last executing test programs: 7.890636444s ago: executing program 3 (id=309): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000880)={[{@utf8}, {@utf8no}, {@shortname_lower}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fat=@nocase}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@rodir}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x351, &(0x7f0000001980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00)={'#! ', '', [{0x20, 'cp932Y\xe4\x00\x01mi@\xa9\x04\xa6c\xe3\x80ox\xfc\xe0\x94R\x81a\xbb\x924\xfe\xac\\\xef\xb5E\xfb\xf1@\v2\xca\x9eQ-I\a\xb2\x84\x9b\xea\x82}lB\xdc@(th*\xe0\v\xba\xe6iP\xd8\xfb\x11\x86\x99\x94\xc12\x9fj\xefP\x9c\xc2\xc8\xb1-d\xb3\xb3\xbc \\\x11V%\x87\xd5\x16\xf1\x89|\xfc!\xa1\xda,\xbd\xd0\xedw\x8c\xee\xc3\xe5Ii\x81K\x1b{\xc6b;d+&i\xab\b\xbd\xbd\x8d|d\x8f+\xad\x83\x18\x81\x87(\x1e\x12\x1b\xfe\xc9 bW\xffx\xc0\x868\b!\xd7\x1d-\xaa\xdd\xa3\xe5\x19\xbbA\xa4p\x16\xbc`\xc7\xb4z\b\xb8H\v\x15\xbdD\x17c\xda\xbd?\'t\x10\xf6\xb1l\xb71\x011\xda\xce`\x16\xc7#\x1f\xa4\xfan&\xdaH\xd0\x88\xbf\x01\x13\x80n.\xc5N\a\xeb\xb1\xec|\xf5\xfe\xd0F\xbb\xa9(\xe5 \xb7Ws\xbdu\xca\xc0\a\xb3Z\xa9@\xff\x04\x8c\xbeN\x8c\x98\xb1\xe0\x84\xfa\xca\xc8'}]}, 0x105) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 6.461055511s ago: executing program 4 (id=312): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0xffffffff}, @host, 0x0, 0x0, 0x7}) 6.435298114s ago: executing program 1 (id=313): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1c, 0x1}, 0x1c}}, 0x0) 6.426654496s ago: executing program 3 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_a, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}]}, 0x48}}, 0x0) 6.101895615s ago: executing program 1 (id=316): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x84, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 6.013124349s ago: executing program 4 (id=317): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 5.601388935s ago: executing program 1 (id=318): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/mem_sleep', 0x2, 0x0) write$nbd(r0, &(0x7f0000001440)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0x13c) 5.420352121s ago: executing program 4 (id=319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x1, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f00000001c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@deltaction={0x14}, 0x14}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0xa00, 0xe0ffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) 5.381328641s ago: executing program 3 (id=320): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r3}, 0x8) 5.256396818s ago: executing program 1 (id=321): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) 4.948693781s ago: executing program 3 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETOFFLOAD(r0, 0x800454df, 0x1df46237f8169d63) 3.917559103s ago: executing program 4 (id=324): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) write$sndseq(r0, 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3.77529213s ago: executing program 1 (id=325): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0xc0109414, &(0x7f0000000000)={0x1, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.533574388s ago: executing program 3 (id=328): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@noquota}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x4}}, {@errors_continue}, {@quota}, {@discard}, {@grpquota}]}, 0x1, 0x60b9, &(0x7f0000013cc0)="$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") unlink(&(0x7f0000000240)='./file0/file0\x00') lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 3.220471761s ago: executing program 0 (id=329): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 2.988388508s ago: executing program 0 (id=331): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1, 0x150, &(0x7f0000000240)="$eJzs281KOlEYx/Hf+P7334tlbaKF0KI2Oan04q4uRXQSaSzJNkoQXUr3V1A3kOGgJxyFwNBDzvezen4+HHxmcfTZjABEVkEFOXKUHIb9TO4p79geCcCSDCR9DgBEU/zd9gQA7Hi7kjqSXj8e64onp/aDYf9y3I+lpvvP0l5i1HfSyoT3ixfpcHze+TfzfNb0szP7Rwfj7/+vNa1rQ5vKaUvbo37DnN/95TYERIujYjhPfBDTdcv3TkxOBrlkcirI5VCumJwOcrF+5zcW9QgA5hT74f7HQ/c/Ebr/AP6ubq9/U/N9756CgoLCFLZ/mQAsmvvQ7rjdXv+41a41vaZ3W74oV88qp6Xzqhts/u7k/g9gdXz/6dueBAAAAAAAAAAAAAAAzCuvHdsjAAAAAFiSZbxOZPsZAQAAAAAAAAAAAAAAAAAAgFXxFQAA//+KWyUw") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000006380)=""/1024, 0x400) 2.872371673s ago: executing program 4 (id=333): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r3}, 0x8) 2.604327224s ago: executing program 4 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000540), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="89", 0x1, 0xffffffffffffffff) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0844123, &(0x7f0000000180)) 2.583516533s ago: executing program 2 (id=335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x1c, r1, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 2.109346193s ago: executing program 2 (id=336): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private}, 0x10, 0x0}, 0x0) 2.092801464s ago: executing program 0 (id=337): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00', 0x37}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 1.684648924s ago: executing program 2 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206050000000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a30000000000500040000000000050005000200000005000100060000001400078008000b40000004f6080008"], 0x60}}, 0x0) 1.394883438s ago: executing program 2 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000060000000000000000000000000008000100e000000108001900", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000000)={0x1, 0x80000000}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_generic(r4, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="e0120000110073"], 0x12e0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r4) 950.717602ms ago: executing program 2 (id=340): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0xffffffff}, @host, 0x0, 0x0, 0x7}) 880.645877ms ago: executing program 1 (id=341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = dup(r0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) 739.941138ms ago: executing program 0 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_a, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}]}, 0x48}}, 0x0) 394.380347ms ago: executing program 2 (id=343): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) write$sndseq(r0, 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 252.837545ms ago: executing program 0 (id=344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x8}]}}]}, 0x38}}, 0x0) 208.644575ms ago: executing program 3 (id=345): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, r2}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r3}, 0x8) 0s ago: executing program 0 (id=346): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) readv(r2, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x30}], 0x300) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.230' (ED25519) to the list of known hosts. [ 95.693961][ T29] audit: type=1400 audit(1719385905.600:87): avc: denied { mounton } for pid=5077 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 95.707138][ T5077] cgroup: Unknown subsys name 'net' [ 95.716880][ T29] audit: type=1400 audit(1719385905.610:88): avc: denied { mount } for pid=5077 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 95.744436][ T29] audit: type=1400 audit(1719385905.630:89): avc: denied { unmount } for pid=5077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 95.893910][ T5077] cgroup: Unknown subsys name 'rlimit' [ 96.038121][ T29] audit: type=1400 audit(1719385905.940:90): avc: denied { setattr } for pid=5077 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.073159][ T29] audit: type=1400 audit(1719385905.950:91): avc: denied { create } for pid=5077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.099669][ T29] audit: type=1400 audit(1719385905.950:92): avc: denied { write } for pid=5077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.127999][ T29] audit: type=1400 audit(1719385905.950:93): avc: denied { read } for pid=5077 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.149088][ T29] audit: type=1400 audit(1719385905.970:94): avc: denied { mounton } for pid=5077 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 96.174700][ T29] audit: type=1400 audit(1719385905.970:95): avc: denied { mount } for pid=5077 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 96.205660][ T29] audit: type=1400 audit(1719385906.030:96): avc: denied { read } for pid=4747 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 96.230405][ T5078] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 98.098334][ T5077] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.221933][ T5099] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.231485][ T5099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.240394][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.241763][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.257066][ T5099] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.262994][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.266858][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.273004][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.287708][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.290394][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.299223][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.303314][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.310408][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.317543][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.323870][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.332369][ T5099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.358756][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.368225][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.371987][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.383948][ T5099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.392692][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.393315][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 99.408324][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 99.409206][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.415658][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.430433][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.500338][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.524228][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.534973][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.543791][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.337346][ T5086] chnl_net:caif_netlink_parms(): no params data found [ 100.458493][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 100.796076][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 100.810502][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 100.853490][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.861627][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.869780][ T5086] bridge_slave_0: entered allmulticast mode [ 100.877966][ T5086] bridge_slave_0: entered promiscuous mode [ 100.890271][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.897610][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.905041][ T5086] bridge_slave_1: entered allmulticast mode [ 100.913756][ T5086] bridge_slave_1: entered promiscuous mode [ 100.977949][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.985349][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.992901][ T5089] bridge_slave_0: entered allmulticast mode [ 101.001643][ T5089] bridge_slave_0: entered promiscuous mode [ 101.055756][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.065317][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.074840][ T5089] bridge_slave_1: entered allmulticast mode [ 101.083549][ T5089] bridge_slave_1: entered promiscuous mode [ 101.209234][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.223744][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.243847][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 101.280432][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.297252][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.379079][ T5096] Bluetooth: hci0: command tx timeout [ 101.459928][ T5096] Bluetooth: hci2: command tx timeout [ 101.495478][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.502824][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.511544][ T5091] bridge_slave_0: entered allmulticast mode [ 101.519610][ T5091] bridge_slave_0: entered promiscuous mode [ 101.538428][ T5096] Bluetooth: hci3: command tx timeout [ 101.544532][ T5096] Bluetooth: hci4: command tx timeout [ 101.568047][ T5086] team0: Port device team_slave_0 added [ 101.574969][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.583046][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.590517][ T5088] bridge_slave_0: entered allmulticast mode [ 101.598583][ T5088] bridge_slave_0: entered promiscuous mode [ 101.616737][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.624941][ T5096] Bluetooth: hci1: command tx timeout [ 101.625109][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.642946][ T5091] bridge_slave_1: entered allmulticast mode [ 101.651185][ T5091] bridge_slave_1: entered promiscuous mode [ 101.687550][ T5089] team0: Port device team_slave_0 added [ 101.697652][ T5086] team0: Port device team_slave_1 added [ 101.725402][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.733013][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.740394][ T5088] bridge_slave_1: entered allmulticast mode [ 101.748905][ T5088] bridge_slave_1: entered promiscuous mode [ 101.789916][ T5089] team0: Port device team_slave_1 added [ 101.851784][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.866670][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.898503][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.905512][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.932309][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.027369][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.034751][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.062538][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.090110][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.105933][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.155980][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.164138][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.190921][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.204525][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.211692][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.238063][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.290860][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.299087][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.306340][ T5087] bridge_slave_0: entered allmulticast mode [ 102.314571][ T5087] bridge_slave_0: entered promiscuous mode [ 102.325389][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.332854][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.341136][ T5087] bridge_slave_1: entered allmulticast mode [ 102.349305][ T5087] bridge_slave_1: entered promiscuous mode [ 102.363853][ T5091] team0: Port device team_slave_0 added [ 102.454761][ T5091] team0: Port device team_slave_1 added [ 102.493962][ T5086] hsr_slave_0: entered promiscuous mode [ 102.501814][ T5086] hsr_slave_1: entered promiscuous mode [ 102.521024][ T5088] team0: Port device team_slave_0 added [ 102.624615][ T5089] hsr_slave_0: entered promiscuous mode [ 102.632857][ T5089] hsr_slave_1: entered promiscuous mode [ 102.640528][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.650156][ T5089] Cannot create hsr debugfs directory [ 102.659050][ T5088] team0: Port device team_slave_1 added [ 102.669648][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.680217][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.687473][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.714536][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.729986][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.736996][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.763569][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.834935][ T8] cfg80211: failed to load regulatory.db [ 102.883825][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.955816][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.963853][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.991154][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.083699][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.091637][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.118377][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.144807][ T5087] team0: Port device team_slave_0 added [ 103.161083][ T5087] team0: Port device team_slave_1 added [ 103.234302][ T5091] hsr_slave_0: entered promiscuous mode [ 103.242163][ T5091] hsr_slave_1: entered promiscuous mode [ 103.249516][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.257118][ T5091] Cannot create hsr debugfs directory [ 103.373180][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.382026][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.408941][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.423397][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.432265][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.459139][ T5096] Bluetooth: hci0: command tx timeout [ 103.464733][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.538107][ T5096] Bluetooth: hci2: command tx timeout [ 103.618251][ T5096] Bluetooth: hci4: command tx timeout [ 103.620110][ T4477] Bluetooth: hci3: command tx timeout [ 103.632686][ T5088] hsr_slave_0: entered promiscuous mode [ 103.642114][ T5088] hsr_slave_1: entered promiscuous mode [ 103.653290][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.661825][ T5088] Cannot create hsr debugfs directory [ 103.698599][ T4477] Bluetooth: hci1: command tx timeout [ 103.943684][ T5087] hsr_slave_0: entered promiscuous mode [ 103.959972][ T5087] hsr_slave_1: entered promiscuous mode [ 103.966535][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.974198][ T5087] Cannot create hsr debugfs directory [ 104.414634][ T5089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.444067][ T5089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.496663][ T5089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.515843][ T5089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.686213][ T5086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.704305][ T5086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.734665][ T5086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.747685][ T5086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.908762][ T5088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.926274][ T5088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.956064][ T5088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.977404][ T5088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.174572][ T5091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.197500][ T5091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.232438][ T5091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.247393][ T5091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.273385][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.415799][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.535804][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.544394][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.549804][ T4477] Bluetooth: hci0: command tx timeout [ 105.568946][ T5087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.582382][ T5087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.595849][ T5087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.612457][ T5087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.622234][ T4477] Bluetooth: hci2: command tx timeout [ 105.651114][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.698892][ T4477] Bluetooth: hci3: command tx timeout [ 105.704456][ T4477] Bluetooth: hci4: command tx timeout [ 105.724104][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.731432][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.779137][ T4477] Bluetooth: hci1: command tx timeout [ 105.830081][ T5086] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.899485][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.906759][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.986015][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.993472][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.029758][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.229813][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.263608][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 106.263646][ T29] audit: type=1400 audit(1719385916.170:113): avc: denied { sys_module } for pid=5089 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 106.361032][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.409934][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.417233][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.474439][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.482062][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.600566][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.653213][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.677659][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.685063][ T5074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.727385][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.734738][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.841977][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.896531][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.964909][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.972249][ T5095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.122901][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.130408][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.174749][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.376413][ T5087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.389291][ T5087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.621799][ T4477] Bluetooth: hci0: command tx timeout [ 107.691275][ T5086] veth0_vlan: entered promiscuous mode [ 107.698175][ T4477] Bluetooth: hci2: command tx timeout [ 107.778161][ T4477] Bluetooth: hci4: command tx timeout [ 107.779098][ T5096] Bluetooth: hci3: command tx timeout [ 107.858800][ T5096] Bluetooth: hci1: command tx timeout [ 107.913115][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.929445][ T5086] veth1_vlan: entered promiscuous mode [ 108.041131][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.140721][ T5089] veth0_vlan: entered promiscuous mode [ 108.192447][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.225462][ T5086] veth0_macvtap: entered promiscuous mode [ 108.282203][ T5089] veth1_vlan: entered promiscuous mode [ 108.316101][ T5086] veth1_macvtap: entered promiscuous mode [ 108.330053][ T5091] veth0_vlan: entered promiscuous mode [ 108.412210][ T5088] veth0_vlan: entered promiscuous mode [ 108.460627][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.469747][ T5091] veth1_vlan: entered promiscuous mode [ 108.525164][ T5088] veth1_vlan: entered promiscuous mode [ 108.536474][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.593500][ T5089] veth0_macvtap: entered promiscuous mode [ 108.612041][ T5087] veth0_vlan: entered promiscuous mode [ 108.624966][ T5086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.635078][ T5086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.644148][ T5086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.653096][ T5086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.682354][ T5089] veth1_macvtap: entered promiscuous mode [ 108.756862][ T5087] veth1_vlan: entered promiscuous mode [ 108.816367][ T5088] veth0_macvtap: entered promiscuous mode [ 108.845240][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.856767][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.873296][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.884714][ T5088] veth1_macvtap: entered promiscuous mode [ 108.916723][ T5091] veth0_macvtap: entered promiscuous mode [ 108.960642][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.971270][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.984802][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.031635][ T5089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.042192][ T5089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.057232][ T5089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.067648][ T5089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.113454][ T5091] veth1_macvtap: entered promiscuous mode [ 109.132606][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.144094][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.155402][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.168358][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.181492][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.217320][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.248507][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.346166][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.356997][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.367965][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.382680][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.396265][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.410766][ T5088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.424058][ T5088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.433012][ T5088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.441810][ T5088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.459158][ T5087] veth0_macvtap: entered promiscuous mode [ 109.485289][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.500821][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.512554][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.523420][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.534499][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.545476][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.560429][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.573193][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.584802][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.595187][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.605983][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.620094][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.630698][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.645338][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.658855][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.670145][ T5087] veth1_macvtap: entered promiscuous mode [ 109.681152][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.705736][ T5091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.714789][ T5091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.725292][ T5091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.734545][ T5091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.762868][ T29] audit: type=1400 audit(1719385919.670:114): avc: denied { mounton } for pid=5086 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 109.820477][ T29] audit: type=1400 audit(1719385919.710:115): avc: denied { mount } for pid=5086 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 109.917609][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.944912][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.958140][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.969187][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.979546][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.990862][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.000898][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.011513][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.025840][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.105503][ T29] audit: type=1400 audit(1719385920.010:116): avc: denied { read write } for pid=5086 comm="syz-executor" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.107169][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.146031][ T29] audit: type=1400 audit(1719385920.010:117): avc: denied { open } for pid=5086 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.183104][ T29] audit: type=1400 audit(1719385920.010:118): avc: denied { ioctl } for pid=5086 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.217936][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.254306][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.280784][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.293933][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.306317][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.316691][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.328099][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.344269][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.424207][ T5087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.443816][ T5087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.457639][ T5087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.473374][ T5087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.510615][ T29] audit: type=1400 audit(1719385920.420:119): avc: denied { create } for pid=5175 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.564828][ T29] audit: type=1400 audit(1719385920.470:120): avc: denied { write } for pid=5175 comm="syz.0.7" path="socket:[6373]" dev="sockfs" ino=6373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.637462][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.646651][ T29] audit: type=1400 audit(1719385920.500:121): avc: denied { nlmsg_read } for pid=5175 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.667890][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.820115][ T2876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.833973][ T2876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.945598][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.985121][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.071710][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.117883][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.346935][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.375856][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.440510][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.458062][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.576318][ T29] audit: type=1400 audit(1719385921.480:122): avc: denied { map_create } for pid=5180 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.661323][ T29] audit: type=1400 audit(1719385921.480:123): avc: denied { map_read map_write } for pid=5180 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.740448][ T29] audit: type=1400 audit(1719385921.510:124): avc: denied { prog_load } for pid=5180 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 111.772803][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.830602][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.872217][ T29] audit: type=1400 audit(1719385921.780:125): avc: denied { bpf } for pid=5182 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.953571][ T29] audit: type=1400 audit(1719385921.820:126): avc: denied { create } for pid=5182 comm="syz.2.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 111.999131][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.038323][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.074025][ T29] audit: type=1400 audit(1719385921.830:127): avc: denied { mounton } for pid=5088 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 112.151096][ T29] audit: type=1400 audit(1719385921.830:128): avc: denied { map } for pid=5182 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.287956][ T29] audit: type=1400 audit(1719385921.840:129): avc: denied { read write } for pid=5182 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.405199][ T29] audit: type=1400 audit(1719385921.970:130): avc: denied { create } for pid=5183 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.518603][ T29] audit: type=1400 audit(1719385922.010:131): avc: denied { connect } for pid=5183 comm="syz.4.9" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.539880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.607502][ T5191] netlink: 'syz.4.10': attribute type 10 has an invalid length. [ 112.655923][ T5191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10'. [ 112.761281][ T5191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.804505][ T5211] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.932957][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 114.079232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 114.125338][ T5211] binder_alloc: 5210: binder_alloc_buf, no vma [ 114.248822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.618631][ T5236] netlink: 'syz.2.27': attribute type 10 has an invalid length. [ 114.652857][ T5236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27'. [ 114.699822][ T5236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.448207][ T5253] netlink: 'syz.0.36': attribute type 25 has an invalid length. [ 115.509040][ T5253] netlink: 'syz.0.36': attribute type 7 has an invalid length. [ 115.710648][ T5261] loop3: detected capacity change from 0 to 64 [ 115.974384][ T5261] MINIX-fs: bad superblock or unable to read bitmaps [ 116.316564][ T5272] loop2: detected capacity change from 0 to 256 [ 116.454071][ T5272] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 116.604926][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 116.604979][ T29] audit: type=1400 audit(1719385926.510:175): avc: denied { read } for pid=5263 comm="syz.2.42" name="file1" dev="loop2" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.840432][ T5225] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 116.879953][ T29] audit: type=1400 audit(1719385926.690:176): avc: denied { ioctl } for pid=5263 comm="syz.2.42" path="socket:[7643]" dev="sockfs" ino=7643 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.905229][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.974738][ T29] audit: type=1400 audit(1719385926.740:177): avc: denied { shutdown } for pid=5266 comm="syz.4.43" lport=37000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.044973][ T29] audit: type=1400 audit(1719385926.920:178): avc: denied { read } for pid=5260 comm="syz.3.40" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.121158][ T29] audit: type=1400 audit(1719385926.920:179): avc: denied { open } for pid=5260 comm="syz.3.40" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 117.187227][ T29] audit: type=1400 audit(1719385927.070:180): avc: denied { unmount } for pid=5091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 117.299151][ T5279] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 117.535011][ T5285] loop2: detected capacity change from 0 to 256 [ 117.607964][ T5285] exFAT-fs (loop2): invalid fs_name [ 117.613367][ T5285] exFAT-fs (loop2): failed to read boot sector [ 117.638200][ T5285] exFAT-fs (loop2): failed to recognize exfat type [ 117.768198][ T5289] loop4: detected capacity change from 0 to 64 [ 118.059802][ T29] audit: type=1400 audit(1719385927.970:181): avc: denied { mount } for pid=5287 comm="syz.4.50" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 118.382336][ T29] audit: type=1400 audit(1719385928.280:182): avc: denied { unmount } for pid=5089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 118.550233][ T5295] usb usb8: usbfs: process 5295 (syz.1.54) did not claim interface 0 before use [ 118.680392][ T29] audit: type=1400 audit(1719385928.590:183): avc: denied { name_bind } for pid=5294 comm="syz.1.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 118.749355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 118.758412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 118.862912][ T29] audit: type=1400 audit(1719385928.770:184): avc: denied { write } for pid=5299 comm="syz.4.55" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 118.892728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.218456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.403347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.505882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 120.110770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 122.262365][ T29] audit: type=1400 audit(1719385932.140:185): avc: denied { setopt } for pid=5294 comm="syz.1.54" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.314715][ T5314] loop2: detected capacity change from 0 to 256 [ 123.634300][ T5314] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 123.946149][ T5313] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 123.946149][ T5313] [ 123.962676][ T5313] exFAT-fs (loop2): error, failed to bmap (inode : ffff88807a3587f0 iblock : 0, err : -5) [ 123.974570][ T5313] exFAT-fs (loop2): write: fail to zero from 0 to 32767(-5) [ 124.575866][ T29] audit: type=1400 audit(1719385934.480:186): avc: denied { read write } for pid=5319 comm="syz.0.61" name="video8" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 124.694916][ T29] audit: type=1400 audit(1719385934.480:187): avc: denied { open } for pid=5319 comm="syz.0.61" path="/dev/video8" dev="devtmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 124.744034][ T5323] loop2: detected capacity change from 0 to 512 [ 124.767905][ T29] audit: type=1400 audit(1719385934.480:188): avc: denied { ioctl } for pid=5316 comm="syz.1.62" path="/dev/udmabuf" dev="devtmpfs" ino=686 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.800701][ T5323] ======================================================= [ 124.800701][ T5323] WARNING: The mand mount option has been deprecated and [ 124.800701][ T5323] and is ignored by this kernel. Remove the mand [ 124.800701][ T5323] option from the mount to silence this warning. [ 124.800701][ T5323] ======================================================= [ 124.877886][ T29] audit: type=1400 audit(1719385934.520:189): avc: denied { ioctl } for pid=5319 comm="syz.0.61" path="/dev/video8" dev="devtmpfs" ino=869 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 124.973222][ T5323] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 124.991741][ T5323] EXT4-fs (loop2): 1 truncate cleaned up [ 125.000449][ T5323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.057955][ T29] audit: type=1326 audit(1719385934.770:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.63" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa713375ae9 code=0x0 [ 125.100950][ T5332] loop4: detected capacity change from 0 to 1024 [ 125.109103][ T29] audit: type=1400 audit(1719385934.930:191): avc: denied { mount } for pid=5321 comm="syz.2.60" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 125.161563][ T29] audit: type=1400 audit(1719385935.060:192): avc: denied { create } for pid=5333 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.211169][ T29] audit: type=1400 audit(1719385935.070:193): avc: denied { setopt } for pid=5333 comm="syz.1.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.282664][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.310919][ T29] audit: type=1400 audit(1719385935.100:194): avc: denied { getopt } for pid=5333 comm="syz.1.66" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 125.957712][ T5339] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 126.554839][ T5343] netlink: 'syz.3.69': attribute type 10 has an invalid length. [ 126.640121][ T5343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.69'. [ 126.735932][ T5343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.864393][ T5345] loop2: detected capacity change from 0 to 764 [ 127.409906][ T5326] loop0: detected capacity change from 0 to 32768 [ 127.509450][ T5326] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 255): 1/224 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 5 5 6 7 10 11 11 11 24 26 33 34 45 45 56 80 245] [ 127.509450][ T5326] replicas_v0 (size 40): [ 127.509450][ T5326] (unknown data_type 255): 224 [245 5 0 0 0 0 7 0 0 0 0 0 0 0 24 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 34 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 45 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 45 0 0 0 0 0 0 0 26 0 0 0 0 0 0 0 6 0 0 0 0 0 0 0 11 0 0 0 0 0 0 0 0 0 0 0 0 0 [ 127.812366][ T5359] loop3: detected capacity change from 0 to 256 [ 128.105662][ T5359] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 128.411234][ T5359] exFAT-fs (loop3): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 128.411234][ T5359] [ 128.425512][ T5359] exFAT-fs (loop3): error, failed to bmap (inode : ffff88807a359500 iblock : 0, err : -5) [ 128.439611][ T5359] exFAT-fs (loop3): write: fail to zero from 0 to 32767(-5) [ 128.747563][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 128.747585][ T29] audit: type=1400 audit(1719385938.650:206): avc: denied { unmount } for pid=5091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 129.261928][ T5369] loop2: detected capacity change from 0 to 128 [ 129.317653][ T5369] EXT4-fs: Ignoring removed oldalloc option [ 129.366691][ T5369] ext4: Unknown parameter 'obj_user' [ 129.475609][ T5369] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 129.491086][ T5170] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.687382][ T5373] loop0: detected capacity change from 0 to 256 [ 129.710722][ T5373] exfat: Deprecated parameter 'utf8' [ 129.716439][ T5373] exfat: Deprecated parameter 'namecase' [ 129.757541][ T5170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.821839][ T5170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.863224][ T5373] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 129.877063][ T29] audit: type=1400 audit(1719385939.780:207): avc: denied { connect } for pid=5376 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.903876][ T5170] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 129.927018][ T5170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.938297][ T29] audit: type=1400 audit(1719385939.810:208): avc: denied { write } for pid=5376 comm="syz.4.79" path="socket:[7013]" dev="sockfs" ino=7013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.986258][ T5170] usb 4-1: config 0 descriptor?? [ 130.059163][ T29] audit: type=1400 audit(1719385939.910:209): avc: denied { read } for pid=5376 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.126329][ T29] audit: type=1400 audit(1719385940.000:210): avc: denied { create } for pid=5372 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.182945][ T29] audit: type=1400 audit(1719385940.010:211): avc: denied { connect } for pid=5372 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.211903][ T5373] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.281447][ T29] audit: type=1400 audit(1719385940.030:212): avc: denied { shutdown } for pid=5372 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.323145][ T29] audit: type=1400 audit(1719385940.070:213): avc: denied { append } for pid=5372 comm="syz.0.77" path="/root/syzkaller.IXFRxJ/13/file1/net_prio.prioidx" dev="loop0" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.451890][ T29] audit: type=1400 audit(1719385940.170:214): avc: denied { write } for pid=5372 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 130.492553][ T5383] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 130.514399][ T29] audit: type=1400 audit(1719385940.400:215): avc: denied { ioctl } for pid=5380 comm="syz.2.80" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 130.663059][ T5386] loop2: detected capacity change from 0 to 256 [ 130.797182][ T5386] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 130.869575][ T5170] usbhid 4-1:0.0: can't add hid device: -71 [ 130.887179][ T5170] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 130.970678][ T5170] usb 4-1: USB disconnect, device number 2 [ 131.054407][ T5388] usb usb8: usbfs: process 5388 (syz.4.82) did not claim interface 0 before use [ 131.146034][ T5390] loop1: detected capacity change from 0 to 1024 [ 132.602541][ T5390] EXT4-fs: Ignoring removed orlov option [ 132.669744][ T5390] EXT4-fs (loop1): Test dummy encryption mode enabled [ 132.708529][ T5390] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 132.893735][ T5390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.444826][ T5423] loop4: detected capacity change from 0 to 128 [ 133.481084][ T5390] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 133.498533][ T5423] EXT4-fs: Ignoring removed oldalloc option [ 133.514867][ T5423] ext4: Unknown parameter 'obj_user' [ 133.588072][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.605734][ T5225] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 133.762634][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 133.762659][ T29] audit: type=1400 audit(1719385943.670:231): avc: denied { write } for pid=5389 comm="syz.1.84" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.845177][ T25] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=6e.9b [ 133.873850][ T29] audit: type=1400 audit(1719385943.670:232): avc: denied { add_name } for pid=5389 comm="syz.1.84" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.897847][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.934070][ T5426] Attempt to restore checkpoint with obsolete wellknown handles [ 133.981964][ T25] usb 4-1: Product: syz [ 133.986343][ T25] usb 4-1: Manufacturer: syz [ 134.024021][ T25] usb 4-1: SerialNumber: syz [ 134.070900][ T5088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.089981][ T25] usb 4-1: config 0 descriptor?? [ 134.121845][ T25] cdc_mbim 4-1:0.0: CDC Union missing and no IAD found [ 134.169392][ T25] cdc_mbim 4-1:0.0: bind() failure [ 134.329883][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'. [ 134.434199][ T29] audit: type=1400 audit(1719385944.340:233): avc: denied { mounton } for pid=5429 comm="syz.0.93" path="/root/syzkaller.IXFRxJ/19/file0" dev="sda1" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 134.473128][ T5431] syz.0.93: attempt to access beyond end of device [ 134.473128][ T5431] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 134.532453][ T29] audit: type=1400 audit(1719385944.430:234): avc: denied { read write } for pid=5434 comm="syz.1.92" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.567066][ T5169] usb 4-1: USB disconnect, device number 3 [ 134.579748][ T5431] syz.0.93: attempt to access beyond end of device [ 134.579748][ T5431] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 134.663054][ T29] audit: type=1400 audit(1719385944.430:235): avc: denied { open } for pid=5434 comm="syz.1.92" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.682991][ T5431] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 134.755565][ T29] audit: type=1400 audit(1719385944.440:236): avc: denied { mounton } for pid=5434 comm="syz.1.92" path="/root/syzkaller.lbFFwf/16/file0" dev="sda1" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 134.795308][ T5431] syz.0.93: attempt to access beyond end of device [ 134.795308][ T5431] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 134.851775][ T29] audit: type=1804 audit(1719385944.530:237): pid=5436 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.92" name="/root/syzkaller.lbFFwf/16/file0" dev="sda1" ino=1963 res=1 errno=0 [ 134.861246][ T5431] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 134.896648][ T5431] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 134.910034][ T5431] UDF-fs: Scanning with blocksize 512 failed [ 134.920092][ T5431] syz.0.93: attempt to access beyond end of device [ 134.920092][ T5431] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 134.933544][ T5431] syz.0.93: attempt to access beyond end of device [ 134.933544][ T5431] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 134.947208][ T5431] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 134.972230][ T5431] syz.0.93: attempt to access beyond end of device [ 134.972230][ T5431] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 134.986793][ T5431] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 135.006663][ T29] audit: type=1400 audit(1719385944.840:238): avc: denied { write } for pid=5438 comm="syz.4.95" name="igmp" dev="proc" ino=4026533288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 135.013855][ T5431] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 135.067701][ T5431] UDF-fs: Scanning with blocksize 1024 failed [ 135.093487][ T5441] loop2: detected capacity change from 0 to 2048 [ 135.118153][ T29] audit: type=1400 audit(1719385944.860:239): avc: denied { unmount } for pid=5088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 135.139410][ T5431] syz.0.93: attempt to access beyond end of device [ 135.139410][ T5431] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 135.158551][ T5431] syz.0.93: attempt to access beyond end of device [ 135.158551][ T5431] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 135.196964][ T5431] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 135.214611][ T29] audit: type=1400 audit(1719385944.970:240): avc: denied { bind } for pid=5438 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.251492][ T5431] syz.0.93: attempt to access beyond end of device [ 135.251492][ T5431] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 135.280584][ T5431] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 135.293985][ T5431] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 135.304087][ T5431] UDF-fs: Scanning with blocksize 2048 failed [ 135.311365][ T5431] syz.0.93: attempt to access beyond end of device [ 135.311365][ T5431] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 135.336709][ T5441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.375010][ T5431] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 135.422848][ T5431] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 135.433755][ T5431] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 135.449930][ T5431] UDF-fs: Scanning with blocksize 4096 failed [ 135.468390][ T5431] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 136.641727][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.641881][ T5463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.101'. [ 137.822527][ T5477] Zero length message leads to an empty skb [ 138.333958][ T5465] rtc_cmos 00:00: Alarms can be up to one day in the future [ 138.718650][ T5492] loop2: detected capacity change from 0 to 256 [ 140.400133][ T5491] sched: RT throttling activated [ 140.416734][ T5129] rtc_cmos 00:00: Alarms can be up to one day in the future [ 140.436776][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.445867][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.049555][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 141.049579][ T29] audit: type=1400 audit(1719385950.960:255): avc: denied { write } for pid=5470 comm="syz.3.104" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 141.154987][ T5492] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 141.173575][ T5129] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.212137][ T5491] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 141.212137][ T5491] [ 141.229786][ T5491] exFAT-fs (loop2): error, failed to bmap (inode : ffff88807a35af20 iblock : 0, err : -5) [ 141.240299][ T5491] exFAT-fs (loop2): write: fail to zero from 0 to 32767(-5) [ 141.276073][ T5129] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.320613][ T5129] rtc_cmos 00:00: Alarms can be up to one day in the future [ 141.349378][ T5129] rtc rtc0: __rtc_set_alarm: err=-22 [ 141.397968][ T29] audit: type=1400 audit(1719385951.100:256): avc: denied { create } for pid=5486 comm="syz.2.108" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 141.618997][ T29] audit: type=1400 audit(1719385951.110:257): avc: denied { create } for pid=5483 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 141.847950][ T29] audit: type=1400 audit(1719385951.470:258): avc: denied { bind } for pid=5483 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 141.871496][ T5490] loop4: detected capacity change from 0 to 64 [ 141.885940][ T5096] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 141.895990][ T5096] Bluetooth: hci0: Injecting HCI hardware error event [ 141.906242][ T4477] Bluetooth: hci0: hardware error 0x00 [ 141.980344][ T29] audit: type=1400 audit(1719385951.480:259): avc: denied { accept } for pid=5483 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.072735][ T29] audit: type=1400 audit(1719385951.560:260): avc: denied { write } for pid=5483 comm="syz.4.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.244964][ T5490] hfs: get root inode failed [ 142.279828][ T5505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 142.372311][ T5505] bio_check_eod: 2 callbacks suppressed [ 142.372338][ T5505] syz.3.113: attempt to access beyond end of device [ 142.372338][ T5505] loop3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 142.474459][ T5140] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 142.664549][ T5505] syz.3.113: attempt to access beyond end of device [ 142.664549][ T5505] loop3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 142.693688][ T5505] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 142.714234][ T5505] syz.3.113: attempt to access beyond end of device [ 142.714234][ T5505] loop3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 143.001350][ T29] audit: type=1400 audit(1719385952.690:261): avc: denied { setopt } for pid=5501 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.485519][ T5140] usb 3-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=6e.9b [ 143.495143][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.504116][ T5140] usb 3-1: Product: syz [ 143.512106][ T5140] usb 3-1: Manufacturer: syz [ 143.516996][ T5140] usb 3-1: SerialNumber: syz [ 143.554210][ T29] audit: type=1400 audit(1719385952.690:262): avc: denied { create } for pid=5501 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.577545][ T5140] usb 3-1: config 0 descriptor?? [ 143.614582][ T5140] cdc_mbim 3-1:0.0: CDC Union missing and no IAD found [ 143.646637][ T5505] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 143.648076][ T29] audit: type=1400 audit(1719385952.700:263): avc: denied { setopt } for pid=5501 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.658242][ T5140] cdc_mbim 3-1:0.0: bind() failure [ 143.709324][ T5514] usb usb8: usbfs: process 5514 (syz.0.115) did not claim interface 0 before use [ 143.729272][ T5505] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 143.737020][ T5505] UDF-fs: Scanning with blocksize 512 failed [ 143.761943][ T5505] syz.3.113: attempt to access beyond end of device [ 143.761943][ T5505] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 143.797982][ T5505] syz.3.113: attempt to access beyond end of device [ 143.797982][ T5505] loop3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 143.873936][ T29] audit: type=1400 audit(1719385953.780:264): avc: denied { ioctl } for pid=5516 comm="syz.0.116" path="/dev/input/event0" dev="devtmpfs" ino=834 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 143.889653][ T5505] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 143.948116][ T4477] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 144.016253][ T5519] 9pnet_fd: Insufficient options for proto=fd [ 144.024127][ T5505] syz.3.113: attempt to access beyond end of device [ 144.024127][ T5505] loop3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 144.060862][ T5505] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 144.087695][ T5505] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 144.131001][ T5505] UDF-fs: Scanning with blocksize 1024 failed [ 144.144542][ T931] usb 3-1: USB disconnect, device number 2 [ 144.171793][ T5505] syz.3.113: attempt to access beyond end of device [ 144.171793][ T5505] loop3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 144.267371][ T5505] syz.3.113: attempt to access beyond end of device [ 144.267371][ T5505] loop3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 144.334472][ T5505] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 144.408258][ T5505] syz.3.113: attempt to access beyond end of device [ 144.408258][ T5505] loop3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 144.448684][ T5505] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 144.478127][ T5505] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 144.525500][ T5505] UDF-fs: Scanning with blocksize 2048 failed [ 144.567274][ T5505] syz.3.113: attempt to access beyond end of device [ 144.567274][ T5505] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 144.656549][ T5505] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 144.684489][ T5505] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 144.704663][ T5505] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 144.713329][ T5505] UDF-fs: Scanning with blocksize 4096 failed [ 144.720155][ T5505] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 145.085398][ T5533] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.093683][ T5169] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.148265][ T5169] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.155912][ T5169] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.239181][ T5169] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.246538][ T5169] rtc rtc0: __rtc_set_alarm: err=-22 [ 145.340109][ T5536] usb usb8: usbfs: process 5536 (syz.2.123) did not claim interface 0 before use [ 145.713985][ T5543] veth1: mtu less than device minimum [ 145.896398][ T5539] pimreg: entered allmulticast mode [ 146.108417][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 146.108439][ T29] audit: type=1326 audit(1719385956.010:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5547 comm="syz.3.126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa713375ae9 code=0x0 [ 146.162434][ T29] audit: type=1326 audit(1719385956.070:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5550 comm="syz.4.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98d8b75ae9 code=0x0 [ 146.786460][ T29] audit: type=1400 audit(1719385956.640:292): avc: denied { setopt } for pid=5562 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 147.911672][ T5571] loop2: detected capacity change from 0 to 2048 [ 147.958368][ T5580] usb usb8: usbfs: process 5580 (syz.1.139) did not claim interface 0 before use [ 148.016883][ T5571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.027157][ T5581] loop3: detected capacity change from 0 to 2048 [ 148.126586][ T5581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.191223][ T5581] ext4 filesystem being mounted at /root/syzkaller.HwcCe6/18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.293185][ T29] audit: type=1400 audit(1719385958.200:293): avc: denied { read } for pid=5578 comm="syz.3.137" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.336944][ T5591] rtc_cmos 00:00: Alarms can be up to one day in the future [ 148.393907][ T29] audit: type=1400 audit(1719385958.200:294): avc: denied { open } for pid=5578 comm="syz.3.137" path="/root/syzkaller.HwcCe6/18/bus/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.450922][ T5087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.605104][ T5091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.643158][ T29] audit: type=1400 audit(1719385958.270:295): avc: denied { ioctl } for pid=5578 comm="syz.3.137" path="/root/syzkaller.HwcCe6/18/bus/file0/file0" dev="loop3" ino=13 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.881605][ T5582] rtc_cmos 00:00: Alarms can be up to one day in the future [ 149.028504][ T931] rtc_cmos 00:00: Alarms can be up to one day in the future [ 149.042650][ T5597] loop0: detected capacity change from 0 to 2048 [ 149.068354][ T931] rtc_cmos 00:00: Alarms can be up to one day in the future [ 149.112345][ T931] rtc_cmos 00:00: Alarms can be up to one day in the future [ 149.174566][ T931] rtc_cmos 00:00: Alarms can be up to one day in the future [ 149.194155][ T5597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.207901][ T931] rtc rtc0: __rtc_set_alarm: err=-22 [ 149.351576][ T29] audit: type=1326 audit(1719385959.260:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5604 comm="syz.2.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f878e175ae9 code=0x0 [ 149.396729][ T5603] loop3: detected capacity change from 0 to 2048 [ 149.448114][ T5141] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 149.472647][ T5603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.491696][ T5603] ext4 filesystem being mounted at /root/syzkaller.HwcCe6/20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.514836][ T29] audit: type=1326 audit(1719385959.380:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5606 comm="syz.4.146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98d8b75ae9 code=0x0 [ 149.582970][ T29] audit: type=1400 audit(1719385959.430:298): avc: denied { watch watch_reads } for pid=5594 comm="syz.0.142" path="/root/syzkaller.IXFRxJ/32/file0/file0" dev="loop0" ino=1329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 149.632685][ T29] audit: type=1400 audit(1719385959.540:299): avc: denied { write } for pid=5602 comm="syz.3.144" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.656638][ T5603] fs-verity: sha256 using implementation "sha256-avx2" [ 149.695013][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.716809][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.739265][ T5141] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.748695][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.784213][ T5141] usb 2-1: config 0 descriptor?? [ 149.818901][ T5603] fs-verity: sha512 using implementation "sha512-avx2" [ 149.984797][ T5603] syz.3.144 (5603) used greatest stack depth: 21328 bytes left [ 150.138464][ T5087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.409546][ T5141] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 150.621199][ T5141] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 152.340163][ T5630] loop1: detected capacity change from 0 to 256 [ 153.206346][ T5647] loop2: detected capacity change from 0 to 2048 [ 153.279607][ T5630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.476680][ T5630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.517897][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 156.517923][ T29] audit: type=1400 audit(1719385963.770:304): avc: denied { getopt } for pid=5643 comm="syz.0.155" laddr=172.20.20.170 lport=39879 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.915964][ T5647] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.988833][ T29] audit: type=1400 audit(1719385964.920:305): avc: denied { getopt } for pid=5643 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.023128][ T5140] usb 2-1: USB disconnect, device number 2 [ 158.252069][ T5656] loop0: detected capacity change from 0 to 2048 [ 158.380615][ T29] audit: type=1326 audit(1719385968.290:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.3.160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa713375ae9 code=0x0 [ 158.557425][ T5656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.600536][ T5656] ext4 filesystem being mounted at /root/syzkaller.IXFRxJ/36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.761210][ T5668] loop1: detected capacity change from 0 to 128 [ 158.865989][ T5668] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 158.935354][ T29] audit: type=1400 audit(1719385968.840:307): avc: denied { mount } for pid=5662 comm="syz.1.161" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysv_t tclass=filesystem permissive=1 [ 159.011242][ T5668] sysv_free_block: trying to free block not in datazone [ 159.237248][ T29] audit: type=1400 audit(1719385968.860:308): avc: denied { read } for pid=5670 comm="syz.2.164" path="socket:[9348]" dev="sockfs" ino=9348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.024490][ T5086] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.228762][ T5677] bio_check_eod: 2 callbacks suppressed [ 160.228782][ T5677] syz.1.161: attempt to access beyond end of device [ 160.228782][ T5677] loop1: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 160.268453][ T5677] Buffer I/O error on dev loop1, logical block 209285, lost async page write [ 160.399124][ T5677] syz.1.161: attempt to access beyond end of device [ 160.399124][ T5677] loop1: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 160.468257][ T5677] Buffer I/O error on dev loop1, logical block 13466417, lost async page write [ 160.587510][ T5677] syz.1.161: attempt to access beyond end of device [ 160.587510][ T5677] loop1: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 160.719072][ T5677] Buffer I/O error on dev loop1, logical block 8768635, lost async page write [ 160.837972][ T5677] syz.1.161: attempt to access beyond end of device [ 160.837972][ T5677] loop1: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 160.864268][ T5677] Buffer I/O error on dev loop1, logical block 3211264, lost async page write [ 160.960772][ T5677] syz.1.161: attempt to access beyond end of device [ 160.960772][ T5677] loop1: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 161.520468][ T5677] Buffer I/O error on dev loop1, logical block 13269809, lost async page write [ 161.608484][ T5677] syz.1.161: attempt to access beyond end of device [ 161.608484][ T5677] loop1: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 161.810927][ T5677] Buffer I/O error on dev loop1, logical block 8767744, lost async page write [ 161.841821][ T5677] syz.1.161: attempt to access beyond end of device [ 161.841821][ T5677] loop1: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 161.914524][ T5677] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write [ 161.974115][ T5697] loop0: detected capacity change from 0 to 2048 [ 161.997211][ T5677] syz.1.161: attempt to access beyond end of device [ 161.997211][ T5677] loop1: rw=2049, sector=2066843069, nr_sectors = 1 limit=128 [ 162.059969][ T5697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.157872][ T5677] Buffer I/O error on dev loop1, logical block 2066843069, lost async page write [ 162.581818][ T29] audit: type=1400 audit(1719385972.490:309): avc: denied { unmount } for pid=5088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysv_t tclass=filesystem permissive=1 [ 162.687936][ T5088] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 162.872045][ T5716] syz.2.176[5716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.872294][ T5716] syz.2.176[5716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.992078][ T29] audit: type=1400 audit(1719385972.900:310): avc: denied { mount } for pid=5706 comm="syz.2.176" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 163.210060][ T5719] loop0: detected capacity change from 0 to 2048 [ 163.439934][ T5719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.528381][ T5719] ext4 filesystem being mounted at /root/syzkaller.IXFRxJ/39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.801329][ T29] audit: type=1400 audit(1719385973.710:311): avc: denied { execute } for pid=5725 comm="syz.2.182" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=2364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 164.159809][ T5086] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.548659][ T5729] loop2: detected capacity change from 0 to 1024 [ 164.821642][ T5715] loop4: detected capacity change from 0 to 32768 [ 164.860397][ T5715] XFS: noikeep mount option is deprecated. [ 165.136123][ T5715] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 165.343319][ T5751] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 165.967576][ T5715] XFS (loop4): Ending clean mount [ 166.233641][ T5715] XFS (loop4): Quotacheck needed: Please wait. [ 166.248936][ T5758] loop1: detected capacity change from 0 to 128 [ 166.295987][ T5758] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 166.382753][ T5758] sysv_free_block: trying to free block not in datazone [ 166.508430][ T5715] XFS (loop4): Quotacheck: Done. [ 166.678485][ T5089] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 166.746889][ T29] audit: type=1400 audit(1719385976.640:312): avc: denied { ioctl } for pid=5766 comm="syz.3.192" path="socket:[9485]" dev="sockfs" ino=9485 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 167.108048][ T5770] syz.1.190: attempt to access beyond end of device [ 167.108048][ T5770] loop1: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 167.257965][ T5770] Buffer I/O error on dev loop1, logical block 209285, lost async page write [ 167.336858][ T5770] syz.1.190: attempt to access beyond end of device [ 167.336858][ T5770] loop1: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 167.418118][ T5770] Buffer I/O error on dev loop1, logical block 13466417, lost async page write [ 167.532774][ T5770] syz.1.190: attempt to access beyond end of device [ 167.532774][ T5770] loop1: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 167.613578][ T5770] Buffer I/O error on dev loop1, logical block 8768635, lost async page write [ 167.669097][ T5770] syz.1.190: attempt to access beyond end of device [ 167.669097][ T5770] loop1: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 167.721489][ T5770] Buffer I/O error on dev loop1, logical block 3211264, lost async page write [ 167.777852][ T5770] syz.1.190: attempt to access beyond end of device [ 167.777852][ T5770] loop1: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 167.827994][ T5770] Buffer I/O error on dev loop1, logical block 13269809, lost async page write [ 167.879974][ T5770] syz.1.190: attempt to access beyond end of device [ 167.879974][ T5770] loop1: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 167.946460][ T5770] Buffer I/O error on dev loop1, logical block 8767744, lost async page write [ 167.989091][ T5770] syz.1.190: attempt to access beyond end of device [ 167.989091][ T5770] loop1: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 168.064492][ T5770] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write [ 168.207982][ T5770] syz.1.190: attempt to access beyond end of device [ 168.207982][ T5770] loop1: rw=2049, sector=2066843069, nr_sectors = 1 limit=128 [ 168.271338][ T5782] syz.3.198 (pid 5782) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 168.277800][ T5770] Buffer I/O error on dev loop1, logical block 2066843069, lost async page write [ 168.409263][ T29] audit: type=1400 audit(1719385978.320:313): avc: denied { bind } for pid=5791 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.431000][ T5088] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 169.111905][ T29] audit: type=1400 audit(1719385979.010:314): avc: denied { map } for pid=5803 comm="syz.3.203" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 169.358095][ T29] audit: type=1326 audit(1719385979.260:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5807 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d8b75ae9 code=0x7fc00000 [ 169.482619][ T29] audit: type=1400 audit(1719385979.270:316): avc: denied { create } for pid=5807 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.554265][ T29] audit: type=1400 audit(1719385979.270:317): avc: denied { bind } for pid=5807 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.589019][ T29] audit: type=1400 audit(1719385979.300:318): avc: denied { connect } for pid=5807 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.647416][ T29] audit: type=1326 audit(1719385979.350:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5807 comm="syz.4.205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d8b75ae9 code=0x7fc00000 [ 169.747130][ T29] audit: type=1400 audit(1719385979.370:320): avc: denied { ioctl } for pid=5812 comm="syz.1.207" path="socket:[9684]" dev="sockfs" ino=9684 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.787328][ T29] audit: type=1400 audit(1719385979.600:321): avc: denied { create } for pid=5807 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.846682][ T29] audit: type=1400 audit(1719385979.600:322): avc: denied { bind } for pid=5807 comm="syz.4.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.342576][ T5814] [U]  [ 171.353056][ T5810] sctp: failed to load transform for md5: -2 [ 172.806118][ T5842] syz.3.212[5842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.806370][ T5842] syz.3.212[5842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.348466][ T5855] loop0: detected capacity change from 0 to 1024 [ 173.800412][ T62] hfsplus: b-tree write err: -5, ino 4 [ 173.899999][ T5863] loop4: detected capacity change from 0 to 128 [ 173.924806][ T5863] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 174.019845][ T5863] sysv_free_block: trying to free block not in datazone [ 175.270334][ T5866] [U]  [ 175.607444][ T5874] loop3: detected capacity change from 0 to 8192 [ 175.856418][ T5883] syz.4.221: attempt to access beyond end of device [ 175.856418][ T5883] loop4: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 175.939793][ T5883] Buffer I/O error on dev loop4, logical block 209285, lost async page write [ 175.995602][ T5883] syz.4.221: attempt to access beyond end of device [ 175.995602][ T5883] loop4: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 176.047172][ T5873] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 176.068005][ T5883] Buffer I/O error on dev loop4, logical block 13466417, lost async page write [ 176.092348][ T5873] FAT-fs (loop3): Filesystem has been set read-only [ 176.118229][ T5883] syz.4.221: attempt to access beyond end of device [ 176.118229][ T5883] loop4: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 176.147367][ T5874] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 176.179217][ T5883] Buffer I/O error on dev loop4, logical block 8768635, lost async page write [ 176.209906][ T5883] syz.4.221: attempt to access beyond end of device [ 176.209906][ T5883] loop4: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 176.212281][ T5889] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 176.287629][ T5883] Buffer I/O error on dev loop4, logical block 3211264, lost async page write [ 176.301772][ T5873] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 176.321668][ T5883] syz.4.221: attempt to access beyond end of device [ 176.321668][ T5883] loop4: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 176.406175][ T5883] Buffer I/O error on dev loop4, logical block 13269809, lost async page write [ 176.433143][ T5883] syz.4.221: attempt to access beyond end of device [ 176.433143][ T5883] loop4: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 176.471742][ T5883] Buffer I/O error on dev loop4, logical block 8767744, lost async page write [ 176.491543][ T5883] syz.4.221: attempt to access beyond end of device [ 176.491543][ T5883] loop4: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 176.519373][ T5883] Buffer I/O error on dev loop4, logical block 2066843070, lost async page write [ 176.547054][ T5883] syz.4.221: attempt to access beyond end of device [ 176.547054][ T5883] loop4: rw=2049, sector=2066843069, nr_sectors = 1 limit=128 [ 176.588592][ T5883] Buffer I/O error on dev loop4, logical block 2066843069, lost async page write [ 176.923911][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 176.923936][ T29] audit: type=1400 audit(1719385986.830:333): avc: denied { read write } for pid=5893 comm="syz.3.229" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.954502][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.972279][ T29] audit: type=1400 audit(1719385986.830:334): avc: denied { open } for pid=5893 comm="syz.3.229" path="/dev/raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.058109][ T29] audit: type=1400 audit(1719385986.890:335): avc: denied { ioctl } for pid=5893 comm="syz.3.229" path="/dev/raw-gadget" dev="devtmpfs" ino=733 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.084072][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.270820][ T5170] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 177.517906][ T5170] usb 4-1: Using ep0 maxpacket: 16 [ 177.536594][ T5170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 177.558683][ T5899] loop0: detected capacity change from 0 to 1024 [ 177.589795][ T5170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 177.621915][ T5170] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 177.645425][ T5170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.729294][ T5170] usb 4-1: config 0 descriptor?? [ 178.086765][ T12] hfsplus: b-tree write err: -5, ino 4 [ 178.494503][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 179.386619][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.403693][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.413946][ T5089] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 179.423716][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.449771][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.460753][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.471518][ T5170] hid (null): bogus close delimiter [ 179.471954][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.489249][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 179.555071][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.589010][ T29] audit: type=1400 audit(1719385989.500:336): avc: denied { mounton } for pid=5906 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 179.638614][ T5170] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 179.687254][ T5170] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 179.726335][ T5170] hid-generic 0003:0158:0100.0002: bogus close delimiter [ 179.756895][ T5170] hid-generic 0003:0158:0100.0002: item 0 0 2 10 parsing failed [ 179.795290][ T5170] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 179.878534][ T5170] usb 4-1: USB disconnect, device number 4 [ 180.303844][ T5922] loop1: detected capacity change from 0 to 256 [ 180.571054][ T5922] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 181.247080][ T5906] chnl_net:caif_netlink_parms(): no params data found [ 181.618563][ T4477] Bluetooth: hci5: command tx timeout [ 182.085170][ T5906] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.098465][ T5906] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.112771][ T5906] bridge_slave_0: entered allmulticast mode [ 182.122276][ T5906] bridge_slave_0: entered promiscuous mode [ 182.134123][ T5906] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.168409][ T5906] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.191526][ T5906] bridge_slave_1: entered allmulticast mode [ 182.210813][ T5906] bridge_slave_1: entered promiscuous mode [ 182.433869][ T5906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.485693][ T5906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.766441][ T5906] team0: Port device team_slave_0 added [ 182.803120][ T5906] team0: Port device team_slave_1 added [ 182.907078][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.915008][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.942610][ T5906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.960401][ T5906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.967418][ T5906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.000492][ T5906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.072495][ T5906] hsr_slave_0: entered promiscuous mode [ 183.080431][ T5906] hsr_slave_1: entered promiscuous mode [ 183.087368][ T5906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.098729][ T5906] Cannot create hsr debugfs directory [ 183.339397][ T5906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.457646][ T5906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.551043][ T5906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.698467][ T4477] Bluetooth: hci5: command tx timeout [ 183.702618][ T5906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.762737][ T5958] 9pnet_fd: Insufficient options for proto=fd [ 183.771148][ T29] audit: type=1400 audit(1719385993.680:337): avc: denied { create } for pid=5956 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.782995][ T5955] loop4: detected capacity change from 0 to 512 [ 183.825920][ T29] audit: type=1400 audit(1719385993.710:338): avc: denied { write } for pid=5956 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 184.607335][ T5955] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 184.642162][ T5955] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 184.678263][ T5955] EXT4-fs error (device loop4): ext4_acquire_dquot:6858: comm syz.4.248: Failed to acquire dquot type 1 [ 184.752383][ T5955] EXT4-fs (loop4): 1 truncate cleaned up [ 184.761408][ T5955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.774296][ T5955] ext4 filesystem being mounted at /root/syzkaller.rcHkvu/56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.795183][ T29] audit: type=1400 audit(1719385994.700:339): avc: denied { setattr } for pid=5953 comm="syz.4.248" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.827543][ T5955] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 184.898401][ T5955] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 184.928821][ T5955] EXT4-fs error (device loop4): ext4_acquire_dquot:6858: comm syz.4.248: Failed to acquire dquot type 1 [ 184.996897][ T5971] loop0: detected capacity change from 0 to 128 [ 185.024234][ T29] audit: type=1400 audit(1719385994.930:340): avc: denied { read } for pid=5966 comm="syz.3.249" path="socket:[9083]" dev="sockfs" ino=9083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.071984][ T5089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.080109][ T5971] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 185.126173][ T5971] sysv_free_block: trying to free block not in datazone [ 185.305876][ T5906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.515900][ T5906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.679517][ T5906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.780549][ T4477] Bluetooth: hci5: command tx timeout [ 186.596517][ T5906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.648688][ T931] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 186.817580][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 186.851704][ T5984] syz.0.250: attempt to access beyond end of device [ 186.851704][ T5984] loop0: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 186.899545][ T931] usb 4-1: Using ep0 maxpacket: 16 [ 186.907849][ T931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 186.920874][ T5984] Buffer I/O error on dev loop0, logical block 209285, lost async page write [ 186.938075][ T931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 186.965167][ T5984] syz.0.250: attempt to access beyond end of device [ 186.965167][ T5984] loop0: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 186.967582][ T931] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 186.998044][ T5984] Buffer I/O error on dev loop0, logical block 13466417, lost async page write [ 187.026856][ T5984] syz.0.250: attempt to access beyond end of device [ 187.026856][ T5984] loop0: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 187.036246][ T931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.094396][ T931] usb 4-1: config 0 descriptor?? [ 187.145040][ T5984] Buffer I/O error on dev loop0, logical block 8768635, lost async page write [ 187.170110][ T5984] syz.0.250: attempt to access beyond end of device [ 187.170110][ T5984] loop0: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 187.214610][ T5984] Buffer I/O error on dev loop0, logical block 3211264, lost async page write [ 187.221020][ T5983] dummy0: entered promiscuous mode [ 187.233112][ T5984] syz.0.250: attempt to access beyond end of device [ 187.233112][ T5984] loop0: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 187.301700][ T5984] Buffer I/O error on dev loop0, logical block 13269809, lost async page write [ 187.342171][ T5984] syz.0.250: attempt to access beyond end of device [ 187.342171][ T5984] loop0: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 187.470970][ T5984] Buffer I/O error on dev loop0, logical block 8767744, lost async page write [ 187.563132][ T5906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.570712][ T5984] syz.0.250: attempt to access beyond end of device [ 187.570712][ T5984] loop0: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 187.648106][ T5984] Buffer I/O error on dev loop0, logical block 2066843070, lost async page write [ 187.676464][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 187.697293][ T5984] syz.0.250: attempt to access beyond end of device [ 187.697293][ T5984] loop0: rw=2049, sector=2066843069, nr_sectors = 1 limit=128 [ 187.714910][ T5906] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.761807][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.765837][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.778425][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.798363][ T5984] Buffer I/O error on dev loop0, logical block 2066843069, lost async page write [ 187.818005][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.858472][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.865853][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.876032][ T4477] Bluetooth: hci5: command tx timeout [ 188.014780][ T931] hid (null): bogus close delimiter [ 188.081394][ T931] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 188.120792][ T931] hid-generic 0003:0158:0100.0003: unknown main item tag 0x0 [ 188.138825][ T931] hid-generic 0003:0158:0100.0003: bogus close delimiter [ 188.153735][ T931] hid-generic 0003:0158:0100.0003: item 0 0 2 10 parsing failed [ 188.171934][ T931] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 188.263891][ T931] usb 4-1: USB disconnect, device number 5 [ 188.842291][ T6002] trusted_key: encrypted_key: insufficient parameters specified [ 189.092664][ T5906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.264184][ T6003] loop1: detected capacity change from 0 to 2048 [ 189.603507][ T5906] veth0_vlan: entered promiscuous mode [ 189.670598][ T6003] loop1: p3 < > p4 < > [ 189.695858][ T6003] loop1: partition table partially beyond EOD, truncated [ 189.709040][ T6003] loop1: p3 start 4284289 is beyond EOD, truncated [ 189.731609][ T5906] veth1_vlan: entered promiscuous mode [ 189.922953][ T5906] veth0_macvtap: entered promiscuous mode [ 189.973906][ T5906] veth1_macvtap: entered promiscuous mode [ 190.153332][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.208232][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.249968][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.295424][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.329588][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.374566][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.406427][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.440167][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.505408][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.531726][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.589820][ T5086] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 190.599454][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.646235][ T6015] netlink: 44 bytes leftover after parsing attributes in process `syz.4.263'. [ 190.662632][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.687912][ T6015] netlink: 47 bytes leftover after parsing attributes in process `syz.4.263'. [ 190.705762][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.708635][ T6015] netlink: 'syz.4.263': attribute type 5 has an invalid length. [ 190.724475][ T29] audit: type=1400 audit(1719386000.630:341): avc: denied { setopt } for pid=6012 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.746399][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.790514][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.841084][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.871323][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.914073][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.944124][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.978869][ T5906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.002347][ T5906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.035668][ T5906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.102551][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 191.191211][ T6018] dummy0: entered promiscuous mode [ 191.217120][ T5906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.226540][ T5906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.236260][ T5906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.254900][ T5906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.618265][ T5141] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 191.634722][ T6026] loop3: detected capacity change from 0 to 1024 [ 191.666437][ T6026] hfsplus: unable to parse mount options [ 191.766725][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.797419][ T5227] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 191.827127][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.879486][ T5141] usb 5-1: config 0 has no interfaces? [ 191.912737][ T5141] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.950728][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.043970][ T5141] usb 5-1: config 0 descriptor?? [ 192.087864][ T5361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.095760][ T5361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.492374][ T5129] usb 5-1: USB disconnect, device number 2 [ 192.692109][ T5074] IPVS: starting estimator thread 0... [ 192.808258][ T6051] IPVS: using max 15 ests per chain, 36000 per kthread [ 193.063231][ T29] audit: type=1400 audit(1719386002.960:342): avc: denied { name_bind } for pid=6060 comm="syz.0.281" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 193.174150][ T29] audit: type=1400 audit(1719386003.080:343): avc: denied { write } for pid=6061 comm="syz.1.283" name="event0" dev="devtmpfs" ino=834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 194.046233][ T6077] input: syz1 as /devices/virtual/input/input6 [ 194.119582][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 195.121849][ T29] audit: type=1400 audit(1719386005.000:344): avc: denied { read } for pid=4518 comm="acpid" name="js0" dev="devtmpfs" ino=2388 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.238730][ T29] audit: type=1400 audit(1719386005.030:345): avc: denied { open } for pid=4518 comm="acpid" path=2F6465762F696E7075742F6A7330202864656C6574656429 dev="devtmpfs" ino=2388 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 195.370277][ T29] audit: type=1400 audit(1719386005.100:346): avc: denied { create } for pid=6062 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 195.488243][ T29] audit: type=1400 audit(1719386005.180:347): avc: denied { search } for pid=4515 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.644797][ T29] audit: type=1400 audit(1719386005.280:348): avc: denied { write } for pid=6062 comm="syz.3.282" path="socket:[10517]" dev="sockfs" ino=10517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 195.743261][ T29] audit: type=1400 audit(1719386005.310:349): avc: denied { read } for pid=6062 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 195.987217][ T29] audit: type=1400 audit(1719386005.890:350): avc: denied { read } for pid=6095 comm="syz.1.295" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 196.097243][ T29] audit: type=1400 audit(1719386005.930:351): avc: denied { open } for pid=6095 comm="syz.1.295" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 196.367235][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 196.471948][ T6104] dummy0: entered promiscuous mode [ 196.685812][ T6108] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 196.728802][ T6108] netlink: 512 bytes leftover after parsing attributes in process `syz.3.298'. [ 196.810067][ T6108] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 196.862288][ T6108] netlink: 211132 bytes leftover after parsing attributes in process `syz.3.298'. [ 196.887858][ T29] audit: type=1400 audit(1719386006.780:352): avc: denied { mounton } for pid=6111 comm="syz.0.300" path="/root/syzkaller.IXFRxJ/70/file0" dev="sda1" ino=1975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 197.149087][ T6116] loop1: detected capacity change from 0 to 128 [ 197.916128][ T6135] loop3: detected capacity change from 0 to 256 [ 198.020640][ T6094] loop2: detected capacity change from 0 to 32768 [ 198.124610][ T6094] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.292 (6094) [ 198.143690][ T6140] loop0: detected capacity change from 0 to 64 [ 198.185050][ T6135] FAT-fs (loop3): Directory bread(block 64) failed [ 198.202215][ T6135] FAT-fs (loop3): Directory bread(block 65) failed [ 198.210661][ T6135] FAT-fs (loop3): Directory bread(block 66) failed [ 198.230724][ T6135] FAT-fs (loop3): Directory bread(block 67) failed [ 198.268906][ T6135] FAT-fs (loop3): Directory bread(block 68) failed [ 198.290436][ T6135] FAT-fs (loop3): Directory bread(block 69) failed [ 198.319599][ T6094] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 198.330746][ T6135] FAT-fs (loop3): Directory bread(block 70) failed [ 198.330847][ T6135] FAT-fs (loop3): Directory bread(block 71) failed [ 198.330997][ T6135] FAT-fs (loop3): Directory bread(block 72) failed [ 198.372395][ T6135] FAT-fs (loop3): Directory bread(block 73) failed [ 198.408398][ T6094] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 198.441008][ T6094] BTRFS info (device loop2): using free-space-tree [ 198.474311][ T6140] hfs: get root inode failed [ 199.090243][ T6094] BTRFS error (device loop2): open_ctree failed [ 199.191718][ T1038] kworker/u8:6: attempt to access beyond end of device [ 199.191718][ T1038] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 199.532499][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 199.607967][ T6162] netlink: 'syz.2.315': attribute type 12 has an invalid length. [ 199.696344][ T6162] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.709106][ T6162] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.718262][ T6162] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.727097][ T6162] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.727353][ T29] audit: type=1400 audit(1719386009.630:353): avc: denied { write } for pid=4515 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.797108][ T6162] vxlan0: entered promiscuous mode [ 199.840348][ T29] audit: type=1400 audit(1719386009.630:354): avc: denied { remove_name } for pid=4515 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.956211][ T29] audit: type=1400 audit(1719386009.630:355): avc: denied { rename } for pid=4515 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.076325][ T29] audit: type=1400 audit(1719386009.630:356): avc: denied { add_name } for pid=4515 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.119009][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.125554][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.259702][ T29] audit: type=1400 audit(1719386009.630:357): avc: denied { unlink } for pid=4515 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.367124][ T29] audit: type=1400 audit(1719386009.670:358): avc: denied { create } for pid=4515 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 200.777153][ T6180] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 202.157085][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 202.157109][ T29] audit: type=1400 audit(1719386012.060:360): avc: denied { create } for pid=6190 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.224969][ T29] audit: type=1400 audit(1719386012.070:361): avc: denied { connect } for pid=6190 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.288141][ T29] audit: type=1400 audit(1719386012.150:362): avc: denied { write } for pid=6190 comm="syz.2.326" path="socket:[11707]" dev="sockfs" ino=11707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.814652][ T6201] loop0: detected capacity change from 0 to 64 [ 202.828945][ T6203] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.332'. [ 203.073500][ T29] audit: type=1400 audit(1719386012.980:363): avc: denied { remove_name } for pid=6200 comm="syz.0.331" name="file0" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.178142][ T29] audit: type=1400 audit(1719386013.030:364): avc: denied { unlink } for pid=6200 comm="syz.0.331" name="file0" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 203.638749][ T6214] syz.4.334 uses obsolete (PF_INET,SOCK_PACKET) [ 203.925633][ T6189] loop1: detected capacity change from 0 to 32768 [ 203.953823][ T5170] IPVS: starting estimator thread 0... [ 203.960796][ T6189] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.325 (6189) [ 204.007890][ T6218] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 204.089168][ T6189] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 204.101713][ T6220] IPVS: using max 15 ests per chain, 36000 per kthread [ 204.123418][ T6189] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 204.154571][ T6189] BTRFS info (device loop1): using free-space-tree [ 204.541024][ T6195] loop3: detected capacity change from 0 to 32768 [ 204.693345][ T5088] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 204.956896][ T29] audit: type=1400 audit(1719386014.860:365): avc: denied { setattr } for pid=6192 comm="syz.3.328" name="file0" dev="loop3" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.023181][ T6195] find_entry called with index = 0 [ 205.058530][ T29] audit: type=1400 audit(1719386014.930:366): avc: denied { remove_name } for pid=6192 comm="syz.3.328" name="file0" dev="loop3" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.170896][ T6195] read_mapping_page failed! [ 205.203499][ T29] audit: type=1400 audit(1719386014.930:367): avc: denied { unlink } for pid=6192 comm="syz.3.328" name="file0" dev="loop3" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.263050][ T6195] ERROR: (device loop3): txAbort: [ 205.263050][ T6195] [ 205.383830][ T5087] ERROR: (device loop3): diFree: numfree > numinos [ 205.383830][ T5087] [ 205.487619][ T112] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 205.507848][ T112] ------------[ cut here ]------------ [ 205.513986][ T112] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 205.579686][ T112] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 205.586814][ T112] CPU: 1 PID: 112 Comm: jfsCommit Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 205.597725][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 205.608801][ T112] RIP: 0010:txUnlock+0xcb7/0xd10 [ 205.615027][ T112] Code: e9 87 f6 ff ff e8 69 63 83 fe 48 c7 c1 c0 e8 6a 8b ba a3 03 00 00 48 c7 c6 40 e8 6a 8b 48 c7 c7 80 e8 6a 8b e8 8a d3 63 fe 90 <0f> 0b e8 72 20 df fe e9 dd f5 ff ff e8 38 63 83 fe 48 c7 c1 00 e8 [ 205.637553][ T112] RSP: 0018:ffffc90002cdfd48 EFLAGS: 00010286 [ 205.644019][ T112] RAX: 0000000000000037 RBX: ffffc90002852048 RCX: ffffffff816e69b9 [ 205.652649][ T112] RDX: 0000000000000000 RSI: ffffffff816ef706 RDI: 0000000000000005 [ 205.661378][ T112] RBP: ffff8880245cfba0 R08: 0000000000000005 R09: 0000000000000000 [ 205.669491][ T112] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 205.677937][ T112] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 205.686302][ T112] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 205.695296][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.701904][ T112] CR2: 00007fe57fff4b38 CR3: 000000006de54000 CR4: 00000000003506f0 [ 205.710254][ T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.718241][ T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.726337][ T112] Call Trace: [ 205.729987][ T112] [ 205.733608][ T112] ? show_regs+0x8c/0xa0 [ 205.737994][ T112] ? die+0x36/0xa0 [ 205.741772][ T112] ? do_trap+0x232/0x430 [ 205.746583][ T112] ? txUnlock+0xcb7/0xd10 [ 205.750943][ T112] ? txUnlock+0xcb7/0xd10 [ 205.755292][ T112] ? do_error_trap+0xf4/0x230 [ 205.760084][ T112] ? txUnlock+0xcb7/0xd10 [ 205.764807][ T112] ? handle_invalid_op+0x34/0x40 [ 205.769805][ T112] ? txUnlock+0xcb7/0xd10 [ 205.774252][ T112] ? exc_invalid_op+0x2e/0x50 [ 205.779775][ T112] ? asm_exc_invalid_op+0x1a/0x20 [ 205.786324][ T112] ? __wake_up_klogd.part.0+0x99/0xf0 [ 205.791825][ T112] ? vprintk+0x86/0xa0 [ 205.796045][ T112] ? txUnlock+0xcb7/0xd10 [ 205.801821][ T112] ? txUnlock+0xcb6/0xd10 [ 205.806184][ T112] jfs_lazycommit+0x730/0xb20 [ 205.811259][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 205.816821][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 205.822800][ T112] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.828937][ T112] ? __kthread_parkme+0x148/0x220 [ 205.834710][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 205.839989][ T112] kthread+0x2c1/0x3a0 [ 205.844180][ T112] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.849640][ T112] ? __pfx_kthread+0x10/0x10 [ 205.854887][ T112] ret_from_fork+0x45/0x80 [ 205.859371][ T112] ? __pfx_kthread+0x10/0x10 [ 205.864172][ T112] ret_from_fork_asm+0x1a/0x30 [ 205.868995][ T112] [ 205.872037][ T112] Modules linked in: [ 205.896644][ T112] ---[ end trace 0000000000000000 ]--- [ 205.902339][ T112] RIP: 0010:txUnlock+0xcb7/0xd10 [ 205.907419][ T112] Code: e9 87 f6 ff ff e8 69 63 83 fe 48 c7 c1 c0 e8 6a 8b ba a3 03 00 00 48 c7 c6 40 e8 6a 8b 48 c7 c7 80 e8 6a 8b e8 8a d3 63 fe 90 <0f> 0b e8 72 20 df fe e9 dd f5 ff ff e8 38 63 83 fe 48 c7 c1 00 e8 [ 205.940258][ T112] RSP: 0018:ffffc90002cdfd48 EFLAGS: 00010286 [ 205.946672][ T112] RAX: 0000000000000037 RBX: ffffc90002852048 RCX: ffffffff816e69b9 [ 205.956554][ T112] RDX: 0000000000000000 RSI: ffffffff816ef706 RDI: 0000000000000005 [ 205.980378][ T112] RBP: ffff8880245cfba0 R08: 0000000000000005 R09: 0000000000000000 [ 206.030899][ T112] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 206.079723][ T112] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 206.113761][ T112] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 206.142289][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.160147][ T112] CR2: 00007f98d8cd0ab8 CR3: 000000007e2e2000 CR4: 00000000003506f0 [ 206.187384][ T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.208025][ T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.216772][ T112] Kernel panic - not syncing: Fatal exception [ 206.223468][ T112] Kernel Offset: disabled [ 206.229042][ T112] Rebooting in 86400 seconds..