last executing test programs: 10.598687558s ago: executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{r1, 0x2645}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0x40045612, &(0x7f0000000080)) 10.356846375s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x60}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000740)='./bus\x00', 0x0, 0x1100000, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000100)=0x20) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000000c0), 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f00000001c0)={{@host}, 0x6fd706c}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x2f) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r7, 0x2}}, 0x18) socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x0) 8.958040111s ago: executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000), 0x8, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @dev}}}, 0x80) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getpid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) r5 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, r5}, 0xc) getsockopt$inet_pktinfo(r3, 0x84, 0x1d, 0xfffffffffffffffe, &(0x7f0000000000)=0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_LOCK(r7, 0xb) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000816000/0x1000)=nil, 0x1000, 0xf6dbc74ac5239619, 0x12, r0, 0x8000000) r9 = mmap$IORING_OFF_SQES(&(0x7f0000e73000/0x4000)=nil, 0x4000, 0x200000c, 0x4010, r0, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x4a, 0x0, 0x0, 0x100000000, &(0x7f00000000c0)=[r2], 0x1}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r10, &(0x7f0000001400)={0x2020}, 0x2020) 8.075859344s ago: executing program 3: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_id}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000bc0), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004640)={'batadv0\x00'}) 7.652826821s ago: executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006c00)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002640)={0x90}, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0x0) 6.406677144s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d80000001d0081054e81f783db4cb9040a00000000000000e8fc24a10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a006a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 6.327531334s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4df, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0) 6.240471301s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) 6.237065676s ago: executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x0, r1}, 0x78) 6.019015166s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x802c542a, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0), 0x191) close(r3) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000780)='$\x9c\x12\x1fh\xc3U_\x88g\xa2,m$\xcd\xf8\xe6\n\x7fO\xd1\xb6Z\x03\xfe\xe91n\xb6\x7f\x1br\x19y\xea\xb8-\xda69\xa4\xaavx\x06\x9c\x06\xb9\xa6\\\x89\xde\x8fdr\x8d\xf6\x06{\x12\"\xc5S\x05\x90r\xad 5I4\x02\xcd\xac\xa5\xe1\'\\U/\xff\t1RK\x90\xdd\f\x9f\x8bh\xd5Ip\xbf\xb1}m\x13\xc2\xd6C\x95CT2\x93\x04\x19\xf0\x9e\x15\x8eH\xabF\xb2\xc6\x83\xa7\x00\xce\xb4\x99\xed\x930'], 0x0) socket(0x1d, 0x0, 0x6) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xd4e5}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 5.882262223s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x7, 0x209}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r3}, 0x38) 5.012548262s ago: executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$rds(0x15, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, r1}) 4.758446168s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) 3.449496111s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14}, 0x14}, 0xa}, 0x0) 3.175688687s ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x0) 3.103608376s ago: executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/47, 0x2f}}], 0x2, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 3.102451855s ago: executing program 0: syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x14e, &(0x7f0000000e40)="$eJzs2r9Kw0AcB/AfWBE6OjoFKlHQ/Ne66ljcfIPQ5tLgxZREkPYFxElQOAdfQvAJfISMbroI+hKRmKMmUWxRIR2+n+W+8Gvvfr0rN50WR6HFEo1oe3R19LIaR6HSdfb6zGIuFXpEpOQhzbIbnb54mtbTjPRvPtCs9bdi7Gz64vCCBdyzm24JAAAAAAAAAAAAAAAAAAAAAADmpLZlaA9FeM4C7lmlajKeHLuce3HSUHuNUxX5houY4Lf5/jiV+tYrkbqfp0AcxHndrH7/WoaNoeDP9f01TsORkYwnWhC6vud7J7btdM0d09y1jY+5jPqM6p3sidLs3tQpk6b10nuzx3nem8nzb60F4vKsvtrn+SMg/DX0WvhH/S4s0UK0UQozbpXWzHtnUbSXi3Gw4nQe8vtP70d8IIv/u2dyJaqWmvrhAPCz9wAAAP//MKk80A==") mkdir(&(0x7f0000000140)='./file\x00', 0x0) 2.857377245s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_OKEY={0x8}]]}}}]}, 0x40}}, 0x0) 2.795531689s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x1, 0x4}, 0x0, 0x6e6bb7}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x3503, 0x2, 0x2, 0xff, 0x1, 0x0, 0x6c6}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x0) 2.761925168s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) close(r1) 2.666642395s ago: executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.609609151s ago: executing program 2: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000480)=[{0x0, 0x2}, {&(0x7f0000000380)="9c", 0x1}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2.461202547s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000040)={0x11, 0x0, {0x0, 0x0, 0x0, 0x1c, 0x0, 0x7ffd}}) ioctl$RTC_PIE_ON(r2, 0x7004) ioctl$RTC_AIE_OFF(r2, 0x7002) 2.410701583s ago: executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$rds(0x15, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, r1}) 2.391844075s ago: executing program 3: syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000380)={[{@dmask={'dmask', 0x3d, 0x7}}, {@fmask={'fmask', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@allow_utime={'allow_utime', 0x3d, 0x1}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fmask={'fmask', 0x3d, 0x5}}, {}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x1, 0x1508, &(0x7f0000002c80)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2.38737292s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_unlink_enter\x00'}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x19980330}, 0x0) 511.385368ms ago: executing program 4: syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="00faeb753bcb2d35fab29d143370360e7672d00900aa"], 0x1, 0x241, &(0x7f0000000cc0)="$eJzs3c9qE1EUx/HfvRM12lKnf0RwWS24krZuxI0geQhXojYRikMFrWBdiWvxAdz7Ci59AFfiC+jKlQ+QXeTeuTHTOJNJq8lN4vcDCdPOPTPnZG469wRKBOC/dbf17cPNH+5hpESJpNuSldSUGpIu6XLzxcHh/mHWaY86UOIj3MMojzR/jNk76JSFujgfkTvyPzW0XPgdJsS9xN9jJ4Ho/Lu/hJXOhWni9zenntlkvI6dQGSmq65eaiV2HgCAuML934b7/HJYv1srbYXbfpIs0P2/GzuByAr3f99l9Yy77hf9rkG/51s4t9/2u8TTnOus8pl1bIFp6rpKn4s9/3g/69zYe5q1rd7oTlAYtuGf2/nU7avJdrOkNx3h9LUv+RrOuBp2K/Jf/7dnrGc+my/mvkn1Xu3f679Gz7jL5K9UOnSl8vy3q4/oq0zzURVVrvqTXAlnCGqqbJZ3JOrPqFUd/4AgrcvTR60NReXV7dRErZdG7dZEbQxHDWZzdeSkmXfmntnUT31Uq7D+t+7V3tI470w3xo8MM2NkPQ0/Mh0jMXuiMvB33uqRbmnl+dGrJw+zrPOMDTYWdOPTbKQxZxux/0BhGgYXPXYmiMStu0ze/xX6lW3fIrmndMQ6vVd38MIRdyp6gzX/fOFEHdxSdQc3bs919bp0bfwzpiHPBWFa+qoHfP4PAAAAAAAAAAAAAAAAAAAwb6bx7wSxawQAAAAAAAAAAAAAAAAAAAAAYN7N4Pf/KuX7f4Gp+BUAAP//c3R+0A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) 219.496447ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000780)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@debug}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086604, &(0x7f00000001c0)) 96.538321ms ago: executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78, 0x0, r1}, 0x78) 0s ago: executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/47, 0x2f}}], 0x2, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) kernel console output (not intermixed with test programs): tered promiscuous mode [ 311.011144][ T7407] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.019064][ T7407] batman_adv: batadv0: Interface activated: team0 [ 311.025629][ T7407] batman_adv: batadv0: Interface deactivated: team0 [ 311.060270][ T7407] batman_adv: batadv0: Removing interface: team0 [ 311.082765][ T7407] bridge0: port 3(team0) entered blocking state [ 311.106885][ T7407] bridge0: port 3(team0) entered disabled state [ 311.126665][ T29] audit: type=1400 audit(2000000086.300:552): avc: denied { create } for pid=7408 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 311.150627][ T7407] team0: entered allmulticast mode [ 311.174622][ T7407] team_slave_0: entered allmulticast mode [ 311.188357][ T7407] team_slave_1: entered allmulticast mode [ 311.195947][ T7414] delete_channel: no stack [ 311.201923][ T29] audit: type=1400 audit(2000000086.330:553): avc: denied { read } for pid=7410 comm="syz-executor.2" name="rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 311.253494][ T7407] bridge0: port 3(team0) entered blocking state [ 311.260043][ T7407] bridge0: port 3(team0) entered forwarding state [ 311.568916][ T7417] loop4: detected capacity change from 0 to 40427 [ 311.601680][ T7418] loop1: detected capacity change from 0 to 1764 [ 311.620996][ T7417] F2FS-fs (loop4): invalid crc value [ 311.643799][ T7417] F2FS-fs (loop4): Found nat_bits in checkpoint [ 311.704669][ T29] audit: type=1400 audit(2000000086.330:554): avc: denied { open } for pid=7410 comm="syz-executor.2" path="/dev/rtc0" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 311.733145][ T7417] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 312.146446][ T7426] syz-executor.4: attempt to access beyond end of device [ 312.146446][ T7426] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 312.165645][ T7426] syz-executor.4: attempt to access beyond end of device [ 312.165645][ T7426] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 317.108887][ T7426] syz-executor.4: attempt to access beyond end of device [ 317.108887][ T7426] loop4: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 317.156213][ T29] audit: type=1400 audit(2000000086.400:555): avc: denied { ioctl } for pid=7410 comm="syz-executor.2" path="/dev/rtc0" dev="devtmpfs" ino=837 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 317.321928][ T29] audit: type=1800 audit(2000000087.300:556): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="overlay" ino=33 res=0 errno=0 [ 317.518613][ T29] audit: type=1804 audit(2000000087.370:557): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir363126958/syzkaller.bwnEHG/165/file0/bus/file2" dev="overlay" ino=33 res=1 errno=0 [ 317.531249][ T5113] syz-executor.4: attempt to access beyond end of device [ 317.531249][ T5113] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 317.612196][ T7412] delete_channel: no stack [ 317.655880][ T29] audit: type=1800 audit(2000000092.300:558): pid=7426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.4" name="file2" dev="overlay" ino=33 res=0 errno=0 [ 317.668302][ T5113] syz-executor.4: attempt to access beyond end of device [ 317.668302][ T5113] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 317.821246][ T29] audit: type=1400 audit(2000000092.990:559): avc: denied { create } for pid=7432 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 317.914058][ T29] audit: type=1400 audit(2000000093.030:560): avc: denied { listen } for pid=7432 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 317.945120][ T29] audit: type=1400 audit(2000000093.030:561): avc: denied { accept } for pid=7432 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 318.053326][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.121747][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.244734][ T2458] kworker/u8:9: attempt to access beyond end of device [ 318.244734][ T2458] loop4: rw=2049, sector=40960, nr_sectors = 152 limit=40427 [ 318.287337][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.314249][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.363721][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.390241][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.422935][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.458270][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.476440][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.484676][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.523870][ T29] audit: type=1400 audit(2000000093.690:562): avc: denied { listen } for pid=7446 comm="syz-executor.3" laddr=::ac14:14aa lport=58575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 318.525348][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.632738][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.648730][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.668480][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.689833][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.697191][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.704258][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.711438][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.760831][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.771991][ T7453] loop0: detected capacity change from 0 to 1764 [ 318.788167][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 318.863706][ T2458] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 319.216937][ T958] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.358241][ T958] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.499143][ T958] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.599064][ T958] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.864027][ T958] bridge_slave_1: left allmulticast mode [ 319.870055][ T958] bridge_slave_1: left promiscuous mode [ 319.875964][ T958] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.887819][ T958] bridge_slave_0: left allmulticast mode [ 319.893513][ T958] bridge_slave_0: left promiscuous mode [ 319.899667][ T958] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.553878][ T958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.571324][ T958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.583400][ T958] bond0 (unregistering): Released all slaves [ 320.915512][ T958] hsr_slave_0: left promiscuous mode [ 320.922021][ T958] hsr_slave_1: left promiscuous mode [ 320.928681][ T958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.939699][ T958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.949614][ T958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.957223][ T958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.988066][ T958] veth1_macvtap: left promiscuous mode [ 320.993620][ T958] veth0_macvtap: left promiscuous mode [ 321.000317][ T958] veth1_vlan: left promiscuous mode [ 321.005638][ T958] veth0_vlan: left promiscuous mode [ 321.595630][ T958] team0 (unregistering): Port device team_slave_1 removed [ 321.650105][ T958] team0 (unregistering): Port device team_slave_0 removed [ 322.569795][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.581288][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.903324][ T7459] loop3: detected capacity change from 0 to 256 [ 325.753843][ T7466] loop0: detected capacity change from 0 to 1024 [ 325.918635][ T7476] loop1: detected capacity change from 0 to 512 [ 326.014612][ T7476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.039196][ T7466] hfsplus: bad catalog entry type [ 326.122987][ T7476] ext4 filesystem being mounted at /root/syzkaller-testdir2232282821/syzkaller.mVpBk4/41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.223687][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.236169][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.253774][ T29] audit: type=1400 audit(2000000101.420:563): avc: denied { read } for pid=7485 comm="syz-executor.2" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 326.310364][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.389435][ T7483] 9pnet_fd: Insufficient options for proto=fd [ 326.512938][ T6469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.630085][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 326.641480][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 326.650750][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 326.660580][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 326.670405][ T5127] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 326.683651][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 326.976222][ T29] audit: type=1400 audit(2000000102.120:564): avc: denied { module_load } for pid=7493 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 327.116666][ T29] audit: type=1400 audit(2000000102.270:565): avc: denied { create } for pid=7496 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 327.169036][ T7490] loop1: detected capacity change from 0 to 32768 [ 327.179712][ T7490] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7490) [ 327.208611][ T7490] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 327.219926][ T7490] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 327.228706][ T7490] BTRFS info (device loop1): using free-space-tree [ 327.619853][ T7499] syz-executor.3: attempt to access beyond end of device [ 327.619853][ T7499] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 327.635964][ T7499] FAT-fs (loop7): unable to read boot sector [ 327.699176][ T29] audit: type=1400 audit(2000000102.790:566): avc: denied { mounton } for pid=7496 comm="syz-executor.3" path="/root/syzkaller-testdir1538498266/syzkaller.93GwSE/150/file0" dev="sda1" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 327.726701][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.166147][ T29] audit: type=1400 audit(2000000103.330:567): avc: denied { unlink } for pid=5112 comm="syz-executor.3" name="file0" dev="sda1" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 328.845859][ T5127] Bluetooth: hci3: command tx timeout [ 328.934774][ T7487] chnl_net:caif_netlink_parms(): no params data found [ 329.783361][ T5127] Bluetooth: hci4: command 0x0406 tx timeout [ 329.908266][ T6469] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 330.045645][ T7538] loop3: detected capacity change from 0 to 4096 [ 330.164377][ T7538] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 330.203411][ T7538] ntfs3: loop3: Failed to load $Extend (-22). [ 330.220193][ T7538] ntfs3: loop3: Failed to initialize $Extend. [ 330.234668][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.260891][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.289288][ T29] audit: type=1400 audit(2000000105.450:568): avc: denied { map } for pid=7545 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 330.314008][ T7487] bridge_slave_0: entered allmulticast mode [ 330.338227][ T7487] bridge_slave_0: entered promiscuous mode [ 330.364898][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.385912][ T29] audit: type=1400 audit(2000000105.550:569): avc: denied { call } for pid=7545 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 330.411740][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.424952][ T7487] bridge_slave_1: entered allmulticast mode [ 330.448455][ T7487] bridge_slave_1: entered promiscuous mode [ 330.465180][ T29] audit: type=1400 audit(2000000105.550:570): avc: denied { transfer } for pid=7545 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 330.484699][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.569972][ T7487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.579216][ T7549] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 330.643161][ T7549] batman_adv: batadv0: Adding interface: team0 [ 330.655969][ T7549] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.680795][ T29] audit: type=1400 audit(2000000105.850:571): avc: denied { bind } for pid=7551 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 330.700609][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.714202][ T7549] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 330.765389][ T7487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.821841][ T7550] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 330.860960][ T7550] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.889073][ T7550] team0: entered promiscuous mode [ 330.890626][ T4480] Bluetooth: hci3: command tx timeout [ 330.894186][ T7550] team_slave_0: entered promiscuous mode [ 330.916768][ T29] audit: type=1804 audit(2000000106.080:572): pid=7538 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1538498266/syzkaller.93GwSE/152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop3" ino=34 res=1 errno=0 [ 330.919902][ T7550] team_slave_1: entered promiscuous mode [ 330.964670][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.983534][ T7550] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.992138][ T7550] batman_adv: batadv0: Interface activated: team0 [ 330.998700][ T7550] batman_adv: batadv0: Interface deactivated: team0 [ 331.065736][ T7550] batman_adv: batadv0: Removing interface: team0 [ 331.098275][ T7550] bridge0: port 3(team0) entered blocking state [ 331.139372][ T7550] bridge0: port 3(team0) entered disabled state [ 331.166755][ T7550] team0: entered allmulticast mode [ 331.181072][ T7550] team_slave_0: entered allmulticast mode [ 331.201864][ T7550] team_slave_1: entered allmulticast mode [ 331.222607][ T7550] bridge0: port 3(team0) entered blocking state [ 331.229196][ T7550] bridge0: port 3(team0) entered forwarding state [ 331.283693][ T29] audit: type=1800 audit(2000000106.440:573): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 331.298565][ T7567] loop0: detected capacity change from 0 to 16 [ 331.353251][ T7567] erofs: (device loop0): mounted with root inode @ nid 36. [ 331.391821][ T7487] team0: Port device team_slave_0 added [ 331.436883][ T7487] team0: Port device team_slave_1 added [ 331.631757][ T29] audit: type=1400 audit(2000000106.800:574): avc: denied { watch watch_reads } for pid=7562 comm="syz-executor.0" path="/proc/7562/net/unix" dev="proc" ino=4026532898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 331.656986][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.682135][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.695493][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.724723][ T7487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.760123][ T7487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.767463][ T7487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.798329][ T7487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.244698][ T7487] hsr_slave_0: entered promiscuous mode [ 332.251869][ T7487] hsr_slave_1: entered promiscuous mode [ 332.835807][ T7598] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 332.968644][ T4480] Bluetooth: hci3: command tx timeout [ 333.466491][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.476037][ T7605] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.485447][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.495320][ T7605] vlan0: entered allmulticast mode [ 333.500554][ T7605] veth0_vlan: entered allmulticast mode [ 333.987787][ T7606] loop3: detected capacity change from 0 to 4096 [ 333.994788][ T7609] Bluetooth: MGMT ver 1.22 [ 334.051623][ T29] audit: type=1400 audit(2000000109.220:575): avc: denied { setopt } for pid=7608 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 334.633993][ T7615] loop0: detected capacity change from 0 to 1024 [ 334.679366][ T7606] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 334.716991][ T7606] ntfs3: loop3: Failed to load $Extend (-22). [ 334.725982][ T7615] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 334.729250][ T7616] loop1: detected capacity change from 0 to 16 [ 334.742587][ T7606] ntfs3: loop3: Failed to initialize $Extend. [ 334.781032][ T7615] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 334.826335][ T7615] EXT4-fs (loop0): orphan cleanup on readonly fs [ 334.839778][ T7487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.845248][ T7615] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096 [ 334.874888][ T7616] erofs: (device loop1): mounted with root inode @ nid 36. [ 334.917084][ T7487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 334.951498][ T7615] EXT4-fs (loop0): 1 orphan inode deleted [ 334.971365][ T7487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.984801][ T7615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.020047][ T7487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.021781][ T7620] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 335.046499][ T4480] Bluetooth: hci3: command tx timeout [ 336.456850][ T7487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.466909][ T7627] loop1: detected capacity change from 0 to 2048 [ 336.483086][ T5114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.494984][ T7627] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 336.503386][ T7487] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.560544][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.567818][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.610024][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.618323][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.640519][ T29] audit: type=1400 audit(2000000111.810:576): avc: denied { bind } for pid=7628 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 336.660772][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.802661][ T7635] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.461295][ T29] audit: type=1400 audit(2000000112.280:577): avc: denied { setopt } for pid=7636 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 338.515984][ T29] audit: type=1400 audit(2000000113.660:578): avc: denied { read } for pid=7650 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 338.545618][ T7487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.725285][ T7658] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.3'. [ 339.074688][ T29] audit: type=1400 audit(2000000114.240:579): avc: denied { write } for pid=7664 comm="syz-executor.1" path="socket:[16874]" dev="sockfs" ino=16874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 339.102794][ T783] libceph: connect (1)[c::]:6789 error -101 [ 339.114205][ T783] libceph: mon0 (1)[c::]:6789 connect error [ 339.415873][ T5165] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 339.513853][ T29] audit: type=1326 audit(2000000114.670:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa123a7d0a9 code=0x0 [ 339.541076][ T783] libceph: connect (1)[c::]:6789 error -101 [ 339.548901][ T783] libceph: mon0 (1)[c::]:6789 connect error [ 339.700189][ T7680] syz-executor.3: attempt to access beyond end of device [ 339.700189][ T7680] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 339.714212][ T7680] EXT4-fs (nbd3): unable to read superblock [ 340.330182][ T5165] usb 3-1: config 0 has no interfaces? [ 340.413421][ T5165] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 340.453448][ T5165] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 340.472337][ T5165] usb 3-1: Manufacturer: syz [ 340.487588][ T5165] usb 3-1: SerialNumber: syz [ 340.504034][ T5165] usb 3-1: config 0 descriptor?? [ 340.755250][ T5165] libceph: connect (1)[c::]:6789 error -101 [ 340.764978][ T7689] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 340.798444][ T5165] libceph: mon0 (1)[c::]:6789 connect error [ 340.809861][ T7682] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 340.897760][ T7656] ceph: No mds server is up or the cluster is laggy [ 341.139538][ T7487] veth0_vlan: entered promiscuous mode [ 341.233359][ T7487] veth1_vlan: entered promiscuous mode [ 341.333224][ T5191] usb 3-1: USB disconnect, device number 6 [ 341.383580][ T7699] loop1: detected capacity change from 0 to 512 [ 341.390327][ T7487] veth0_macvtap: entered promiscuous mode [ 341.453756][ T7699] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 341.468613][ T7487] veth1_macvtap: entered promiscuous mode [ 341.491487][ T7699] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 341.528259][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.538951][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.552626][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.563402][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.570342][ T7699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.577913][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.605777][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.618984][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.632492][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.645589][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.705353][ T7709] loop3: detected capacity change from 0 to 1024 [ 341.749174][ T7709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.776887][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.790397][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.802517][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.814786][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.824913][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.835771][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.846395][ T7487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.857664][ T29] audit: type=1400 audit(2000000117.020:581): avc: denied { setattr } for pid=7707 comm="syz-executor.3" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 341.891805][ T7487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.918404][ T7709] EXT4-fs error (device loop3): ext4_clear_blocks:881: inode #14: comm syz-executor.3: attempt to clear invalid blocks 1886221359 len 1 [ 341.951927][ T7487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.980240][ T6469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.992880][ T29] audit: type=1400 audit(2000000117.080:582): avc: denied { rename } for pid=7707 comm="syz-executor.3" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 342.092747][ T7487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.123724][ T7487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.142119][ T29] audit: type=1400 audit(2000000117.080:583): avc: denied { unlink } for pid=7707 comm="syz-executor.3" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 342.165865][ T7487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.181588][ T7487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.550873][ T5112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.626301][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.650758][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.848805][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.884122][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.020330][ T29] audit: type=1400 audit(2000000118.190:584): avc: denied { accept } for pid=7727 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.128803][ T29] audit: type=1400 audit(2000000118.300:585): avc: denied { shutdown } for pid=7727 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.166506][ T7728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 343.969380][ T7749] loop4: detected capacity change from 0 to 64 [ 344.047585][ T29] audit: type=1400 audit(2000000119.220:586): avc: denied { connect } for pid=7744 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 344.099074][ T7747] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 344.118979][ T29] audit: type=1400 audit(2000000119.220:587): avc: denied { name_connect } for pid=7744 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 344.193803][ T29] audit: type=1800 audit(2000000119.250:588): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 344.442640][ T29] audit: type=1326 audit(2000000119.610:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba8c7d0a9 code=0x7ffc0000 [ 344.559607][ T29] audit: type=1326 audit(2000000119.650:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f0ba8c7d0a9 code=0x7ffc0000 [ 344.898049][ T7733] loop2: detected capacity change from 0 to 32768 [ 345.009419][ T7733] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 345.144233][ T7783] loop3: detected capacity change from 0 to 256 [ 345.175334][ T7783] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 345.230379][ T7783] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 345.409437][ T7792] loop4: detected capacity change from 0 to 764 [ 345.503596][ T7791] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.512873][ T7795] loop1: detected capacity change from 0 to 512 [ 345.524547][ T7733] XFS (loop2): Ending clean mount [ 345.561803][ T7733] XFS (loop2): Quotacheck needed: Please wait. [ 345.668432][ T7795] loop1: detected capacity change from 0 to 256 [ 345.677787][ T7795] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 345.740755][ T7733] XFS (loop2): Quotacheck: Done. [ 346.103354][ T7795] loop1: detected capacity change from 0 to 1024 [ 347.234952][ T7807] loop4: detected capacity change from 0 to 256 [ 347.243223][ T7807] exfat: Deprecated parameter 'utf8' [ 347.249371][ T7807] exfat: Deprecated parameter 'utf8' [ 347.288140][ T7807] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 347.610412][ T6293] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 347.627624][ T7819] loop1: detected capacity change from 0 to 64 [ 347.699296][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 347.699316][ T29] audit: type=1800 audit(2000000122.860:600): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=21 res=0 errno=0 [ 347.733224][ T7815] loop0: detected capacity change from 0 to 4096 [ 347.772222][ T7815] NILFS (loop0): invalid segment: Checksum error in segment payload [ 347.798021][ T7815] NILFS (loop0): trying rollback from an earlier position [ 347.873295][ T7815] NILFS (loop0): recovery complete [ 347.913854][ T7823] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 347.918680][ T7821] loop4: detected capacity change from 0 to 764 [ 348.072941][ T29] audit: type=1400 audit(2000000123.240:601): avc: denied { ioctl } for pid=7814 comm="syz-executor.0" path="/root/syzkaller-testdir448514041/syzkaller.rguFr1/158/bus/cgroup.controllers" dev="loop0" ino=12 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 349.175597][ T29] audit: type=1400 audit(2000000124.340:602): avc: denied { ioctl } for pid=7826 comm="syz-executor.1" path="socket:[17135]" dev="sockfs" ino=17135 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.206064][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 349.221005][ T7835] loop4: detected capacity change from 0 to 512 [ 349.253806][ T7833] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 349.348419][ T7837] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 349.390463][ T7835] loop4: detected capacity change from 0 to 256 [ 349.399182][ T7835] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 349.729767][ T7835] loop4: detected capacity change from 0 to 1024 [ 349.829366][ T7849] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 349.987994][ T29] audit: type=1400 audit(2000000125.150:603): avc: denied { relabelfrom } for pid=7842 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 350.033113][ T29] audit: type=1400 audit(2000000125.180:604): avc: denied { relabelto } for pid=7842 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 350.053104][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.349235][ T7852] loop3: detected capacity change from 0 to 1024 [ 350.451603][ T7852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.635141][ T7851] EXT4-fs error (device loop3): ext4_clear_blocks:881: inode #14: comm syz-executor.3: attempt to clear invalid blocks 1886221359 len 1 [ 350.705976][ T7870] loop0: detected capacity change from 0 to 128 [ 350.750293][ T7870] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.765827][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.023681][ T7870] ext4 filesystem being mounted at /root/syzkaller-testdir448514041/syzkaller.rguFr1/161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.150934][ T29] audit: type=1400 audit(2000000126.090:605): avc: denied { write } for pid=7871 comm="syz-executor.1" name="task" dev="proc" ino=17203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 351.655852][ T29] audit: type=1400 audit(2000000126.090:606): avc: denied { add_name } for pid=7871 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 351.736629][ T5112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.785837][ T29] audit: type=1400 audit(2000000126.090:607): avc: denied { create } for pid=7871 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 351.815692][ T29] audit: type=1400 audit(2000000126.100:608): avc: denied { associate } for pid=7871 comm="syz-executor.1" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 351.836758][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.843311][ T29] audit: type=1400 audit(2000000126.140:609): avc: denied { map } for pid=7871 comm="syz-executor.1" path="socket:[17205]" dev="sockfs" ino=17205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 351.870994][ T5114] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.955041][ T7888] loop4: detected capacity change from 0 to 1764 [ 352.086262][ T7890] loop2: detected capacity change from 0 to 4096 [ 352.134810][ T7890] NILFS (loop2): invalid segment: Checksum error in segment payload [ 352.165978][ T7890] NILFS (loop2): trying rollback from an earlier position [ 352.257122][ T7890] NILFS (loop2): recovery complete [ 352.265702][ T7899] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.507920][ T7902] ufs: You didn't specify the type of your ufs filesystem [ 352.507920][ T7902] [ 352.507920][ T7902] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 352.507920][ T7902] [ 352.507920][ T7902] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 352.539222][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.547823][ T7902] ufs: ufstype=old is supported read-only [ 352.557261][ T7902] syz-executor.3: attempt to access beyond end of device [ 352.557261][ T7902] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 353.371151][ T7910] loop0: detected capacity change from 0 to 2048 [ 353.468670][ T7910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.667521][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.693108][ T5114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.038144][ T7924] loop2: detected capacity change from 0 to 1024 [ 355.055380][ T7929] loop3: detected capacity change from 0 to 2048 [ 355.091580][ T7929] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 355.118694][ T7929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.413378][ T29] audit: type=1400 audit(2000000130.580:610): avc: denied { write } for pid=7919 comm="syz-executor.2" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 355.542993][ T29] audit: type=1400 audit(2000000130.710:611): avc: denied { nlmsg_write } for pid=7937 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 355.772478][ T7946] ufs: You didn't specify the type of your ufs filesystem [ 355.772478][ T7946] [ 355.772478][ T7946] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 355.772478][ T7946] [ 355.772478][ T7946] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 355.805062][ T7946] ufs: ufstype=old is supported read-only [ 355.814077][ T7946] syz-executor.3: attempt to access beyond end of device [ 355.814077][ T7946] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 355.853267][ T7947] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 356.814936][ T2439] hfsplus: b-tree write err: -5, ino 4 [ 357.009674][ T7955] loop4: detected capacity change from 0 to 512 [ 357.492751][ T29] audit: type=1400 audit(2000000132.660:612): avc: denied { create } for pid=7973 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 357.800247][ T7982] loop4: detected capacity change from 0 to 2048 [ 357.918605][ T7982] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 358.139821][ T7982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.373954][ T29] audit: type=1804 audit(2000000134.370:613): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir70119588/syzkaller.I9TAMB/22/file0/bus" dev="loop4" ino=1367 res=1 errno=0 [ 360.009844][ T29] audit: type=1400 audit(2000000135.170:614): avc: denied { getopt } for pid=8002 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 360.095133][ T8006] loop1: detected capacity change from 0 to 2048 [ 360.181282][ T8006] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 360.207339][ T8006] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.567745][ T7985] loop0: detected capacity change from 0 to 32768 [ 360.595420][ T7985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7985) [ 360.616258][ T29] audit: type=1400 audit(2000000135.790:615): avc: denied { read } for pid=8012 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 360.763500][ T8025] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 362.584162][ T8032] loop1: detected capacity change from 0 to 2048 [ 362.615974][ T8035] loop3: detected capacity change from 0 to 2048 [ 362.644985][ T8032] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 362.655392][ T8039] loop4: detected capacity change from 0 to 1764 [ 362.705772][ T8035] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 362.839246][ T8035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.945987][ T8042] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.958637][ T8032] syz-executor.1: attempt to access beyond end of device [ 362.958637][ T8032] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 363.891131][ T29] audit: type=1804 audit(2000000138.990:616): pid=8035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1538498266/syzkaller.93GwSE/186/file0/bus" dev="loop3" ino=1367 res=1 errno=0 [ 364.461783][ T8051] loop2: detected capacity change from 0 to 47 [ 364.664902][ T8058] loop1: detected capacity change from 0 to 64 [ 364.699854][ T29] audit: type=1400 audit(2000000139.870:617): avc: denied { execute } for pid=8050 comm="syz-executor.2" path="/root/syzkaller-testdir3262183610/syzkaller.sE2ieP/96/file1/bus" dev="loop2" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 364.740787][ T8059] loop0: detected capacity change from 0 to 2048 [ 364.814179][ T8061] loop3: detected capacity change from 0 to 4096 [ 364.898121][ T8059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.173577][ T8062] syz-executor.2: attempt to access beyond end of device [ 365.173577][ T8062] loop2: rw=1, sector=48, nr_sectors = 2 limit=47 [ 365.190938][ T8062] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 365.311538][ T29] audit: type=1400 audit(2000000140.460:618): avc: denied { link } for pid=8060 comm="syz-executor.3" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 365.387461][ T8062] syz-executor.2: attempt to access beyond end of device [ 365.387461][ T8062] loop2: rw=1, sector=50, nr_sectors = 2 limit=47 [ 365.511465][ T29] audit: type=1400 audit(2000000140.680:619): avc: denied { remove_name } for pid=8060 comm="syz-executor.3" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 365.637416][ T783] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 366.081675][ T29] audit: type=1400 audit(2000000140.680:620): avc: denied { rename } for pid=8060 comm="syz-executor.3" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 366.183093][ T8062] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 366.394142][ T5114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.795215][ T783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.810227][ T783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.830759][ T783] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 366.835153][ T29] audit: type=1400 audit(2000000142.000:621): avc: denied { bind } for pid=8078 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 366.883232][ T8077] loop1: detected capacity change from 0 to 2048 [ 366.895459][ T783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.928148][ T8077] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 366.950389][ T29] audit: type=1400 audit(2000000142.000:622): avc: denied { name_bind } for pid=8078 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 366.952872][ T783] usb 5-1: config 0 descriptor?? [ 366.990495][ T8077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.019876][ T29] audit: type=1400 audit(2000000142.000:623): avc: denied { node_bind } for pid=8078 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 367.082184][ T29] audit: type=1400 audit(2000000142.040:624): avc: denied { listen } for pid=8078 comm="syz-executor.2" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 367.384166][ T29] audit: type=1400 audit(2000000142.080:625): avc: denied { shutdown } for pid=8078 comm="syz-executor.2" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 368.861353][ T29] audit: type=1804 audit(2000000142.930:626): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2232282821/syzkaller.mVpBk4/87/file0/bus" dev="loop1" ino=1367 res=1 errno=0 [ 369.451162][ T783] usbhid 5-1:0.0: can't add hid device: -71 [ 369.476045][ T783] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 369.541979][ T783] usb 5-1: USB disconnect, device number 2 [ 369.743637][ T8099] loop1: detected capacity change from 0 to 512 [ 369.795736][ T8102] loop4: detected capacity change from 0 to 2048 [ 369.847058][ T8106] loop3: detected capacity change from 0 to 4096 [ 369.869277][ T8108] loop0: detected capacity change from 0 to 64 [ 369.902272][ T8102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.932602][ T8099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.956029][ T8099] ext4 filesystem being mounted at /root/syzkaller-testdir2232282821/syzkaller.mVpBk4/88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.206403][ T5075] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 370.423132][ T8113] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 370.592614][ T6469] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.003610][ T7487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.366076][ T4480] Bluetooth: hci0: command 0x0405 tx timeout [ 371.431921][ T8126] loop0: detected capacity change from 0 to 128 [ 371.455421][ T8126] VFS: could not find a valid V7 on loop0. [ 371.650482][ T8129] syz-executor.1: attempt to access beyond end of device [ 371.650482][ T8129] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 371.665518][ T8129] EXT4-fs (nbd1): unable to read superblock [ 372.621441][ T8134] loop2: detected capacity change from 0 to 2048 [ 372.659195][ T8134] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 372.704570][ T8142] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.716086][ T8134] syz-executor.2: attempt to access beyond end of device [ 372.716086][ T8134] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 372.870343][ T29] audit: type=1400 audit(2000000148.050:627): avc: denied { execute } for pid=8144 comm="syz-executor.1" path=2F6D656D66643A9D23202864656C6574656429 dev="hugetlbfs" ino=18685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 373.244687][ T8160] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 375.720305][ T29] audit: type=1400 audit(2000000150.890:628): avc: denied { ioctl } for pid=8189 comm="syz-executor.3" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 375.917797][ T8197] loop1: detected capacity change from 0 to 4096 [ 375.935856][ T8196] delete_channel: no stack [ 376.445785][ T8203] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.532755][ T8205] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 376.965418][ T29] audit: type=1804 audit(2000000152.130:629): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2232282821/syzkaller.mVpBk4/94/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 377.202940][ T29] audit: type=1804 audit(2000000152.370:630): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2232282821/syzkaller.mVpBk4/94/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 377.540638][ T8222] EXT4-fs warning (device sda1): verify_group_input:166: Cannot read last block (281374) [ 378.320923][ T8196] loop2: detected capacity change from 0 to 32768 [ 378.733748][ T8196] delete_channel: no stack [ 378.966704][ T8237] loop3: detected capacity change from 0 to 40427 [ 378.975139][ T8237] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 378.984527][ T8237] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 378.999367][ T8237] F2FS-fs (loop3): invalid crc value [ 379.009628][ T8237] F2FS-fs (loop3): Found nat_bits in checkpoint [ 379.073821][ T8237] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 379.080989][ T8237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 383.509364][ T29] audit: type=1804 audit(2000000158.680:631): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2232282821/syzkaller.mVpBk4/97/file0" dev="sda1" ino=1964 res=1 errno=0 [ 383.515954][ T8250] loop4: detected capacity change from 0 to 256 [ 383.603818][ T8250] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 383.831242][ T29] audit: type=1326 audit(2000000159.000:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ba8c7d0a9 code=0x0 [ 384.017001][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.025143][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.084929][ T29] audit: type=1400 audit(2000000159.250:633): avc: denied { audit_control } for pid=8260 comm="syz-executor.2" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 384.371634][ T8267] loop2: detected capacity change from 0 to 4096 [ 384.395786][ T29] audit: type=1400 audit(2000000159.560:634): avc: denied { read } for pid=8270 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 384.485200][ T8276] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.862574][ T29] audit: type=1804 audit(2000000161.030:635): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3262183610/syzkaller.sE2ieP/108/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 385.927555][ T5127] Bluetooth: hci0: command 0x0405 tx timeout [ 386.001603][ T29] audit: type=1804 audit(2000000161.050:636): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3262183610/syzkaller.sE2ieP/108/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 387.041059][ T8297] loop0: detected capacity change from 0 to 512 [ 387.109951][ T8297] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 387.208316][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.411074][ T8297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=8297 comm=syz-executor.0 [ 387.420384][ T29] audit: type=1804 audit(2000000162.580:637): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3262183610/syzkaller.sE2ieP/109/file0" dev="sda1" ino=1964 res=1 errno=0 [ 387.565165][ T29] audit: type=1400 audit(2000000162.660:638): avc: denied { name_bind } for pid=8294 comm="syz-executor.0" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 387.732575][ T8320] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 387.758420][ T8320] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 387.779554][ T8320] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.906619][ T8322] loop2: detected capacity change from 0 to 1024 [ 388.117563][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.188135][ T29] audit: type=1400 audit(2000000163.350:639): avc: denied { ioctl } for pid=8317 comm="syz-executor.2" path="socket:[19654]" dev="sockfs" ino=19654 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 388.686598][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 389.047985][ T8344] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 389.085464][ T8344] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 389.189511][ T8346] trusted_key: encrypted_key: insufficient parameters specified [ 389.339430][ T8346] team_slave_0: left promiscuous mode [ 389.357641][ T8346] team_slave_0: left allmulticast mode [ 389.419375][ T8349] loop2: detected capacity change from 0 to 47 [ 389.514609][ T8346] team0: Port device team_slave_0 removed [ 389.617508][ T8346] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 389.643414][ T8331] loop1: detected capacity change from 0 to 32768 [ 389.778416][ T8331] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8331) [ 389.839534][ T8326] loop0: detected capacity change from 0 to 40427 [ 389.983348][ T8326] F2FS-fs (loop0): invalid crc value [ 390.033631][ T8331] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 390.130683][ T8331] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 390.150003][ T8351] input: syz1 as /devices/virtual/input/input9 [ 390.227622][ T8326] F2FS-fs (loop0): Found nat_bits in checkpoint [ 390.232101][ T8331] BTRFS info (device loop1): using free-space-tree [ 390.366351][ T29] audit: type=1400 audit(2000000165.540:640): avc: denied { create } for pid=8345 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 390.446519][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 390.678162][ T8366] loop3: detected capacity change from 0 to 256 [ 390.758927][ T8366] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 390.819140][ T8326] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 390.961059][ T5114] syz-executor.0: attempt to access beyond end of device [ 390.961059][ T5114] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 390.988155][ T29] audit: type=1326 audit(2000000166.160:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8362 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62b907d0a9 code=0x0 [ 391.011464][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.032998][ T5114] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 392.341747][ T6469] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 392.921826][ T8395] syz-executor.4 (pid 8395) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 393.297895][ T8395] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 394.206601][ T8413] x_tables: unsorted underflow at hook 4 [ 394.408381][ T8393] loop2: detected capacity change from 0 to 40427 [ 394.421854][ T8393] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 394.431138][ T8393] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 394.443805][ T8393] F2FS-fs (loop2): invalid crc value [ 394.454111][ T8393] F2FS-fs (loop2): Found nat_bits in checkpoint [ 394.544219][ T8393] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 394.551467][ T8393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 395.076235][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.154231][ T8430] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8430 comm=syz-executor.2 [ 395.155396][ T29] audit: type=1400 audit(2000000170.320:642): avc: denied { write } for pid=8422 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 395.239890][ T29] audit: type=1400 audit(2000000170.380:643): avc: denied { read } for pid=8422 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 395.266183][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.321598][ T29] audit: type=1400 audit(2000000170.460:644): avc: denied { create } for pid=8431 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 395.397413][ T8434] UBIFS error (pid: 8434): cannot open "./file0", error -22 [ 395.971880][ T29] audit: type=1400 audit(2000000170.570:645): avc: denied { mounton } for pid=8433 comm="syz-executor.1" path="/root/syzkaller-testdir2232282821/syzkaller.mVpBk4/108/file0" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 396.128429][ T29] audit: type=1400 audit(2000000171.140:646): avc: denied { nlmsg_read } for pid=8433 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 397.672126][ T8451] loop2: detected capacity change from 0 to 512 [ 397.715855][ T8454] loop3: detected capacity change from 0 to 512 [ 397.732726][ T8451] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 397.757247][ T8454] EXT4-fs (loop3): orphan cleanup on readonly fs [ 397.782696][ T8451] EXT4-fs (loop2): orphan cleanup on readonly fs [ 397.809995][ T8451] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 397.832918][ T8454] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz-executor.3: bg 0: block 248: padding at end of block bitmap is not set [ 397.853275][ T8451] EXT4-fs warning (device loop2): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 397.857364][ T8454] Quota error (device loop3): write_blk: dquota write failed [ 397.883877][ T8454] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 397.895795][ T8454] EXT4-fs error (device loop3): ext4_acquire_dquot:6858: comm syz-executor.3: Failed to acquire dquot type 1 [ 397.912281][ T8461] loop0: detected capacity change from 0 to 256 [ 397.926114][ T8451] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 397.933316][ T8451] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #16: comm syz-executor.2: iget: immutable or append flags not allowed on symlinks [ 397.965329][ T8454] EXT4-fs (loop3): 1 truncate cleaned up [ 397.982058][ T8451] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 16 (err -117) [ 398.008374][ T8454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.037905][ T8451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.167356][ T8462] loop1: detected capacity change from 0 to 8 [ 398.167594][ T8451] EXT4-fs error (device loop2): ext4_lookup:1854: inode #16: comm syz-executor.2: iget: immutable or append flags not allowed on symlinks [ 398.350390][ T6293] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.365055][ T8454] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 398.394558][ T8462] SQUASHFS error: lzo decompression failed, data probably corrupt [ 398.426084][ T8462] SQUASHFS error: Failed to read block 0x91: -5 [ 398.433770][ T8462] SQUASHFS error: Unable to read metadata cache entry [8f] [ 398.442256][ T8462] SQUASHFS error: Unable to read inode 0x11f [ 398.501282][ T8454] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 398.550515][ T8467] Quota error (device loop3): do_check_range: Getting block 1536 out of range 0-5 [ 398.754010][ T5112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.608672][ T8500] loop2: detected capacity change from 0 to 256 [ 400.622161][ T8476] loop4: detected capacity change from 0 to 512 [ 400.872560][ T8476] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 400.992136][ T29] audit: type=1400 audit(2000000176.160:647): avc: denied { ioctl } for pid=8505 comm="syz-executor.0" path="socket:[19871]" dev="sockfs" ino=19871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 401.015868][ T8476] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 401.033770][ T8476] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.300143][ T8512] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 401.406008][ T5119] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 401.522990][ T7487] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 401.529296][ T8515] loop2: detected capacity change from 0 to 512 [ 401.575935][ T8515] EXT4-fs (loop2): orphan cleanup on readonly fs [ 401.598760][ T8515] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set [ 401.652887][ T5119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.670581][ T8515] Quota error (device loop2): write_blk: dquota write failed [ 401.695705][ T5119] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.726444][ T8515] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 401.744717][ T5119] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.760087][ T8515] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz-executor.2: Failed to acquire dquot type 1 [ 401.795544][ T5119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.817793][ T5119] usb 2-1: config 0 descriptor?? [ 401.859555][ T8515] EXT4-fs (loop2): 1 truncate cleaned up [ 402.171793][ T8515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 402.355590][ T5119] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 402.404624][ T5119] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 402.488845][ T8515] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 402.518865][ T8515] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 402.736329][ T8515] Quota error (device loop2): do_check_range: Getting block 1536 out of range 0-5 [ 402.777047][ T8535] loop3: detected capacity change from 0 to 1024 [ 402.790414][ T8535] hfsplus: invalid gid specified [ 402.795749][ T8535] hfsplus: unable to parse mount options [ 402.921114][ T6293] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.164001][ T8542] loop2: detected capacity change from 0 to 128 [ 403.226070][ T8544] x_tables: unsorted underflow at hook 4 [ 403.322679][ T8545] loop1: detected capacity change from 0 to 256 [ 403.500960][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.523549][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.536053][ T5119] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 403.635757][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.645128][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.653715][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.662257][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.671204][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.679745][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.689704][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.698523][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.707554][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.717278][ T8551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.900193][ T5119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.922488][ T5119] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 403.944898][ T5119] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.988511][ T5119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.031622][ T8548] loop0: detected capacity change from 0 to 256 [ 404.042587][ T5119] usb 3-1: config 0 descriptor?? [ 404.456252][ T8548] loop0: detected capacity change from 0 to 4096 [ 404.468947][ T8548] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 404.513906][ T5119] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 404.783386][ T5119] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 404.921789][ T5119] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 405.099306][ T8557] loop4: detected capacity change from 0 to 256 [ 405.143968][ T8557] FAT-fs (loop4): Unrecognized mount option "mask=00000000000000000000040" or missing value [ 405.384547][ T930] usb 2-1: USB disconnect, device number 3 [ 405.443271][ T8548] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 405.644880][ T5114] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 405.684527][ T5114] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 405.920869][ T8561] loop4: detected capacity change from 0 to 512 [ 405.957335][ T8561] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 406.190341][ T8561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=8561 comm=syz-executor.4 [ 406.203479][ T29] audit: type=1400 audit(2000000181.360:648): avc: denied { ioctl } for pid=8568 comm="syz-executor.3" path="socket:[19955]" dev="sockfs" ino=19955 ioctlcmd=0x89f4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 406.228331][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.235583][ T8570] loop0: detected capacity change from 0 to 8 [ 406.301449][ T29] audit: type=1400 audit(2000000181.430:649): avc: denied { getopt } for pid=8568 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 406.340520][ T8570] SQUASHFS error: lzo decompression failed, data probably corrupt [ 406.350425][ T8570] SQUASHFS error: Failed to read block 0x28d: -5 [ 406.360905][ T8570] SQUASHFS error: Unable to read metadata cache entry [28b] [ 406.369350][ T8570] SQUASHFS error: Unable to read inode 0x11f [ 406.556586][ T5075] usb 3-1: USB disconnect, device number 8 [ 407.095749][ T29] audit: type=1400 audit(2000000182.160:650): avc: denied { bind } for pid=8575 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.016097][ T29] audit: type=1400 audit(2000000182.170:651): avc: denied { connect } for pid=8575 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 408.109165][ T8581] binder_alloc: 8579: binder_install_single_page failed to insert page at offset 0 with -14 [ 408.369884][ T8591] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.395934][ T8591] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.937754][ T8602] 9pnet_fd: Insufficient options for proto=fd [ 408.958880][ T8602] loop2: detected capacity change from 0 to 16 [ 408.993759][ T8602] erofs: (device loop2): erofs_read_superblock: blkszbits 0 isn't supported [ 410.316004][ T5165] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 410.497157][ T5163] kworker/dying (5163) used greatest stack depth: 20640 bytes left [ 410.689022][ T5165] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.711748][ T5165] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.724873][ T5165] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.740437][ T5165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.772975][ T5165] usb 4-1: config 0 descriptor?? [ 410.932812][ T8609] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 410.974452][ T8610] loop4: detected capacity change from 0 to 64 [ 411.083424][ T8612] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 411.229680][ T8614] loop0: detected capacity change from 0 to 256 [ 411.246951][ T5165] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 411.263304][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.285086][ T5165] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 411.293878][ T8614] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 411.466867][ T29] audit: type=1400 audit(2000000186.630:652): avc: denied { bind } for pid=8619 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 411.522156][ T29] audit: type=1400 audit(2000000186.640:653): avc: denied { connect } for pid=8619 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 411.585915][ T29] audit: type=1326 audit(2000000186.670:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8613 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e8647d0a9 code=0x0 [ 411.656244][ T8624] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.671248][ T8624] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.822979][ T8626] loop4: detected capacity change from 0 to 512 [ 411.855283][ T8626] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 411.874718][ T8626] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 411.895955][ T8626] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.963573][ T8628] loop2: detected capacity change from 0 to 4096 [ 412.016044][ T8628] NILFS (loop2): invalid segment: Checksum error in segment payload [ 412.024276][ T8628] NILFS (loop2): trying rollback from an earlier position [ 412.053387][ T8628] NILFS (loop2): recovery complete [ 412.062837][ T8633] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 412.090108][ T8631] loop3: detected capacity change from 0 to 256 [ 412.194797][ T8631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.217498][ T8631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.332274][ T5162] usb 4-1: USB disconnect, device number 2 [ 412.415849][ T8637] net_ratelimit: 5 callbacks suppressed [ 412.415873][ T8637] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 412.494252][ T7487] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 412.600584][ T29] audit: type=1400 audit(2000000187.770:655): avc: denied { listen } for pid=8639 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 412.713750][ T29] audit: type=1400 audit(2000000187.860:656): avc: denied { accept } for pid=8639 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 413.030776][ T8648] loop1: detected capacity change from 0 to 32768 [ 413.198020][ T8648] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 413.212412][ T8648] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 413.279998][ T8648] bcachefs (loop1): alloc_read... done [ 413.286579][ T8648] bcachefs (loop1): stripes_read... done [ 413.292422][ T8648] bcachefs (loop1): snapshots_read... done [ 413.305693][ T8648] bcachefs (loop1): journal_replay... done [ 413.311579][ T8648] bcachefs (loop1): resume_logged_ops... done [ 413.318039][ T8648] bcachefs (loop1): going read-write [ 413.345531][ T8648] bcachefs (loop1): done starting filesystem [ 414.103821][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 414.115090][ T6469] bcachefs (loop1): shutting down [ 414.143594][ T6469] bcachefs (loop1): going read-only [ 414.215389][ T8665] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8665 comm=syz-executor.3 [ 414.216610][ T6469] bcachefs (loop1): finished waiting for writes to stop [ 414.267500][ T6469] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 414.305176][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 414.334218][ T6469] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 414.366734][ T29] audit: type=1400 audit(2000000189.530:657): avc: denied { bind } for pid=8664 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 414.386222][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.480357][ T6469] bcachefs (loop1): shutdown complete, journal seq 12 [ 414.527996][ T6469] bcachefs (loop1): marking filesystem clean [ 414.825598][ T6469] bcachefs (loop1): shutdown complete [ 415.087242][ T8677] loop3: detected capacity change from 0 to 4096 [ 415.153770][ T8677] NILFS (loop3): invalid segment: Checksum error in segment payload [ 415.203928][ T8677] NILFS (loop3): trying rollback from an earlier position [ 415.336290][ T8677] NILFS (loop3): recovery complete [ 415.360981][ T8682] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 416.018155][ T8686] loop4: detected capacity change from 0 to 40427 [ 416.047820][ T8686] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 416.055680][ T8686] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 416.083286][ T8686] F2FS-fs (loop4): Found nat_bits in checkpoint [ 416.140478][ T8686] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 416.147629][ T8686] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 416.817560][ T29] audit: type=1400 audit(2000000191.980:658): avc: denied { map } for pid=8684 comm="syz-executor.4" path="pipe:[16430]" dev="pipefs" ino=16430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 416.945809][ T8697] input: syz1 as /devices/virtual/input/input12 [ 424.101426][ T8704] loop0: detected capacity change from 0 to 8 [ 424.167131][ T8704] unable to read xattr id index table [ 424.340474][ T8709] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 424.415131][ T8704] loop0: detected capacity change from 0 to 1024 [ 424.443874][ T8704] EXT4-fs: Ignoring removed orlov option [ 424.452236][ T8704] EXT4-fs: Ignoring removed oldalloc option [ 424.459842][ T8704] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 424.576650][ T8704] EXT4-fs error (device loop0): ext4_quota_enable:7034: inode #3: comm syz-executor.0: iget: bad extended attribute block 262144 [ 424.597650][ T8704] EXT4-fs error (device loop0): ext4_quota_enable:7036: comm syz-executor.0: Bad quota inode: 3, type: 0 [ 424.614377][ T8704] EXT4-fs warning (device loop0): ext4_enable_quotas:7074: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 424.632937][ T8704] EXT4-fs (loop0): mount failed [ 424.695811][ T29] audit: type=1400 audit(2000000199.860:659): avc: denied { bind } for pid=8707 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 424.768000][ T29] audit: type=1400 audit(2000000199.940:660): avc: denied { write } for pid=8707 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 425.090232][ T29] audit: type=1400 audit(2000000200.210:661): avc: denied { ioctl } for pid=8707 comm="syz-executor.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 425.976637][ T8718] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 426.415597][ T8727] SELinux: Context @ is not valid (left unmapped). [ 426.430048][ T29] audit: type=1400 audit(2000000201.590:662): avc: denied { relabelto } for pid=8703 comm="syz-executor.0" name="rdma.current" dev="sda1" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 427.012596][ T29] audit: type=1400 audit(2000000202.180:663): avc: denied { unlink } for pid=5114 comm="syz-executor.0" name="rdma.current" dev="sda1" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 427.080033][ T8718] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.086595][ T7487] syz-executor.4: attempt to access beyond end of device [ 427.086595][ T7487] loop4: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 427.089412][ T7487] F2FS-fs (loop4): Issue discard(6144, 6144, 512) failed, ret: -5 [ 427.684044][ T8735] loop2: detected capacity change from 0 to 256 [ 427.711084][ T8735] FAT-fs (loop2): Unrecognized mount option "mask=00000000000000000000040" or missing value [ 428.834453][ T2439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.103444][ T8744] loop2: detected capacity change from 0 to 1024 [ 430.171578][ T8744] hfsplus: failed to load catalog file [ 430.433273][ T5127] Bluetooth: Unexpected continuation frame (len 14) [ 430.436328][ T2439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.558974][ T8755] loop4: detected capacity change from 0 to 64 [ 430.649330][ T29] audit: type=1400 audit(2000000205.820:664): avc: denied { getopt } for pid=8751 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 430.665915][ T8755] hfs: found bad thread record in catalog [ 430.684162][ T2439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.692447][ T8755] hfs: get root inode failed [ 430.859344][ T2439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.904208][ T8752] O3c: renamed from bridge_slave_0 (while UP) [ 431.636226][ T8763] loop4: detected capacity change from 0 to 256 [ 431.644121][ T8763] FAT-fs (loop4): Unrecognized mount option "mask=00000000000000000000040" or missing value [ 431.872435][ T2439] bridge_slave_1: left allmulticast mode [ 431.924857][ T4480] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.939359][ T4480] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.948480][ T2439] bridge_slave_1: left promiscuous mode [ 431.956142][ T4480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.969037][ T4480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.978997][ T4480] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 431.986599][ T4480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 432.061842][ T2439] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.139309][ T2439] bridge_slave_0: left allmulticast mode [ 432.152310][ T2439] bridge_slave_0: left promiscuous mode [ 432.162796][ T8781] loop2: detected capacity change from 0 to 512 [ 432.175595][ T2439] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.186796][ T8781] ext4: Bad value for 'max_batch_time' [ 432.215212][ T8782] loop4: detected capacity change from 0 to 256 [ 432.335010][ T4480] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 432.385096][ T8782] FAT-fs (loop4): Directory bread(block 64) failed [ 432.394954][ T8782] FAT-fs (loop4): Directory bread(block 65) failed [ 432.397231][ T8781] loop2: detected capacity change from 0 to 256 [ 432.417614][ T8782] FAT-fs (loop4): Directory bread(block 66) failed [ 432.441203][ T8781] exfat: Unknown parameter 'discau&' [ 432.450594][ T8782] FAT-fs (loop4): Directory bread(block 67) failed [ 432.472054][ T8782] FAT-fs (loop4): Directory bread(block 68) failed [ 432.498472][ T8782] FAT-fs (loop4): Directory bread(block 69) failed [ 432.511528][ T8782] FAT-fs (loop4): Directory bread(block 70) failed [ 432.531506][ T8782] FAT-fs (loop4): Directory bread(block 71) failed [ 432.539408][ T8782] FAT-fs (loop4): Directory bread(block 72) failed [ 432.546247][ T8782] FAT-fs (loop4): Directory bread(block 73) failed [ 433.259524][ T8796] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000656c) [ 433.732373][ T29] audit: type=1400 audit(2000000208.900:665): avc: denied { map } for pid=8797 comm="syz-executor.2" path="socket:[20363]" dev="sockfs" ino=20363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 434.086185][ T4480] Bluetooth: hci0: command tx timeout [ 434.230834][ T2439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.257711][ T2439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.272440][ T2439] bond0 (unregistering): Released all slaves [ 434.860113][ T29] audit: type=1800 audit(2000000210.030:666): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="/" dev="fuse" ino=1 res=0 errno=0 [ 434.928810][ T8821] loop0: detected capacity change from 0 to 2048 [ 434.950169][ T8824] loop4: detected capacity change from 0 to 512 [ 434.977093][ T8824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 434.998603][ T8821] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.054217][ T8824] EXT4-fs (loop4): 1 truncate cleaned up [ 435.080720][ T8824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.182620][ T8832] loop3: detected capacity change from 0 to 128 [ 435.214506][ T2439] hsr_slave_0: left promiscuous mode [ 435.221448][ T2439] hsr_slave_1: left promiscuous mode [ 435.234412][ T2439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.244051][ T2439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.273386][ T2439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.296864][ T2439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.403185][ T2439] veth1_macvtap: left promiscuous mode [ 435.415259][ T2439] veth0_macvtap: left promiscuous mode [ 435.428689][ T2439] veth1_vlan: left promiscuous mode [ 435.452151][ T2439] veth0_vlan: left allmulticast mode [ 435.471130][ T2439] veth0_vlan: left promiscuous mode [ 436.164540][ T8835] loop0: detected capacity change from 0 to 2048 [ 436.172940][ T4480] Bluetooth: hci0: command tx timeout [ 436.265032][ T8835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.406019][ T4480] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 436.420504][ T4480] Bluetooth: hci4: Injecting HCI hardware error event [ 436.441723][ T5127] Bluetooth: hci4: hardware error 0x00 [ 437.278059][ T2439] team0 (unregistering): Port device team_slave_1 removed [ 437.355114][ T2439] team0 (unregistering): Port device team_slave_0 removed [ 438.103590][ T8824] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 438.104069][ T8834] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 438.136816][ T8834] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 438.263055][ T4480] Bluetooth: hci0: command tx timeout [ 438.316226][ T7487] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.398806][ T5114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.470456][ T8775] chnl_net:caif_netlink_parms(): no params data found [ 438.485876][ T5127] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 438.540176][ T8859] loop4: detected capacity change from 0 to 256 [ 438.588112][ T8859] exfat: Unknown parameter 'MNw!?!FKGK36&ؤYp W|36ڟNyù+N[aB!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!B!8/1' [ 438.798097][ T29] audit: type=1400 audit(2000000213.970:667): avc: denied { mount } for pid=8862 comm="syz-executor.3" name="/" dev="autofs" ino=21017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 438.902672][ T29] audit: type=1400 audit(2000000214.040:668): avc: denied { read } for pid=8862 comm="syz-executor.3" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 439.022129][ T29] audit: type=1400 audit(2000000214.040:669): avc: denied { open } for pid=8862 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 439.108190][ T29] audit: type=1400 audit(2000000214.050:670): avc: denied { ioctl } for pid=8862 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 439.196909][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.248743][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.260653][ T29] audit: type=1400 audit(2000000214.210:671): avc: denied { unmount } for pid=5112 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 439.312284][ T8775] bridge_slave_0: entered allmulticast mode [ 439.385410][ T8775] bridge_slave_0: entered promiscuous mode [ 439.409517][ T8871] loop3: detected capacity change from 0 to 8 [ 439.523528][ T8871] SQUASHFS error: lzo decompression failed, data probably corrupt [ 439.536995][ T8871] SQUASHFS error: Failed to read block 0x28d: -5 [ 439.549741][ T8871] SQUASHFS error: Unable to read metadata cache entry [28b] [ 439.561525][ T8775] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.610999][ T8871] SQUASHFS error: Unable to read inode 0x11f [ 439.617492][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.645365][ T8775] bridge_slave_1: entered allmulticast mode [ 439.688827][ T8775] bridge_slave_1: entered promiscuous mode [ 439.988964][ T29] audit: type=1400 audit(2000000215.160:672): avc: denied { create } for pid=8857 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 440.073891][ T29] audit: type=1400 audit(2000000215.160:673): avc: denied { connect } for pid=8857 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 440.118311][ T29] audit: type=1400 audit(2000000215.220:674): avc: denied { write } for pid=8857 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 440.163025][ T8775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.237962][ T8775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.326802][ T5127] Bluetooth: hci0: command tx timeout [ 440.451536][ T1099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.693373][ T8775] team0: Port device team_slave_0 added [ 440.804994][ T1099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.934637][ T8775] team0: Port device team_slave_1 added [ 440.989337][ T1099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.114338][ T1099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.131098][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.138291][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.164442][ T8775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.178769][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.186249][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.215194][ T8775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.292328][ T8775] hsr_slave_0: entered promiscuous mode [ 441.300923][ T8775] hsr_slave_1: entered promiscuous mode [ 441.308416][ T8775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.317276][ T8775] Cannot create hsr debugfs directory [ 441.462510][ T1099] team0: left allmulticast mode [ 441.468623][ T1099] team_slave_0: left allmulticast mode [ 441.474630][ T1099] team_slave_1: left allmulticast mode [ 441.480418][ T1099] bridge0: port 3(team0) entered disabled state [ 441.489969][ T1099] bridge_slave_1: left allmulticast mode [ 441.496518][ T1099] bridge_slave_1: left promiscuous mode [ 441.502287][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.514819][ T1099] bridge_slave_0: left allmulticast mode [ 441.520987][ T1099] bridge_slave_0: left promiscuous mode [ 441.530081][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.012686][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.025312][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.036880][ T1099] bond0 (unregistering): Released all slaves [ 442.435259][ T1099] hsr_slave_0: left promiscuous mode [ 442.441955][ T1099] hsr_slave_1: left promiscuous mode [ 442.453846][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.461654][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.471559][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.479186][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.504706][ T1099] veth1_macvtap: left promiscuous mode [ 442.510526][ T1099] veth0_macvtap: left promiscuous mode [ 442.516367][ T1099] veth1_vlan: left promiscuous mode [ 442.522000][ T1099] veth0_vlan: left promiscuous mode [ 443.150375][ T1099] team_slave_1 (unregistering): left promiscuous mode [ 443.164032][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 443.220911][ T1099] team_slave_0 (unregistering): left promiscuous mode [ 443.240051][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 443.932488][ T8775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 443.964515][ T8775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 443.977229][ T8775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 443.991547][ T8775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.138325][ T8775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.171525][ T8775] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.186864][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.194056][ T8736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.218771][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.226021][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.508858][ T29] audit: type=1400 audit(2000000219.670:675): avc: denied { read } for pid=8882 comm="syz-executor.2" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 444.582115][ T29] audit: type=1400 audit(2000000219.670:676): avc: denied { open } for pid=8882 comm="syz-executor.2" path="/dev/nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 445.091342][ T8892] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 445.099681][ T8775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.379890][ T8775] veth0_vlan: entered promiscuous mode [ 445.467413][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.473782][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.483732][ T4480] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.494699][ T4480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 445.503240][ T4480] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.513271][ T4480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.524871][ T4480] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 445.533513][ T4480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.592670][ T8775] veth1_vlan: entered promiscuous mode [ 446.533249][ T8904] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 446.573955][ T8775] veth0_macvtap: entered promiscuous mode [ 446.621742][ T8775] veth1_macvtap: entered promiscuous mode [ 446.729009][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.739938][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.751298][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.762120][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.772170][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.782994][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.794791][ T8775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.817101][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.828188][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.850964][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.861610][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.872623][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 446.883235][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.897391][ T8775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.915565][ T8915] loop3: detected capacity change from 0 to 1024 [ 446.951884][ T8775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.968801][ T8775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.983209][ T8775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.000523][ T8775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.120036][ T8915] hfsplus: xattr searching failed [ 447.151782][ T29] audit: type=1800 audit(2000000222.320:677): pid=8915 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 447.296481][ T8923] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 447.303034][ T8923] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 447.317031][ T8923] vhci_hcd vhci_hcd.0: Device attached [ 447.343839][ T8921] hfsplus: xattr searching failed [ 447.396761][ T8923] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 447.403324][ T8923] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 447.411448][ T8928] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8) [ 447.418021][ T8928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 447.447084][ T8923] vhci_hcd vhci_hcd.0: Device attached [ 447.484950][ T8928] vhci_hcd vhci_hcd.0: Device attached [ 447.604958][ T8923] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 447.606326][ T4480] Bluetooth: hci2: command tx timeout [ 447.611574][ T8923] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 447.630652][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.641045][ T8894] chnl_net:caif_netlink_parms(): no params data found [ 447.657116][ T930] usb 18-1: SetAddress Request (2) to port 0 [ 447.663904][ T8923] vhci_hcd vhci_hcd.0: Device attached [ 447.669696][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.695555][ T930] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 447.713570][ T8932] vhci_hcd: connection closed [ 447.717323][ T8929] vhci_hcd: connection closed [ 447.722117][ T8926] vhci_hcd: connection closed [ 447.735884][ T8924] vhci_hcd: connection closed [ 447.747817][ T12] vhci_hcd: stop threads [ 447.774608][ T12] vhci_hcd: release socket [ 447.786454][ T12] vhci_hcd: disconnect device [ 447.801487][ T12] vhci_hcd: stop threads [ 447.801707][ T8925] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 447.826171][ T12] vhci_hcd: release socket [ 447.836436][ T12] vhci_hcd: disconnect device [ 447.846168][ T12] vhci_hcd: stop threads [ 447.850492][ T12] vhci_hcd: release socket [ 447.867480][ T12] vhci_hcd: disconnect device [ 447.872650][ T12] vhci_hcd: stop threads [ 447.887821][ T12] vhci_hcd: release socket [ 447.902773][ T12] vhci_hcd: disconnect device [ 448.100416][ T2439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.165977][ T2439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.321199][ T8894] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.340441][ T8894] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.373731][ T8894] bridge_slave_0: entered allmulticast mode [ 448.382777][ T8894] bridge_slave_0: entered promiscuous mode [ 448.410597][ T8894] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.425851][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.438229][ T8894] bridge_slave_1: entered allmulticast mode [ 448.468400][ T8894] bridge_slave_1: entered promiscuous mode [ 449.688912][ T4480] Bluetooth: hci2: command tx timeout [ 450.010085][ T8894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.069661][ T8894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.414168][ T8955] loop1: detected capacity change from 0 to 8192 [ 450.442106][ T8955] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 450.471515][ T8894] team0: Port device team_slave_0 added [ 450.503308][ T8894] team0: Port device team_slave_1 added [ 450.538196][ T8960] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 450.790361][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.825662][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.935649][ T8894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.016973][ T8894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.046555][ T8894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.124852][ T8962] loop2: detected capacity change from 0 to 40427 [ 451.136564][ T8962] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 451.144334][ T8962] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 451.168130][ T8894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.188161][ T8962] F2FS-fs (loop2): Found nat_bits in checkpoint [ 451.294341][ T8962] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 451.302062][ T8962] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 451.352658][ T29] audit: type=1400 audit(2000000226.520:678): avc: denied { write } for pid=8973 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 451.737912][ T8979] input: syz1 as /devices/virtual/input/input13 [ 451.767908][ T5127] Bluetooth: hci2: command tx timeout [ 451.779575][ T8956] loop4: detected capacity change from 0 to 32768 [ 452.110228][ T8894] hsr_slave_0: entered promiscuous mode [ 452.298349][ T8980] loop1: detected capacity change from 0 to 47 [ 452.648237][ T5127] Bluetooth: hci3: command 0x0406 tx timeout [ 452.666463][ T8956] BTRFS: device /dev/loop4 (7:4) using temp-fsid ecf1ee49-8388-44bb-976b-a8e972016b9e [ 452.681634][ T8956] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8956) [ 452.717744][ T8894] hsr_slave_1: entered promiscuous mode [ 452.745791][ T8894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.754023][ T8956] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 452.797672][ T8894] Cannot create hsr debugfs directory [ 452.807317][ T8956] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 452.808123][ T930] usb 18-1: device descriptor read/8, error -110 [ 452.825760][ T8956] BTRFS info (device loop4): using free-space-tree [ 453.052372][ T5162] vhci_hcd: vhci_device speed not set [ 453.079905][ T6293] syz-executor.2: attempt to access beyond end of device [ 453.079905][ T6293] loop2: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 453.107589][ T6293] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5 [ 453.202428][ T8956] BTRFS error (device loop4): open_ctree failed [ 453.846955][ T4480] Bluetooth: hci2: command tx timeout [ 453.888459][ T9000] loop1: detected capacity change from 0 to 2048 [ 453.941100][ T8976] loop3: detected capacity change from 0 to 32768 [ 453.961525][ T8976] Only 4K block size supported! [ 453.975682][ T8976] Mount JFS Failure: -22 [ 453.981520][ T8976] jfs_mount failed w/return code = -22 [ 454.168187][ T930] usb usb18-port1: attempt power cycle [ 454.447544][ T29] audit: type=1400 audit(2000000229.620:679): avc: denied { write } for pid=9003 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 454.831116][ T8894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.873744][ T930] usb usb18-port1: unable to enumerate USB device [ 454.895250][ T8894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.946993][ T8894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.948554][ T9014] loop4: detected capacity change from 0 to 64 [ 454.976524][ T8894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.980238][ T9016] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 455.342149][ T8894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.670118][ T8894] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.686553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.163963][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.171297][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.376786][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.384086][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.655284][ T8894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.979304][ T9043] loop4: detected capacity change from 0 to 2048 [ 457.052830][ T29] audit: type=1400 audit(2000000232.220:680): avc: denied { read write } for pid=9047 comm="syz-executor.3" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 457.145760][ T29] audit: type=1400 audit(2000000232.220:681): avc: denied { open } for pid=9047 comm="syz-executor.3" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 457.233426][ T29] audit: type=1400 audit(2000000232.220:682): avc: denied { read } for pid=9047 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 457.385880][ T8] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 457.411041][ T9024] loop2: detected capacity change from 0 to 32768 [ 457.435433][ T8894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.507297][ T9024] BTRFS: device /dev/loop2 (7:2) using temp-fsid a867c91f-ede7-44df-a5f7-29d696af9af0 [ 457.541692][ T9024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9024) [ 457.616417][ T9024] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 457.634329][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 457.689804][ T8894] veth0_vlan: entered promiscuous mode [ 457.695797][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 457.709670][ T8894] veth1_vlan: entered promiscuous mode [ 457.711740][ T9024] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 457.739530][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 457.746009][ T9024] BTRFS info (device loop2): using free-space-tree [ 457.794613][ T8894] veth0_macvtap: entered promiscuous mode [ 457.800537][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 457.822236][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.854020][ T8894] veth1_macvtap: entered promiscuous mode [ 457.873519][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 457.884039][ T8] usb 4-1: SerialNumber: syz [ 457.895458][ T9048] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.905933][ T9048] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 457.915000][ T8] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 457.945410][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.955928][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.965998][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.976554][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.994907][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.024130][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.027291][ T9041] loop1: detected capacity change from 0 to 32768 [ 458.034520][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.051225][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.065038][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.091690][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.104574][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.119343][ T9041] Only 4K block size supported! [ 458.119353][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.124199][ T9041] Mount JFS Failure: -22 [ 458.159672][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.190703][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.201640][ T8] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 458.219414][ T9041] jfs_mount failed w/return code = -22 [ 458.231009][ T29] audit: type=1400 audit(2000000233.400:683): avc: denied { ioctl } for pid=9023 comm="syz-executor.2" path="/root/syzkaller-testdir3262183610/syzkaller.sE2ieP/158/file1/file1" dev="loop2" ino=260 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 458.238218][ T8] usb 4-1: USB disconnect, device number 3 [ 458.267355][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.301654][ T8894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.312954][ T8894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.339105][ T8894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.389929][ T6293] BTRFS info (device loop2): last unmount of filesystem a867c91f-ede7-44df-a5f7-29d696af9af0 [ 458.402203][ T8894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.424587][ T8894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.440377][ T8894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.449744][ T8894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.961430][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.021828][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.230958][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.250899][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.134942][ T9083] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 460.143329][ T29] audit: type=1326 audit(2000000235.290:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905dc7d0a9 code=0x7ffc0000 [ 460.175973][ T9083] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 460.234276][ T29] audit: type=1326 audit(2000000235.300:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905dc7d0a9 code=0x7ffc0000 [ 460.323930][ T29] audit: type=1326 audit(2000000235.360:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f905dc7d0a9 code=0x7ffc0000 [ 460.393735][ T29] audit: type=1326 audit(2000000235.370:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905dc7d0a9 code=0x7ffc0000 [ 460.471063][ T29] audit: type=1326 audit(2000000235.370:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905dc7d0a9 code=0x7ffc0000 [ 460.564623][ T9089] loop0: detected capacity change from 0 to 512 [ 460.571400][ T29] audit: type=1326 audit(2000000235.380:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f905dc7d0a9 code=0x7ffc0000 [ 460.676060][ T9089] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 460.734068][ T9089] EXT4-fs (loop0): orphan cleanup on readonly fs [ 460.838093][ T9089] EXT4-fs warning (device loop0): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 460.937861][ T9103] loop1: detected capacity change from 0 to 256 [ 461.390536][ T9089] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 461.609039][ T9103] [U] [ 461.612583][ T9103] [U]  [ 461.616501][ T9103] [U] Wͽ&IJߗOSSSN-/N8̗HHԢIT/šW [ 461.625244][ T9103] [U] XE4>~ƿ-̿NT˦ݭLB&\L5ȿNAEL?ʲӯݢ"?ZE|޵V [ 461.639720][ T9103] [U] [ 461.643744][ T9103] [U] T=MACCROATIAN,IOCHARSET=CP437,USEFREE,RODIR,UID>,+HGW [ 461.651893][ T9103] [U] VXDTG?4ٿGôJM [ 461.658606][ T9103] [U] ֝,őѵª&=ч4_BRT18446744073709551615 [ 461.665656][ T9103] [U] [ 461.668399][ T9103] [U] [ 461.671142][ T9103] [U] [ 461.676359][ T9103] [U] [ 461.679111][ T9103] [U] [ 461.681856][ T9103] [U] [ 461.684591][ T9103] [U] [ 461.752773][ T9089] EXT4-fs error (device loop0): ext4_validate_block_bitmap:440: comm syz-executor.0: bg 0: block 40: padding at end of block bitmap is not set [ 461.995701][ T9089] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 462.143513][ T9101] loop4: detected capacity change from 0 to 2048 [ 462.187912][ T9089] EXT4-fs (loop0): 1 truncate cleaned up [ 463.015581][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 463.053880][ T29] audit: type=1400 audit(2000000237.380:742): avc: denied { map } for pid=9102 comm="syz-executor.1" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 463.087012][ T9089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 463.102987][ T9102] [U] [ 463.252634][ T9115] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz-executor.0: bad symlink. [ 463.253708][ T29] audit: type=1400 audit(2000000238.430:743): avc: denied { read } for pid=9088 comm="syz-executor.0" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 463.369803][ T9089] EXT4-fs error (device loop0): ext4_get_link:106: inode #16: comm syz-executor.0: bad symlink. [ 463.544652][ T9120] batadv0: entered promiscuous mode [ 463.557792][ T8894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.903155][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 464.116116][ T9126] loop4: detected capacity change from 0 to 256 [ 464.542527][ T9133] loop0: detected capacity change from 0 to 2048 [ 464.834440][ T9133] NILFS (loop0): invalid segment: Checksum error in segment payload [ 464.843558][ T9133] NILFS (loop0): trying rollback from an earlier position [ 464.870547][ T9133] NILFS (loop0): recovery complete [ 464.878810][ T9134] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 464.904536][ T29] audit: type=1326 audit(2000000240.070:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9131 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62b907d0a9 code=0x0 [ 464.994577][ T29] audit: type=1800 audit(2000000240.110:745): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=12 res=0 errno=0 [ 465.027036][ T29] audit: type=1800 audit(2000000240.110:746): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=12 res=0 errno=0 [ 465.301954][ T9119] loop1: detected capacity change from 0 to 32768 [ 465.441535][ T9142] random: crng reseeded on system resumption [ 465.751760][ T29] audit: type=1400 audit(2000000240.610:747): avc: denied { append } for pid=9131 comm="syz-executor.3" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 465.785797][ T9119] bcachefs (/dev/loop1): error validating superblock: Invalid option invalid compression opt 15 [ 466.068050][ T9141] loop2: detected capacity change from 0 to 2048 [ 466.118961][ T29] audit: type=1400 audit(2000000240.610:748): avc: denied { open } for pid=9131 comm="syz-executor.3" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 466.202736][ T9141] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 466.285676][ T9141] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 466.349893][ T9141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.719572][ T9157] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 466.748936][ T9157] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 467.503330][ T29] audit: type=1400 audit(2000000242.420:749): avc: denied { getopt } for pid=9156 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 467.821904][ T9169] loop4: detected capacity change from 0 to 256 [ 468.365015][ T9176] loop1: detected capacity change from 0 to 47 [ 468.609051][ T9175] loop2: detected capacity change from 0 to 2048 [ 468.667152][ T9175] udf: Unknown parameter '' [ 468.940353][ T9187] loop0: detected capacity change from 0 to 2048 [ 468.960673][ T9187] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 468.996509][ T9187] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 469.018137][ T9187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.998401][ T9200] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.545310][ T9210] loop0: detected capacity change from 0 to 24 [ 470.770042][ T9219] loop2: detected capacity change from 0 to 512 [ 470.811921][ T9219] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 470.819978][ T29] audit: type=1400 audit(2000000245.980:750): avc: denied { mount } for pid=9216 comm="syz-executor.4" name="/" dev="gadgetfs" ino=22502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 470.866694][ T9219] EXT4-fs (loop2): orphan cleanup on readonly fs [ 470.878030][ T9219] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 470.924776][ T9219] EXT4-fs warning (device loop2): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 470.978420][ T9219] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 470.992891][ T9219] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz-executor.2: bg 0: block 40: padding at end of block bitmap is not set [ 471.024893][ T9219] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 471.152029][ T9219] EXT4-fs (loop2): 1 truncate cleaned up [ 471.901943][ T9219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 473.420235][ T9219] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz-executor.2: bad symlink. [ 473.600625][ T9238] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz-executor.2: bad symlink. [ 473.812508][ T6293] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.023111][ T9245] loop0: detected capacity change from 0 to 24 [ 474.352888][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 474.463668][ T29] audit: type=1326 audit(2000000249.630:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9256 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f905dc7d0a9 code=0x0 [ 475.784820][ T9269] random: crng reseeded on system resumption [ 476.521841][ T9272] loop3: detected capacity change from 0 to 256 [ 476.609084][ T9275] loop4: detected capacity change from 0 to 64 [ 476.758623][ T9272] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 476.804934][ T9262] rtc_cmos 00:00: Alarms can be up to one day in the future [ 476.910015][ T9279] loop1: detected capacity change from 0 to 512 [ 476.919583][ T9279] EXT4-fs: Ignoring removed mblk_io_submit option [ 476.944361][ T9279] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 476.949977][ T9275] [ 476.956544][ T9275] ====================================================== [ 476.963577][ T9275] WARNING: possible circular locking dependency detected [ 476.970682][ T9275] 6.10.0-rc5-syzkaller #0 Not tainted [ 476.976053][ T9275] ------------------------------------------------------ [ 476.983111][ T9275] syz-executor.4/9275 is trying to acquire lock: [ 476.989458][ T9275] ffff8880796d00b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x183/0x220 [ 476.998827][ T9275] [ 476.998827][ T9275] but task is already holding lock: [ 477.006199][ T9275] ffff88806f965578 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xa2/0xb10 [ 477.016920][ T9275] [ 477.016920][ T9275] which lock already depends on the new lock. [ 477.016920][ T9275] [ 477.027411][ T9275] [ 477.027411][ T9275] the existing dependency chain (in reverse order) is: [ 477.036448][ T9275] [ 477.036448][ T9275] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 477.045763][ T9275] __mutex_lock+0x175/0x9c0 [ 477.050816][ T9275] hfs_extend_file+0xa2/0xb10 [ 477.056022][ T9275] hfs_bmap_reserve+0x29c/0x380 [ 477.061427][ T9275] __hfs_ext_write_extent+0x3cf/0x520 [ 477.067328][ T9275] hfs_ext_read_extent+0x809/0x9e0 [ 477.072966][ T9275] hfs_extend_file+0x4e4/0xb10 [ 477.078261][ T9275] hfs_get_block+0x17f/0x830 [ 477.083388][ T9275] __block_write_begin_int+0x4fb/0x16e0 [ 477.089478][ T9275] block_write_begin+0xb1/0x4a0 [ 477.094884][ T9275] cont_write_begin+0x53d/0x740 [ 477.100272][ T9275] hfs_write_begin+0x87/0x150 [ 477.105482][ T9275] cont_write_begin+0x333/0x740 [ 477.110869][ T9275] hfs_write_begin+0x87/0x150 [ 477.116079][ T9275] hfs_file_truncate+0xc11/0xfc0 [ 477.121635][ T9275] hfs_inode_setattr+0x48f/0x5d0 [ 477.127116][ T9275] notify_change+0x742/0x11f0 [ 477.132356][ T9275] do_truncate+0x15c/0x220 [ 477.137316][ T9275] do_ftruncate+0x5e5/0x720 [ 477.142377][ T9275] __x64_sys_ftruncate+0xa9/0x110 [ 477.147944][ T9275] do_syscall_64+0xcd/0x250 [ 477.152988][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.159455][ T9275] [ 477.159455][ T9275] -> #0 (&tree->tree_lock/1){+.+.}-{3:3}: [ 477.167381][ T9275] __lock_acquire+0x2478/0x3b30 [ 477.172777][ T9275] lock_acquire+0x1b1/0x560 [ 477.177836][ T9275] __mutex_lock+0x175/0x9c0 [ 477.182887][ T9275] hfs_find_init+0x183/0x220 [ 477.188032][ T9275] hfs_ext_read_extent+0x19c/0x9e0 [ 477.193673][ T9275] hfs_extend_file+0x4e4/0xb10 [ 477.198976][ T9275] hfs_bmap_reserve+0x29c/0x380 [ 477.204369][ T9275] hfs_cat_create+0x22b/0x810 [ 477.209680][ T9275] hfs_create+0x6b/0xf0 [ 477.214380][ T9275] vfs_create+0x4c2/0x770 [ 477.219248][ T9275] do_mknodat+0x3d5/0x5d0 [ 477.224116][ T9275] __x64_sys_mknodat+0xb1/0xe0 [ 477.229424][ T9275] do_syscall_64+0xcd/0x250 [ 477.234464][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.240908][ T9275] [ 477.240908][ T9275] other info that might help us debug this: [ 477.240908][ T9275] [ 477.251150][ T9275] Possible unsafe locking scenario: [ 477.251150][ T9275] [ 477.258595][ T9275] CPU0 CPU1 [ 477.263958][ T9275] ---- ---- [ 477.269335][ T9275] lock(&HFS_I(tree->inode)->extents_lock); [ 477.275332][ T9275] lock(&tree->tree_lock/1); [ 477.282545][ T9275] lock(&HFS_I(tree->inode)->extents_lock); [ 477.291140][ T9275] lock(&tree->tree_lock/1); [ 477.295837][ T9275] [ 477.295837][ T9275] *** DEADLOCK *** [ 477.295837][ T9275] [ 477.304068][ T9275] 4 locks held by syz-executor.4/9275: [ 477.309531][ T9275] #0: ffff88802a5da420 (sb_writers#20){.+.+}-{0:0}, at: filename_create+0x10d/0x530 [ 477.319060][ T9275] #1: ffff88806f965da8 (&type->i_mutex_dir_key#11/1){+.+.}-{3:3}, at: filename_create+0x1c2/0x530 [ 477.329814][ T9275] #2: ffff88806259c0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfs_find_init+0x1be/0x220 [ 477.339429][ T9275] #3: ffff88806f965578 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xa2/0xb10 [ 477.350592][ T9275] [ 477.350592][ T9275] stack backtrace: [ 477.356487][ T9275] CPU: 0 PID: 9275 Comm: syz-executor.4 Not tainted 6.10.0-rc5-syzkaller #0 [ 477.365172][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 477.375331][ T9275] Call Trace: [ 477.378623][ T9275] [ 477.381577][ T9275] dump_stack_lvl+0x116/0x1f0 [ 477.386296][ T9275] check_noncircular+0x31a/0x400 [ 477.391267][ T9275] ? __pfx_check_noncircular+0x10/0x10 [ 477.396761][ T9275] ? lock_acquire+0x1b1/0x560 [ 477.401471][ T9275] ? lockdep_lock+0xc6/0x200 [ 477.406198][ T9275] ? __pfx_lockdep_lock+0x10/0x10 [ 477.411243][ T9275] ? __pfx_lock_release+0x10/0x10 [ 477.416300][ T9275] __lock_acquire+0x2478/0x3b30 [ 477.421191][ T9275] ? __pfx___lock_acquire+0x10/0x10 [ 477.426445][ T9275] ? hfs_find_init+0x95/0x220 [ 477.431149][ T9275] ? kasan_save_stack+0x42/0x60 [ 477.436030][ T9275] ? kasan_save_stack+0x33/0x60 [ 477.440916][ T9275] ? kasan_save_track+0x14/0x30 [ 477.445793][ T9275] ? __kasan_kmalloc+0xaa/0xb0 [ 477.450588][ T9275] ? __kmalloc_noprof+0x1ec/0x410 [ 477.455624][ T9275] lock_acquire+0x1b1/0x560 [ 477.460162][ T9275] ? hfs_find_init+0x183/0x220 [ 477.464944][ T9275] ? __pfx_lock_acquire+0x10/0x10 [ 477.470001][ T9275] ? __pfx___might_resched+0x10/0x10 [ 477.475390][ T9275] __mutex_lock+0x175/0x9c0 [ 477.479906][ T9275] ? hfs_find_init+0x183/0x220 [ 477.484688][ T9275] ? hfs_find_init+0x183/0x220 [ 477.489485][ T9275] ? __pfx___mutex_lock+0x10/0x10 [ 477.494527][ T9275] ? rcu_is_watching+0x12/0xc0 [ 477.499298][ T9275] ? trace_kmalloc+0x2d/0xe0 [ 477.504174][ T9275] ? __kmalloc_noprof+0x20b/0x410 [ 477.509209][ T9275] ? trace_contention_end+0xea/0x140 [ 477.514505][ T9275] ? hfs_find_init+0x183/0x220 [ 477.519287][ T9275] hfs_find_init+0x183/0x220 [ 477.523893][ T9275] hfs_ext_read_extent+0x19c/0x9e0 [ 477.529020][ T9275] ? __pfx___mutex_lock+0x10/0x10 [ 477.534057][ T9275] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 477.539703][ T9275] ? trace_contention_end+0xea/0x140 [ 477.545095][ T9275] hfs_extend_file+0x4e4/0xb10 [ 477.549868][ T9275] ? __pfx_hfs_extend_file+0x10/0x10 [ 477.555160][ T9275] ? rcu_is_watching+0x12/0xc0 [ 477.559931][ T9275] hfs_bmap_reserve+0x29c/0x380 [ 477.564808][ T9275] hfs_cat_create+0x22b/0x810 [ 477.569507][ T9275] ? find_held_lock+0x2d/0x110 [ 477.574287][ T9275] ? __pfx_hfs_cat_create+0x10/0x10 [ 477.579511][ T9275] ? hfs_mark_mdb_dirty+0x189/0x200 [ 477.584729][ T9275] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 477.590111][ T9275] ? locked_inode_to_wb_and_lock_list+0x2ed/0xae0 [ 477.596547][ T9275] ? hfs_new_inode+0x44b/0xc60 [ 477.601324][ T9275] hfs_create+0x6b/0xf0 [ 477.605509][ T9275] vfs_create+0x4c2/0x770 [ 477.609859][ T9275] do_mknodat+0x3d5/0x5d0 [ 477.614211][ T9275] ? __pfx_do_mknodat+0x10/0x10 [ 477.619104][ T9275] __x64_sys_mknodat+0xb1/0xe0 [ 477.623892][ T9275] do_syscall_64+0xcd/0x250 [ 477.628434][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.634373][ T9275] RIP: 0033:0x7f0ba8c7d0a9 [ 477.638807][ T9275] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 2033/05/18 03:37:32 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 477.658525][ T9275] RSP: 002b:00007f0ba9aa60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 477.667047][ T9275] RAX: ffffffffffffffda RBX: 00007f0ba8db3f80 RCX: 00007f0ba8c7d0a9 [ 477.675031][ T9275] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 477.683011][ T9275] RBP: 00007f0ba8cec074 R08: 0000000000000000 R09: 0000000000000000 [ 477.691009][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.699025][ T9275] R13: 000000000000000b R14: 00007f0ba8db3f80 R15: 00007fff5102c018 [ 477.707027][ T9275] [ 477.830404][ T9279] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec118, mo2=0002] [ 477.849474][ T9279] System zones: 1-12 [ 477.887817][ T9279] EXT4-fs (loop1): ext4_process_orphan: truncating inode 15 to 10 bytes [ 477.898849][ T9279] EXT4-fs (loop1): 1 truncate cleaned up [ 477.926975][ T9279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.044398][ T9279] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.