last executing test programs: 14.624473606s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x3710, 0x0, 0x1}, 0x48) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000001300)=""/4096}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000200)={0x9, 0x4}, &(0x7f0000000300)) 11.061675339s ago: executing program 2: mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) 10.501041936s ago: executing program 3: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0), &(0x7f0000000100), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x131a, &(0x7f0000000200), &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 10.419341086s ago: executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="92", 0x1}], 0x1, 0x0) syz_io_uring_setup(0x2ddf, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f0000000040)=ANY=[], 0x2, 0x1b4, &(0x7f0000000f40)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x60}}, 0xc040094) open$dir(&(0x7f0000001200)='./file2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00'}, 0x10) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) 9.513820658s ago: executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x8) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x400, 0x0) keyctl$setperm(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x2, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x0, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0xfffffffffffffea9) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000240)={0x0, 0x5, 0x7fffffff}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 7.099155113s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x3710, 0x0, 0x1}, 0x48) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1000, &(0x7f0000001300)=""/4096}, 0x90) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000200)={0x9, 0x4}, &(0x7f0000000300)) 7.077639617s ago: executing program 2: fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x249, &(0x7f0000000600)="$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") r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000340)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000300)}) open(0x0, 0xca942, 0x0) open(&(0x7f0000000500)='./file0\x00', 0x400141042, 0xa4121ef21f60b91f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) 6.816934158s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000000899500000000001800000000000000100100000d00000027"], 0x28, 0x500}}], 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.451965423s ago: executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1338, &(0x7f00000000c0)=ANY=[@ANYRES16]) 5.268576903s ago: executing program 1: mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) 4.952168583s ago: executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000006900)={0x18, 0x0, {0x4, @multicast, 'tunl0\x00'}}, 0x1e) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1000840, &(0x7f0000000280)=ANY=[], 0x3, 0x371, &(0x7f0000000780)="$eJzs3U9oHNUfAPDvdpJsWmiTww/KTxBGb4KGtuJBTyklhUIuKot/DmKwqUqyFrIYTA/dxot4FD3qyZsHPXjoWQSlePPg1QpSFQ/aW8Hik52Z/dfdbFtxU4ufz2H55r33nfnOziMzmWRfXl6OjbOzce769WsxP1+LmeVTy3GjFouRRdelGDU3pg0AuD/cSCl+T6U7TKlNuSQAYMqK6/+rhwda3v5q0vjk6g8A973q5/+Dk8bM79VxfiolAQBTNvL8/+Gh7rnhX/XPdP8qoL6vRQIA/6hnX3ixuJY/k+fzEc13thvbjXiq6nw/4uS5eD02Yz2OxULcjChvFDovteL19JnVlWN5nrfjp8VodJK2GxHN9najvFM4mRX59TgeC7FY5Vd3Gyml7PTnqyvH80JEXGoX+49mbbsxG4ei3P/3h2I9TkQe/xvJjzizunIirzbQaJb5ebMdsdt/btGpfykW4ttX4nxsxtno5HZva1ZXLh7P81NptZ9f1F8vxpX2fAICAAAAAAAAAAAAAAAAAAAAAAB/y1Les9hb/yb11+9ZWhrTX6yPU+ZX6wPtlusDpXqKlH5767HGu1kMrQ9Urc8T9YgqfyYO3NtDBwAAAAAAAAAAAAAAAAAAgH+N1s5crG1urm+1di5sDAbtrdZOZ0AtIt648umXB2N0zG2CmWofA1151XRhYy1l3cEpGxpTBVlE9Fo+udyreHBMvXcUnZYrR1Ia2k691zWmwsMP/fhhv+XBrLvlP/tjshh/gNktZQwGzSNlSXfzRvWCE7cZczWltFf6xZdGszpnb+buT9zkIHWCr6+99v/HW0efKFq+SKVHHl147uoHH/+ysbZZzJviDM5ttW6mjbXq6/GTbe8gG5g/tSiD2uBMmJmUvjvcspZ99+vzD7z3TUqpHZPmRhGkwZY3x4zJysP57NauuTLolHlL18G41H1b+tuZHTP5pxAc/Wh57fLFH36+06yBbxIW6gAAAAAAAAAAAAAAAAAAgH0x8FnxSvVh39lJWU8+Pf3KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/lP///0BEFMHm+lZr58JuN9i4m+CPdox21de3WhFz9/owAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/srAAD//y4qZ3Y=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffff45, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001280)=""/4089, 0xff9) socket(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140), 0x77) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) 4.632997804s ago: executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x0, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x1000}}) 3.754080045s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@dev}, {}, {@broadcast, 0x52b3}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@multicast2, @rand_addr]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = dup(r0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.6032831s ago: executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000740)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@prinfo={0x14}, @sndrcv={0x2c, 0x84, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5599870b}}, @init={0x14}], 0x54}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) 3.497354786s ago: executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2b464cc, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) lseek(r4, 0x1, 0x1) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x98, &(0x7f00000000c0)=""/152}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1a, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xaf20, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0xb}, @generic={0x7f, 0xb, 0xa, 0x1ff, 0x10000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x6c}, @ldst={0x0, 0x1, 0x3, 0x3, 0x2, 0xffffffffffffffec}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x32}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x89, &(0x7f00000005c0)=""/137, 0x41100, 0xb, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r0, r0, 0xffffffffffffffff, r0, r0], 0x0, 0x10, 0x20}, 0x90) 3.340526977s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r5, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 3.219055106s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r0}, 0x5e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7f, 0x0) 2.980552643s ago: executing program 3: open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x4f6e}}, 0x50) 2.662893105s ago: executing program 4: r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b16, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000004b0c000174eb01020301090212"], 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000300)={0x0, 0x3, 0xc3b, 0x0, 0x0, 0x2e2665b2}) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) read$hidraw(r0, &(0x7f0000000240)=""/175, 0xaf) read$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) write$char_usb(r1, &(0x7f0000000540), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x862b01) 2.176774274s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xbd0d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x800080, &(0x7f0000000900)={[{@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000162000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000332000/0x4000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x31, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x200000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$session_to_parent(0x12) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) read$FUSE(r2, &(0x7f0000001500)={0x2020}, 0x2020) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 2.127937448s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000000899500000000001800000000000000100100000d00000027"], 0x28, 0x500}}], 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.961306712s ago: executing program 0: sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 883.672369ms ago: executing program 1: mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) 827.187747ms ago: executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r2) shutdown(r1, 0x0) close(r0) 537.65038ms ago: executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@dev}, {}, {@broadcast, 0x52b3}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@multicast2, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 529.693019ms ago: executing program 0: sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@prinfo={0x14}, @sndrcv={0x2c, 0x84, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5599870b}}, @init={0x14}], 0x54}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) 213.891266ms ago: executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x111}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0xff1}], 0x3) 56.286687ms ago: executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1338, &(0x7f00000000c0)=ANY=[@ANYRES16]) 4.5498ms ago: executing program 4: socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgid(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000240)={0x0, 0x5, 0x7fffffff}) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 0s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r0}, 0x5e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0x0) kernel console output (not intermixed with test programs): h1_vlan: entered promiscuous mode [ 141.682775][ T5540] veth0_macvtap: entered promiscuous mode [ 141.716774][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.729280][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.763789][ T5540] veth1_macvtap: entered promiscuous mode [ 141.832816][ T12] bridge_slave_1: left allmulticast mode [ 141.840019][ T12] bridge_slave_1: left promiscuous mode [ 141.846222][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.871939][ T12] bridge_slave_0: left allmulticast mode [ 141.881568][ T12] bridge_slave_0: left promiscuous mode [ 141.887594][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.891488][ T30] audit: type=1400 audit(1719021636.249:315): avc: denied { write } for pid=4514 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.917587][ T30] audit: type=1400 audit(1719021636.249:316): avc: denied { remove_name } for pid=4514 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.943363][ T30] audit: type=1400 audit(1719021636.249:317): avc: denied { rename } for pid=4514 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.967596][ T30] audit: type=1400 audit(1719021636.249:318): avc: denied { add_name } for pid=4514 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.997917][ T30] audit: type=1400 audit(1719021636.249:319): avc: denied { unlink } for pid=4514 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.028115][ T30] audit: type=1400 audit(1719021636.249:320): avc: denied { create } for pid=4514 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.425402][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.444795][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.464884][ T12] bond0 (unregistering): Released all slaves [ 142.552897][ T5998] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 142.585831][ T5998] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 142.612137][ T5998] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.894040][ T30] audit: type=1800 audit(1719021637.239:321): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 142.950850][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.981406][ T30] audit: type=1800 audit(1719021637.279:322): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 142.982906][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.036299][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.054518][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.092293][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.284109][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.335512][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.525811][ T5119] Bluetooth: hci0: command tx timeout [ 143.595751][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.609122][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.619320][ T5540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.653994][ T5540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.686153][ T5540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.864772][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.040152][ T6048] syz-executor.1: attempt to access beyond end of device [ 144.040152][ T6048] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 144.434460][ T12] hsr_slave_0: left promiscuous mode [ 144.456771][ T12] hsr_slave_1: left promiscuous mode [ 144.507190][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.562260][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.620662][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.640683][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.709016][ T12] veth1_macvtap: left promiscuous mode [ 144.737350][ T30] audit: type=1400 audit(1719021639.089:323): avc: denied { mounton } for pid=6056 comm="syz-executor.1" path="/root/syzkaller-testdir1016432874/syzkaller.pUksrY/57/file1/file0" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 144.774495][ T12] veth0_macvtap: left promiscuous mode [ 144.780203][ T12] veth1_vlan: left promiscuous mode [ 144.794038][ T12] veth0_vlan: left promiscuous mode [ 144.889490][ T6057] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.894787][ T30] audit: type=1400 audit(1719021639.249:324): avc: denied { unlink } for pid=6056 comm="syz-executor.1" name="#1" dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 145.615573][ T5119] Bluetooth: hci0: command tx timeout [ 146.602886][ T12] team0 (unregistering): Port device team_slave_1 removed [ 146.673712][ T12] team0 (unregistering): Port device team_slave_0 removed [ 147.094883][ T5540] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.103615][ T5540] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.112766][ T5540] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.123976][ T5540] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.135414][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 147.148299][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.460761][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.664459][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.671644][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.684576][ T5119] Bluetooth: hci0: command tx timeout [ 147.699233][ T5987] bridge_slave_0: entered allmulticast mode [ 147.708415][ T5987] bridge_slave_0: entered promiscuous mode [ 147.778513][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.789120][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.809014][ T5987] bridge_slave_1: entered allmulticast mode [ 147.817313][ T5987] bridge_slave_1: entered promiscuous mode [ 147.864970][ T5622] veth0_vlan: entered promiscuous mode [ 147.970728][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.993972][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.001807][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.062157][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.168844][ T5622] veth1_vlan: entered promiscuous mode [ 148.219962][ T5987] team0: Port device team_slave_0 added [ 148.251416][ T5987] team0: Port device team_slave_1 added [ 148.324345][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.339213][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.458804][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.482695][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.514235][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.532905][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.542247][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.593579][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.801349][ T5987] hsr_slave_0: entered promiscuous mode [ 148.829577][ T5987] hsr_slave_1: entered promiscuous mode [ 148.850310][ T5987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.859784][ T6125] loop2: detected capacity change from 0 to 1024 [ 148.867500][ T5987] Cannot create hsr debugfs directory [ 148.875177][ T6125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.923607][ T6125] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.999273][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.038623][ T6125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.101189][ T5622] veth0_macvtap: entered promiscuous mode [ 149.186603][ T6132] loop1: detected capacity change from 0 to 2048 [ 149.225937][ T6132] udf: Unknown parameter 'dont_hash' [ 149.271918][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.289349][ T5921] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 149.338015][ T5622] veth1_macvtap: entered promiscuous mode [ 149.431823][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.439055][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.472832][ T6141] loop1: detected capacity change from 0 to 256 [ 149.516759][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.559055][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.594695][ T6141] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 149.607558][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.650647][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.675835][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.698329][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.705477][ T5208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.733562][ T30] audit: type=1800 audit(1719021644.089:325): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=1048683 res=0 errno=0 [ 149.766976][ T5119] Bluetooth: hci0: command tx timeout [ 149.827805][ T30] audit: type=1400 audit(1719021644.089:326): avc: denied { ioctl } for pid=6131 comm="syz-executor.1" path="/root/syzkaller-testdir1016432874/syzkaller.pUksrY/63/file1/file0" dev="loop1" ino=1048683 ioctlcmd=0x551b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 149.933985][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.945240][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.955922][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.973099][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.986453][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.127262][ T5622] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.140904][ T5622] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.164574][ T30] audit: type=1400 audit(1719021644.529:327): avc: denied { map } for pid=6122 comm="syz-executor.2" path="/root/syzkaller-testdir126884816/syzkaller.MYjiJX/1/file0/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 150.183846][ T5622] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.244537][ T5622] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.496275][ T5154] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 150.714622][ T5154] usb 2-1: Using ep0 maxpacket: 32 [ 150.745708][ T5154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.785421][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.804701][ T5154] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 150.833898][ T5154] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 150.856166][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.892440][ T5154] usb 2-1: config 0 descriptor?? [ 150.958326][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.988507][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.120954][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.163076][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.320855][ T5154] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 151.348696][ T5154] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 151.374750][ T5154] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 151.396584][ T5154] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 151.424473][ T5154] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 151.439764][ T5987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.464933][ T5154] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 151.529881][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.548545][ T5987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.614518][ T5154] usb 2-1: USB disconnect, device number 7 [ 151.622339][ T5987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.652004][ T5987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.670620][ T5540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.081426][ T6179] loop3: detected capacity change from 0 to 1764 [ 152.150040][ T30] audit: type=1400 audit(1719021646.499:328): avc: denied { connect } for pid=6183 comm="syz-executor.2" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.198035][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.264607][ T30] audit: type=1400 audit(1719021646.499:329): avc: denied { write } for pid=6183 comm="syz-executor.2" laddr=fe80::a lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 152.331941][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.424110][ T5119] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 152.466135][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.480833][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.524491][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.531836][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.581093][ T5855] veth0_vlan: entered promiscuous mode [ 152.631220][ T5855] veth1_vlan: entered promiscuous mode [ 152.663658][ T5987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.717405][ T5987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.896957][ T5855] veth0_macvtap: entered promiscuous mode [ 152.972265][ T5855] veth1_macvtap: entered promiscuous mode [ 153.030264][ T30] audit: type=1400 audit(1719021647.369:330): avc: denied { unmount } for pid=5622 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 153.067367][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.109262][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.159342][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.187306][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.223386][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.245746][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.282258][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.340035][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.382105][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.413067][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.452566][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.480216][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.503855][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.533273][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.601950][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.637798][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.657365][ T6190] loop2: detected capacity change from 0 to 32768 [ 153.679703][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.713905][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.927254][ T6194] loop1: detected capacity change from 0 to 32768 [ 153.929578][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.975088][ T6194] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6194) [ 154.017174][ T6190] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 154.057442][ T6190] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 154.160429][ T6194] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 154.173700][ T6194] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 154.182618][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.206595][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.217227][ T6194] BTRFS info (device loop1): using free-space-tree [ 154.227970][ T6190] bcachefs (loop2): alloc_read... done [ 154.233515][ T6190] bcachefs (loop2): stripes_read... done [ 154.309970][ T6190] bcachefs (loop2): snapshots_read... done [ 154.375928][ T6190] bcachefs (loop2): journal_replay... done [ 154.400866][ T6190] bcachefs (loop2): resume_logged_ops... done [ 154.429823][ T6190] bcachefs (loop2): going read-write [ 154.460726][ T6190] bcachefs (loop2): done starting filesystem [ 154.549352][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.566628][ T30] audit: type=1400 audit(1719021648.909:331): avc: denied { setattr } for pid=6193 comm="syz-executor.1" path="/root/syzkaller-testdir1016432874/syzkaller.pUksrY/66/file0/bus" dev="loop1" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 154.579201][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.656396][ T5987] veth0_vlan: entered promiscuous mode [ 154.753526][ T6249] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.800155][ T5987] veth1_vlan: entered promiscuous mode [ 155.009515][ T5987] veth0_macvtap: entered promiscuous mode [ 155.017960][ T30] audit: type=1804 audit(1719021649.319:332): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1016432874/syzkaller.pUksrY/66/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 155.077470][ T5987] veth1_macvtap: entered promiscuous mode [ 155.152387][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.168695][ T30] audit: type=1804 audit(1719021649.379:333): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1016432874/syzkaller.pUksrY/66/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 155.179844][ T6256] x_tables: duplicate underflow at hook 3 [ 155.218656][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.237668][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.256955][ T30] audit: type=1400 audit(1719021649.579:334): avc: denied { create } for pid=6193 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 155.309697][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.350680][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.374842][ T30] audit: type=1400 audit(1719021649.589:335): avc: denied { accept } for pid=6193 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 155.429495][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.470138][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.488635][ T30] audit: type=1400 audit(1719021649.729:336): avc: denied { ioctl } for pid=6193 comm="syz-executor.1" path="/root/syzkaller-testdir1016432874/syzkaller.pUksrY/66/file0/bus" dev="loop1" ino=263 ioctlcmd=0x551b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 155.536499][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.565462][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.661855][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.706636][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.744543][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.802600][ T6273] loop3: detected capacity change from 0 to 512 [ 155.809186][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.863786][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.894558][ T6273] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 155.929933][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.995397][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.194119][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.206855][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.381526][ T5987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.009215][ T5987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.087360][ T5987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.147062][ T5987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.397483][ T5150] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.614892][ T5150] usb 5-1: Using ep0 maxpacket: 8 [ 157.641562][ T5150] usb 5-1: config 32 has an invalid interface number: 1 but max is 0 [ 157.684252][ T5150] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 157.724673][ T5150] usb 5-1: config 32 has no interface number 0 [ 157.744725][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.753697][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.767283][ T5150] usb 5-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb [ 157.789855][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.820576][ T5150] usb 5-1: Product: syz [ 157.849484][ T5150] usb 5-1: Manufacturer: syz [ 157.873973][ T5150] usb 5-1: SerialNumber: syz [ 157.898367][ T5150] option 5-1:32.1: GSM modem (1-port) converter detected [ 158.019851][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.048083][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.917156][ T5540] bcachefs (loop2): shutting down [ 158.939658][ T5540] bcachefs (loop2): going read-only [ 158.955749][ T5540] bcachefs (loop2): finished waiting for writes to stop [ 158.979352][ T5104] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 159.047715][ T5540] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 159.074214][ T5540] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8 [ 159.122661][ T5540] bcachefs (loop2): shutdown complete, journal seq 9 [ 159.133091][ T5540] bcachefs (loop2): marking filesystem clean [ 159.247883][ T5540] bcachefs (loop2): shutdown complete [ 161.316296][ T30] audit: type=1326 audit(1719021655.629:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a80a7d0a9 code=0x7ffc0000 [ 161.846721][ T5154] usb 5-1: USB disconnect, device number 3 [ 161.913117][ T30] audit: type=1326 audit(1719021655.629:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a80a7d0a9 code=0x7ffc0000 [ 162.048151][ T30] audit: type=1326 audit(1719021655.639:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f9a80a7d0a9 code=0x7ffc0000 [ 162.064195][ T5154] option 5-1:32.1: device disconnected [ 162.134170][ T30] audit: type=1326 audit(1719021655.639:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a80a7d0a9 code=0x7ffc0000 [ 162.214016][ T30] audit: type=1326 audit(1719021655.639:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a80a7d0a9 code=0x7ffc0000 [ 162.280767][ T30] audit: type=1326 audit(1719021655.639:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9a80a7d0a9 code=0x7ffc0000 [ 162.373889][ T30] audit: type=1326 audit(1719021655.639:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a80a7d0a9 code=0x7ffc0000 [ 162.462549][ T30] audit: type=1326 audit(1719021655.649:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a80a7d0a9 code=0x7ffc0000 [ 162.544924][ T30] audit: type=1326 audit(1719021655.649:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f9a80a7d0a9 code=0x7ffc0000 [ 162.635439][ T30] audit: type=1326 audit(1719021655.649:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a80a7d0a9 code=0x7ffc0000 [ 163.230892][ T6336] loop1: detected capacity change from 0 to 32768 [ 163.399925][ T6336] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 163.442856][ T6336] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 163.525077][ T6336] bcachefs (loop1): alloc_read... done [ 163.539751][ T6336] bcachefs (loop1): stripes_read... done [ 163.557299][ T6336] bcachefs (loop1): snapshots_read... done [ 163.579121][ T6336] bcachefs (loop1): journal_replay... done [ 163.590291][ T6336] bcachefs (loop1): resume_logged_ops... done [ 163.600022][ T6336] bcachefs (loop1): going read-write [ 163.653271][ T6336] bcachefs (loop1): done starting filesystem [ 164.322504][ T6395] x_tables: duplicate underflow at hook 3 [ 165.391751][ T6419] loop4: detected capacity change from 0 to 256 [ 165.606567][ T6402] loop2: detected capacity change from 0 to 32768 [ 165.781517][ T6402] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 165.804058][ T6402] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 165.973716][ T6402] bcachefs (loop2): alloc_read... done [ 165.991529][ T6402] bcachefs (loop2): stripes_read... done [ 166.003355][ T6402] bcachefs (loop2): snapshots_read... done [ 166.576998][ T6402] bcachefs (loop2): journal_replay... done [ 166.674903][ T6402] bcachefs (loop2): resume_logged_ops... done [ 166.818543][ T6402] bcachefs (loop2): going read-write [ 166.894002][ T6402] bcachefs (loop2): done starting filesystem [ 166.974203][ T5104] bcachefs (loop1): shutting down [ 167.001717][ T5104] bcachefs (loop1): going read-only [ 167.014109][ T5104] bcachefs (loop1): finished waiting for writes to stop [ 167.025118][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 167.025133][ T30] audit: type=1400 audit(1719021661.389:350): avc: denied { bind } for pid=6401 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 167.121661][ T5104] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 167.141333][ T5104] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8 [ 167.174833][ T30] audit: type=1400 audit(1719021661.439:351): avc: denied { setopt } for pid=6401 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 167.240244][ T30] audit: type=1400 audit(1719021661.449:352): avc: denied { accept } for pid=6401 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 167.263501][ T30] audit: type=1400 audit(1719021661.459:353): avc: denied { write } for pid=6401 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 167.315327][ T5104] bcachefs (loop1): shutdown complete, journal seq 9 [ 167.378609][ T5104] bcachefs (loop1): marking filesystem clean [ 167.415235][ T30] audit: type=1400 audit(1719021661.459:354): avc: denied { read } for pid=6401 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 167.442330][ T5540] bcachefs (loop2): shutting down [ 167.451865][ T5540] bcachefs (loop2): going read-only [ 167.468606][ T5540] bcachefs (loop2): finished waiting for writes to stop [ 167.498770][ T5540] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 167.520601][ T5540] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 167.546092][ T5540] bcachefs (loop2): shutdown complete, journal seq 13 [ 167.558791][ T5104] bcachefs (loop1): shutdown complete [ 167.567063][ T5540] bcachefs (loop2): marking filesystem clean [ 167.834106][ T5540] bcachefs (loop2): shutdown complete [ 167.900732][ T6463] loop4: detected capacity change from 0 to 256 [ 168.292431][ T6465] syz-executor.3: attempt to access beyond end of device [ 168.292431][ T6465] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 168.941607][ T30] audit: type=1400 audit(1719021663.299:355): avc: denied { getopt } for pid=6474 comm="syz-executor.4" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.972230][ T6472] loop0: detected capacity change from 0 to 2048 [ 170.186112][ T6472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.663867][ T30] audit: type=1400 audit(1719021665.569:356): avc: denied { mount } for pid=6488 comm="syz-executor.4" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 171.825827][ T5987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.563535][ T6518] team0: Device ipvlan1 failed to register rx_handler [ 173.619277][ T6531] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd4": -EINTR [ 174.680337][ T6555] syz-executor.4[6555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.754081][ T6555] syz-executor.4[6555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.795178][ T6556] syz-executor.4[6556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.874173][ T6556] syz-executor.4[6556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.024736][ T6540] loop1: detected capacity change from 0 to 32768 [ 175.081284][ T6540] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6540) [ 175.081372][ T30] audit: type=1400 audit(1719021669.439:357): avc: denied { getopt } for pid=6562 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.144468][ T6540] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 175.209956][ T6540] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 175.258915][ T30] audit: type=1400 audit(1719021669.619:358): avc: denied { create } for pid=6566 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 175.274991][ T6540] BTRFS info (device loop1): using free-space-tree [ 175.467521][ T30] audit: type=1400 audit(1719021669.819:359): avc: denied { ioctl } for pid=6587 comm="syz-executor.2" path="socket:[14118]" dev="sockfs" ino=14118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 175.628885][ T30] audit: type=1400 audit(1719021669.979:360): avc: denied { read write } for pid=6539 comm="syz-executor.1" name="file0" dev="loop1" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.692644][ T30] audit: type=1400 audit(1719021669.979:361): avc: denied { open } for pid=6539 comm="syz-executor.1" path="/root/syzkaller-testdir1016432874/syzkaller.pUksrY/76/bus/file0/file0" dev="loop1" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.849058][ T30] audit: type=1400 audit(1719021670.049:362): avc: denied { ioctl } for pid=6539 comm="syz-executor.1" path="/root/syzkaller-testdir1016432874/syzkaller.pUksrY/76/bus/file0/file0" dev="loop1" ino=258 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.982928][ T5104] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 175.988363][ T30] audit: type=1400 audit(1719021670.349:363): avc: denied { ioctl } for pid=6604 comm="syz-executor.4" path="socket:[14645]" dev="sockfs" ino=14645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.223880][ T5153] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 176.270538][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.348546][ T6613] bridge_slave_1: left allmulticast mode [ 176.356368][ T6613] bridge_slave_1: left promiscuous mode [ 176.363610][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.391703][ T6613] bridge1: port 1(bridge_slave_1) entered blocking state [ 176.412583][ T6613] bridge1: port 1(bridge_slave_1) entered disabled state [ 176.444445][ T5153] usb 3-1: Using ep0 maxpacket: 32 [ 176.451102][ T6613] bridge_slave_1: entered allmulticast mode [ 176.455461][ T5153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.485939][ T5153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.486041][ T6613] bridge_slave_1: entered promiscuous mode [ 176.516301][ T5153] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 176.526778][ T6613] bridge1: port 1(bridge_slave_1) entered blocking state [ 176.534126][ T6613] bridge1: port 1(bridge_slave_1) entered forwarding state [ 176.540120][ T5153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.556579][ T6616] bridge1: port 2(veth1_to_bond) entered blocking state [ 176.579601][ T5153] usb 3-1: config 0 descriptor?? [ 176.581102][ T6616] bridge1: port 2(veth1_to_bond) entered disabled state [ 176.602838][ T5153] hub 3-1:0.0: USB hub found [ 176.614668][ T6616] veth1_to_bond: entered allmulticast mode [ 176.636046][ T6616] veth1_to_bond: entered promiscuous mode [ 176.675463][ T6616] bridge1: port 2(veth1_to_bond) entered blocking state [ 176.682666][ T6616] bridge1: port 2(veth1_to_bond) entered forwarding state [ 176.975982][ T6628] bond0: (slave bond_slave_0): Releasing backup interface [ 177.047103][ T30] audit: type=1400 audit(1719021671.409:364): avc: denied { create } for pid=6630 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 177.160433][ T30] audit: type=1400 audit(1719021671.419:365): avc: denied { write } for pid=6630 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 177.202745][ T5153] hub 3-1:0.0: 1 port detected [ 177.216395][ T30] audit: type=1400 audit(1719021671.419:366): avc: denied { nlmsg_read } for pid=6630 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 177.418796][ T5153] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 177.447815][ T5153] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 177.481303][ T5153] usbhid 3-1:0.0: can't add hid device: -71 [ 177.509181][ T5153] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 177.598558][ T5153] usb 3-1: USB disconnect, device number 2 [ 178.126099][ T9] IPVS: starting estimator thread 0... [ 178.234087][ T6661] IPVS: using max 18 ests per chain, 43200 per kthread [ 178.430063][ T967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.647691][ T4476] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.658328][ T4476] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.667199][ T4476] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.694484][ T4476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.703517][ T4476] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 178.711180][ T967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.722643][ T4476] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.869611][ T967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.954973][ T6688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.979533][ T6688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.005927][ T967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.020824][ T6686] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 179.031328][ T6686] geneve0: entered promiscuous mode [ 179.050245][ T6686] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 179.095135][ T5157] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 179.190895][ T967] bridge_slave_1: left allmulticast mode [ 179.201383][ T967] bridge_slave_1: left promiscuous mode [ 179.210212][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.226725][ T967] bridge_slave_0: left allmulticast mode [ 179.232417][ T967] bridge_slave_0: left promiscuous mode [ 179.240618][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 179.249486][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.319426][ T5157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.342924][ T5157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.387367][ T5157] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.402161][ T5157] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 179.411849][ T5157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.428940][ T5157] usb 3-1: config 0 descriptor?? [ 179.454527][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 179.477364][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.500374][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.526187][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.537812][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.580931][ T45] usb 5-1: config 0 descriptor?? [ 179.599305][ T45] hub 5-1:0.0: USB hub found [ 179.881978][ T5157] wacom 0003:056A:0043.0004: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 179.931249][ T5157] wacom 0003:056A:0043.0004: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 179.975666][ T5157] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0004/input/input5 [ 180.011218][ T967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.037463][ T45] hub 5-1:0.0: 1 port detected [ 180.051776][ T967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.071297][ T967] bond0 (unregistering): Released all slaves [ 180.250831][ T45] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 180.262950][ T45] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 180.279726][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 180.292518][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 180.317065][ T6697] team0 (unregistering): Port device team_slave_0 removed [ 180.330222][ T6697] team0 (unregistering): Port device team_slave_1 removed [ 180.345030][ T45] usb 5-1: USB disconnect, device number 4 [ 180.562148][ T5221] usb 3-1: USB disconnect, device number 3 [ 180.761551][ T6677] chnl_net:caif_netlink_parms(): no params data found [ 180.792811][ T967] hsr_slave_0: left promiscuous mode [ 180.800957][ T967] hsr_slave_1: left promiscuous mode [ 180.808219][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.814075][ T5119] Bluetooth: hci2: command tx timeout [ 180.825037][ T967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.833490][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.844320][ T967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.886573][ T967] veth1_macvtap: left promiscuous mode [ 180.895860][ T967] veth0_macvtap: left promiscuous mode [ 180.901563][ T967] veth1_vlan: left promiscuous mode [ 180.908363][ T967] veth0_vlan: left promiscuous mode [ 180.968915][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 180.968932][ T30] audit: type=1400 audit(1719021675.329:379): avc: denied { setopt } for pid=6723 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.027801][ T30] audit: type=1400 audit(1719021675.389:380): avc: denied { write } for pid=6723 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 181.643388][ T6737] loop4: detected capacity change from 0 to 2048 [ 181.786557][ T6738] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.822130][ T967] team0 (unregistering): Port device team_slave_1 removed [ 181.880440][ T967] team0 (unregistering): Port device team_slave_0 removed [ 182.875272][ T6734] team0 (unregistering): Port device team_slave_0 removed [ 182.934691][ T5119] Bluetooth: hci2: command tx timeout [ 183.207254][ T6734] team0 (unregistering): Port device team_slave_1 removed [ 183.467744][ T6751] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 183.646051][ T6751] : entered promiscuous mode [ 184.319119][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.351341][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.374053][ T6677] bridge_slave_0: entered allmulticast mode [ 184.385632][ T6677] bridge_slave_0: entered promiscuous mode [ 184.394341][ T5154] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 184.419543][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.430029][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.442360][ T6677] bridge_slave_1: entered allmulticast mode [ 184.450148][ T6677] bridge_slave_1: entered promiscuous mode [ 184.646392][ T5154] usb 4-1: Using ep0 maxpacket: 32 [ 184.941245][ T6677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.972707][ T5119] Bluetooth: hci2: command tx timeout [ 184.996950][ T5154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.019298][ T6677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.063903][ T5154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.125573][ T30] audit: type=1400 audit(1719021679.489:381): avc: denied { nlmsg_read } for pid=6747 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.128526][ T5154] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 185.167240][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.185919][ T5154] usb 4-1: config 0 descriptor?? [ 185.204718][ T5154] hub 4-1:0.0: USB hub found [ 185.323342][ T6677] team0: Port device team_slave_0 added [ 185.372955][ T6677] team0: Port device team_slave_1 added [ 185.511300][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.533376][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.590593][ T30] audit: type=1400 audit(1719021679.949:382): avc: denied { block_suspend } for pid=6771 comm="syz-executor.2" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 185.601218][ T6677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.651129][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.665934][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.722531][ T6677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.875182][ T5154] hub 4-1:0.0: 1 port detected [ 185.937126][ T6776] loop0: detected capacity change from 0 to 2048 [ 185.938317][ T6780] overlayfs: missing 'lowerdir' [ 185.957796][ T6677] hsr_slave_0: entered promiscuous mode [ 185.972950][ T6677] hsr_slave_1: entered promiscuous mode [ 185.996665][ T6781] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.037972][ T6677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.072731][ T6677] Cannot create hsr debugfs directory [ 186.080694][ T5154] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 186.091778][ T5154] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 186.119572][ T5154] usbhid 4-1:0.0: can't add hid device: -71 [ 186.136109][ T5154] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 186.189195][ T5154] usb 4-1: USB disconnect, device number 2 [ 186.903931][ T30] audit: type=1800 audit(1719021681.189:383): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 188.054353][ T5119] Bluetooth: hci2: command tx timeout [ 188.166273][ T6789] loop3: detected capacity change from 0 to 2048 [ 188.200461][ T6789] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 188.332969][ T6795] loop0: detected capacity change from 0 to 256 [ 188.391188][ T6796] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.402389][ T6789] syz-executor.3: attempt to access beyond end of device [ 188.402389][ T6789] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 188.469490][ T6795] FAT-fs (loop0): Directory bread(block 64) failed [ 188.510960][ T6795] FAT-fs (loop0): Directory bread(block 65) failed [ 188.515842][ T6677] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.539619][ T6677] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.559917][ T6795] FAT-fs (loop0): Directory bread(block 66) failed [ 188.563340][ T6677] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.584880][ T6795] FAT-fs (loop0): Directory bread(block 67) failed [ 188.596618][ T6677] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.604315][ T6795] FAT-fs (loop0): Directory bread(block 68) failed [ 188.610291][ T6789] syz-executor.3: attempt to access beyond end of device [ 188.610291][ T6789] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 188.611876][ T6795] FAT-fs (loop0): Directory bread(block 69) failed [ 188.637337][ T6795] FAT-fs (loop0): Directory bread(block 70) failed [ 188.644454][ T6795] FAT-fs (loop0): Directory bread(block 71) failed [ 188.654414][ T6795] FAT-fs (loop0): Directory bread(block 72) failed [ 188.661085][ T6795] FAT-fs (loop0): Directory bread(block 73) failed [ 188.760840][ T6789] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 188.790173][ T6789] NILFS (loop3): error -5 reading inode: ino=12 [ 189.340179][ T30] audit: type=1400 audit(1719021683.689:384): avc: denied { create } for pid=6802 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.379450][ T6799] syz-executor.3: attempt to access beyond end of device [ 189.379450][ T6799] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 189.912491][ T6799] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 190.094802][ T6677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.096046][ T6799] NILFS (loop3): error -5 reading inode: ino=12 [ 190.192827][ T6803] usb usb9: usbfs: process 6803 (syz-executor.2) did not claim interface 0 before use [ 190.205353][ T6677] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.264875][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.272060][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.361741][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.368987][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.759963][ T6828] loop2: detected capacity change from 0 to 764 [ 192.228574][ T6677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.311727][ T6842] loop0: detected capacity change from 0 to 128 [ 192.329693][ T6842] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 192.383611][ T6677] veth0_vlan: entered promiscuous mode [ 192.408940][ T6677] veth1_vlan: entered promiscuous mode [ 192.449495][ T6842] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 192.633381][ T6677] veth0_macvtap: entered promiscuous mode [ 192.653725][ T6677] veth1_macvtap: entered promiscuous mode [ 192.711033][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.727619][ T6842] sysv_count_free_inodes: unable to read inode table [ 192.731145][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.744809][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.754923][ T6844] sysv_count_free_inodes: unable to read inode table [ 192.765709][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.796864][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.813051][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.829327][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.881778][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.919985][ T5987] sysv_free_block: trying to free block not in datazone [ 192.932602][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.947616][ T5987] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 192.967453][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.990570][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.012033][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.045579][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.073846][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.102513][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.140018][ T6677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.177290][ T6677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.199810][ T6677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.238044][ T6677] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.275670][ T6677] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.298187][ T6677] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.310379][ T6677] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.491960][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.584478][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.774023][ T5201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.564630][ T5201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.727471][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.764973][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.018380][ T5153] IPVS: starting estimator thread 0... [ 195.022802][ T6863] loop4: detected capacity change from 0 to 256 [ 195.093441][ T6863] FAT-fs (loop4): Directory bread(block 64) failed [ 195.118201][ T6863] FAT-fs (loop4): Directory bread(block 65) failed [ 195.138671][ T6863] FAT-fs (loop4): Directory bread(block 66) failed [ 195.156642][ T6864] IPVS: using max 25 ests per chain, 60000 per kthread [ 195.163634][ T6863] FAT-fs (loop4): Directory bread(block 67) failed [ 195.194211][ T6863] FAT-fs (loop4): Directory bread(block 68) failed [ 195.228307][ T6863] FAT-fs (loop4): Directory bread(block 69) failed [ 195.249596][ T6863] FAT-fs (loop4): Directory bread(block 70) failed [ 195.263292][ T6863] FAT-fs (loop4): Directory bread(block 71) failed [ 195.285076][ T6863] FAT-fs (loop4): Directory bread(block 72) failed [ 195.340364][ T6863] FAT-fs (loop4): Directory bread(block 73) failed [ 195.530063][ T6869] usb usb9: usbfs: process 6869 (syz-executor.1) did not claim interface 0 before use [ 197.440495][ T30] audit: type=1400 audit(1719021691.799:385): avc: denied { connect } for pid=6881 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.523294][ T6902] loop1: detected capacity change from 0 to 8 [ 199.193901][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.377065][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.402961][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.497296][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.557076][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.599413][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.690135][ T45] usb 5-1: config 0 descriptor?? [ 200.064353][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 200.086405][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 200.130840][ T45] usb 5-1: USB disconnect, device number 5 [ 203.717544][ T6944] loop4: detected capacity change from 0 to 256 [ 203.825910][ T6944] exfat: Deprecated parameter 'utf8' [ 203.839965][ T6944] exfat: Deprecated parameter 'namecase' [ 203.851818][ T6944] exfat: Deprecated parameter 'utf8' [ 203.861183][ T30] audit: type=1326 audit(1719021698.219:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a80a7d0a9 code=0x0 [ 203.868304][ T6944] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 203.990624][ T6944] exFAT-fs (loop4): hint_cluster is invalid (1), rewind to the first cluster [ 204.784086][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 204.792794][ T6954] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4d1b88 iblock : 0, err : -5) [ 204.819580][ T30] audit: type=1804 audit(1719021699.129:387): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2007681512/syzkaller.2xg9br/50/file0/file1" dev="loop4" ino=1048746 res=1 errno=0 [ 204.954126][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.004011][ T6954] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4d1b88 iblock : 0, err : -5) [ 205.063555][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.104671][ T6954] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4d1b88 iblock : 1, err : -5) [ 205.190053][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.267459][ T6954] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4d1b88 iblock : 2, err : -5) [ 205.297428][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.354072][ T6954] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4d1b88 iblock : 3, err : -5) [ 205.380709][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.411337][ T6954] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4d1b88 iblock : 4, err : -5) [ 205.433908][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.445301][ T6954] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4d1b88 iblock : 5, err : -5) [ 205.464622][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.673226][ T6954] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4d1b88 iblock : 6, err : -5) [ 205.688990][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.698867][ T6954] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4d1b88 iblock : 7, err : -5) [ 205.715652][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.729252][ T6954] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805c4d1b88 iblock : 8, err : -5) [ 205.744895][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.756199][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.765177][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.774262][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.787349][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.810682][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.819767][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.831554][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.840851][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.852235][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.865355][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.874290][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.883396][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.892363][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.901174][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.912279][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.921153][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.939074][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.947918][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.958654][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.967646][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.977853][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 205.997983][ T6954] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 206.047372][ T30] audit: type=1800 audit(1719021700.399:388): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=1048746 res=0 errno=0 [ 207.646147][ T6981] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 207.915143][ T6993] usb usb9: usbfs: process 6993 (syz-executor.0) did not claim interface 0 before use [ 208.423900][ T5208] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 208.627493][ T5208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.659713][ T5208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.697715][ T5208] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 208.717160][ T5208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.736745][ T5208] usb 5-1: config 0 descriptor?? [ 209.527923][ T5208] usbhid 5-1:0.0: can't add hid device: -71 [ 209.550001][ T5208] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 209.567914][ T5208] usb 5-1: USB disconnect, device number 6 [ 212.665740][ T30] audit: type=1400 audit(1719021707.019:389): avc: denied { setopt } for pid=7053 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 212.796305][ T30] audit: type=1400 audit(1719021707.069:390): avc: denied { write } for pid=7053 comm="syz-executor.1" path="socket:[16133]" dev="sockfs" ino=16133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.953909][ T5154] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 215.136169][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.236987][ T5154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.263916][ T5154] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 215.279635][ T5154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.292093][ T5154] usb 2-1: config 0 descriptor?? [ 216.460101][ T5154] usbhid 2-1:0.0: can't add hid device: -71 [ 216.475046][ T5154] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 216.520032][ T5154] usb 2-1: USB disconnect, device number 8 [ 216.585636][ T7103] usb usb9: usbfs: process 7103 (syz-executor.3) did not claim interface 0 before use [ 218.004280][ T7109] 9pnet_virtio: no channels available for device GPL [ 218.297514][ T7119] loop0: detected capacity change from 0 to 8 [ 218.473996][ T30] audit: type=1800 audit(1719021712.759:391): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 218.519274][ T30] audit: type=1400 audit(1719021712.819:392): avc: denied { create } for pid=7111 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 218.703141][ T7119] SQUASHFS error: lzo decompression failed, data probably corrupt [ 218.726634][ T7119] SQUASHFS error: Failed to read block 0x0: -5 [ 218.804222][ T7119] SQUASHFS error: lzo decompression failed, data probably corrupt [ 218.812367][ T7119] SQUASHFS error: Failed to read block 0x0: -5 [ 218.819735][ T30] audit: type=1800 audit(1719021713.189:393): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 222.154901][ T7148] loop3: detected capacity change from 0 to 512 [ 222.344442][ T7148] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 222.358752][ T7148] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 222.577512][ T7148] EXT4-fs (loop3): 1 truncate cleaned up [ 222.597508][ T7148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.184799][ T30] audit: type=1400 audit(1719021717.549:394): avc: denied { connect } for pid=7147 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 224.563836][ T30] audit: type=1400 audit(1719021718.919:395): avc: denied { read } for pid=7168 comm="syz-executor.0" name="sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 224.613102][ T7171] loop0: detected capacity change from 0 to 512 [ 224.638608][ T30] audit: type=1400 audit(1719021718.949:396): avc: denied { open } for pid=7168 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 225.161498][ T7171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.201471][ T7171] ext4 filesystem being mounted at /root/syzkaller-testdir3583012631/syzkaller.d3g7nA/64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 225.441562][ T30] audit: type=1400 audit(1719021719.799:397): avc: denied { ioctl } for pid=7168 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=702 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 225.720897][ T5987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.053438][ T30] audit: type=1800 audit(1719021720.299:398): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 226.186543][ T7187] xt_TCPMSS: Only works on TCP SYN packets [ 227.199496][ T7193] loop2: detected capacity change from 0 to 2048 [ 227.314629][ T7197] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.050495][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.625758][ T7218] loop3: detected capacity change from 0 to 512 [ 229.842773][ T7218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.864295][ T7218] ext4 filesystem being mounted at /root/syzkaller-testdir3901442262/syzkaller.NGXQo8/57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.515156][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.625147][ T30] audit: type=1800 audit(1719021724.959:399): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 231.489473][ T7228] sctp: [Deprecated]: syz-executor.2 (pid 7228) Use of int in maxseg socket option. [ 231.489473][ T7228] Use struct sctp_assoc_value instead [ 232.966298][ T7256] usb usb9: usbfs: process 7256 (syz-executor.4) did not claim interface 0 before use [ 233.183941][ T45] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 234.311814][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.335115][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 234.351101][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 234.362999][ T45] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 234.372886][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.424826][ T7260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.575292][ T45] hub 4-1:1.0: bad descriptor, ignoring hub [ 234.600899][ T45] hub 4-1:1.0: probe with driver hub failed with error -5 [ 234.615503][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 234.622284][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 234.677271][ T45] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 234.696401][ T45] cdc_wdm 4-1:1.0: Unknown control protocol [ 234.841000][ T7282] loop4: detected capacity change from 0 to 512 [ 235.384887][ T30] audit: type=1800 audit(1719021729.729:400): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 235.450090][ T7282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.474129][ T7282] ext4 filesystem being mounted at /root/syzkaller-testdir2007681512/syzkaller.2xg9br/64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.510137][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.551187][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.734688][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.743428][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.779625][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.788264][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.936229][ T5150] usb 4-1: USB disconnect, device number 3 [ 235.951481][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.822351][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.858300][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.926214][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.075551][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.261463][ T4476] Bluetooth: hci3: command 0x041b tx timeout [ 238.639544][ T30] audit: type=1400 audit(1719021732.859:401): avc: denied { listen } for pid=7320 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 238.945592][ T30] audit: type=1400 audit(1719021732.949:402): avc: denied { unlink } for pid=7320 comm="syz-executor.4" name="#3" dev="sda1" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 238.998718][ T7331] loop3: detected capacity change from 0 to 512 [ 239.008687][ T7329] loop1: detected capacity change from 0 to 128 [ 239.056254][ T7329] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 239.066863][ T7329] sysv_free_block: trying to free block not in datazone [ 239.076156][ T7329] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 239.300644][ T7331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.584957][ T30] audit: type=1800 audit(1719021733.919:403): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 240.236920][ T7348] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 241.974417][ T7338] usb usb9: usbfs: process 7338 (syz-executor.2) did not claim interface 0 before use [ 242.031000][ T7331] ext4 filesystem being mounted at /root/syzkaller-testdir3901442262/syzkaller.NGXQo8/63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.126135][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.985660][ T5119] Bluetooth: hci4: command 0x0406 tx timeout [ 245.884370][ T30] audit: type=1800 audit(1719021740.239:404): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 248.667594][ T7409] loop2: detected capacity change from 0 to 512 [ 248.996748][ T7409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.062226][ T7409] ext4 filesystem being mounted at /root/syzkaller-testdir126884816/syzkaller.MYjiJX/54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.612279][ T5540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.992509][ T7435] loop0: detected capacity change from 0 to 2048 [ 252.151839][ T7447] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.357108][ T30] audit: type=1800 audit(1719021747.679:405): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 254.457585][ T7471] loop3: detected capacity change from 0 to 512 [ 254.741425][ T7471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.829867][ T7471] ext4 filesystem being mounted at /root/syzkaller-testdir3901442262/syzkaller.NGXQo8/72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.168209][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.193832][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.108025][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.943308][ T7494] loop0: detected capacity change from 0 to 512 [ 257.974029][ T7494] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 258.162146][ T7494] EXT4-fs (loop0): 1 truncate cleaned up [ 258.194355][ T7494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.245484][ T5119] Bluetooth: hci1: command 0x0406 tx timeout [ 259.403448][ T5987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.463710][ T7512] loop4: detected capacity change from 0 to 2048 [ 261.973730][ T7529] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 263.763771][ C0] sched: RT throttling activated [ 264.926011][ T30] audit: type=1400 audit(1719021759.119:406): avc: denied { ioctl } for pid=7551 comm="syz-executor.3" path="socket:[17855]" dev="sockfs" ino=17855 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 264.958538][ T30] audit: type=1400 audit(1719021759.119:407): avc: denied { getopt } for pid=7551 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.246673][ T30] audit: type=1400 audit(1719021759.539:408): avc: denied { create } for pid=7551 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 265.988461][ T7570] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 267.734629][ T7594] loop3: detected capacity change from 0 to 2048 [ 268.564705][ T5119] Bluetooth: hci0: command 0x0406 tx timeout [ 268.621105][ T7603] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 271.051785][ T7602] loop4: detected capacity change from 0 to 32768 [ 271.092614][ T7602] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7602) [ 271.121656][ T7602] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.180016][ T7602] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 272.037853][ T7602] BTRFS info (device loop4): using free-space-tree [ 272.064399][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 272.074438][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 272.124759][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 272.249415][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 272.298844][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 272.360481][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 272.377916][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 272.421947][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 272.466376][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 272.508473][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 272.531925][ T7602] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 272.569915][ T7602] BTRFS error (device loop4): open_ctree failed [ 277.722598][ T7677] loop4: detected capacity change from 0 to 512 [ 277.732752][ T7677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 277.762158][ T7677] EXT4-fs (loop4): 1 truncate cleaned up [ 277.839248][ T7677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.274009][ T5208] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 279.536049][ T5208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 279.573962][ T5208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 279.632434][ T5208] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.663950][ T5208] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.666771][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.673176][ T5208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.749036][ T5208] usb 3-1: config 0 descriptor?? [ 279.776990][ T7702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 280.033868][ T52] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 280.233849][ T5208] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 280.247065][ T5208] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 280.275919][ T52] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 280.284693][ T5208] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 280.322060][ T52] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.344549][ T52] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.360404][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.370487][ T52] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.384640][ T52] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.399523][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.408861][ T52] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.418084][ T52] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.432200][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.451597][ T52] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.477586][ T52] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.504423][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.512788][ T52] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.522191][ T52] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.543607][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.558976][ T52] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.568419][ T52] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.595620][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.619515][ T52] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.633520][ T52] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.654973][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.696658][ T52] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.710228][ T52] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.734666][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.756870][ T52] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 280.769340][ T52] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 280.780855][ T52] usb 4-1: Product: syz [ 280.787488][ T52] usb 4-1: Manufacturer: syz [ 280.792234][ T52] usb 4-1: SerialNumber: syz [ 280.801714][ T52] usb 4-1: config 0 descriptor?? [ 282.241749][ T52] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 282.455007][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.487414][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.703701][ T7741] loop4: detected capacity change from 0 to 8 [ 282.863235][ T7746] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 283.637060][ T5221] usb 3-1: USB disconnect, device number 4 [ 283.751844][ T7741] SQUASHFS error: lzo decompression failed, data probably corrupt [ 283.811045][ T52] usb 4-1: USB disconnect, device number 4 [ 283.829902][ T7741] SQUASHFS error: Failed to read block 0x0: -5 [ 283.841074][ T52] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 283.876427][ T7741] SQUASHFS error: lzo decompression failed, data probably corrupt [ 283.885867][ T7741] SQUASHFS error: Failed to read block 0x0: -5 [ 283.896827][ T30] audit: type=1800 audit(1719021778.249:409): pid=7741 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.4" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 284.453978][ T7757] loop2: detected capacity change from 0 to 8 [ 286.095368][ T7757] SQUASHFS error: lzo decompression failed, data probably corrupt [ 286.113504][ T7757] SQUASHFS error: Failed to read block 0x0: -5 [ 286.136289][ T7757] SQUASHFS error: lzo decompression failed, data probably corrupt [ 286.145565][ T7757] SQUASHFS error: Failed to read block 0x0: -5 [ 286.159968][ T30] audit: type=1800 audit(1719021780.509:410): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 286.513915][ T5154] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 286.830878][ T5154] usb 4-1: Using ep0 maxpacket: 8 [ 286.839519][ T5154] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 286.848130][ T5154] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.858155][ T5154] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.907737][ T5154] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.077410][ T5154] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.090763][ T5154] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.866380][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.205660][ T5154] usb 4-1: usb_control_msg returned -32 [ 288.211522][ T5154] usbtmc 4-1:16.0: can't read capabilities [ 288.242112][ T5154] usb 4-1: USB disconnect, device number 5 [ 288.763875][ T7793] overlayfs: failed to resolve './file2': -2 [ 289.183873][ T5153] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 290.251720][ T5153] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 290.261940][ T5153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.995608][ T5153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.027695][ T5153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.040400][ T5153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.049882][ T5153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.078642][ T5153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.093903][ T5153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.114097][ T5153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.138260][ T5153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.164710][ T5153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.188092][ T5153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.199966][ T5153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.209106][ T5153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.219820][ T5153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.231404][ T5153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.240578][ T5153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.251208][ T5153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.279097][ T5153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.305012][ T5153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.317547][ T5153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.339979][ T5153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.357407][ T5153] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 291.366845][ T5153] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 291.383038][ T5153] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.396047][ T5153] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 291.414618][ T5153] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 291.441543][ T5153] usb 3-1: Product: syz [ 291.469622][ T5153] usb 3-1: Manufacturer: syz [ 291.488280][ T5153] usb 3-1: SerialNumber: syz [ 291.521426][ T5153] usb 3-1: config 0 descriptor?? [ 291.540603][ T5153] usb 3-1: can't set config #0, error -71 [ 291.563537][ T5153] usb 3-1: USB disconnect, device number 5 [ 291.737189][ T7819] overlayfs: failed to resolve './file2': -2 [ 291.770135][ T7819] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 294.023858][ T5208] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 294.764878][ T5208] usb 2-1: Using ep0 maxpacket: 8 [ 294.795285][ T5208] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 294.821227][ T5208] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.001609][ T5208] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.049733][ T5208] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.069805][ T5208] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.132515][ T5208] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.160902][ T5208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.383992][ T5154] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 295.440017][ T5208] usb 2-1: usb_control_msg returned -32 [ 295.454052][ T5208] usbtmc 2-1:16.0: can't read capabilities [ 295.480589][ T5208] usb 2-1: USB disconnect, device number 9 [ 295.596016][ T5154] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 295.615672][ T5154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.634159][ T5154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.666311][ T5154] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.681006][ T5154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.694010][ T5154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.724851][ T5154] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.738850][ T5154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.754023][ T5154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.783832][ T5154] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.804666][ T5154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.813617][ T5154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.840668][ T5154] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.871382][ T5154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.886498][ T5154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.928567][ T5154] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.951848][ T5154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.973967][ T5154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.001836][ T5154] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.019714][ T5154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.045761][ T5154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.063878][ T5154] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.074656][ T5154] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 296.091589][ T5154] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 296.113833][ T5154] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.128110][ T5154] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 296.145966][ T5154] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 296.164272][ T5154] usb 5-1: Product: syz [ 296.168506][ T5154] usb 5-1: Manufacturer: syz [ 296.179797][ T5154] usb 5-1: SerialNumber: syz [ 296.187750][ T5154] usb 5-1: config 0 descriptor?? [ 296.234271][ T5154] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 297.336031][ T7864] loop2: detected capacity change from 0 to 8 [ 297.368123][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.421072][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.674422][ T30] audit: type=1400 audit(1719021793.009:411): avc: denied { ioctl } for pid=7868 comm="syz-executor.1" path="socket:[18261]" dev="sockfs" ino=18261 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.462703][ T7878] loop0: detected capacity change from 0 to 8 [ 299.637159][ T5208] usb 5-1: USB disconnect, device number 7 [ 299.669039][ T5208] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 299.695611][ T7878] SQUASHFS error: lzo decompression failed, data probably corrupt [ 299.716575][ T7878] SQUASHFS error: Failed to read block 0x0: -5 [ 299.786141][ T7878] SQUASHFS error: lzo decompression failed, data probably corrupt [ 299.796834][ T7878] SQUASHFS error: Failed to read block 0x0: -5 [ 299.803602][ T30] audit: type=1800 audit(1719021794.159:412): pid=7878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="file2" dev="loop0" ino=3 res=0 errno=0 [ 300.216255][ T5208] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 300.434542][ T5208] usb 5-1: Using ep0 maxpacket: 32 [ 300.452069][ T5208] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 300.460583][ T5208] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 300.477519][ T5208] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.525146][ T5208] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 300.543528][ T5208] usb 5-1: config 1 has no interface number 0 [ 300.566202][ T5208] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 300.589690][ T5208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.629693][ T5208] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 300.992099][ T5208] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 301.024450][ T5208] snd_usb_pod 5-1:1.1: invalid control EP [ 301.057459][ T5208] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 301.936652][ T5208] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 302.015993][ T5208] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 302.043012][ T5208] usb 5-1: USB disconnect, device number 8 [ 304.336170][ T4476] Bluetooth: hci2: command 0x0406 tx timeout [ 306.325593][ T7937] loop1: detected capacity change from 0 to 8 [ 307.113873][ T52] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 307.283114][ T7945] loop3: detected capacity change from 0 to 256 [ 307.313913][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 307.329168][ T52] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 307.347094][ T52] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 307.360035][ T7945] exfat: Deprecated parameter 'utf8' [ 307.411118][ T52] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.411278][ T7945] exfat: Deprecated parameter 'namecase' [ 307.427138][ T7945] exfat: Deprecated parameter 'utf8' [ 307.441696][ T52] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 307.442213][ T7945] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 307.496557][ T52] usb 3-1: config 1 has no interface number 0 [ 307.502774][ T52] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 307.503279][ T7945] exFAT-fs (loop3): hint_cluster is invalid (1), rewind to the first cluster [ 307.537843][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.549365][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 307.583829][ T7945] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805c4d42b8 iblock : 0, err : -5) [ 307.603179][ T52] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 307.626897][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 307.672026][ T7945] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805c4d42b8 iblock : 0, err : -5) [ 307.731638][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 307.742736][ T7945] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805c4d42b8 iblock : 1, err : -5) [ 307.796443][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 307.806441][ T52] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 307.813964][ T7945] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805c4d42b8 iblock : 2, err : -5) [ 307.824175][ T52] snd_usb_pod 3-1:1.1: invalid control EP [ 307.850549][ T52] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 307.871206][ T52] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 307.880676][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 307.889764][ T52] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 308.007134][ T5208] usb 3-1: USB disconnect, device number 6 [ 308.015731][ T7945] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805c4d42b8 iblock : 3, err : -5) [ 308.070049][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.099520][ T7945] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805c4d42b8 iblock : 4, err : -5) [ 308.120327][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.137956][ T7945] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805c4d42b8 iblock : 5, err : -5) [ 308.164093][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.455434][ T7956] loop4: detected capacity change from 0 to 8 [ 308.461740][ T7945] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805c4d42b8 iblock : 6, err : -5) [ 308.490353][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.528348][ T7945] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805c4d42b8 iblock : 7, err : -5) [ 308.541438][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.589134][ T7956] SQUASHFS error: lzo decompression failed, data probably corrupt [ 308.597113][ T7945] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805c4d42b8 iblock : 8, err : -5) [ 308.597418][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.627479][ T7956] SQUASHFS error: Failed to read block 0x0: -5 [ 308.655677][ T7956] SQUASHFS error: lzo decompression failed, data probably corrupt [ 308.670485][ T7956] SQUASHFS error: Failed to read block 0x0: -5 [ 308.675402][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.689061][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.701991][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.710728][ T30] audit: type=1800 audit(1719021803.059:413): pid=7956 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.4" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 308.732475][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.746060][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.754990][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.793385][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.930716][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 308.978364][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.023910][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.032668][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.044630][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.079560][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.088393][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.097547][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.112278][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.232041][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.255506][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.274847][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.476208][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.612537][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 309.793226][ T7945] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000) [ 310.143280][ T25] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 310.182870][ T30] audit: type=1800 audit(1719021804.519:414): pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=1048751 res=0 errno=0 [ 310.525916][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.537440][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 310.546840][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 310.558211][ T25] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 310.568867][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.615371][ T7964] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 310.634340][ T25] hub 3-1:1.0: bad descriptor, ignoring hub [ 310.686069][ T25] hub 3-1:1.0: probe with driver hub failed with error -5 [ 310.712327][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 310.721873][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 310.768514][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 310.789242][ T25] cdc_wdm 3-1:1.0: Unknown control protocol [ 313.205361][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.257504][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.361797][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.372138][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.449322][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.476513][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.545528][ T52] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 313.694692][ T5153] usb 3-1: USB disconnect, device number 7 [ 313.744424][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 313.753712][ T52] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 313.773884][ T52] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.812343][ T52] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.837517][ T52] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.857122][ T52] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.880074][ T52] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.893865][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.705541][ T52] usb 4-1: usb_control_msg returned -32 [ 314.754065][ T52] usbtmc 4-1:16.0: can't read capabilities [ 314.822942][ T52] usb 4-1: USB disconnect, device number 6 [ 315.285268][ T5153] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 315.723884][ T5153] usb 5-1: Using ep0 maxpacket: 32 [ 315.854526][ T5153] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 315.995492][ T5153] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 316.152487][ T5153] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.574345][ T5153] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 316.730846][ T5153] usb 5-1: config 1 has no interface number 0 [ 316.749448][ T5153] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 316.765243][ T5153] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 316.774448][ T5153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.807020][ T5153] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 317.019794][ T5153] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 317.053168][ T5153] snd_usb_pod 5-1:1.1: invalid control EP [ 317.082927][ T5153] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 317.103661][ T5153] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 317.131953][ T5153] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 317.685719][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.692123][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.545263][ T5208] usb 5-1: USB disconnect, device number 9 [ 319.730852][ T8031] vcan0: Master is either lo or non-ether device [ 320.316727][ T8046] sctp: [Deprecated]: syz-executor.4 (pid 8046) Use of int in maxseg socket option. [ 320.316727][ T8046] Use struct sctp_assoc_value instead [ 320.504529][ T8056] 9pnet_fd: Insufficient options for proto=fd [ 323.193839][ T5153] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 323.395204][ T5153] usb 5-1: Using ep0 maxpacket: 8 [ 323.427264][ T5153] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 323.457679][ T5153] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.488699][ T8078] vcan0: Master is either lo or non-ether device [ 323.494169][ T5153] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.508603][ T5153] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.523939][ T5153] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.587790][ T5153] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 323.617691][ T5153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.914447][ T5153] usb 5-1: usb_control_msg returned -32 [ 323.919978][ T8088] loop2: detected capacity change from 0 to 8 [ 323.995275][ T5153] usbtmc 5-1:16.0: can't read capabilities [ 324.092502][ T5153] usb 5-1: USB disconnect, device number 10 [ 324.233919][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 324.325602][ T8088] SQUASHFS error: lzo decompression failed, data probably corrupt [ 324.339150][ T8088] SQUASHFS error: Failed to read block 0x0: -5 [ 324.349049][ T8088] SQUASHFS error: lzo decompression failed, data probably corrupt [ 324.369664][ T8088] SQUASHFS error: Failed to read block 0x0: -5 [ 324.400043][ T30] audit: type=1800 audit(1719021818.759:415): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 324.504295][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 324.519381][ T25] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 324.530327][ T25] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 324.540564][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.558240][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 324.586198][ T25] usb 2-1: config 1 has no interface number 0 [ 324.592668][ T25] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 324.593235][ T8092] 9pnet_fd: Insufficient options for proto=fd [ 324.618888][ T25] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 324.629514][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.681348][ T25] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 324.880505][ T25] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 324.905423][ T25] snd_usb_pod 2-1:1.1: invalid control EP [ 324.920733][ T25] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 324.929118][ T25] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 324.940773][ T25] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 325.159264][ T9] usb 2-1: USB disconnect, device number 10 [ 326.077999][ T8102] loop4: detected capacity change from 0 to 8 [ 326.392024][ T8102] SQUASHFS error: lzo decompression failed, data probably corrupt [ 326.401562][ T8102] SQUASHFS error: Failed to read block 0x0: -5 [ 326.415852][ T8102] SQUASHFS error: lzo decompression failed, data probably corrupt [ 326.443310][ T8102] SQUASHFS error: Failed to read block 0x0: -5 [ 326.451311][ T30] audit: type=1800 audit(1719021820.819:416): pid=8102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.4" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 328.334476][ T8126] 9pnet_fd: Insufficient options for proto=fd [ 329.745123][ T5153] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 329.952243][ T30] audit: type=1400 audit(1719021824.309:417): avc: denied { read } for pid=8122 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.953900][ T5153] usb 1-1: Using ep0 maxpacket: 8 [ 330.024949][ T5153] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 330.035024][ T5153] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 330.058994][ T5153] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 330.085167][ T5153] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.106394][ T5153] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.134762][ T5153] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 330.167500][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.416062][ T5221] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 330.439247][ T5153] usb 1-1: usb_control_msg returned -32 [ 330.453809][ T5153] usbtmc 1-1:16.0: can't read capabilities [ 330.481938][ T5153] usb 1-1: USB disconnect, device number 5 [ 330.623902][ T5221] usb 3-1: Using ep0 maxpacket: 32 [ 330.632370][ T5221] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 330.651056][ T5221] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 330.701696][ T5221] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.729902][ T5221] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 330.749243][ T5221] usb 3-1: config 1 has no interface number 0 [ 330.763069][ T5221] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 330.763779][ T8154] vcan0: Master is either lo or non-ether device [ 330.793849][ T5221] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 330.813178][ T5221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.839160][ T5221] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 331.199705][ T8162] loop1: detected capacity change from 0 to 512 [ 331.211193][ T8162] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 331.228206][ T5221] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 331.230276][ T8162] EXT4-fs (loop1): 1 truncate cleaned up [ 331.240830][ T5221] snd_usb_pod 3-1:1.1: invalid control EP [ 331.281859][ T8162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.294895][ T5221] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 331.442497][ T30] audit: type=1800 audit(1719021825.799:418): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 332.908763][ T5221] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 332.928875][ T5221] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 332.945681][ T5221] usb 3-1: USB disconnect, device number 8 [ 335.390068][ T8197] loop2: detected capacity change from 0 to 2048 [ 335.507523][ T8197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.686686][ T5540] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.815045][ T8219] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 339.025310][ T5208] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 339.233843][ T5208] usb 3-1: Using ep0 maxpacket: 32 [ 339.259360][ T5208] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 339.308884][ T5208] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 339.406849][ T5208] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 339.491782][ T5208] usb 3-1: config 1 has no interface number 0 [ 339.507198][ T6677] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.543824][ T5208] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.578236][ T5208] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 339.623794][ T5208] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 339.657416][ T5208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.697889][ T5208] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 340.844672][ T5208] snd_usb_pod 3-1:1.1: invalid control EP [ 340.850402][ T5208] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 340.895934][ T5208] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 340.904205][ T5208] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 341.062472][ T5208] usb 3-1: USB disconnect, device number 9 [ 345.566108][ T5153] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 345.774558][ T5153] usb 5-1: Using ep0 maxpacket: 32 [ 345.793124][ T5153] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 346.193484][ T5153] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 346.248964][ T5153] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 346.299182][ T5153] usb 5-1: config 1 has no interface number 0 [ 346.319630][ T5153] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 346.374222][ T5153] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 346.456897][ T5153] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 346.490627][ T5153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.561935][ T5153] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 346.777166][ T5153] snd_usb_pod 5-1:1.1: invalid control EP [ 346.797812][ T5153] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 346.832626][ T5153] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 346.855310][ T5153] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 346.993233][ T5153] usb 5-1: USB disconnect, device number 11 [ 347.753098][ T8311] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 351.315093][ T8347] loop4: detected capacity change from 0 to 256 [ 352.516259][ T5107] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 352.780275][ T5107] usb 2-1: Using ep0 maxpacket: 32 [ 352.801985][ T5107] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 352.836821][ T5107] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 352.867281][ T5107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 352.932556][ T5107] usb 2-1: config 1 has no interface number 0 [ 352.980302][ T5107] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 353.046208][ T5107] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 353.110449][ T5107] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 353.162899][ T5107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.230748][ T5107] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 353.424505][ T5107] snd_usb_pod 2-1:1.1: invalid control EP [ 353.471046][ T5107] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 353.499958][ T5107] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 353.520501][ T5107] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 353.630283][ T5107] usb 2-1: USB disconnect, device number 11 [ 354.404341][ T8366] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 356.389217][ T8367] loop3: detected capacity change from 0 to 8 [ 358.598698][ T8400] loop2: detected capacity change from 0 to 256 [ 358.728266][ T8400] FAT-fs (loop2): Directory bread(block 1285) failed [ 358.899183][ T8400] FAT-fs (loop2): Directory bread(block 1285) failed [ 358.990566][ T8400] FAT-fs (loop2): Directory bread(block 1285) failed [ 359.079127][ T8400] FAT-fs (loop2): Directory bread(block 1285) failed [ 359.128743][ T8403] FAT-fs (loop2): Directory bread(block 1285) failed [ 359.171754][ T8403] FAT-fs (loop2): Directory bread(block 1285) failed [ 359.196785][ T8403] FAT-fs (loop2): Directory bread(block 1285) failed [ 359.503828][ T5153] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 359.673561][ T8413] loop0: detected capacity change from 0 to 256 [ 359.711834][ T8413] FAT-fs (loop0): Directory bread(block 64) failed [ 359.722393][ T5153] usb 4-1: Using ep0 maxpacket: 32 [ 359.734304][ T8413] FAT-fs (loop0): Directory bread(block 65) failed [ 359.742755][ T8413] FAT-fs (loop0): Directory bread(block 66) failed [ 359.743089][ T5153] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 359.758827][ T8413] FAT-fs (loop0): Directory bread(block 67) failed [ 359.780927][ T8413] FAT-fs (loop0): Directory bread(block 68) failed [ 359.792573][ T5153] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 359.811178][ T8413] FAT-fs (loop0): Directory bread(block 69) failed [ 359.825740][ T5153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 359.847646][ T8413] FAT-fs (loop0): Directory bread(block 70) failed [ 359.873170][ T8413] FAT-fs (loop0): Directory bread(block 71) failed [ 359.883707][ T5153] usb 4-1: config 1 has no interface number 0 [ 359.891931][ T5153] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.923085][ T8413] FAT-fs (loop0): Directory bread(block 72) failed [ 359.932540][ T8413] FAT-fs (loop0): Directory bread(block 73) failed [ 359.955075][ T5153] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 359.974396][ T5153] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 359.996786][ T5153] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 360.022010][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.080811][ T5153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 360.556490][ T5153] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 360.597050][ T5153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 360.628417][ T5153] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 360.806129][ T5153] usb 4-1: USB disconnect, device number 7 [ 362.535025][ T51] kworker/u8:3: attempt to access beyond end of device [ 362.535025][ T51] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 362.687448][ T8451] loop3: detected capacity change from 0 to 512 [ 362.726757][ T8451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 362.793688][ T8451] EXT4-fs (loop3): 1 truncate cleaned up [ 362.803348][ T8451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.819169][ T5208] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 363.045988][ T5208] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.064617][ T5208] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 363.073682][ T5208] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 363.100502][ T5208] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 363.123818][ T5208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.152458][ T8445] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.171923][ T5208] hub 5-1:1.0: bad descriptor, ignoring hub [ 363.205321][ T5208] hub 5-1:1.0: probe with driver hub failed with error -5 [ 363.243938][ T5208] cdc_wdm 5-1:1.0: skipping garbage [ 363.249213][ T5208] cdc_wdm 5-1:1.0: skipping garbage [ 363.293295][ T5208] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 363.304706][ T5208] cdc_wdm 5-1:1.0: Unknown control protocol [ 363.457225][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.474231][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.510734][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.536651][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.576756][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.600928][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.789871][ T5208] usb 5-1: USB disconnect, device number 12 [ 364.502433][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.633715][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 469.640708][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8478/2:b..l [ 469.649274][ C0] rcu: (detected by 0, t=10502 jiffies, g=34749, q=290 ncpus=2) [ 469.657009][ C0] task:syz-executor.3 state:R running task stack:28736 pid:8478 tgid:8476 ppid:5622 flags:0x00004006 [ 469.670067][ C0] Call Trace: [ 469.673366][ C0] [ 469.676310][ C0] __schedule+0xf15/0x5d00 [ 469.680762][ C0] ? hlock_class+0x4e/0x130 [ 469.685300][ C0] ? __pfx_mark_lock+0x10/0x10 [ 469.690101][ C0] ? __pfx___schedule+0x10/0x10 [ 469.694974][ C0] ? mark_lock+0xb5/0xc60 [ 469.699334][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 469.704572][ C0] ? mark_held_locks+0x9f/0xe0 [ 469.709371][ C0] preempt_schedule_irq+0x51/0x90 [ 469.714424][ C0] irqentry_exit+0x36/0x90 [ 469.718870][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 469.724889][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x58/0x60 [ 469.731071][ C0] Code: 82 f8 15 00 00 83 f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 469.750700][ C0] RSP: 0018:ffffc9000398fa00 EFLAGS: 00000287 [ 469.756796][ C0] RAX: 00000000000056be RBX: ffff88801db91028 RCX: ffffc90013201000 [ 469.764794][ C0] RDX: 0000000000040000 RSI: ffffffff8209ef80 RDI: ffff88801db91078 [ 469.772788][ C0] RBP: ffffc9000398fb08 R08: 0000000000000005 R09: 0000000000000000 [ 469.780782][ C0] R10: 0000000000000ff3 R11: 0000000000000003 R12: ffff88801ed71c00 [ 469.788781][ C0] R13: ffff88801db70758 R14: ffff88801ed71c20 R15: dffffc0000000000 [ 469.796779][ C0] ? prepend_path+0x500/0xf50 [ 469.801492][ C0] prepend_path+0x500/0xf50 [ 469.806026][ C0] ? __pfx_prepend_path+0x10/0x10 [ 469.811086][ C0] d_absolute_path+0xff/0x1b0 [ 469.815799][ C0] ? __pfx_d_absolute_path+0x10/0x10 [ 469.821119][ C0] ? __kmalloc_noprof+0x20b/0x410 [ 469.826163][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 469.831226][ C0] tomoyo_realpath_from_path+0x36a/0x720 [ 469.836889][ C0] ? tomoyo_profile+0x47/0x60 [ 469.841597][ C0] tomoyo_path_number_perm+0x245/0x590 [ 469.847095][ C0] ? tomoyo_path_number_perm+0x232/0x590 [ 469.852769][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 469.858793][ C0] ? find_held_lock+0x59/0x110 [ 469.863589][ C0] ? __fget_files+0x256/0x400 [ 469.868293][ C0] security_file_ioctl+0x75/0xc0 [ 469.873254][ C0] __x64_sys_ioctl+0xbb/0x220 [ 469.877965][ C0] do_syscall_64+0xcd/0x250 [ 469.882501][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.888432][ C0] RIP: 0033:0x7f4697e7ce0b [ 469.892876][ C0] RSP: 002b:00007f4698b47fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.901492][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4697e7ce0b [ 469.909484][ C0] RDX: 00007f4698b49070 RSI: 0000000041015500 RDI: 0000000000000003 [ 469.917476][ C0] RBP: 00007f4698b49070 R08: 0000000000000010 R09: 00332e6364755f79 [ 469.925473][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.933462][ C0] R13: 00007f4698b48040 R14: 0000000020000080 R15: 00007f46980e0320 [ 469.941457][ C0] [ 469.944493][ C0] rcu: rcu_preempt kthread starved for 10532 jiffies! g34749 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 469.955706][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 469.965686][ C0] rcu: RCU grace-period kthread stack dump: [ 469.971582][ C0] task:rcu_preempt state:R running task stack:26144 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 469.983346][ C0] Call Trace: [ 469.986650][ C0] [ 469.989596][ C0] __schedule+0xf15/0x5d00 [ 469.994037][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 469.999283][ C0] ? __pfx___schedule+0x10/0x10 [ 470.004161][ C0] ? schedule+0x298/0x350 [ 470.008515][ C0] ? __pfx_lock_release+0x10/0x10 [ 470.013571][ C0] ? __pfx___mod_timer+0x10/0x10 [ 470.018531][ C0] ? lock_acquire+0x1b1/0x560 [ 470.023244][ C0] ? lockdep_init_map_type+0x16d/0x7d0 [ 470.028745][ C0] schedule+0xe7/0x350 [ 470.032839][ C0] schedule_timeout+0x136/0x2a0 [ 470.037733][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 470.043141][ C0] ? __pfx_process_timeout+0x10/0x10 [ 470.048459][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 470.054288][ C0] ? prepare_to_swait_event+0xf0/0x470 [ 470.059786][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 470.064583][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 470.069905][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 470.075134][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 470.080965][ C0] rcu_gp_kthread+0x271/0x380 [ 470.085677][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 470.090914][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.096140][ C0] ? __kthread_parkme+0x148/0x220 [ 470.101196][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 470.106424][ C0] kthread+0x2c1/0x3a0 [ 470.110520][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.115743][ C0] ? __pfx_kthread+0x10/0x10 [ 470.120360][ C0] ret_from_fork+0x45/0x80 [ 470.124824][ C0] ? __pfx_kthread+0x10/0x10 [ 470.129448][ C0] ret_from_fork_asm+0x1a/0x30 [ 470.134259][ C0] [ 470.137290][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 470.143629][ C0] Sending NMI from CPU 0 to CPUs 1: [ 470.148853][ C1] NMI backtrace for cpu 1 [ 470.148873][ C1] CPU: 1 PID: 4476 Comm: kworker/u9:1 Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 470.148898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 470.148912][ C1] Workqueue: 0x0 (krxrpcd) [ 470.148936][ C1] RIP: 0010:bpf_trace_run1+0x3c4/0x580 [ 470.148971][ C1] Code: 89 f9 48 c1 e9 03 80 3c 11 00 0f 85 9a 01 00 00 4c 03 2c c5 40 db 4c 8d 49 ff 45 00 4d 01 7d 08 e9 6d fe ff ff e8 6c bb f4 ff 67 0e db ff 31 ff 41 89 c5 89 c6 e8 fb b5 f4 ff 45 84 ed 0f 85 [ 470.148994][ C1] RSP: 0018:ffffc9000d107988 EFLAGS: 00000093 [ 470.149011][ C1] RAX: 0000000000000000 RBX: ffffc9000304a000 RCX: ffffffff81992681 [ 470.149027][ C1] RDX: ffff88802f250000 RSI: ffffffff81992874 RDI: 0000000000000005 [ 470.149043][ C1] RBP: 1ffff92001a20f32 R08: 0000000000000005 R09: 0000000000000000 [ 470.149058][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 470.149072][ C1] R13: 0000000000000001 R14: ffffc9000304a028 R15: ffffc9000d1079b0 [ 470.149088][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 470.149111][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 470.149127][ C1] CR2: 00007f01a5647f00 CR3: 00000000615da000 CR4: 00000000003526f0 [ 470.149143][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 470.149157][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 470.149171][ C1] Call Trace: [ 470.149179][ C1] [ 470.149186][ C1] ? show_regs+0x8c/0xa0 [ 470.149219][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 470.149253][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 470.149285][ C1] ? nmi_handle+0x1a9/0x5c0 [ 470.149319][ C1] ? bpf_trace_run1+0x3c4/0x580 [ 470.149350][ C1] ? default_do_nmi+0x6a/0x160 [ 470.149372][ C1] ? exc_nmi+0x170/0x1e0 [ 470.149392][ C1] ? end_repeat_nmi+0xf/0x53 [ 470.149415][ C1] ? bpf_trace_run1+0x1d1/0x580 [ 470.149446][ C1] ? bpf_trace_run1+0x3c4/0x580 [ 470.149481][ C1] ? bpf_trace_run1+0x3c4/0x580 [ 470.149513][ C1] ? bpf_trace_run1+0x3c4/0x580 [ 470.149545][ C1] ? bpf_trace_run1+0x3c4/0x580 [ 470.149576][ C1] [ 470.149582][ C1] [ 470.149590][ C1] ? __pfx_bpf_trace_run1+0x10/0x10 [ 470.149622][ C1] ? psi_task_switch+0x55e/0x900 [ 470.149654][ C1] __bpf_trace_rcu_utilization+0x8e/0xc0 [ 470.149693][ C1] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 470.149730][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.149761][ C1] trace_rcu_utilization+0xe4/0x160 [ 470.149792][ C1] rcu_note_context_switch+0x6b/0x1ae0 [ 470.149831][ C1] ? finish_task_switch.isra.0+0x220/0xcc0 [ 470.149856][ C1] ? rcu_is_watching+0x12/0xc0 [ 470.149877][ C1] ? preempt_schedule_irq+0x51/0x90 [ 470.149902][ C1] __schedule+0x293/0x5d00 [ 470.149930][ C1] ? __pfx___schedule+0x10/0x10 [ 470.149952][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.149984][ C1] preempt_schedule_irq+0x51/0x90 [ 470.150011][ C1] irqentry_exit+0x36/0x90 [ 470.150039][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 470.150078][ C1] RIP: 0010:preempt_count_add+0x0/0x150 [ 470.150112][ C1] Code: 5d c3 cc cc cc cc e8 bf 47 89 09 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c0 e0 4b b4 94 55 48 ba 00 00 00 00 00 fc ff df [ 470.150134][ C1] RSP: 0018:ffffc9000d107df8 EFLAGS: 00000202 [ 470.150151][ C1] RAX: 0000000000004008 RBX: ffff88802f250000 RCX: 0000000000000000 [ 470.150166][ C1] RDX: 0000000000000001 RSI: ffffffff8b2caf60 RDI: 0000000000000001 [ 470.150181][ C1] RBP: ffffed1005e4a000 R08: 0000000000000000 R09: 0000000000000001 [ 470.150196][ C1] R10: ffffffff8fe43c17 R11: 0000000000000000 R12: ffff88802f25002c [ 470.150211][ C1] R13: ffff88802f250000 R14: ffffed1005364408 R15: fffffbfff1b01e40 [ 470.150232][ C1] schedule+0xe0/0x350 [ 470.150255][ C1] ? worker_thread+0x271/0xf70 [ 470.150277][ C1] worker_thread+0x2de/0xf70 [ 470.150303][ C1] ? __kthread_parkme+0x148/0x220 [ 470.150331][ C1] ? __pfx_worker_thread+0x10/0x10 [ 470.150354][ C1] kthread+0x2c1/0x3a0 [ 470.150381][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.150404][ C1] ? __pfx_kthread+0x10/0x10 [ 470.150432][ C1] ret_from_fork+0x45/0x80 [ 470.150465][ C1] ? __pfx_kthread+0x10/0x10 [ 470.150496][ C1] ret_from_fork_asm+0x1a/0x30 [ 470.150534][ C1]