last executing test programs: 37.987972678s ago: executing program 4 (id=188): bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRES32], 0x50) 37.90947086s ago: executing program 4 (id=189): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 37.90927098s ago: executing program 4 (id=190): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/partitions\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 37.860969002s ago: executing program 4 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 37.833114453s ago: executing program 4 (id=193): openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) 37.758362675s ago: executing program 4 (id=197): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)={0x1, 0x0, @c}, 0x29, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x9, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) fcntl$setlease(r4, 0x400, 0x1) 22.733445869s ago: executing program 32 (id=197): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)={0x1, 0x0, @c}, 0x29, 0xffffffffffffffff) rt_tgsigqueueinfo(0x0, 0x0, 0x9, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) fcntl$setlease(r4, 0x400, 0x1) 21.340640222s ago: executing program 5 (id=327): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8) 10.839657667s ago: executing program 3 (id=389): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VT_DISALLOCATE(r1, 0x5608) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 9.334993653s ago: executing program 0 (id=390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="e40000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0891040000000000b000128009000100766c616e00000000a000028004000480400003800c0001002d0a0000030000000c00010009000000080000000c00010035570000030000000c85010009000000f00000000c0001000300000006000000580004800c000100f9ffffff65e200000c00010048000000f80e00000c00010000000000000000000c0001003bf00000150000000c00010005000000080000000c00010003000000040000000c000100030000008100000014000300766c616e30"], 0xe4}}, 0x0) 9.334858684s ago: executing program 1 (id=391): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 9.334694264s ago: executing program 2 (id=392): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.334557004s ago: executing program 3 (id=393): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000180)={0x36, 0x0, 0x4, 0x3, 0x6, 0x2, 0x1981}, &(0x7f00000001c0)={0x0, 0x989680}, 0x0) 7.708056063s ago: executing program 0 (id=394): socket$inet6(0xa, 0x400000000001, 0xff7ff67b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000400)=ANY=[], 0xb0, &(0x7f00000003c0)='smaps\x00') syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r5, &(0x7f0000001500)={0x2020}, 0x2020) 7.707753623s ago: executing program 1 (id=395): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001"], 0x1c, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) timer_create(0xfffffffffffffff8, 0x0, &(0x7f0000000100)) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.707429793s ago: executing program 2 (id=396): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@rand_addr=0x64010100, @broadcast}, 0xc) 7.707241933s ago: executing program 3 (id=397): syz_ublk_setup_io_uring(0x73ea, &(0x7f0000000500)={0x0, 0xb93d, 0x400, 0x2, 0xc9}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) 5.915675887s ago: executing program 0 (id=398): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x80000001, @local, 0x8}, 0x1c) 5.915216997s ago: executing program 1 (id=399): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 5.847849158s ago: executing program 2 (id=400): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x20, 0x16, 0x2, "3a90"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.847594258s ago: executing program 3 (id=401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 4.024130302s ago: executing program 0 (id=402): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) close(r0) symlink(&(0x7f0000000800)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', &(0x7f0000000900)='./config/usb_gadget/g_syz/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='dummy_udc.0', 0xb) 4.023910502s ago: executing program 1 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 4.022981362s ago: executing program 2 (id=404): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 4.022482363s ago: executing program 3 (id=405): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000001180)='./bus\x00') mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18dd80b, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 2.107656999s ago: executing program 0 (id=406): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 2.107106839s ago: executing program 1 (id=407): socket$tipc(0x1e, 0x5, 0x0) 2.106673579s ago: executing program 2 (id=408): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.106350879s ago: executing program 3 (id=409): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0x11, 0x2, "35cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.86553ms ago: executing program 0 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r4, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r3, 0x0}]) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 3.52613ms ago: executing program 1 (id=411): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@multicast2, @in6=@local, 0x4e20, 0xc1a, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff, 0x3}, {0x3, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xcee6, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb3ff, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 0s ago: executing program 2 (id=412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0xfffffffffffffffc}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 21.177929][ T28] audit: type=1400 audit(1785080261.914:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.179071][ T279] cgroup: Unknown subsys name 'net' [ 21.204792][ T28] audit: type=1400 audit(1785080261.914:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.233963][ T28] audit: type=1400 audit(1785080261.944:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.234070][ T279] cgroup: Unknown subsys name 'devices' [ 21.346033][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.351648][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.483775][ T28] audit: type=1400 audit(1785080262.214:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.507467][ T28] audit: type=1400 audit(1785080262.214:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.515855][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.532881][ T28] audit: type=1400 audit(1785080262.214:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.564859][ T28] audit: type=1400 audit(1785080262.284:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.590788][ T28] audit: type=1400 audit(1785080262.284:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.626331][ T28] audit: type=1400 audit(1785080262.364:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.626784][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.652004][ T28] audit: type=1400 audit(1785080262.364:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.814875][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.821938][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.829634][ T287] device bridge_slave_0 entered promiscuous mode [ 22.836757][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.843798][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.851241][ T287] device bridge_slave_1 entered promiscuous mode [ 22.864980][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.872002][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.879348][ T288] device bridge_slave_0 entered promiscuous mode [ 22.887215][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.894295][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.901703][ T288] device bridge_slave_1 entered promiscuous mode [ 23.049880][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.057248][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.064680][ T292] device bridge_slave_0 entered promiscuous mode [ 23.071382][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.078514][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.085907][ T289] device bridge_slave_0 entered promiscuous mode [ 23.094357][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.101386][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.108809][ T289] device bridge_slave_1 entered promiscuous mode [ 23.123147][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.130364][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.137743][ T292] device bridge_slave_1 entered promiscuous mode [ 23.182172][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.189293][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.196724][ T294] device bridge_slave_0 entered promiscuous mode [ 23.203581][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.210683][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.218189][ T294] device bridge_slave_1 entered promiscuous mode [ 23.265385][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.272440][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.279741][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.286779][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.344265][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.351322][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.358651][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.365701][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.388555][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.395628][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.402885][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.409961][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.442305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.450900][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.458241][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.465650][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.473274][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.480814][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.488457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.495922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.521498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.529397][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.537673][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.544710][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.569829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.578610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.587059][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.594094][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.601568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.610016][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.617098][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.624611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.632764][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.639816][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.647197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.655221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.663115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.671352][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.678385][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.688395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.713050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.721044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.735984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.746019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.754678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.768475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.776891][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.783987][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.793309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.807182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.815361][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.822368][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.829900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.837865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.845992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.853452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.863133][ T287] device veth0_vlan entered promiscuous mode [ 23.875600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.884100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.892714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.900655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.908872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.916458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.932844][ T287] device veth1_macvtap entered promiscuous mode [ 23.941783][ T292] device veth0_vlan entered promiscuous mode [ 23.949719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.957976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.966032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.974076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.982370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.990691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.999021][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.007459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.015888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.036236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.044568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.052872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.061337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.069894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.077594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.091199][ T288] device veth0_vlan entered promiscuous mode [ 24.097815][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 24.107915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.116602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.125214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.133617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.142048][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.149122][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.156949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.165267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.173373][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.180405][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.187957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.196454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.204871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.212935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.221278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.228867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.236307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.248361][ T289] device veth0_vlan entered promiscuous mode [ 24.255533][ T292] device veth1_macvtap entered promiscuous mode [ 24.269681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.280255][ T312] loop1: detected capacity change from 0 to 128 [ 24.282702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.289389][ T312] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 24.303715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.311877][ T312] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 24.313094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.332634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.340757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.349177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.349538][ T312] EXT4-fs (loop1): unmounting filesystem. [ 24.357678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.371607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.390778][ T288] device veth1_macvtap entered promiscuous mode [ 24.404443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.413111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.421926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.431088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.439551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.448001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.456241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.463809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.472145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.483903][ T289] device veth1_macvtap entered promiscuous mode [ 24.494849][ T323] tipc: Enabling of bearer rejected, failed to enable media [ 24.504877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.512621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.521564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.531179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.539830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.568516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.584536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.592988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.609706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.618441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.627012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.641359][ T294] device veth0_vlan entered promiscuous mode [ 24.657676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.668088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.676749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.684185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.692514][ T329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 24.716456][ T294] device veth1_macvtap entered promiscuous mode [ 24.804702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.817793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.841394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.962618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.059464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.354290][ T308] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.544332][ T308] usb 5-1: Using ep0 maxpacket: 8 [ 25.629648][ T308] usb 5-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 25.696593][ T308] usb 5-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 25.710055][ T308] usb 5-1: config 0 interface 0 has no altsetting 0 [ 25.790020][ T308] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 25.882803][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.950939][ T308] usb 5-1: config 0 descriptor?? [ 26.415680][ T308] uclogic 0003:5543:0042.0001: unexpected long global item [ 26.475566][ T356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15'. [ 26.481027][ T308] uclogic 0003:5543:0042.0001: parse failed [ 26.490541][ T308] uclogic: probe of 0003:5543:0042.0001 failed with error -22 [ 26.506887][ T362] loop3: detected capacity change from 0 to 256 [ 26.513369][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 26.513381][ T28] audit: type=1400 audit(1785080267.244:127): avc: denied { bind } for pid=358 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.536240][ T363] loop0: detected capacity change from 0 to 512 [ 26.557925][ T366] tipc: Started in network mode [ 26.573020][ T366] tipc: Node identity 8a70d8d11dbf, cluster identity 4711 [ 26.579897][ T28] audit: type=1400 audit(1785080267.294:128): avc: denied { write } for pid=365 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.581042][ T363] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.16: Unrecognised inode hash code 255 [ 26.602497][ T366] tipc: Enabled bearer , priority 0 [ 26.624465][ T370] device syzkaller0 entered promiscuous mode [ 26.634657][ T308] usb 5-1: USB disconnect, device number 2 [ 26.648401][ T363] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.16: Corrupt directory, running e2fsck is recommended [ 26.652875][ T366] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 26.661456][ T363] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 26.673449][ T28] audit: type=1400 audit(1785080267.294:129): avc: denied { read } for pid=365 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.697898][ T28] audit: type=1400 audit(1785080267.304:130): avc: denied { mount } for pid=361 comm="syz.3.18" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 26.700186][ T363] EXT4-fs error (device loop0): ext4_iget_extra_inode:4765: inode #15: comm syz.0.16: corrupted in-inode xattr [ 26.726364][ T366] tipc: Resetting bearer [ 26.731726][ T28] audit: type=1400 audit(1785080267.354:131): avc: denied { ioctl } for pid=365 comm="syz.2.19" path="socket:[16125]" dev="sockfs" ino=16125 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.744348][ T363] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.16: couldn't read orphan inode 15 (err -117) [ 26.762452][ T28] audit: type=1400 audit(1785080267.474:132): avc: denied { mount } for pid=374 comm="syz.1.22" name="/" dev="configfs" ino=14261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 26.796905][ T28] audit: type=1400 audit(1785080267.524:133): avc: denied { create } for pid=376 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.797097][ T377] netlink: 'syz.1.23': attribute type 12 has an invalid length. [ 26.824552][ T363] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.833728][ T28] audit: type=1400 audit(1785080267.564:134): avc: denied { name_bind } for pid=361 comm="syz.3.18" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 26.857247][ T365] tipc: Resetting bearer [ 26.874180][ T28] audit: type=1400 audit(1785080267.604:135): avc: denied { create } for pid=376 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.894683][ T28] audit: type=1400 audit(1785080267.604:136): avc: denied { connect } for pid=376 comm="syz.1.23" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.915575][ T365] tipc: Disabling bearer [ 26.931152][ T380] tipc: Failed to remove unknown binding: 66,0,0/0:3885489129/3885489130 [ 26.940024][ T380] tipc: Failed to remove unknown binding: 66,0,0/0:3885489129/3885489130 [ 26.974353][ T387] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.16: Unrecognised inode hash code 255 [ 26.985782][ T387] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.16: Corrupt directory, running e2fsck is recommended [ 26.998612][ T387] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 4: comm syz.0.16: path /1/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 27.021724][ T387] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 64: comm syz.0.16: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.066584][ T388] loop2: detected capacity change from 0 to 16 [ 27.076674][ T388] erofs: (device loop2): mounted with root inode @ nid 36. [ 27.412344][ T289] EXT4-fs (loop0): unmounting filesystem. [ 27.622446][ T413] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.078953][ T406] syz.4.33 (406) used greatest stack depth: 22152 bytes left [ 28.090552][ T416] loop4: detected capacity change from 0 to 128 [ 28.218013][ T421] ======================================================= [ 28.218013][ T421] WARNING: The mand mount option has been deprecated and [ 28.218013][ T421] and is ignored by this kernel. Remove the mand [ 28.218013][ T421] option from the mount to silence this warning. [ 28.218013][ T421] ======================================================= [ 28.265713][ T421] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 28.465857][ T426] netlink: 'syz.2.41': attribute type 11 has an invalid length. [ 29.887693][ T444] loop3: detected capacity change from 0 to 512 [ 29.898172][ T444] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.911521][ T444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.049204][ T446] binder_alloc: 437: binder_alloc_buf, no vma [ 30.049942][ T444] EXT4-fs (loop3): 1 truncate cleaned up [ 30.061021][ T444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.734061][ T288] EXT4-fs (loop3): unmounting filesystem. [ 30.758467][ T471] loop3: detected capacity change from 0 to 1024 [ 30.766880][ T471] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.796373][ T471] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.812825][ T476] loop0: detected capacity change from 0 to 512 [ 30.819921][ T476] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.894512][ T476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.932951][ T8] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 9 with error 28 [ 30.945975][ T8] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.945975][ T8] [ 30.956597][ T8] EXT4-fs (loop3): Total free blocks count 0 [ 30.962701][ T8] EXT4-fs (loop3): Free/Dirty block details [ 30.968960][ T8] EXT4-fs (loop3): free_blocks=0 [ 30.974018][ T8] EXT4-fs (loop3): dirty_blocks=0 [ 30.979156][ T8] EXT4-fs (loop3): Block reservation details [ 30.985336][ T8] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 30.994871][ T288] EXT4-fs (loop3): unmounting filesystem. [ 31.068201][ T489] loop3: detected capacity change from 0 to 128 [ 31.169516][ T489] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.183334][ T489] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.223694][ T288] EXT4-fs (loop3): unmounting filesystem. [ 32.043605][ T289] EXT4-fs (loop0): unmounting filesystem. [ 32.293877][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 32.293913][ T28] audit: type=1400 audit(1785080273.024:185): avc: denied { write } for pid=502 comm="syz.3.64" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.341809][ T510] syz.0.62 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.357027][ T510] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 32.435510][ T28] audit: type=1400 audit(1785080273.174:186): avc: denied { mount } for pid=511 comm="syz.4.65" name="/" dev="configfs" ino=14261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.458717][ T28] audit: type=1400 audit(1785080273.174:187): avc: denied { rmdir } for pid=511 comm="syz.4.65" name="uac2.usb0" dev="configfs" ino=16415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 32.696948][ T521] Zero length message leads to an empty skb [ 32.751191][ T28] audit: type=1400 audit(1785080273.484:188): avc: denied { write } for pid=522 comm="syz.4.70" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.772460][ T28] audit: type=1400 audit(1785080273.484:189): avc: denied { add_name } for pid=522 comm="syz.4.70" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.793591][ T28] audit: type=1400 audit(1785080273.484:190): avc: denied { create } for pid=522 comm="syz.4.70" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 32.805585][ T525] loop4: detected capacity change from 0 to 16 [ 32.822094][ T28] audit: type=1400 audit(1785080273.484:191): avc: denied { associate } for pid=522 comm="syz.4.70" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.837956][ T525] erofs: (device loop4): mounted with root inode @ nid 36. [ 32.851995][ T28] audit: type=1400 audit(1785080273.484:192): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.912075][ T527] loop4: detected capacity change from 0 to 512 [ 32.921306][ T527] EXT4-fs (loop4): Test dummy encryption mode enabled [ 32.934248][ T527] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.72: inode has both inline data and extents flags [ 32.996653][ T527] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.72: couldn't read orphan inode 15 (err -117) [ 33.019183][ T527] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.028165][ T28] audit: type=1400 audit(1785080273.754:193): avc: denied { read write } for pid=530 comm="syz.0.73" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.033554][ T527] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 33.066471][ T28] audit: type=1400 audit(1785080273.754:194): avc: denied { open } for pid=530 comm="syz.0.73" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.172707][ T294] EXT4-fs (loop4): unmounting filesystem. [ 36.615235][ T558] futex_wake_op: syz.1.84 tries to shift op by 144; fix this program [ 36.672481][ T565] loop0: detected capacity change from 0 to 2048 [ 36.692449][ T565] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.735762][ T289] EXT4-fs (loop0): unmounting filesystem. [ 36.835778][ T587] loop0: detected capacity change from 0 to 128 [ 36.952772][ T587] loop0: detected capacity change from 0 to 4096 [ 36.985234][ T587] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.020086][ T587] EXT4-fs (loop0): Test dummy encryption mode enabled [ 37.044436][ T594] capability: warning: `syz.1.98' uses 32-bit capabilities (legacy support in use) [ 37.054744][ T587] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802c098, mo2=0003] [ 37.062868][ T587] System zones: 0-5 [ 37.084066][ T587] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.614404][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 37.614425][ T28] audit: type=1400 audit(1785080278.224:204): avc: denied { read } for pid=579 comm="syz.4.92" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.754375][ T482] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.809370][ T289] EXT4-fs (loop0): unmounting filesystem. [ 37.854136][ T28] audit: type=1400 audit(1785080278.224:205): avc: denied { open } for pid=579 comm="syz.4.92" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.917405][ T28] audit: type=1400 audit(1785080278.264:206): avc: denied { setopt } for pid=579 comm="syz.4.92" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.937466][ T607] loop4: detected capacity change from 0 to 512 [ 37.939462][ T28] audit: type=1400 audit(1785080278.264:207): avc: denied { write } for pid=579 comm="syz.4.92" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.967271][ T28] audit: type=1400 audit(1785080278.414:208): avc: denied { setattr } for pid=582 comm="syz.0.94" path="/12/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.983720][ T607] EXT4-fs: Ignoring removed orlov option [ 38.025018][ T607] ext4: Unknown parameter 'nouser_xattr' [ 38.066697][ T482] usb 4-1: Using ep0 maxpacket: 16 [ 38.072911][ T482] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.094255][ T482] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.107120][ T482] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 38.117197][ T482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.131807][ T482] usb 4-1: config 0 descriptor?? [ 38.189285][ T618] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 38.451203][ T28] audit: type=1400 audit(1785080279.184:209): avc: denied { read write } for pid=625 comm="syz.2.107" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.475333][ T28] audit: type=1400 audit(1785080279.184:210): avc: denied { open } for pid=625 comm="syz.2.107" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.500163][ T28] audit: type=1400 audit(1785080279.184:211): avc: denied { ioctl } for pid=625 comm="syz.2.107" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.539074][ T592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.554160][ T592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.574533][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 38.587998][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 38.603149][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 38.619910][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 38.639022][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 38.657800][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 38.682638][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 38.705567][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 38.728375][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 38.751199][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x5 [ 38.773548][ T482] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 38.799608][ T482] prodikeys 0003:041E:2801.0002: unexpected long global item [ 38.823051][ T482] prodikeys 0003:041E:2801.0002: hid parse failed [ 38.844561][ T482] prodikeys: probe of 0003:041E:2801.0002 failed with error -22 [ 38.874437][ T482] usb 4-1: USB disconnect, device number 2 [ 38.936251][ T628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.108'. [ 39.152131][ T28] audit: type=1400 audit(1785080279.884:212): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.363813][ T28] audit: type=1400 audit(1785080280.094:213): avc: denied { ioctl } for pid=641 comm="syz.0.109" path="socket:[16842]" dev="sockfs" ino=16842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.306502][ T664] futex_wake_op: syz.4.119 tries to shift op by 144; fix this program [ 40.336388][ T664] loop4: detected capacity change from 0 to 128 [ 40.596314][ T668] loop0: detected capacity change from 0 to 128 [ 40.652980][ T670] loop3: detected capacity change from 0 to 512 [ 40.691620][ T670] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a81ec018, mo2=0002] [ 40.699870][ T670] System zones: 0-2, 18-18, 34-35 [ 40.706145][ T670] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.715999][ T670] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.789710][ T693] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 41.817804][ T288] EXT4-fs (loop3): unmounting filesystem. [ 42.334246][ T658] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 42.534295][ T658] usb 3-1: Using ep0 maxpacket: 16 [ 42.541855][ T658] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.552194][ T658] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.570689][ T658] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.580742][ T658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.588984][ T658] usb 3-1: Product: syz [ 42.593192][ T658] usb 3-1: Manufacturer: syz [ 42.598009][ T658] usb 3-1: SerialNumber: syz [ 42.676177][ T735] loop4: detected capacity change from 0 to 2048 [ 42.701009][ T740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.149'. [ 42.708830][ T735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.736085][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 42.736098][ T28] audit: type=1400 audit(1785080283.474:230): avc: denied { write } for pid=734 comm="syz.4.148" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.747442][ T746] device bridge1 entered promiscuous mode [ 42.764224][ T28] audit: type=1400 audit(1785080283.474:231): avc: denied { remove_name } for pid=734 comm="syz.4.148" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.793991][ T28] audit: type=1400 audit(1785080283.474:232): avc: denied { unlink } for pid=734 comm="syz.4.148" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.819064][ T28] audit: type=1400 audit(1785080283.484:233): avc: denied { create } for pid=734 comm="syz.4.148" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.839541][ T294] EXT4-fs (loop4): unmounting filesystem. [ 42.846989][ T658] usb 3-1: 0:2 : does not exist [ 42.856164][ T658] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 42.864140][ T28] audit: type=1400 audit(1785080283.484:234): avc: denied { associate } for pid=734 comm="syz.4.148" name="#5" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.887452][ T28] audit: type=1400 audit(1785080283.484:235): avc: denied { setattr } for pid=734 comm="syz.4.148" name="#5" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.918092][ T28] audit: type=1400 audit(1785080283.484:236): avc: denied { rename } for pid=734 comm="syz.4.148" name="#5" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.940814][ T28] audit: type=1400 audit(1785080283.514:237): avc: denied { reparent } for pid=734 comm="syz.4.148" name="#5" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.969326][ T658] usb 3-1: USB disconnect, device number 2 [ 42.970412][ T28] audit: type=1400 audit(1785080283.514:238): avc: denied { create } for pid=734 comm="syz.4.148" name="#6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.996555][ T28] audit: type=1400 audit(1785080283.514:239): avc: denied { link } for pid=734 comm="syz.4.148" name="#6" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.507852][ T768] loop2: detected capacity change from 0 to 4096 [ 43.517514][ T768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.526622][ T768] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 43.536521][ T768] System zones: 0-5 [ 43.542879][ T768] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.509723][ T292] EXT4-fs (loop2): unmounting filesystem. [ 45.097979][ T786] overlayfs: failed to clone lowerpath [ 45.201366][ T795] loop4: detected capacity change from 0 to 512 [ 45.247667][ T795] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.165: Unrecognised inode hash code 255 [ 45.294258][ T795] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.165: Corrupt directory, running e2fsck is recommended [ 45.308736][ T795] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 45.318042][ T795] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.165: corrupted in-inode xattr [ 45.331206][ T795] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.165: couldn't read orphan inode 15 (err -117) [ 45.427269][ T795] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.496565][ T795] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.165: Unrecognised inode hash code 255 [ 45.508021][ T795] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.165: Corrupt directory, running e2fsck is recommended [ 45.520917][ T795] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 4: comm syz.4.165: path /34/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0 [ 45.547301][ T795] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 64: comm syz.4.165: path /34/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 45.613180][ T294] EXT4-fs (loop4): unmounting filesystem. [ 45.872567][ T814] capability: warning: `syz.3.171' uses deprecated v2 capabilities in a way that may be insecure [ 45.967580][ T818] loop2: detected capacity change from 0 to 256 [ 45.968915][ T817] device ip6gre1 entered promiscuous mode [ 45.991613][ T818] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 46.076996][ T817] syz.4.175 (817) used greatest stack depth: 18376 bytes left [ 46.449935][ T825] process 'syz.0.176' launched './file1' with NULL argv: empty string added [ 46.494556][ T824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 46.952327][ T861] binder: 860:861 ioctl 4018620d 0 returned -22 [ 46.962970][ T861] binder: 860:861 ioctl c0306201 0 returned -14 [ 47.080619][ T875] loop0: detected capacity change from 0 to 512 [ 47.116099][ T875] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.128224][ T875] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.164996][ T875] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.196: corrupted xattr block 6 [ 47.186845][ T875] EXT4-fs (loop0): Remounting filesystem read-only [ 47.193485][ T875] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 47.205629][ T875] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.196: corrupted xattr block 6 [ 47.219028][ T875] EXT4-fs (loop0): Remounting filesystem read-only [ 47.225642][ T875] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 47.235499][ T875] EXT4-fs error (device loop0): ext4_get_inode_usage:835: inode #12: comm syz.0.196: corrupted xattr block 6 [ 47.247593][ T875] EXT4-fs (loop0): Remounting filesystem read-only [ 47.268849][ T289] EXT4-fs (loop0): unmounting filesystem. [ 48.173389][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 48.173401][ T28] audit: type=1400 audit(1785080288.904:255): avc: denied { create } for pid=893 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.227506][ T898] loop0: detected capacity change from 0 to 512 [ 48.234713][ T898] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.251152][ T898] EXT4-fs (loop0): 1 truncate cleaned up [ 48.256951][ T898] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.351647][ T28] audit: type=1400 audit(1785080289.084:256): avc: denied { bind } for pid=905 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.644052][ T917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.211'. [ 49.097949][ T289] EXT4-fs (loop0): unmounting filesystem. [ 49.520211][ T928] device syzkaller0 entered promiscuous mode [ 49.754317][ T28] audit: type=1400 audit(1785080290.484:257): avc: denied { connect } for pid=931 comm="syz.2.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.166641][ T942] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 50.558143][ T28] audit: type=1400 audit(1785080291.294:258): avc: denied { mounton } for pid=952 comm="syz.3.224" path="/proc/111/task" dev="proc" ino=18197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 51.095109][ T967] loop3: detected capacity change from 0 to 512 [ 51.131925][ T967] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.166713][ T967] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.200077][ T967] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 51.233042][ T967] EXT4-fs (loop3): 1 truncate cleaned up [ 51.244955][ T967] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.343520][ T288] EXT4-fs (loop3): unmounting filesystem. [ 51.604453][ T28] audit: type=1400 audit(1785080292.334:259): avc: denied { read } for pid=977 comm="syz.3.231" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.668425][ T28] audit: type=1400 audit(1785080292.334:260): avc: denied { open } for pid=977 comm="syz.3.231" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.324337][ T28] audit: type=1400 audit(1785080293.054:261): avc: denied { create } for pid=986 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.114025][ T28] audit: type=1400 audit(1785080293.844:262): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.938285][ T28] audit: type=1400 audit(1785080295.674:263): avc: denied { create } for pid=1024 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.117868][ T1027] loop0: detected capacity change from 0 to 40427 [ 55.163747][ T1027] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 55.173116][ T1027] F2FS-fs (loop0): invalid crc value [ 55.178701][ T1027] F2FS-fs (loop0): invalid crc value [ 55.184036][ T1027] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 55.677719][ T1049] device syzkaller0 entered promiscuous mode [ 55.697088][ T1049] tipc: Started in network mode [ 55.704422][ T1049] tipc: Node identity da29b3389d45, cluster identity 4711 [ 55.718839][ T1049] tipc: Enabled bearer , priority 0 [ 55.735568][ T1048] tipc: Resetting bearer [ 55.753101][ T1032] loop3: detected capacity change from 0 to 32768 [ 55.755261][ T1048] tipc: Disabling bearer [ 55.870181][ T1051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 55.984110][ T1058] loop3: detected capacity change from 0 to 512 [ 56.022735][ T28] audit: type=1400 audit(1785080296.754:264): avc: denied { associate } for pid=1060 comm="syz.0.260" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.066577][ T1066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.073931][ T1066] IPv6: NLM_F_CREATE should be set when creating new route [ 56.084728][ T1058] EXT4-fs (loop3): 1 orphan inode deleted [ 56.091570][ T1058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.114349][ T686] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 56.131816][ T1058] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.151989][ T28] audit: type=1326 audit(1785080296.884:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1042 comm="syz.2.254" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bc239de99 code=0x7fc00000 [ 56.177927][ T686] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:5: Failed to release dquot type 1 [ 56.402864][ T28] audit: type=1400 audit(1785080297.134:266): avc: denied { mount } for pid=1082 comm="syz.1.269" name="/" dev="ramfs" ino=18417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.426050][ T28] audit: type=1400 audit(1785080297.134:267): avc: denied { remount } for pid=1082 comm="syz.1.269" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.556681][ T288] EXT4-fs (loop3): unmounting filesystem. [ 56.591210][ T1097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 56.600237][ T1097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.275'. [ 56.610713][ T1097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.275'. [ 56.874490][ T309] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 57.065434][ T309] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 57.074349][ T309] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 57.085982][ T309] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 57.107789][ T309] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 57.128131][ T309] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 57.155624][ T309] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 57.169460][ T309] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 57.178015][ T309] usb 4-1: Product: syz [ 57.182350][ T309] usb 4-1: Manufacturer: syz [ 57.187407][ T28] audit: type=1400 audit(1785080297.914:268): avc: denied { read } for pid=1104 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.213076][ T309] cdc_wdm 4-1:1.0: skipping garbage [ 57.218463][ T309] cdc_wdm 4-1:1.0: skipping garbage [ 57.227907][ T309] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 57.491082][ T1118] netlink: 220 bytes leftover after parsing attributes in process `syz.1.282'. [ 57.525174][ T28] audit: type=1400 audit(1785080298.264:269): avc: denied { mount } for pid=1121 comm="syz.1.284" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 57.525499][ T1122] overlayfs: failed to clone lowerpath [ 57.615713][ T309] usb 4-1: USB disconnect, device number 3 [ 57.740087][ T1139] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.151212][ T1141] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 58.363333][ T1151] using random self ethernet address [ 58.368816][ T1151] using random host ethernet address [ 58.398428][ T1151] usb0: HOST MAC d2:7b:ce:9e:3b:09 [ 58.403662][ T28] audit: type=1400 audit(1785080299.134:270): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.425105][ T1151] usb0: MAC de:21:bd:14:c5:18 [ 58.466732][ T28] audit: type=1400 audit(1785080299.134:271): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.764300][ T307] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.774544][ T787] android_work: sent uevent USB_STATE=CONNECTED [ 59.046353][ T307] usb 1-1: Dual-Role OTG device on HNP port [ 59.089392][ T307] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 59.218859][ T307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.654260][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 60.654277][ T28] audit: type=1400 audit(1785080301.384:285): avc: denied { ioctl } for pid=1210 comm="syz.0.314" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19633 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.794378][ T6] android_work: sent uevent USB_STATE=CONFIGURED [ 60.811243][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 60.811239][ T307] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, d2:7b:ce:9e:3b:09 [ 61.753158][ T28] audit: type=1400 audit(1785080301.734:286): avc: denied { mounton } for pid=1221 comm="syz.3.319" path="/62/file0" dev="ramfs" ino=19655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 61.909174][ T1216] device syzkaller0 entered promiscuous mode [ 61.920251][ T28] audit: type=1400 audit(1785080302.524:287): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 62.197162][ T1255] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 62.317725][ T28] audit: type=1400 audit(1785080303.054:288): avc: denied { mounton } for pid=1264 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.400468][ T10] device offline error, dev sda, sector 1114438 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 62.411218][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139304) [ 62.423336][ T10] Buffer I/O error on device sda1, logical block 139266 [ 62.430342][ T10] Buffer I/O error on device sda1, logical block 139267 [ 62.437301][ T10] Buffer I/O error on device sda1, logical block 139268 [ 62.444279][ T10] device offline error, dev sda, sector 1114534 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 62.454798][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139316) [ 62.466398][ T10] Buffer I/O error on device sda1, logical block 139278 [ 62.473352][ T10] Buffer I/O error on device sda1, logical block 139279 [ 62.480319][ T10] device offline error, dev sda, sector 1114566 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 62.490841][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139320) [ 62.502442][ T10] Buffer I/O error on device sda1, logical block 139282 [ 62.509434][ T10] device offline error, dev sda, sector 1114582 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 62.520013][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139322) [ 62.531585][ T10] Buffer I/O error on device sda1, logical block 139284 [ 62.538566][ T10] device offline error, dev sda, sector 1114598 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 62.549081][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139324) [ 62.560703][ T10] Buffer I/O error on device sda1, logical block 139286 [ 62.567695][ T10] device offline error, dev sda, sector 1114662 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 62.578215][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139332) [ 62.589772][ T10] Buffer I/O error on device sda1, logical block 139294 [ 62.596740][ T10] device offline error, dev sda, sector 1114678 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 62.607246][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139334) [ 62.618831][ T10] Buffer I/O error on device sda1, logical block 139296 [ 62.625824][ T10] device offline error, dev sda, sector 1114694 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 62.636349][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139336) [ 62.647946][ T10] device offline error, dev sda, sector 1114750 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 62.658466][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139343) [ 62.670051][ T10] device offline error, dev sda, sector 1114806 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 62.680581][ T10] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139350) [ 62.697150][ T1270] Buffer I/O error on dev sda1, logical block 130, lost async page write [ 62.697673][ T66] Aborting journal on device sda1-8. [ 62.705684][ T1270] Buffer I/O error on dev sda1, logical block 33721, lost async page write [ 62.711855][ T41] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 62.723057][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.730511][ T66] JBD2: I/O error when updating journal superblock for sda1-8. [ 62.738141][ T1264] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.751977][ T1273] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.334: Detected aborted journal [ 62.763208][ T56] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 62.764940][ T1264] device bridge_slave_0 entered promiscuous mode [ 62.776079][ T1273] EXT4-fs (sda1): I/O error while writing superblock [ 62.779406][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.786383][ T1273] EXT4-fs (sda1): Remounting filesystem read-only [ 62.793556][ T1264] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.800254][ T1273] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.334: Detected aborted journal [ 62.805542][ T1264] device bridge_slave_1 entered promiscuous mode [ 62.822998][ T1273] EXT4-fs (sda1): Remounting filesystem read-only [ 62.837069][ T1270] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 62.885588][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.892682][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.906649][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.936220][ T1264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.947988][ T1257] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.330: Detected aborted journal [ 62.959610][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 62.960994][ T1269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.333: Detected aborted journal [ 62.970761][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 62.970863][ T1257] EXT4-fs (sda1): Remounting filesystem read-only [ 62.982005][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 62.988516][ T1257] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.330: Detected aborted journal [ 62.995799][ T1269] EXT4-fs (sda1): Remounting filesystem read-only [ 63.012994][ T1257] EXT4-fs (sda1): Remounting filesystem read-only [ 63.026018][ T1269] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.333: Detected aborted journal [ 63.036965][ T1269] EXT4-fs (sda1): Remounting filesystem read-only [ 63.037029][ T686] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.049190][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 63.061574][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 63.068327][ T686] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.069138][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 63.086574][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 63.093215][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 63.151608][ T1264] device veth0_vlan entered promiscuous mode [ 63.165034][ T1264] device veth1_macvtap entered promiscuous mode [ 63.215638][ T788] usb 3-1: unable to get BOS descriptor or descriptor too short [ 63.224160][ T788] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 63.236679][ T788] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 63.260455][ T788] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 63.271302][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.364264][ T788] usb 3-1: Product: syz [ 63.374424][ T788] usb 3-1: Manufacturer: syz [ 63.384409][ T788] usb 3-1: SerialNumber: syz [ 63.412740][ T103] udevd[103]: worker [311] terminated by signal 7 (Bus error) [ 63.422481][ T103] udevd[103]: worker [311] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 63.468725][ T28] audit: type=1400 audit(1785080304.204:289): avc: denied { search } for pid=1291 comm="syz.3.338" name="/" dev="configfs" ino=14261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.542928][ T28] audit: type=1326 audit(1785080304.274:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1297 comm="syz.3.340" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69099de99 code=0x7ffc0000 [ 63.601594][ T28] audit: type=1326 audit(1785080304.304:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1297 comm="syz.3.340" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fe69099de99 code=0x7ffc0000 [ 63.628001][ T28] audit: type=1326 audit(1785080304.304:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1297 comm="syz.3.340" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe69099de99 code=0x7ffc0000 [ 63.654566][ T28] audit: type=1400 audit(1785080304.324:293): avc: denied { read } for pid=1299 comm="syz.3.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.678712][ T788] usb 3-1: Can't get UAC3 power state for id 10 [ 63.686348][ T788] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 63.697125][ T788] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 63.719858][ T103] udevd[103]: worker [357] terminated by signal 7 (Bus error) [ 63.727864][ T103] udevd[103]: worker [357] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 63.728824][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.740687][ T788] usb 3-1: USB disconnect, device number 3 [ 63.746100][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.752374][ T103] udevd[103]: worker [749] terminated by signal 7 (Bus error) [ 63.760753][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.775022][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.777895][ T103] udevd[103]: worker [749] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1' [ 63.783218][ T686] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.800743][ T686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.804815][ T103] udevd[103]: worker [752] terminated by signal 7 (Bus error) [ 63.809189][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.822087][ T103] udevd[103]: worker [752] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1' [ 63.826011][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.840893][ T103] udevd[103]: worker [1301] terminated by signal 7 (Bus error) [ 63.842333][ T686] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.850228][ T103] udevd[103]: worker [1301] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2' [ 63.856611][ T686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.857089][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.882718][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.890938][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.899109][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.907212][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.915635][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.924013][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.932116][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.940188][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.948579][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.956967][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.964889][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.973135][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.981651][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.990646][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.002495][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.010346][ T686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.244764][ T315] device bridge_slave_1 left promiscuous mode [ 64.250897][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.258422][ T315] device bridge_slave_0 left promiscuous mode [ 64.264607][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.272414][ T315] device veth1_macvtap left promiscuous mode [ 64.278500][ T315] device veth0_vlan left promiscuous mode [ 64.618755][ T28] audit: type=1400 audit(1785080305.294:294): avc: denied { create } for pid=1322 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.224426][ T315] device bridge_slave_1 left promiscuous mode [ 65.230687][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.238606][ T315] device bridge_slave_0 left promiscuous mode [ 65.244929][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.253560][ T315] device veth1_macvtap left promiscuous mode [ 65.260013][ T315] device veth0_vlan left promiscuous mode [ 66.849171][ T1365] netlink: 108 bytes leftover after parsing attributes in process `syz.2.365'. [ 66.859964][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 66.859977][ T28] audit: type=1400 audit(1785080307.594:296): avc: denied { sqpoll } for pid=1363 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.870022][ T1365] bridge0: port 3(syz_tun) entered blocking state [ 66.885303][ T28] audit: type=1400 audit(1785080307.594:297): avc: denied { map } for pid=1363 comm="syz.2.365" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.915609][ T28] audit: type=1400 audit(1785080307.594:298): avc: denied { read write } for pid=1363 comm="syz.2.365" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.942446][ T1365] bridge0: port 3(syz_tun) entered disabled state [ 66.949540][ T1365] device syz_tun entered promiscuous mode [ 66.955812][ T1365] bridge0: port 3(syz_tun) entered blocking state [ 66.962250][ T1365] bridge0: port 3(syz_tun) entered forwarding state [ 67.755656][ T1371] EXT4-fs error: 85 callbacks suppressed [ 67.755671][ T1371] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 67.757073][ T1373] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.370: Detected aborted journal [ 67.761365][ T1371] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 67.773268][ T1372] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.367: Detected aborted journal [ 67.786915][ T1374] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.369: Detected aborted journal [ 67.794144][ T1375] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.368: Detected aborted journal [ 67.806125][ T1374] EXT4-fs: 71 callbacks suppressed [ 67.806137][ T1374] EXT4-fs (sda1): Remounting filesystem read-only [ 67.813870][ T1373] EXT4-fs (sda1): Remounting filesystem read-only [ 67.826326][ T1374] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.369: Detected aborted journal [ 67.829834][ T1372] EXT4-fs (sda1): Remounting filesystem read-only [ 67.836452][ T1374] EXT4-fs (sda1): Remounting filesystem read-only [ 67.842669][ T1375] EXT4-fs (sda1): Remounting filesystem read-only [ 67.855639][ T1373] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.370: Detected aborted journal [ 67.860936][ T1372] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.367: Detected aborted journal [ 67.873003][ T1373] EXT4-fs (sda1): Remounting filesystem read-only [ 67.888536][ T1372] EXT4-fs (sda1): Remounting filesystem read-only [ 67.902690][ T1375] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.368: Detected aborted journal [ 67.907397][ T28] audit: type=1400 audit(1785080308.634:299): avc: denied { write } for pid=1373 comm="syz.3.370" name="usb_gadget" dev="configfs" ino=14262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 67.918454][ T1375] EXT4-fs (sda1): Remounting filesystem read-only [ 67.946206][ T28] audit: type=1400 audit(1785080308.634:300): avc: denied { add_name } for pid=1373 comm="syz.3.370" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 68.807494][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 68.812459][ T1383] EXT4-fs (sda1): Remounting filesystem read-only [ 69.104344][ T482] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 69.295778][ T482] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 69.304604][ T482] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.314777][ T482] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 69.326509][ T482] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.335707][ T482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.343820][ T482] usb 3-1: Product: syz [ 69.348213][ T482] usb 3-1: Manufacturer: syz [ 69.352878][ T482] usb 3-1: SerialNumber: syz [ 69.381416][ T103] udevd[103]: worker [1309] terminated by signal 7 (Bus error) [ 69.389329][ T103] udevd[103]: worker [1309] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 69.591057][ T787] usb 3-1: USB disconnect, device number 4 [ 69.611536][ T103] udevd[103]: worker [1302] terminated by signal 7 (Bus error) [ 69.619390][ T103] udevd[103]: worker [1302] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 71.482339][ T1418] loop3: detected capacity change from 0 to 512 [ 71.521915][ T1418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.530949][ T1418] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.327101][ T288] EXT4-fs (loop3): unmounting filesystem. [ 72.510857][ T1430] netlink: 277 bytes leftover after parsing attributes in process `syz.3.385'. [ 72.795862][ T1431] EXT4-fs error: 53 callbacks suppressed [ 72.795884][ T1431] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #265: comm dhcpcd: reading directory lblock 0 [ 73.885281][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 73.890991][ T1432] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 73.896479][ T279] EXT4-fs: 35 callbacks suppressed [ 73.896487][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 73.907606][ T1432] EXT4-fs (sda1): Remounting filesystem read-only [ 73.913139][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 73.919155][ T1432] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 73.925702][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 73.952088][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 73.959985][ T1434] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.387: Detected aborted journal [ 73.964950][ T1435] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.388: Detected aborted journal [ 73.975084][ T1433] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.386: Detected aborted journal [ 73.985464][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 73.996148][ T1434] EXT4-fs (sda1): Remounting filesystem read-only [ 74.005690][ T1435] EXT4-fs (sda1): Remounting filesystem read-only [ 74.009914][ T1436] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.389: Detected aborted journal [ 74.016756][ T1435] EXT4-fs (sda1): Remounting filesystem read-only [ 74.026334][ T1433] EXT4-fs (sda1): Remounting filesystem read-only [ 74.033952][ T1437] input: syz0 as /devices/virtual/input/input6 [ 74.042461][ T1436] EXT4-fs (sda1): Remounting filesystem read-only [ 74.050591][ T1433] EXT4-fs (sda1): Remounting filesystem read-only [ 74.060689][ T28] audit: type=1400 audit(1785080314.794:301): avc: denied { bind } for pid=1433 comm="syz.0.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.514509][ T1447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.390'. [ 75.526801][ T1445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 75.543654][ T482] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 75.551265][ T1445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'. [ 75.560408][ T1447] device vlan0 entered promiscuous mode [ 75.566641][ T482] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.616252][ T1451] udevd[1451]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 77.345838][ T1464] Invalid ELF header magic: != ELF [ 78.086638][ T1457] EXT4-fs error: 55 callbacks suppressed [ 78.086657][ T1457] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.396: Detected aborted journal [ 78.849952][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 78.855650][ T1467] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 78.861241][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 78.872556][ T1467] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 78.883456][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 78.903409][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 78.914569][ T279] EXT4-fs: 41 callbacks suppressed [ 78.914583][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 78.929629][ T1468] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.398: Detected aborted journal [ 78.929626][ T1469] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.399: Detected aborted journal [ 78.929656][ T1468] EXT4-fs (sda1): Remounting filesystem read-only [ 78.940599][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 78.954186][ T1468] EXT4-fs (sda1): Remounting filesystem read-only [ 78.957942][ T1469] EXT4-fs (sda1): Remounting filesystem read-only [ 78.969721][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 78.976919][ T1469] EXT4-fs (sda1): Remounting filesystem read-only [ 78.988307][ T1473] EXT4-fs (sda1): Remounting filesystem read-only [ 78.988941][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 78.995851][ T1472] EXT4-fs (sda1): Remounting filesystem read-only [ 79.001775][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 79.009685][ T28] audit: type=1400 audit(1785080319.744:302): avc: denied { connect } for pid=1469 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.042746][ T1474] binder: BINDER_SET_CONTEXT_MGR already set [ 79.048826][ T1474] binder: 1473:1474 ioctl 4018620d 200000004a80 returned -16 [ 79.284248][ T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 79.474242][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 79.480377][ T60] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 79.489457][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.498333][ T60] usb 3-1: config 0 descriptor?? [ 79.504340][ T60] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 79.705137][ T60] usb 3-1: Detected FT232B [ 79.905419][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 79.913193][ T60] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 79.926997][ T103] udevd[103]: worker [1310] terminated by signal 7 (Bus error) [ 79.934605][ T103] udevd[103]: worker [1310] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 80.118132][ T60] usb 3-1: USB disconnect, device number 5 [ 80.124794][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 80.130705][ T103] udevd[103]: worker [1311] terminated by signal 7 (Bus error) [ 80.134420][ T60] ftdi_sio 3-1:0.0: device disconnected [ 80.141949][ T103] udevd[103]: worker [1311] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0' [ 80.348318][ T103] udevd[103]: worker [1476] terminated by signal 7 (Bus error) [ 80.355992][ T103] udevd[103]: worker [1476] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0' [ 80.829369][ T1483] loop3: detected capacity change from 0 to 512 [ 80.835454][ T1485] loop2: detected capacity change from 0 to 128 [ 80.836584][ T1483] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.859657][ T1485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.866204][ T1483] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.405: inode has both inline data and extents flags [ 80.868512][ T1485] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.881815][ T1483] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.405: couldn't read orphan inode 15 (err -117) [ 80.931377][ T1483] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.945661][ T292] EXT4-fs (loop2): unmounting filesystem. [ 80.984021][ T28] audit: type=1400 audit(1785080321.714:303): avc: denied { create } for pid=1482 comm="syz.3.405" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.997187][ T1483] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 81.028217][ T28] audit: type=1400 audit(1785080321.764:304): avc: denied { write } for pid=1482 comm="syz.3.405" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.051033][ T28] audit: type=1400 audit(1785080321.764:305): avc: denied { add_name } for pid=1482 comm="syz.3.405" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.073299][ T288] EXT4-fs (loop3): unmounting filesystem. [ 81.079268][ T28] audit: type=1400 audit(1785080321.764:306): avc: denied { create } for pid=1482 comm="syz.3.405" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.099721][ T28] audit: type=1400 audit(1785080321.764:307): avc: denied { read write open } for pid=1482 comm="syz.3.405" path="/86/file1/bus/file1" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.123596][ T28] audit: type=1400 audit(1785080321.764:308): avc: denied { create } for pid=1482 comm="syz.3.405" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.165387][ T28] audit: type=1400 audit(1785080321.774:309): avc: denied { link } for pid=1482 comm="syz.3.405" name="file1" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.004284][ T482] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.184474][ T482] usb 4-1: Using ep0 maxpacket: 32 [ 83.190602][ T482] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 83.198813][ T482] usb 4-1: config 0 has no interface number 0 [ 83.204912][ T482] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 83.216218][ T482] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 83.225289][ T482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.233263][ T482] usb 4-1: Product: syz [ 83.237435][ T482] usb 4-1: Manufacturer: syz [ 83.242036][ T482] usb 4-1: SerialNumber: syz [ 83.247192][ T482] usb 4-1: config 0 descriptor?? [ 83.252397][ T1497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.460669][ T1496] EXT4-fs error: 54 callbacks suppressed [ 83.460681][ T1496] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.409: Detected aborted journal [ 83.477396][ T1497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 84.686798][ T482] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 84.697048][ T482] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 84.734290][ T482] asix: probe of 4-1:0.188 failed with error -71 [ 84.741893][ T482] usb 4-1: USB disconnect, device number 4 [ 84.746117][ T103] udevd[103]: worker [1477] terminated by signal 7 (Bus error) [ 84.752707][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.755522][ T103] udevd[103]: worker [1477] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 84.772527][ T1503] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.780512][ T103] udevd[103]: worker [1499] terminated by signal 7 (Bus error) [ 84.787714][ T279] EXT4-fs: 35 callbacks suppressed [ 84.787726][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 84.797984][ T103] udevd[103]: worker [1499] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.188' [ 84.800522][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.809965][ T1503] EXT4-fs (sda1): Remounting filesystem read-only [ 84.817929][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 84.829374][ T1503] EXT4-fs error (device sda1) in __ext4_new_inode:1094: Journal has aborted [ 84.838294][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 84.843060][ T1504] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.410: Detected aborted journal [ 84.850663][ T279] EXT4-fs (sda1): Remounting filesystem read-only [ 84.868599][ T1504] EXT4-fs (sda1): Remounting filesystem read-only [ 84.873539][ T1505] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.411: Detected aborted journal [ 84.879923][ T1504] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.410: Detected aborted journal [ 84.886216][ T1506] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.412: Detected aborted journal [ 84.896433][ T1504] EXT4-fs (sda1): Remounting filesystem read-only [ 84.907214][ T279] EXT4-fs (sda1): Remounting filesystem read-only SYZFAIL: mkdir(syz-tmp) failed (errno 30: Read-only file system) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: failed to mkdtemp (errno 30: Read-only file system) SYZFAIL: repeatedly failed to execute the program proc=5 req=327 state=1 status=67 (errno 9: Bad file descriptor) [ 84.918149][ T1505] EXT4-fs (sda1): Remounting filesystem read-only [ 84.924499][ T1506] EXT4-fs (sda1): Remounting filesystem read-only [ 84.932287][ T1505] EXT4-fs (sda1): Remounting filesystem read-only [ 84.950486][ T28] audit: type=1400 audit(1785080325.674:310): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14516]" dev="pipefs" ino=14516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 85.142932][ T1509] bridge0: port 3(syz_tun) entered disabled state [ 85.150446][ T1509] device syz_tun left promiscuous mode [ 85.156064][ T1509] bridge0: port 3(syz_tun) entered disabled state [ 85.196396][ T686] tipc: Left network mode [ 85.825215][ T686] device bridge_slave_1 left promiscuous mode [ 85.831358][ T686] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.838879][ T686] device bridge_slave_0 left promiscuous mode [ 85.845098][ T686] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.852966][ T686] device veth1_macvtap left promiscuous mode [ 85.859042][ T686] device veth0_vlan left promiscuous mode [ 86.206675][ T686] tipc: Left network mode [ 86.655329][ T686] device bridge_slave_1 left promiscuous mode [ 86.661492][ T686] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.669025][ T686] device bridge_slave_0 left promiscuous mode [ 86.675232][ T686] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.683184][ T686] device bridge_slave_1 left promiscuous mode [ 86.689415][ T686] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.696908][ T686] device bridge_slave_0 left promiscuous mode [ 86.703018][ T686] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.711095][ T686] device bridge_slave_1 left promiscuous mode [ 86.717266][ T686] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.724771][ T686] device bridge_slave_0 left promiscuous mode [ 86.730895][ T686] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.739249][ T686] device veth1_macvtap left promiscuous mode [ 86.745585][ T686] device veth1_macvtap left promiscuous mode [ 86.751586][ T686] device veth0_vlan left promiscuous mode [ 86.757739][ T686] device veth1_macvtap left promiscuous mode [ 86.763761][ T686] device veth0_vlan left promiscuous mode