comm="syz.0.337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.617147][ T28] audit: type=1400 audit(1793251889.588:221): avc: denied { write } for pid=1129 comm="syz.1.333" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.658532][ T288] EXT4-fs (loop1): unmounting filesystem. [ 44.675032][ T1153] device ip6gretap0 entered promiscuous mode [ 44.697938][ T28] audit: type=1400 audit(1793251889.588:222): avc: denied { add_name } for pid=1129 comm="syz.1.333" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.766992][ T28] audit: type=1400 audit(1793251889.588:223): avc: denied { create } for pid=1129 comm="syz.1.333" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.798650][ T28] audit: type=1400 audit(1793251889.598:224): avc: denied { write open } for pid=1129 comm="syz.1.333" path="/59/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.821650][ T28] audit: type=1400 audit(1793251889.608:225): avc: denied { read append } for pid=1129 comm="syz.1.333" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.844675][ T28] audit: type=1400 audit(1793251889.608:226): avc: denied { open } for pid=1129 comm="syz.1.333" path="/59/bus/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.867540][ T28] audit: type=1400 audit(1793251889.618:227): avc: denied { ioctl } for pid=1129 comm="syz.1.333" path="/59/bus/file2" dev="loop1" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.021859][ T28] audit: type=1400 audit(1793251889.748:228): avc: denied { ioctl } for pid=1158 comm="syz.0.345" path="socket:[18623]" dev="sockfs" ino=18623 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.050990][ T28] audit: type=1400 audit(1793251889.748:229): avc: denied { setopt } for pid=1158 comm="syz.0.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 45.454637][ T769] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 45.662906][ T1196] loop2: detected capacity change from 0 to 40427 [ 45.672509][ T1196] F2FS-fs (loop2): fault_injection options not supported [ 45.679730][ T1196] F2FS-fs (loop2): fault_type options not supported [ 45.686791][ T1196] F2FS-fs (loop2): invalid crc value [ 45.699284][ T1196] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.742583][ T1196] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 45.759645][ T769] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.761366][ T1196] syz.2.348: attempt to access beyond end of device [ 45.761366][ T1196] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.783405][ T769] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 45.795383][ T1196] syz.2.348: attempt to access beyond end of device [ 45.795383][ T1196] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 45.828677][ T769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 45.857932][ T1201] overlayfs: failed to clone upperpath [ 45.877329][ T769] usb 2-1: Product: syz [ 45.889632][ T769] usb 2-1: Manufacturer: syz [ 46.334405][ T769] logitech-djreceiver 0003:046D:C52B.0004: hiddev96,hidraw0: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 46.350595][ T769] logitech-djreceiver 0003:046D:C52B.0004: logi_dj_recv_send_report: unable to find dj report [ 46.372360][ T769] logitech-djreceiver 0003:046D:C52B.0004: logi_dj_recv_switch_to_dj_mode error:-19 [ 46.675504][ T1227] loop0: detected capacity change from 0 to 40427 [ 46.698210][ T1227] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 46.707819][ T1239] tipc: Failed to remove unknown binding: 66,0,2/0:3037511902/3037511903 [ 46.729807][ T1227] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 46.738190][ T769] usb 2-1: USB disconnect, device number 3 [ 46.758442][ T1239] tipc: Failed to remove unknown binding: 66,0,2/0:3037511902/3037511903 [ 46.795647][ T1227] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.893510][ T1227] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 46.904016][ T1227] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 47.293283][ T1286] loop0: detected capacity change from 0 to 128 [ 47.360516][ T326] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 47.515603][ T1299] loop2: detected capacity change from 0 to 4096 [ 47.539629][ T1299] ext4: Unknown parameter 'noacl' [ 47.697155][ T1286] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.032835][ T1286] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.839917][ T287] EXT4-fs (loop0): unmounting filesystem. [ 48.969691][ T1333] fuse: Bad value for 'fd' [ 49.918750][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 49.918766][ T28] audit: type=1400 audit(1793251894.928:252): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 50.323276][ T1386] loop5: detected capacity change from 0 to 7 [ 50.394721][ T28] audit: type=1400 audit(1793251895.398:253): avc: denied { unlink } for pid=1388 comm="syz.0.430" name="#1" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.415209][ T1391] overlayfs: invalid origin (0000) [ 50.485961][ T1393] loop0: detected capacity change from 0 to 256 [ 50.562290][ T1397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=1397 comm=syz.4.421 [ 50.709637][ T1416] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.716958][ T1416] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.791185][ T1423] loop2: detected capacity change from 0 to 8192 [ 50.798436][ T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 50.872015][ T1419] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 51.009920][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.027647][ T1439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'. [ 51.029465][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.051603][ T19] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.061023][ T19] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 51.069389][ T19] usb 2-1: Manufacturer: syz [ 51.075294][ T19] usb 2-1: config 0 descriptor?? [ 51.608427][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.676059][ T1479] fuse: Bad value for 'fd' [ 51.748359][ T1427] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 51.764237][ T1496] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 51.883489][ T19] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 51.898388][ T19] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 51.906668][ T19] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 51.915070][ T19] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 51.928363][ T1427] usb 1-1: Using ep0 maxpacket: 16 [ 51.933647][ T19] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 51.942349][ T1427] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.953467][ T19] usb 2-1: USB disconnect, device number 4 [ 51.959397][ T1427] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.983884][ T1427] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.998312][ T1427] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.006373][ T1427] usb 1-1: Product: syz [ 52.018505][ T1427] usb 1-1: Manufacturer: syz [ 52.023210][ T1427] usb 1-1: SerialNumber: syz [ 52.234172][ T1427] usb 1-1: 0:2 : does not exist [ 52.242215][ T1427] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 52.260708][ T1427] usb 1-1: USB disconnect, device number 6 [ 52.479255][ T509] udevd[509]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.668448][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 52.764078][ T28] audit: type=1400 audit(1793251897.768:254): avc: denied { setopt } for pid=1519 comm="syz.0.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.776045][ T1520] tipc: Resetting bearer [ 52.790251][ T1520] tipc: Resetting bearer [ 52.799812][ T1520] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.807875][ T1520] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.850796][ T19] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 52.868568][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.876761][ T19] usb 2-1: Product: syz [ 52.886861][ T19] usb 2-1: Manufacturer: syz [ 52.891703][ T19] usb 2-1: SerialNumber: syz [ 53.203139][ T1541] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 54.937389][ T28] audit: type=1326 audit(1793251899.938:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1574 comm="syz.2.495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97ab9f559 code=0x7ffc0000 [ 54.968366][ T60] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 54.996448][ T28] audit: type=1326 audit(1793251899.938:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1574 comm="syz.2.495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97ab9f559 code=0x7ffc0000 [ 55.048343][ T28] audit: type=1326 audit(1793251899.978:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1574 comm="syz.2.495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97ab9f559 code=0x7ffc0000 [ 55.143694][ T28] audit: type=1326 audit(1793251899.978:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1574 comm="syz.2.495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff97ab9f559 code=0x7ffc0000 [ 55.208463][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 55.219065][ T60] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 55.238369][ T60] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 55.258328][ T60] usb 1-1: config 0 interface 0 has no altsetting 0 [ 55.265006][ T60] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 55.298819][ T28] audit: type=1326 audit(1793251899.978:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1574 comm="syz.2.495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97ab9f559 code=0x7ffc0000 [ 55.341804][ T1584] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 55.349390][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.371350][ T60] usb 1-1: config 0 descriptor?? [ 55.412754][ T28] audit: type=1326 audit(1793251899.978:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1574 comm="syz.2.495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97ab9f559 code=0x7ffc0000 [ 55.618684][ T39] usb 2-1: USB disconnect, device number 5 [ 55.759594][ T28] audit: type=1326 audit(1793251899.978:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1574 comm="syz.2.495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97ab9f559 code=0x7ffc0000 [ 55.795640][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 55.806120][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 55.911283][ T60] usb 1-1: USB disconnect, device number 7 [ 55.967195][ T28] audit: type=1326 audit(1793251899.978:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1574 comm="syz.2.495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97ab9f559 code=0x7ffc0000 [ 56.047922][ T28] audit: type=1326 audit(1793251899.978:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1574 comm="syz.2.495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97ab9f559 code=0x7ffc0000 [ 56.083596][ T28] audit: type=1326 audit(1793251899.978:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1574 comm="syz.2.495" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7ff97ab9f559 code=0x7ffc0000 [ 56.211644][ T1621] loop1: detected capacity change from 0 to 2048 [ 56.319649][ T1621] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.367571][ T1620] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 56.399926][ T1620] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 56.413032][ T1620] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.413032][ T1620] [ 56.422842][ T1620] EXT4-fs (loop1): Total free blocks count 0 [ 56.429007][ T1620] EXT4-fs (loop1): Free/Dirty block details [ 56.434989][ T1620] EXT4-fs (loop1): free_blocks=66060288 [ 56.440660][ T1620] EXT4-fs (loop1): dirty_blocks=32 [ 56.453612][ T1620] EXT4-fs (loop1): Block reservation details [ 56.459869][ T1620] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 56.470590][ T1621] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 2 with error 28 [ 56.520870][ T288] EXT4-fs warning (device loop1): ext4_rmdir:3243: inode #11: comm syz-executor: empty directory 'lost+found' has too many links (1024) [ 56.567065][ T1635] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 56.639448][ T1638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=1638 comm=syz.0.521 [ 57.800388][ T1677] netlink: 144 bytes leftover after parsing attributes in process `syz.0.531'. [ 57.816987][ T1677] netlink: 144 bytes leftover after parsing attributes in process `syz.0.531'. [ 58.622508][ T1715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 58.663574][ T1718] overlayfs: failed to resolve 'upper': -2 [ 58.713230][ T1721] loop1: detected capacity change from 0 to 256 [ 58.758370][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 58.777611][ T1726] device veth1_macvtap left promiscuous mode [ 58.949774][ T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 58.978155][ T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 58.998555][ T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 59.019495][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 59.038329][ T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 59.077054][ T39] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 59.106972][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.129478][ T1706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.146939][ T1706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.167087][ T1706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.556416][ T1749] device-mapper: table: 252:3: crypt: Error decoding and setting key (-ENOKEY) [ 59.594298][ T1749] device-mapper: ioctl: error adding target to table [ 59.732776][ T60] usb 3-1: USB disconnect, device number 6 [ 59.901218][ T1772] mmap: syz.1.570 (1772): VmData 33267712 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 60.230681][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 60.230698][ T28] audit: type=1400 audit(1793251905.238:289): avc: denied { cmd } for pid=1799 comm="syz.1.583" path="/dev/ublk-control" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 60.248800][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 60.516513][ T28] audit: type=1400 audit(1793251905.518:290): avc: denied { write } for pid=1806 comm="syz.2.585" name="fib_trie" dev="proc" ino=4026532483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.616891][ T1815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.587'. [ 61.372193][ T1831] loop1: detected capacity change from 0 to 256 [ 61.816883][ T28] audit: type=1400 audit(1793251906.818:291): avc: denied { write } for pid=1842 comm="syz.2.598" path="socket:[20685]" dev="sockfs" ino=20685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.843520][ T1849] overlayfs: failed to clone upperpath [ 61.931052][ T1855] loop2: detected capacity change from 0 to 128 [ 61.968893][ T1855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 61.980693][ T1855] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.251198][ T290] EXT4-fs (loop2): unmounting filesystem. [ 62.574112][ T1886] loop2: detected capacity change from 0 to 1024 [ 62.599487][ T1886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.723939][ T1886] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 62.739991][ T1886] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.761900][ T1886] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.616: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.780777][ T1895] netlink: 80 bytes leftover after parsing attributes in process `syz.1.620'. [ 62.805545][ T1886] EXT4-fs (loop2): Remounting filesystem read-only [ 62.828013][ T1886] EXT4-fs (loop2): 1 orphan inode deleted [ 62.856429][ T1897] 9pnet_fd: Insufficient options for proto=fd [ 62.864066][ T1886] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 62.898750][ T1886] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.616: iget: bad i_size value: 1970324836974602 [ 62.963248][ T290] EXT4-fs (loop2): unmounting filesystem. [ 62.999030][ T1909] netlink: 144 bytes leftover after parsing attributes in process `syz.2.627'. [ 63.008197][ T1909] netlink: 144 bytes leftover after parsing attributes in process `syz.2.627'. [ 63.284500][ T1931] tipc: Failed to remove unknown binding: 66,0,0/0:415203918/415203919 [ 63.321265][ T1931] tipc: Failed to remove unknown binding: 66,0,0/0:415203918/415203919 [ 63.388389][ T28] audit: type=1400 audit(1793251908.368:292): avc: denied { write } for pid=1928 comm="syz.2.636" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.449672][ T28] audit: type=1400 audit(1793251908.368:293): avc: denied { open } for pid=1928 comm="syz.2.636" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.527780][ T28] audit: type=1400 audit(1793251908.368:294): avc: denied { ioctl } for pid=1928 comm="syz.2.636" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.604539][ T28] audit: type=1400 audit(1793251908.608:295): avc: denied { read write } for pid=1945 comm="syz.2.642" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.653440][ T28] audit: type=1400 audit(1793251908.638:296): avc: denied { open } for pid=1945 comm="syz.2.642" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 63.757680][ T1956] overlayfs: failed to clone upperpath [ 64.041405][ T1970] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 64.090100][ T1973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 64.495529][ T1980] loop1: detected capacity change from 0 to 512 [ 64.645492][ T1980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.668003][ T1980] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.816830][ T288] EXT4-fs (loop1): unmounting filesystem. [ 65.026647][ T28] audit: type=1400 audit(1793251910.028:297): avc: denied { bind } for pid=2010 comm="syz.1.663" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.111701][ T28] audit: type=1400 audit(1793251910.058:298): avc: denied { node_bind } for pid=2010 comm="syz.1.663" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 65.337344][ T28] audit: type=1400 audit(1793251910.338:299): avc: denied { setopt } for pid=2036 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.421621][ T28] audit: type=1400 audit(1793251910.368:300): avc: denied { connect } for pid=2036 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.477461][ T28] audit: type=1400 audit(1793251910.478:301): avc: denied { search } for pid=2038 comm="syz.1.677" name="/" dev="configfs" ino=6121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 65.648806][ T2048] tmpfs: Bad value for 'size' [ 65.653636][ T28] audit: type=1400 audit(1793251910.658:302): avc: denied { mounton } for pid=2047 comm="syz.0.682" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 65.778564][ T39] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 65.796713][ T769] android_work: sent uevent USB_STATE=CONNECTED [ 65.886596][ T2065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.918507][ T2065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.968832][ T2067] overlayfs: failed to clone upperpath [ 65.979168][ T39] usb 1-1: Dual-Role OTG device on HNP port [ 65.988348][ T39] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 65.998451][ T295] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 66.017730][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.062741][ T769] android_work: sent uevent USB_STATE=CONFIGURED [ 66.189739][ T295] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.213575][ T295] usb 2-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00 [ 66.242527][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.515938][ T769] usb 2-1: USB disconnect, device number 6 [ 66.772481][ T2089] netlink: 136 bytes leftover after parsing attributes in process `syz.3.699'. [ 66.848461][ T2089] netlink: 136 bytes leftover after parsing attributes in process `syz.3.699'. [ 67.608354][ T769] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 67.808337][ T769] usb 3-1: Using ep0 maxpacket: 16 [ 67.814735][ T769] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.835904][ T769] usb 3-1: config 0 interface 0 has no altsetting 0 [ 67.844216][ T2128] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 67.859748][ T769] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 67.878326][ T769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.898308][ T769] usb 3-1: Product: syz [ 67.902557][ T769] usb 3-1: Manufacturer: syz [ 67.923188][ T769] usb 3-1: SerialNumber: syz [ 67.931161][ T769] usb 3-1: config 0 descriptor?? [ 68.180917][ T2132] overlayfs: failed to clone lowerpath [ 68.198168][ T2132] overlayfs: failed to clone lowerpath [ 68.456787][ T2136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.466446][ T2136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.604607][ T2138] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.611970][ T2138] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.370248][ T28] audit: type=1400 audit(1793251914.378:303): avc: denied { unmount } for pid=2171 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 69.470579][ T2183] overlayfs: failed to clone lowerpath [ 69.480946][ T2183] overlayfs: failed to clone lowerpath [ 69.629630][ T2184] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 69.663334][ T2187] loop1: detected capacity change from 0 to 128 [ 69.767200][ T2187] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 69.776194][ T2187] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.802312][ T288] EXT4-fs (loop1): unmounting filesystem. [ 69.926028][ T2195] loop1: detected capacity change from 0 to 128 [ 69.940241][ T2195] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 70.227882][ T2199] netlink: 68 bytes leftover after parsing attributes in process `syz.4.734'. [ 70.266171][ T2205] loop0: detected capacity change from 0 to 16 [ 70.291981][ T2205] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 70.331916][ T2205] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 70.349931][ T769] usb 3-1: USB disconnect, device number 7 [ 70.465871][ T2205] erofs: (device loop0): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 70.587356][ T2205] erofs: (device loop0): mounted with root inode @ nid 36. [ 70.973366][ T2226] loop0: detected capacity change from 0 to 512 [ 71.040310][ T509] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.052280][ T28] audit: type=1400 audit(1793251916.058:304): avc: denied { search } for pid=2225 comm="syz.0.745" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 71.079218][ T2232] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 71.108894][ T2237] loop0: detected capacity change from 0 to 512 [ 71.131033][ T2237] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 71.143638][ T28] audit: type=1400 audit(1793251916.058:305): avc: denied { append } for pid=2225 comm="syz.0.745" name="uprobe_events" dev="tracefs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 71.171055][ T2237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.180430][ T2237] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.277680][ T287] EXT4-fs (loop0): unmounting filesystem. [ 72.255744][ T2281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 72.310936][ T2286] netlink: 176 bytes leftover after parsing attributes in process `syz.1.762'. [ 72.330281][ T2286] netlink: 176 bytes leftover after parsing attributes in process `syz.1.762'. [ 72.812955][ T2298] loop1: detected capacity change from 0 to 2048 [ 72.892019][ T2304] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 72.950595][ T2298] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.967184][ T2298] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.127852][ T288] EXT4-fs (loop1): unmounting filesystem. [ 73.500593][ T2318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 73.532440][ T2320] netlink: 176 bytes leftover after parsing attributes in process `syz.1.774'. [ 73.562860][ T2320] netlink: 176 bytes leftover after parsing attributes in process `syz.1.774'. [ 73.840230][ T28] audit: type=1400 audit(1793251918.848:306): avc: denied { listen } for pid=2331 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.139277][ T2356] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 74.503560][ T2355] netlink: 132 bytes leftover after parsing attributes in process `syz.2.788'. [ 74.618109][ T28] audit: type=1400 audit(1793251919.618:307): avc: denied { write } for pid=2366 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.078696][ T2372] loop0: detected capacity change from 0 to 128 [ 76.119036][ T2372] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 76.148902][ T2372] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.222130][ T2386] loop2: detected capacity change from 0 to 1024 [ 76.238588][ T2386] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.254797][ T287] EXT4-fs (loop0): unmounting filesystem. [ 76.286607][ T2386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.300567][ T2395] netlink: 132 bytes leftover after parsing attributes in process `syz.4.803'. [ 76.304806][ T2386] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.800: missing EA_INODE flag [ 76.331936][ T2386] EXT4-fs (loop2): Remounting filesystem read-only [ 76.339776][ T2386] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.800: error while reading EA inode 11 err=-117 [ 76.352558][ T2386] EXT4-fs (loop2): Remounting filesystem read-only [ 76.359450][ T2386] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.411042][ T2403] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 76.427563][ T290] EXT4-fs (loop2): unmounting filesystem. [ 76.480042][ T28] audit: type=1400 audit(1793251921.488:308): avc: denied { unmount } for pid=2409 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.342543][ T2433] netlink: 132 bytes leftover after parsing attributes in process `syz.1.816'. [ 77.346293][ T2429] netlink: 176 bytes leftover after parsing attributes in process `syz.4.814'. [ 77.384395][ T2429] netlink: 176 bytes leftover after parsing attributes in process `syz.4.814'. [ 77.421635][ T28] audit: type=1400 audit(1793251922.428:309): avc: denied { remount } for pid=2430 comm="syz.3.815" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.628451][ T28] audit: type=1400 audit(1793251922.628:310): avc: denied { dac_read_search } for pid=2453 comm="syz.4.821" capability=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 77.658838][ T28] audit: type=1400 audit(1793251922.628:311): avc: denied { dac_override } for pid=2453 comm="syz.4.821" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 77.867794][ T2450] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 77.898174][ T28] audit: type=1400 audit(1793251922.858:312): avc: denied { sqpoll } for pid=2443 comm="syz.2.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.238952][ T2463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=2463 comm=syz.4.826 [ 78.451647][ T2468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.829'. [ 78.588961][ T2482] netlink: 176 bytes leftover after parsing attributes in process `syz.1.832'. [ 78.613171][ T2482] netlink: 176 bytes leftover after parsing attributes in process `syz.1.832'. [ 78.676554][ T2486] loop2: detected capacity change from 0 to 128 [ 78.683524][ T2486] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff" or missing value [ 78.720374][ T509] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.902843][ T28] audit: type=1400 audit(1793251923.908:313): avc: denied { map } for pid=2488 comm="syz.1.837" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.282022][ T2497] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 80.192504][ T2512] loop1: detected capacity change from 0 to 256 [ 80.236371][ T2512] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 80.274889][ T28] audit: type=1400 audit(1793251925.278:314): avc: denied { write } for pid=2511 comm="syz.1.844" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.336262][ T28] audit: type=1400 audit(1793251925.308:315): avc: denied { add_name } for pid=2511 comm="syz.1.844" name="cpuacct.usage_percpu" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.391771][ T2461] loop0: detected capacity change from 0 to 131072 [ 80.398826][ T28] audit: type=1400 audit(1793251925.308:316): avc: denied { associate } for pid=2511 comm="syz.1.844" name="cpuacct.usage_percpu" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.429711][ T2461] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 80.469577][ T2461] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 80.490317][ T28] audit: type=1400 audit(1793251925.308:317): avc: denied { read append open } for pid=2511 comm="syz.1.844" path="/147/file1/cpuacct.usage_percpu" dev="loop1" ino=1048651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.576402][ T2461] F2FS-fs (loop0): invalid crc value [ 80.582113][ T2524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.848'. [ 80.711414][ T2536] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 80.886417][ T2461] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.179555][ T2548] loop2: detected capacity change from 0 to 512 [ 81.230080][ T2548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 81.243232][ T2548] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.381422][ T290] EXT4-fs (loop2): unmounting filesystem. [ 81.546518][ T2559] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 81.871078][ T2569] netlink: 140 bytes leftover after parsing attributes in process `syz.3.863'. [ 81.933568][ T2571] device vti0 entered promiscuous mode [ 82.191417][ T2569] netlink: 64 bytes leftover after parsing attributes in process `syz.3.863'. [ 83.018344][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 83.018364][ T28] audit: type=1400 audit(1793251928.018:320): avc: denied { create } for pid=2587 comm="syz.0.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.090576][ T2606] loop0: detected capacity change from 0 to 256 [ 83.153493][ T2606] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 83.238379][ T326] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 83.240710][ T2612] loop0: detected capacity change from 0 to 1024 [ 83.330446][ T2617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 83.393595][ T2612] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.450351][ T326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.485305][ T326] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 83.554367][ T2612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.567953][ T326] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.599775][ T326] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 83.617241][ T326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.625670][ T326] usb 3-1: Product: syz [ 83.629567][ T28] audit: type=1400 audit(1793251928.638:321): avc: denied { name_bind } for pid=2610 comm="syz.0.875" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 83.630498][ T326] usb 3-1: Manufacturer: syz [ 83.655532][ T326] usb 3-1: SerialNumber: syz [ 83.658533][ T28] audit: type=1400 audit(1793251928.658:322): avc: denied { read } for pid=2610 comm="syz.0.875" path="socket:[23621]" dev="sockfs" ino=23621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.692204][ T287] EXT4-fs (loop0): unmounting filesystem. [ 83.718886][ T2625] loop0: detected capacity change from 0 to 128 [ 83.730061][ T2625] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 83.739367][ T2625] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.762187][ T287] EXT4-fs (loop0): unmounting filesystem. [ 83.874233][ T2633] loop0: detected capacity change from 0 to 512 [ 83.900646][ T2633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.909726][ T2633] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.923238][ T2633] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 83.939680][ T2633] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 83.952116][ T2633] EXT4-fs (loop0): This should not happen!! Data will be lost [ 83.952116][ T2633] [ 83.962373][ T2633] EXT4-fs (loop0): Total free blocks count 0 [ 83.968785][ T2633] EXT4-fs (loop0): Free/Dirty block details [ 83.974933][ T2633] EXT4-fs (loop0): free_blocks=65281 [ 83.987820][ T2633] EXT4-fs (loop0): dirty_blocks=1 [ 83.993023][ T2633] EXT4-fs (loop0): Block reservation details [ 84.005731][ T2633] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 84.030674][ T2638] device veth1_to_bond entered promiscuous mode [ 84.037638][ T2637] device veth1_to_bond left promiscuous mode [ 84.115412][ T28] audit: type=1400 audit(1793251929.118:323): avc: denied { accept } for pid=2645 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.152490][ T2648] device bridge_slave_0 left promiscuous mode [ 84.160089][ T28] audit: type=1400 audit(1793251929.148:324): avc: denied { connect } for pid=2647 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.168628][ T2648] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.203720][ T2648] device bridge_slave_1 left promiscuous mode [ 84.210679][ T28] audit: type=1400 audit(1793251929.148:325): avc: denied { shutdown } for pid=2647 comm="syz.4.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.213060][ T2648] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.246265][ T2654] loop1: detected capacity change from 0 to 2048 [ 84.320754][ T509] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.809194][ T287] EXT4-fs (loop0): unmounting filesystem. [ 84.860009][ T2654] loop1: detected capacity change from 0 to 131072 [ 84.874826][ T2654] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 84.894981][ T2654] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 84.913096][ T2654] F2FS-fs (loop1): invalid crc value [ 84.920708][ T2654] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.989595][ T2654] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 84.996816][ T2654] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 85.009687][ T28] audit: type=1400 audit(1793251930.018:326): avc: denied { bind } for pid=2665 comm="syz.4.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.029774][ T2666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 85.123615][ T2676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 85.143399][ T2676] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 85.371748][ T2654] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 85.696754][ T2688] loop1: detected capacity change from 0 to 2048 [ 85.746168][ T2692] overlayfs: failed to clone lowerpath [ 85.769998][ T2696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=2696 comm=syz.3.906 [ 85.790500][ T2688] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 85.812028][ T28] audit: type=1400 audit(1793251930.818:327): avc: denied { mounton } for pid=2687 comm="syz.1.900" path="/157/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.844447][ T288] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 85.846345][ T28] audit: type=1400 audit(1793251930.848:328): avc: denied { read } for pid=2687 comm="syz.1.900" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.883209][ T28] audit: type=1400 audit(1793251930.848:329): avc: denied { open } for pid=2687 comm="syz.1.900" path="/157/file1/file0/file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.910650][ T2703] xt_hashlimit: max too large, truncated to 1048576 [ 85.911678][ T288] EXT4-fs (loop1): unmounting filesystem. [ 85.933561][ T769] usb 3-1: USB disconnect, device number 8 [ 85.973342][ T2710] tipc: Started in network mode [ 85.994878][ T2710] tipc: Node identity 4, cluster identity 4711 [ 86.001619][ T2710] tipc: Node number set to 4 [ 86.032228][ T2716] loop0: detected capacity change from 0 to 512 [ 86.041906][ T2716] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.048506][ T2716] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.056220][ T2716] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.107449][ T2716] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 86.121805][ T2716] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.913: invalid indirect mapped block 2683928664 (level 1) [ 86.136517][ T2716] EXT4-fs (loop0): 1 truncate cleaned up [ 86.142683][ T2716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.287676][ T2730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 86.525543][ T2732] netlink: 144 bytes leftover after parsing attributes in process `syz.2.918'. [ 86.537612][ T2732] netlink: 144 bytes leftover after parsing attributes in process `syz.2.918'. [ 86.575159][ T2716] mmap: syz.0.913 (2716) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.595348][ T2740] loop2: detected capacity change from 0 to 128 [ 86.617417][ T2740] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.627202][ T2740] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.652197][ T290] EXT4-fs (loop2): unmounting filesystem. [ 86.659982][ T287] EXT4-fs (loop0): unmounting filesystem. [ 86.710862][ T2751] loop2: detected capacity change from 0 to 2048 [ 86.718036][ T2751] EXT4-fs (loop2): bad block size 8192 [ 86.759175][ T509] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.494869][ T2781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 87.509569][ T2781] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 87.740728][ T2787] FAULT_INJECTION: forcing a failure. [ 87.740728][ T2787] name failslab, interval 1, probability 0, space 0, times 0 [ 87.753542][ T2787] CPU: 1 PID: 2787 Comm: syz.2.942 Tainted: G W syzkaller #0 [ 87.762338][ T2787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.772455][ T2787] Call Trace: [ 87.775752][ T2787] [ 87.778694][ T2787] __dump_stack+0x21/0x24 [ 87.783118][ T2787] dump_stack_lvl+0x110/0x170 [ 87.787840][ T2787] ? __cfi_dump_stack_lvl+0x8/0x8 [ 87.792929][ T2787] dump_stack+0x15/0x24 [ 87.797732][ T2787] should_fail_ex+0x3bf/0x510 [ 87.802445][ T2787] __should_failslab+0xac/0xf0 [ 87.807257][ T2787] should_failslab+0x9/0x20 [ 87.811816][ T2787] __kmem_cache_alloc_node+0x3d/0x2d0 [ 87.817218][ T2787] ? xfrm_hash_alloc+0x3b/0x70 [ 87.821994][ T2787] ? kasan_save_alloc_info+0x1f/0x30 [ 87.827318][ T2787] ? xfrm_hash_alloc+0x3b/0x70 [ 87.832096][ T2787] __kmalloc+0xa4/0x1e0 [ 87.836269][ T2787] xfrm_hash_alloc+0x3b/0x70 [ 87.840867][ T2787] xfrm_net_init+0x454/0xda0 [ 87.845495][ T2787] ops_init+0x2ce/0x470 [ 87.849671][ T2787] setup_net+0x4b4/0xcd0 [ 87.853936][ T2787] ? copy_net_ns+0x5c0/0x5c0 [ 87.858581][ T2787] ? __kasan_kmalloc+0x95/0xb0 [ 87.863362][ T2787] ? copy_net_ns+0x185/0x5c0 [ 87.867963][ T2787] copy_net_ns+0x355/0x5c0 [ 87.872417][ T2787] create_new_namespaces+0x3a8/0x660 [ 87.877751][ T2787] unshare_nsproxy_namespaces+0x120/0x170 [ 87.883531][ T2787] ksys_unshare+0x4d5/0x850 [ 87.888074][ T2787] ? __cfi_ksys_unshare+0x10/0x10 [ 87.893128][ T2787] ? fpregs_restore_userregs+0x128/0x260 [ 87.898787][ T2787] __x64_sys_unshare+0x38/0x40 [ 87.903586][ T2787] x64_sys_call+0x767/0x9a0 [ 87.908132][ T2787] do_syscall_64+0x4c/0xa0 [ 87.912583][ T2787] ? clear_bhb_loop+0x30/0x80 [ 87.917333][ T2787] ? clear_bhb_loop+0x30/0x80 [ 87.922034][ T2787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.928046][ T2787] RIP: 0033:0x7ff97ab9f559 [ 87.932478][ T2787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.952111][ T2787] RSP: 002b:00007ff97b9d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 87.960573][ T2787] RAX: ffffffffffffffda RBX: 00007ff97ae25fa0 RCX: 00007ff97ab9f559 [ 87.968587][ T2787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 87.976607][ T2787] RBP: 00007ff97ac36b20 R08: 0000000000000000 R09: 0000000000000000 [ 87.984653][ T2787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.994038][ T2787] R13: 00007ff97ae26038 R14: 00007ff97ae25fa0 R15: 00007ffe6a31d1e8 [ 88.002078][ T2787] [ 88.046655][ T2793] overlayfs: failed to clone upperpath [ 88.200607][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 88.200624][ T28] audit: type=1400 audit(1793251933.208:337): avc: denied { write } for pid=2803 comm="syz.0.951" name="usb_gadget" dev="configfs" ino=6122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.269156][ T2809] loop1: detected capacity change from 0 to 128 [ 88.478587][ T326] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 88.628443][ T2813] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 88.690339][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.727818][ T28] audit: type=1400 audit(1793251933.218:338): avc: denied { add_name } for pid=2803 comm="syz.0.951" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.756356][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.824801][ T326] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.902023][ T326] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.004390][ T326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.030424][ T326] usb 3-1: config 0 descriptor?? [ 89.304389][ T2833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 89.442725][ T2807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.524973][ T2807] xt_hashlimit: size too large, truncated to 1048576 [ 89.575305][ T326] plantronics 0003:047F:FFFF.0006: collection stack underflow [ 89.586224][ T326] plantronics 0003:047F:FFFF.0006: item 0 0 0 12 parsing failed [ 89.594690][ T326] plantronics 0003:047F:FFFF.0006: parse failed [ 89.602865][ T326] plantronics: probe of 0003:047F:FFFF.0006 failed with error -22 [ 89.735463][ T2847] netlink: 176 bytes leftover after parsing attributes in process `syz.1.967'. [ 89.744662][ T2847] netlink: 176 bytes leftover after parsing attributes in process `syz.1.967'. [ 89.794117][ T2807] loop2: detected capacity change from 0 to 256 [ 89.803133][ T2807] FAT-fs (loop2): Unrecognized mount option "H*|"os˾)xdyeGB-=> #cg|[@OiQkVu#Az͋KHSctޠ0λ2Mûz'B+r}'%BXI z. [ 89.803133][ T2807] ۀr|;ΆwwoYP/AGs'qr3cH)8wW g*2_O" or missing value [ 89.836845][ T326] usb 3-1: USB disconnect, device number 9 [ 90.062243][ T2859] raw_sendmsg: syz.3.972 forgot to set AF_INET. Fix it! [ 90.178850][ T2863] overlayfs: failed to clone upperpath [ 91.695053][ T2912] loop0: detected capacity change from 0 to 256 [ 92.456800][ T2892] loop1: detected capacity change from 0 to 131072 [ 92.478335][ T2892] F2FS-fs (loop1): invalid crc value [ 92.583251][ T2892] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.731525][ T2892] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 93.006772][ T2917] loop2: detected capacity change from 0 to 131072 [ 93.024794][ T2917] F2FS-fs (loop2): invalid crc value [ 93.100104][ T2956] loop0: detected capacity change from 0 to 256 [ 93.310985][ T2917] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.436533][ T2917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 93.459038][ T2964] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 93.475041][ T2917] F2FS-fs (loop2): Corrupted max_depth of 3: 16842753 [ 93.485847][ T28] audit: type=1400 audit(1793251938.488:339): avc: denied { rename } for pid=2915 comm="syz.2.999" name="file2" dev="loop2" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.679006][ T2976] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1022'. [ 93.688304][ T2976] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1022'. [ 93.797308][ T2985] loop0: detected capacity change from 0 to 512 [ 93.833573][ T2990] loop1: detected capacity change from 0 to 512 [ 93.846578][ T2990] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 93.854946][ T2985] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.864209][ T2990] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 93.872663][ T2985] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.883466][ T2990] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #13: comm syz.1.1027: iget: bad i_size value: 12154757448730 [ 93.906986][ T2990] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1027: couldn't read orphan inode 13 (err -117) [ 93.910508][ T287] EXT4-fs (loop0): unmounting filesystem. [ 93.927249][ T2990] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.698952][ T288] EXT4-fs (loop1): unmounting filesystem. [ 94.745499][ T3014] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1034'. [ 94.778388][ T3014] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1034'. [ 95.027577][ T3026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 95.242999][ T3027] loop1: detected capacity change from 0 to 256 [ 95.258093][ T3027] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 95.806610][ T3031] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 95.903107][ T28] audit: type=1400 audit(1793251940.908:340): avc: denied { bind } for pid=3040 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.098262][ C0] sched: RT throttling activated [ 96.243825][ T3045] erspan0: mtu less than device minimum [ 96.612445][ T3012] loop0: detected capacity change from 0 to 131072 [ 96.620422][ T3012] F2FS-fs (loop0): invalid crc value [ 96.653519][ T3012] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.758526][ T3012] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 97.288940][ T28] audit: type=1400 audit(1793251942.298:341): avc: denied { append } for pid=3066 comm="syz.0.1054" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 97.589995][ T3074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1052'. [ 97.604224][ T3074] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 97.846021][ T3077] loop1: detected capacity change from 0 to 512 [ 97.870364][ T3077] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.879481][ T3077] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.902440][ T288] EXT4-fs (loop1): unmounting filesystem. [ 98.178382][ T295] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.264436][ T3085] loop2: detected capacity change from 0 to 4096 [ 98.274067][ T3085] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.283721][ T3085] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.292180][ T3085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.359630][ T295] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.366372][ T295] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 98.375541][ T295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.388136][ T295] usb 2-1: config 0 descriptor?? [ 98.898378][ T28] audit: type=1400 audit(1793251943.538:342): avc: denied { create } for pid=3084 comm="syz.2.1059" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 99.600760][ T290] EXT4-fs (loop2): unmounting filesystem. [ 99.762134][ T295] hid (null): unknown global tag 0xfd [ 99.781163][ T295] hid (null): unknown global tag 0xc [ 99.792707][ T295] waltop 0003:172F:0034.0007: unexpected long global item [ 99.800718][ T295] waltop: probe of 0003:172F:0034.0007 failed with error -22 [ 99.803304][ T28] audit: type=1400 audit(1793251944.808:343): avc: denied { read } for pid=3102 comm="syz.0.1065" path="socket:[25606]" dev="sockfs" ino=25606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.969288][ T19] usb 2-1: USB disconnect, device number 7 [ 100.167562][ T3106] loop2: detected capacity change from 0 to 2048 [ 100.179790][ T3106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.188973][ T3106] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.406645][ T28] audit: type=1400 audit(1793251945.408:344): avc: denied { create } for pid=3105 comm="syz.2.1066" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 100.523292][ T3124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 100.776647][ T3123] overlayfs: failed to resolve './bus': -2 [ 100.851433][ T3129] loop1: detected capacity change from 0 to 256 [ 100.869428][ T3129] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 100.919569][ T3135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1077'. [ 100.976946][ T3137] loop1: detected capacity change from 0 to 1024 [ 101.061224][ T3137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.074375][ T290] EXT4-fs (loop2): unmounting filesystem. [ 101.084193][ T28] audit: type=1400 audit(1793251946.088:345): avc: denied { setattr } for pid=3136 comm="syz.1.1078" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.138330][ T28] audit: type=1400 audit(1793251946.108:346): avc: denied { write open } for pid=3136 comm="syz.1.1078" path=2F202864656C6574656429 dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.162403][ T28] audit: type=1400 audit(1793251946.108:347): avc: denied { remove_name } for pid=3136 comm="syz.1.1078" name="#3" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.164290][ T288] EXT4-fs (loop1): unmounting filesystem. [ 101.192772][ T28] audit: type=1400 audit(1793251946.108:348): avc: denied { rename } for pid=3136 comm="syz.1.1078" name="#3" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.197184][ T3141] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1079'. [ 101.266024][ T3141] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1079'. [ 101.270151][ T28] audit: type=1400 audit(1793251946.128:349): avc: denied { unlink } for pid=3136 comm="syz.1.1078" name="#3" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.361380][ T3149] loop1: detected capacity change from 0 to 512 [ 101.368525][ T3152] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 101.408976][ T28] audit: type=1400 audit(1793251946.128:350): avc: denied { unlink } for pid=3136 comm="syz.1.1078" name="#4" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.442095][ T3149] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.464616][ T3149] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.483093][ T28] audit: type=1400 audit(1793251946.148:351): avc: denied { rmdir } for pid=288 comm="syz-executor" name="volatile" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 101.546801][ T288] EXT4-fs (loop1): unmounting filesystem. [ 102.178168][ T3175] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1093'. [ 102.187617][ T3175] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1093'. [ 102.508708][ T3192] loop2: detected capacity change from 0 to 512 [ 102.521858][ T3171] loop0: detected capacity change from 0 to 131072 [ 102.533969][ T3171] F2FS-fs (loop0): invalid crc value [ 102.571042][ T3192] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.581159][ T3171] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.602689][ T3192] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.652604][ T290] EXT4-fs (loop2): unmounting filesystem. [ 102.687935][ T3171] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 102.699605][ T3211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=624 sclass=netlink_route_socket pid=3211 comm=syz.2.1105 [ 103.002953][ T3223] ip_tables: iptables: counters copy to user failed while replacing table [ 103.461143][ T3225] loop2: detected capacity change from 0 to 512 [ 103.781866][ T3225] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.1113: Parent and EA inode have the same ino 15 [ 103.802538][ T3225] EXT4-fs (loop2): 1 orphan inode deleted [ 103.832327][ T3225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 103.869030][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 103.869048][ T28] audit: type=1400 audit(1793251948.878:353): avc: denied { remount } for pid=3224 comm="syz.2.1113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.932534][ T290] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 103.982580][ T28] audit: type=1400 audit(1793251948.988:354): avc: denied { unlink } for pid=290 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 104.006222][ T290] ------------[ cut here ]------------ [ 104.012241][ T290] kernel BUG at fs/namei.c:2962! [ 104.017675][ T290] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 104.023794][ T290] CPU: 0 PID: 290 Comm: syz-executor Tainted: G W syzkaller #0 [ 104.032770][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 104.042868][ T290] RIP: 0010:may_delete+0x727/0x730 [ 104.048038][ T290] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 4a dd f3 ff e9 75 fe ff ff e8 30 41 ae ff 0f 0b e8 29 41 ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 11 41 [ 104.067697][ T290] RSP: 0018:ffffc9000d38fc58 EFLAGS: 00010293 [ 104.073803][ T290] RAX: ffffffff81c330f7 RBX: ffff88813885e220 RCX: ffff888109a5a880 [ 104.081819][ T290] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 104.089835][ T290] RBP: ffffc9000d38fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 104.097893][ T290] R10: dffffc0000000000 R11: fffff52001a71f68 R12: 1ffff1102710bc44 [ 104.105916][ T290] R13: 0000000000000001 R14: ffff88814745c360 R15: dffffc0000000000 [ 104.113965][ T290] FS: 000055557604b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 104.122941][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.129563][ T290] CR2: 0000555576076988 CR3: 00000001301ea000 CR4: 00000000003526b0 [ 104.137585][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.145602][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.153682][ T290] Call Trace: [ 104.156994][ T290] [ 104.159960][ T290] vfs_rmdir+0x2f/0x4f0 [ 104.164199][ T290] ? incfs_kill_sb+0xec/0x210 [ 104.168966][ T290] incfs_kill_sb+0xfe/0x210 [ 104.173564][ T290] deactivate_locked_super+0xb5/0x120 [ 104.179001][ T290] deactivate_super+0xaf/0xe0 [ 104.183741][ T290] cleanup_mnt+0x45e/0x4e0 [ 104.188270][ T290] __cleanup_mnt+0x19/0x20 [ 104.192762][ T290] task_work_run+0x1e1/0x250 [ 104.197417][ T290] ? __cfi_task_work_run+0x10/0x10 [ 104.202577][ T290] ? __x64_sys_umount+0x12d/0x170 [ 104.207682][ T290] ? __cfi___x64_sys_umount+0x10/0x10 [ 104.213120][ T290] exit_to_user_mode_loop+0x9b/0xb0 [ 104.218383][ T290] exit_to_user_mode_prepare+0x87/0xd0 [ 104.223903][ T290] syscall_exit_to_user_mode+0x1a/0x30 [ 104.229423][ T290] do_syscall_64+0x58/0xa0 [ 104.233882][ T290] ? clear_bhb_loop+0x30/0x80 [ 104.238607][ T290] ? clear_bhb_loop+0x30/0x80 [ 104.243345][ T290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.249284][ T290] RIP: 0033:0x7ff97aba0797 [ 104.253741][ T290] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 104.273397][ T290] RSP: 002b:00007ffe6a31b368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.281872][ T290] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff97aba0797 [ 104.289906][ T290] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6a31b420 [ 104.297924][ T290] RBP: 00007ffe6a31b420 R08: 00007ffe6a31c420 R09: 00000000ffffffff [ 104.305947][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6a31c510 [ 104.313955][ T290] R13: 00007ff97ac35f63 R14: 00000000000195c5 R15: 00007ffe6a31d5e0 [ 104.321960][ T290] [ 104.325010][ T290] Modules linked in: [ 104.330594][ T290] ---[ end trace 0000000000000000 ]--- [ 104.336106][ T290] RIP: 0010:may_delete+0x727/0x730 [ 104.342699][ T290] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 4a dd f3 ff e9 75 fe ff ff e8 30 41 ae ff 0f 0b e8 29 41 ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 11 41 [ 104.363270][ T290] RSP: 0018:ffffc9000d38fc58 EFLAGS: 00010293 [ 104.369683][ T290] RAX: ffffffff81c330f7 RBX: ffff88813885e220 RCX: ffff888109a5a880 [ 104.378490][ T290] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 104.386735][ T290] RBP: ffffc9000d38fcb0 R08: 0000000000000003 R09: 0000000000000004 [ 104.398083][ T290] R10: dffffc0000000000 R11: fffff52001a71f68 R12: 1ffff1102710bc44 [ 104.407656][ T290] R13: 0000000000000001 R14: ffff88814745c360 R15: dffffc0000000000 [ 104.416713][ T290] FS: 000055557604b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 104.426596][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.433741][ T290] CR2: 0000200000c00010 CR3: 00000001301ea000 CR4: 00000000003506a0 [ 104.442466][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.451310][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.460016][ T290] Kernel panic - not syncing: Fatal exception [ 104.466692][ T290] Kernel Offset: disabled [ 104.471031][ T290] Rebooting in 86400 seconds..