last executing test programs: 3m5.848309172s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x1f9, &(0x7f0000000740)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) r3 = socket(0x18, 0x0, 0x0) close(r3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r6}, 0x18) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000d04000000000000000110000000", @ANYRES32=r9], 0x20}}, 0x0) 3m3.627862398s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) chdir(&(0x7f0000000100)='./file1\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) r3 = socket(0x18, 0x0, 0x0) close(r3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r6}, 0x18) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000d04000000000000000110000000", @ANYRES32=r9], 0x20}}, 0x0) 2m59.922111457s ago: executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xc}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x4, 0x100000001}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x800, 0x4) openat$dsp1(0xffffffffffffff9c, 0x0, 0xae40, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4cc4, &(0x7f0000000380)={0x0, 0xb16c, 0x0, 0x1, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000180)) listen(0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x1, &(0x7f0000000040), 0x4) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000065f000/0x3000)=nil) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000480)={0x1}, 0x8) close(r0) 2m57.661822367s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x1f9, &(0x7f0000000740)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) r3 = socket(0x18, 0x0, 0x0) close(r3) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r6}, 0x18) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000d04000000000000000110000000", @ANYRES32=r9], 0x20}}, 0x0) 2m53.167174843s ago: executing program 2: ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f000001f540), &(0x7f0000005dc0)='./file0\x00', 0x0, &(0x7f0000005f80)=ANY=[@ANYBLOB="646174615f636865636b73756d3f6e6f6e652c7374725f686173683d6372633332632c646174615f636865636b73756d3d7878686173682c6261636b67726f756e645f636f6d7072657373696f6e3d6e6f6e652c6d657461646174615f636865636b73756d3d63726336342c7374725f686173683d63726336342c636f6d7072657373696f6e3d677a69702c00b12ad55da9e690f3f671e2a963c6e436c7504557f0fbadaab9607da576d448dd11521821e84b69dce1a85442e5ffd2b948d59a9ab54444559714cabaaa60824f890721ff2a820fe81299e633"], 0xff, 0x5d5e, &(0x7f0000000000)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000005e00)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000006080)={&(0x7f0000005d80), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x24044040) openat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0xc706f252a8b33b54, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000240)={0xbc, 0x0, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) 2m42.705800685s ago: executing program 2: syz_emit_ethernet(0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000140)={0x8}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000f3ff71b4fd6f06751cfffffffffffb00001a9250000000219d2422"], &(0x7f0000000600)='syzkaller\x00'}, 0x90) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000d80)=""/168, 0xa8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) socket$nl_xfrm(0x10, 0x3, 0x6) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00003c3000/0x4000)=nil, 0x4000, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000d40)=[{&(0x7f0000000a80)=""/84}, {&(0x7f0000000b00)=""/149}, {&(0x7f0000000bc0)=""/125}, {&(0x7f0000000c40)=""/216}], 0x0, &(0x7f00000001c0)=[{&(0x7f0000217f28)=""/217, 0xd9}, {&(0x7f0000000980)=""/226, 0x33}], 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000003340), &(0x7f0000003380)=@tcp, 0x2}, 0x20) 14.300628415s ago: executing program 1: add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0x2}) 12.976959577s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000220000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12.759143584s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) rt_tgsigqueueinfo(r0, r0, 0x6, &(0x7f0000000300)={0x2, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x401, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg0\x00'}) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x40000105) 11.174644524s ago: executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="92", 0x1}], 0x1, 0x0) syz_io_uring_setup(0x2ddf, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f0000000040)=ANY=[], 0x2, 0x1b4, &(0x7f0000000f40)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0, 0x60}}, 0xc040094) open$dir(&(0x7f0000001200)='./file2\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x80045105, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1c, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffdfd}, 0x7d) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) 8.35948162s ago: executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 8.102624999s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x2080) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000000)={0x0, 0x0, 0x800000, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405515, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 'syz0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r5}, 0x0, 0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES64], 0x100000530) unshare(0x4000400) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) 4.459508035s ago: executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffdfa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) socket(0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000a40), 0x4) 4.458918257s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) 4.099598206s ago: executing program 4: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 3.84117274s ago: executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)={0x5, 0x0, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3e25133c03d86bd5"}}, 0x48}}, 0x0) 3.805931277s ago: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000ec0), &(0x7f0000000e80)='./file1\x00', 0x1008810, &(0x7f0000002600)=ANY=[], 0x1, 0x5f4, &(0x7f000001f6c0)="$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") lchown(&(0x7f00000000c0)='./file1\x00', 0x0, 0xee01) 3.658910825s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000800)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001080)=""/4096, 0x1000) 3.610789226s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r1, 0x303, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 3.39283638s ago: executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x541b, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007440), 0x0, 0x2000c015) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x40}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) msgget$private(0x0, 0xc) unshare(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x5, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, 0x0, &(0x7f0000000640)=""/215}, 0x20) 3.12521137s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="02000500"}) 2.084405059s ago: executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000002c0)=@caif=@dbg={0x25, 0x3f, 0x7}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="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", 0x147}, {&(0x7f0000000fc0)="da752f575198baaac222", 0xa}], 0x2}, 0x8400) sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f0000000540)={0x2, 0x0, @empty}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000580)="6e4602e2", 0x4}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_discard_preallocations\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x0, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000003040)=ANY=[@ANYBLOB="08000800000000000000000000004500043b00000000000690780a010100ac1414bb4e200000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x449) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x44000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40001) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1.961220978s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000200)="2e0f01c5baf80c66b869d7518766efbafc0cecf0f71c0f49c066b91109000066b8da1a000066ba000000000f300f7908660ff2f4360f38f94c00f30f090f01df", 0x40}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x8018}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.221424658s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001b00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c5002, 0x0) ftruncate(r2, 0x5d801) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}]}]}, 0x28}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="9c", 0xffffff7d}], 0x1) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r7, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) shutdown(0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r11, @ANYBLOB="2800508005000200000000000800030005ac0f001100010092470000000000000048f658ba00000008003500000000000a0006009203effbb1bc00000a0034000101010101"], 0x6c}}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x107042, 0x0) write(r12, &(0x7f0000000400)="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", 0x353c00) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x3920e, r1}) 1.089135827s ago: executing program 0: timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 800.468667ms ago: executing program 0: add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0x2}) 357.890187ms ago: executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x2c}) 267.204362ms ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind(r0, &(0x7f0000000f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80) 205.263266ms ago: executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000008880)=[{&(0x7f0000007300)='\v\x00\x00\x00', 0x4}], 0x1) 0s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da20"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x0) syz_usb_disconnect(0xffffffffffffffff) pipe2$9p(&(0x7f0000000240), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): =1400 audit(1719040178.974:661): avc: denied { unlink } for pid=7519 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 400.883470][ T53] Bluetooth: hci1: command tx timeout [ 400.941878][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.035624][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.058716][ T51] bond0 (unregistering): Released all slaves [ 402.021902][ T51] bond1 (unregistering): Released all slaves [ 402.264521][ T7488] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 402.958020][ T7536] random: crng reseeded on system resumption [ 403.297555][ T7536] Unrecognized hibernate image header format! [ 403.303826][ T7536] PM: hibernation: Image mismatch: architecture specific data [ 403.364369][ T53] Bluetooth: hci1: command tx timeout [ 404.481071][ T29] audit: type=1400 audit(1719040182.834:662): avc: denied { ioctl } for pid=7530 comm="syz-executor.2" path="/dev/ptyq8" dev="devtmpfs" ino=129 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 405.177826][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 405.395796][ T29] audit: type=1400 audit(1719040183.764:663): avc: denied { create } for pid=7546 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 405.747240][ T7528] loop3: detected capacity change from 0 to 512 [ 405.788570][ T29] audit: type=1326 audit(1719040184.124:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f695e87d0a9 code=0x0 [ 405.802136][ T7528] ext4: Unknown parameter 'nouser_xattr' [ 405.953830][ T6917] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 406.101509][ T5155] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 406.337956][ T5155] usb 5-1: config 202 has an invalid interface number: 207 but max is 2 [ 406.364907][ T51] hsr_slave_0: left promiscuous mode [ 406.367270][ T5155] usb 5-1: config 202 contains an unexpected descriptor of type 0x2, skipping [ 406.396627][ T51] hsr_slave_1: left promiscuous mode [ 406.406982][ T7571] loop2: detected capacity change from 0 to 16 [ 406.420747][ T5155] usb 5-1: config 202 has an invalid interface number: 141 but max is 2 [ 406.453197][ T5155] usb 5-1: config 202 contains an unexpected descriptor of type 0x1, skipping [ 406.459884][ T7571] erofs: (device loop2): mounted with root inode @ nid 36. [ 406.491136][ T5155] usb 5-1: config 202 contains an unexpected descriptor of type 0x1, skipping [ 406.505657][ T7571] syz-executor.2: attempt to access beyond end of device [ 406.505657][ T7571] loop2: rw=0, sector=40, nr_sectors = 8 limit=16 [ 406.522132][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.530075][ T5155] usb 5-1: config 202 has an invalid interface number: 116 but max is 2 [ 406.549522][ T5155] usb 5-1: config 202 has no interface number 0 [ 406.558849][ T5155] usb 5-1: config 202 has no interface number 1 [ 406.559927][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.573691][ T5155] usb 5-1: config 202 has no interface number 2 [ 406.573825][ T5155] usb 5-1: config 202 interface 207 altsetting 9 bulk endpoint 0xE has invalid maxpacket 1023 [ 406.659991][ T5155] usb 5-1: config 202 interface 207 altsetting 9 endpoint 0x1 has an invalid bInterval 147, changing to 7 [ 406.665556][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.687718][ T5155] usb 5-1: config 202 interface 207 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 406.719443][ T5155] usb 5-1: config 202 interface 207 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 406.731028][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.762706][ T5155] usb 5-1: config 202 interface 207 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 406.794275][ T5155] usb 5-1: config 202 interface 207 altsetting 9 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 406.843612][ T5155] usb 5-1: config 202 interface 207 altsetting 9 endpoint 0x5 has an invalid bInterval 201, changing to 7 [ 406.883331][ T51] veth1_macvtap: left promiscuous mode [ 406.899784][ T5155] usb 5-1: config 202 interface 207 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 406.916226][ T51] veth0_macvtap: left promiscuous mode [ 406.934819][ T51] veth1_vlan: left promiscuous mode [ 406.940735][ T51] veth0_vlan: left promiscuous mode [ 406.956361][ T5155] usb 5-1: config 202 interface 207 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 406.999127][ T5155] usb 5-1: config 202 interface 141 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 407.043491][ T5155] usb 5-1: config 202 interface 141 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 407.095331][ T7565] loop0: detected capacity change from 0 to 16384 [ 407.098844][ T5155] usb 5-1: config 202 interface 141 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 407.163116][ T7565] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "hash=tea" [ 407.177012][ T5155] usb 5-1: config 202 interface 141 altsetting 7 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 407.251941][ T5155] usb 5-1: config 202 interface 141 altsetting 7 has a duplicate endpoint with address 0x7B, skipping [ 407.303754][ T5155] usb 5-1: config 202 interface 141 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 407.347395][ T5155] usb 5-1: config 202 interface 141 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 407.394537][ T5155] usb 5-1: config 202 interface 141 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 407.457377][ T5155] usb 5-1: config 202 interface 141 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 407.495030][ T5155] usb 5-1: config 202 interface 141 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 407.516938][ T5155] usb 5-1: config 202 interface 141 altsetting 7 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 407.558681][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 407.580098][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 407.593405][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 407.634947][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 407.683435][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 407.714259][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 407.741406][ T7582] loop3: detected capacity change from 0 to 1024 [ 407.749558][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 407.800633][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 407.819915][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.844036][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 407.861113][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 407.902717][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0x85, skipping [ 407.913136][ T7582] hfsplus: bad catalog entry type [ 407.928456][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 407.940039][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 407.955612][ T5155] usb 5-1: config 202 interface 116 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 407.967577][ T5155] usb 5-1: config 202 interface 207 has no altsetting 0 [ 407.976381][ T5155] usb 5-1: config 202 interface 141 has no altsetting 0 [ 407.989032][ T5155] usb 5-1: config 202 interface 116 has no altsetting 0 [ 408.028782][ T5155] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=dc.87 [ 408.048523][ T5155] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.058807][ T5155] usb 5-1: Product: 審빚ᆼꐱী␒삋㏧玂呂홱茀뀣ః毭势懦霥簲叻擞ⴢ恠ോ୅콨夃鰣㕌盼౧斕㐷ွ⻎㡡핐ᄟﻉ媈㏦ [ 408.077127][ T5155] usb 5-1: Manufacturer: 敓踢瞶ᡥ㠼ﾸ溠ᆴ閕㎲쬟熴篡立嶄歖ネ祳봰䠂풉䱤噧딯⦓౥恵즣嵦都먱ᦜ柸踷呖먟⭪눜岅縚ꬫ푭뜷鶛ꁼ᪷爑鯢牔⪣ᛨ츩⹩鴮窘ڭ鲧氄䜈筷ୡ逮ꘄ駸꬚␖戌䢋緙鯌㚲⚯醡挀퐫ނ஗翛浃౜矝쳘껣건訄⚥⌸旲쬾⺺倿坘ⓞ꠹ᙧ탃埙⟴ḓ飣哆䈄 [ 408.121690][ T5155] usb 5-1: SerialNumber: 墕㪑ꜝ痵䯾鴖ᅲ彨懔䠢ࢺ䷋璿簳쪴䧙䍚ⓤ耰䙔ꎿ鍿 [ 408.204805][ T7559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 408.938871][ T51] team0 (unregistering): Port device team_slave_1 removed [ 409.025245][ T51] team0 (unregistering): Port device team_slave_0 removed [ 409.815665][ T7479] chnl_net:caif_netlink_parms(): no params data found [ 409.896209][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 410.077053][ T5155] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 410.158628][ T5155] usb 5-1: setting power ON [ 411.132797][ T5155] dvb-usb: bulk message failed: -22 (2/0) [ 411.168646][ T5155] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 411.209213][ T5155] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 411.246545][ T5155] usb 5-1: media controller created [ 411.574067][ T5155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 411.659140][ T5155] usb 5-1: digital interface selection failed (-22) [ 411.694824][ T5155] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 411.772870][ T29] audit: type=1326 audit(1719040190.134:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7601 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f083e67d0a9 code=0x0 [ 411.820514][ T5155] usb 5-1: setting power OFF [ 411.984381][ T5155] dvb-usb: bulk message failed: -22 (2/0) [ 412.017971][ T5155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 412.087036][ T5155] (NULL device *): no alternate interface [ 412.111879][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.237063][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.301593][ T7606] loop2: detected capacity change from 0 to 1024 [ 412.319743][ T7479] bridge_slave_0: entered allmulticast mode [ 412.357829][ T7479] bridge_slave_0: entered promiscuous mode [ 412.476845][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.507290][ T5155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 412.568947][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.591393][ T7479] bridge_slave_1: entered allmulticast mode [ 412.633051][ T7479] bridge_slave_1: entered promiscuous mode [ 412.735553][ T5155] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 412.843427][ T5155] usb 5-1: setting power ON [ 412.881453][ T5155] dvb-usb: bulk message failed: -22 (2/0) [ 412.933244][ T7604] loop4: detected capacity change from 0 to 1024 [ 412.953585][ T3891] hfsplus: b-tree write err: -5, ino 4 [ 412.965850][ T5155] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 412.980963][ T5155] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 412.989565][ T5155] usb 5-1: media controller created [ 413.032852][ T5155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.171272][ T7604] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 413.182604][ T7604] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 413.205819][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.222675][ T5155] usb 5-1: digital interface selection failed (-22) [ 413.284069][ T7604] jbd2_journal_init_inode: Cannot locate journal superblock [ 413.296216][ T5155] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 413.330207][ T7604] EXT4-fs (loop4): Could not load journal inode [ 413.357669][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.497100][ T5155] usb 5-1: setting power OFF [ 413.554194][ T5155] dvb-usb: bulk message failed: -22 (2/0) [ 413.685154][ T7479] team0: Port device team_slave_0 added [ 413.711537][ T5155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 413.773321][ T5155] (NULL device *): no alternate interface [ 413.784152][ T7479] team0: Port device team_slave_1 added [ 414.023032][ T7630] random: crng reseeded on system resumption [ 415.680788][ T29] audit: type=1400 audit(1719040194.044:666): avc: denied { create } for pid=7633 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 415.697826][ T5155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 415.824752][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.906476][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.909455][ T5155] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 415.985278][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.126483][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.159090][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.318996][ T5155] usb 5-1: setting power ON [ 416.331829][ T5155] dvb-usb: bulk message failed: -22 (2/0) [ 416.343496][ T5155] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.353191][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.364726][ T5155] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 416.379188][ T5155] usb 5-1: media controller created [ 416.560234][ T5155] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.648610][ T29] audit: type=1400 audit(1719040195.014:667): avc: denied { read } for pid=7647 comm="syz-executor.2" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 416.736978][ T29] audit: type=1400 audit(1719040195.044:668): avc: denied { open } for pid=7647 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 416.769461][ T5155] usb 5-1: digital interface selection failed (-22) [ 416.799178][ T29] audit: type=1400 audit(1719040195.154:669): avc: denied { bind } for pid=7647 comm="syz-executor.2" lport=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.814790][ T7479] hsr_slave_0: entered promiscuous mode [ 416.825360][ T5155] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 416.848200][ C1] dccp_invalid_packet: invalid packet type [ 416.876546][ T29] audit: type=1400 audit(1719040195.154:670): avc: denied { node_bind } for pid=7647 comm="syz-executor.2" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 416.877878][ T5155] usb 5-1: setting power OFF [ 416.911711][ T7479] hsr_slave_1: entered promiscuous mode [ 416.931235][ T7479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.942789][ T7479] Cannot create hsr debugfs directory [ 416.959611][ T5155] dvb-usb: bulk message failed: -22 (2/0) [ 416.970939][ T5155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 416.980351][ T5155] (NULL device *): no alternate interface [ 417.263078][ T5155] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 417.353213][ T7630] Unrecognized hibernate image header format! [ 417.359346][ T7630] PM: hibernation: Image mismatch: architecture specific data [ 417.460229][ T5155] usb 5-1: USB disconnect, device number 9 [ 417.664298][ T7658] loop3: detected capacity change from 0 to 24 [ 417.694502][ T7658] romfs: Unknown parameter '/dev/ttyS3' [ 417.742342][ T7641] xt_TCPMSS: Only works on TCP SYN packets [ 419.038483][ T7658] overlayfs: overlapping lowerdir path [ 419.445873][ T7664] mkiss: ax0: crc mode is auto. [ 419.503351][ T7673] loop3: detected capacity change from 0 to 256 [ 419.565335][ T7673] exfat: Deprecated parameter 'utf8' [ 419.795792][ T7673] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 419.839251][ T7664] loop0: detected capacity change from 0 to 1024 [ 420.076416][ T7664] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 420.087895][ T7664] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 420.346001][ T7664] jbd2_journal_init_inode: Cannot locate journal superblock [ 420.353696][ T7664] EXT4-fs (loop0): Could not load journal inode [ 423.661457][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 423.734773][ T29] audit: type=1400 audit(1719040202.094:671): avc: denied { write } for pid=7694 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 423.927845][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 423.982983][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.021467][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.082586][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.092918][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.112500][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.173224][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.220286][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.280759][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.337921][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 424.522458][ T9] usb 5-1: unable to read config index 3 descriptor/start: -71 [ 424.554119][ T9] usb 5-1: can't read configurations, error -71 [ 424.717162][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 425.301367][ T7479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.316299][ T7715] loop0: detected capacity change from 0 to 128 [ 425.373410][ T7715] VFS: could not find a valid V7 on loop0. [ 425.489219][ T7720] random: crng reseeded on system resumption [ 425.807893][ T7720] Unrecognized hibernate image header format! [ 425.814120][ T7720] PM: hibernation: Image mismatch: architecture specific data [ 426.599106][ T7479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 426.752062][ T7479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 426.856069][ T7479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 427.956829][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.169745][ T7479] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.291205][ T5185] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.298540][ T5185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.536169][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.543578][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.060439][ T7479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.318780][ T7755] loop2: detected capacity change from 0 to 1024 [ 430.896630][ T7755] hfsplus: bad catalog entry type [ 430.967244][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 430.980616][ T7770] loop0: detected capacity change from 0 to 256 [ 431.038013][ T7777] fuse: Unknown parameter 'use00000000000000000000' [ 431.100224][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.133214][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.222510][ T7771] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 431.386117][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.442059][ T7479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.790950][ T7768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7768 comm=syz-executor.0 [ 432.008595][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 432.132684][ T7479] veth0_vlan: entered promiscuous mode [ 432.256943][ T7479] veth1_vlan: entered promiscuous mode [ 432.501084][ T29] audit: type=1326 audit(1719040210.864:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7787 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x0 [ 432.583729][ T7479] veth0_macvtap: entered promiscuous mode [ 432.636603][ T7479] veth1_macvtap: entered promiscuous mode [ 432.846601][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.857228][ T7790] loop4: detected capacity change from 0 to 1024 [ 432.950639][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.046735][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.114854][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.149746][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.217183][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.239861][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.292187][ T3879] hfsplus: b-tree write err: -5, ino 4 [ 433.310776][ T7809] loop0: detected capacity change from 0 to 128 [ 433.343514][ T7806] loop2: detected capacity change from 0 to 16 [ 433.360194][ T7809] VFS: could not find a valid V7 on loop0. [ 433.370284][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.430627][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.479072][ T7806] erofs: (device loop2): mounted with root inode @ nid 36. [ 433.649680][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.802602][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.859979][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.904854][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.978838][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.013583][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.090028][ T7479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.197881][ T7479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.346854][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.741662][ T7479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.768294][ T7479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.840197][ T7479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.885724][ T7479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.456939][ T7842] fuse: Unknown parameter 'use00000000000000000000' [ 436.680039][ T5245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.715222][ T2482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.763937][ T5245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.780546][ T2482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.817743][ T7845] mkiss: ax0: crc mode is auto. [ 437.865188][ T7854] loop0: detected capacity change from 0 to 32768 [ 438.162652][ T7854] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 438.180300][ T7854] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 438.373977][ T7854] bcachefs (loop0): alloc_read... done [ 438.380778][ T7854] bcachefs (loop0): stripes_read... done [ 438.386770][ T7854] bcachefs (loop0): snapshots_read... done [ 438.402750][ T7854] bcachefs (loop0): journal_replay... done [ 438.408731][ T7854] bcachefs (loop0): resume_logged_ops... done [ 438.434633][ T7854] bcachefs (loop0): going read-write [ 438.505724][ T7854] bcachefs (loop0): done starting filesystem [ 439.042504][ T7874] loop1: detected capacity change from 0 to 128 [ 439.048903][ T29] audit: type=1400 audit(1719040217.364:673): avc: denied { map } for pid=7853 comm="syz-executor.0" path="/root/syzkaller-testdir4290472992/syzkaller.KBhBDm/123/file0/blkio.bfq.io_wait_time_recursive" dev="loop0" ino=1073741825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 439.105376][ T7865] loop4: detected capacity change from 0 to 256 [ 439.136309][ T7845] loop3: detected capacity change from 0 to 1024 [ 439.195326][ T7874] VFS: could not find a valid V7 on loop1. [ 439.841010][ T29] audit: type=1800 audit(1719040218.204:674): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1073741826 res=0 errno=0 [ 441.274237][ T7902] loop1: detected capacity change from 0 to 128 [ 441.290365][ T7905] loop2: detected capacity change from 0 to 16 [ 441.390546][ T7902] VFS: could not find a valid V7 on loop1. [ 441.421346][ T7905] erofs: (device loop2): mounted with root inode @ nid 36. [ 441.545324][ T6407] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 443.044745][ T5117] bcachefs (loop0): shutting down [ 443.059792][ T5117] bcachefs (loop0): going read-only [ 443.071870][ T5117] bcachefs (loop0): finished waiting for writes to stop [ 443.180219][ T5117] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 444.587462][ T7901] loop3: detected capacity change from 0 to 1024 [ 444.640517][ T7926] fuse: Unknown parameter 'user_i00000000000000000000' [ 444.709382][ T5117] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 13 [ 444.726502][ T5117] bcachefs (loop0): shutdown complete, journal seq 14 [ 444.745122][ T5117] bcachefs (loop0): marking filesystem clean [ 444.889424][ T5117] bcachefs (loop0): shutdown complete [ 445.357032][ T29] audit: type=1326 audit(1719040223.714:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7929 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x0 [ 445.815358][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.829706][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.861912][ T7935] loop1: detected capacity change from 0 to 1024 [ 446.366481][ T7943] loop2: detected capacity change from 0 to 32768 [ 446.548347][ T7940] mkiss: ax0: crc mode is auto. [ 446.757391][ T7943] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 446.774260][ T7943] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 446.791048][ T3891] hfsplus: b-tree write err: -5, ino 4 [ 446.936341][ T7943] bcachefs (loop2): alloc_read... done [ 446.942041][ T7943] bcachefs (loop2): stripes_read... done [ 446.947731][ T7943] bcachefs (loop2): snapshots_read... done [ 446.956745][ T7943] bcachefs (loop2): journal_replay... done [ 446.962800][ T7943] bcachefs (loop2): resume_logged_ops... done [ 447.065339][ T7943] bcachefs (loop2): going read-write [ 447.084461][ T7943] bcachefs (loop2): done starting filesystem [ 448.253281][ T7940] loop4: detected capacity change from 0 to 1024 [ 448.544328][ T7940] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 448.574211][ T7940] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 448.649528][ T7940] jbd2_journal_init_inode: Cannot locate journal superblock [ 448.688870][ T7940] EXT4-fs (loop4): Could not load journal inode [ 448.801058][ T7962] loop3: detected capacity change from 0 to 1024 [ 448.838454][ T2482] hfsplus: b-tree write err: -5, ino 4 [ 449.133776][ T29] audit: type=1800 audit(1719040227.504:676): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1073741825 res=0 errno=0 [ 456.254541][ T7976] loop0: detected capacity change from 0 to 1024 [ 456.454613][ T7976] hfsplus: bad catalog entry type [ 456.507716][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 456.585361][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 456.595524][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 456.952586][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 459.124294][ T7991] loop4: detected capacity change from 0 to 256 [ 459.499194][ T7995] No such timeout policy "syz0" [ 459.619544][ T7997] loop3: detected capacity change from 0 to 2048 [ 459.737177][ T7997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.818462][ T8002] fuse: Unknown parameter 'user_i00000000000000000000' [ 461.154160][ T8014] loop0: detected capacity change from 0 to 24 [ 461.163403][ T8014] romfs: Unknown parameter '/dev/ttyS3' [ 461.386224][ T8014] overlayfs: overlapping lowerdir path [ 461.682638][ T29] audit: type=1326 audit(1719040240.054:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 461.754302][ T8020] loop0: detected capacity change from 0 to 256 [ 461.781215][ T29] audit: type=1326 audit(1719040240.054:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 461.836083][ T8020] exfat: Deprecated parameter 'utf8' [ 461.919390][ T29] audit: type=1326 audit(1719040240.104:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 462.064389][ T8019] loop1: detected capacity change from 0 to 256 [ 462.079635][ T29] audit: type=1326 audit(1719040240.104:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 462.116058][ T8020] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 462.290028][ T29] audit: type=1326 audit(1719040240.104:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 462.370198][ T29] audit: type=1326 audit(1719040240.104:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 462.520213][ T29] audit: type=1326 audit(1719040240.104:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 462.621086][ T8027] 9pnet_fd: Insufficient options for proto=fd [ 462.715644][ T29] audit: type=1326 audit(1719040240.104:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 462.731239][ T8019] FAT-fs (loop1): Directory bread(block 64) failed [ 462.803881][ T8019] FAT-fs (loop1): Directory bread(block 65) failed [ 462.828296][ T8019] FAT-fs (loop1): Directory bread(block 66) failed [ 462.871171][ T29] audit: type=1326 audit(1719040240.104:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 462.910967][ T8019] FAT-fs (loop1): Directory bread(block 67) failed [ 462.917747][ T8019] FAT-fs (loop1): Directory bread(block 68) failed [ 462.936708][ T29] audit: type=1326 audit(1719040240.104:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8017 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 462.971415][ T8019] FAT-fs (loop1): Directory bread(block 69) failed [ 462.995382][ T8019] FAT-fs (loop1): Directory bread(block 70) failed [ 463.051080][ T8019] FAT-fs (loop1): Directory bread(block 71) failed [ 463.057876][ T8019] FAT-fs (loop1): Directory bread(block 72) failed [ 463.101226][ T8019] FAT-fs (loop1): Directory bread(block 73) failed [ 464.276894][ T8048] loop1: detected capacity change from 0 to 1024 [ 464.429869][ T51] hfsplus: b-tree write err: -5, ino 4 [ 466.158440][ T8046] loop4: detected capacity change from 0 to 1024 [ 466.400990][ T8046] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 466.427309][ T8046] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 466.533793][ T8046] jbd2_journal_init_inode: Cannot locate journal superblock [ 466.544681][ T8046] EXT4-fs (loop4): Could not load journal inode [ 466.853651][ T8057] loop0: detected capacity change from 0 to 1024 [ 467.441400][ T5245] hfsplus: b-tree write err: -5, ino 4 [ 467.549520][ T8063] fuse: Unknown parameter 'user_i00000000000000000000' [ 468.602064][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 468.602088][ T29] audit: type=1804 audit(1719040246.974:757): pid=8065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4202779642/syzkaller.q7odeX/112/bus" dev="sda1" ino=1946 res=1 errno=0 [ 468.708037][ T8065] loop4: detected capacity change from 0 to 64 [ 468.879418][ T8065] veth1_macvtap: left promiscuous mode [ 468.939176][ T8073] loop1: detected capacity change from 0 to 256 [ 469.320323][ T8076] loop0: detected capacity change from 0 to 24 [ 469.390486][ T8076] romfs: Unknown parameter '/dev/ttyS3' [ 469.496671][ T6424] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 469.539618][ T29] audit: type=1326 audit(1719040247.904:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 469.585612][ T8076] overlayfs: overlapping lowerdir path [ 469.627022][ T29] audit: type=1326 audit(1719040247.904:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 469.680403][ T8082] loop4: detected capacity change from 0 to 256 [ 469.742996][ T29] audit: type=1326 audit(1719040247.914:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 469.767878][ T29] audit: type=1326 audit(1719040247.944:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 469.806601][ T8076] loop0: detected capacity change from 0 to 256 [ 469.806822][ T29] audit: type=1326 audit(1719040247.964:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 469.841945][ T8076] exfat: Deprecated parameter 'utf8' [ 469.928264][ T29] audit: type=1326 audit(1719040247.964:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 469.987949][ T8076] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 470.035906][ T29] audit: type=1326 audit(1719040247.964:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 470.063232][ T8082] FAT-fs (loop4): Directory bread(block 64) failed [ 470.069826][ T8082] FAT-fs (loop4): Directory bread(block 65) failed [ 470.079774][ T8082] FAT-fs (loop4): Directory bread(block 66) failed [ 470.128310][ T8082] FAT-fs (loop4): Directory bread(block 67) failed [ 470.151812][ T8082] FAT-fs (loop4): Directory bread(block 68) failed [ 470.161261][ T29] audit: type=1326 audit(1719040247.964:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 470.199344][ T8082] FAT-fs (loop4): Directory bread(block 69) failed [ 470.237864][ T8082] FAT-fs (loop4): Directory bread(block 70) failed [ 470.281104][ T29] audit: type=1326 audit(1719040247.974:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8081 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 470.307452][ T8082] FAT-fs (loop4): Directory bread(block 71) failed [ 470.325805][ T8082] FAT-fs (loop4): Directory bread(block 72) failed [ 470.344807][ T8082] FAT-fs (loop4): Directory bread(block 73) failed [ 472.624476][ T8097] overlay: ./file0 is not a directory [ 472.646244][ T8098] overlay: ./file0 is not a directory [ 473.097085][ T8120] fuse: Unknown parameter 'user_id00000000000000000000' [ 473.996713][ T8119] loop3: detected capacity change from 0 to 1024 [ 474.140704][ T8126] fuse: Unknown parameter 'user_i00000000000000000000' [ 474.281815][ T5245] hfsplus: b-tree write err: -5, ino 4 [ 474.762297][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 474.762321][ T29] audit: type=1800 audit(1719040253.134:844): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1956 res=0 errno=0 [ 475.052930][ T29] audit: type=1326 audit(1719040509.424:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 475.141206][ T29] audit: type=1326 audit(1719040509.454:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 475.208816][ T29] audit: type=1326 audit(1719040509.454:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 475.290132][ T8133] loop4: detected capacity change from 0 to 256 [ 475.311256][ T29] audit: type=1326 audit(1719040509.464:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 475.444909][ T29] audit: type=1326 audit(1719040509.604:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 475.518083][ T8133] FAT-fs (loop4): Directory bread(block 64) failed [ 475.561839][ T8133] FAT-fs (loop4): Directory bread(block 65) failed [ 475.584892][ T8133] FAT-fs (loop4): Directory bread(block 66) failed [ 475.601731][ T29] audit: type=1326 audit(1719040509.604:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 475.628334][ T8136] loop3: detected capacity change from 0 to 24 [ 475.630342][ T8133] FAT-fs (loop4): Directory bread(block 67) failed [ 475.648243][ T8136] romfs: Unknown parameter '/dev/ttyS3' [ 475.699215][ T8133] FAT-fs (loop4): Directory bread(block 68) failed [ 475.722369][ T29] audit: type=1326 audit(1719040509.604:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 475.749867][ T8133] FAT-fs (loop4): Directory bread(block 69) failed [ 475.757305][ T8136] overlayfs: overlapping lowerdir path [ 475.777099][ T8133] FAT-fs (loop4): Directory bread(block 70) failed [ 475.811035][ T8133] FAT-fs (loop4): Directory bread(block 71) failed [ 475.826423][ T8133] FAT-fs (loop4): Directory bread(block 72) failed [ 475.838227][ T29] audit: type=1326 audit(1719040509.604:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 475.881548][ T8133] FAT-fs (loop4): Directory bread(block 73) failed [ 475.981786][ T29] audit: type=1326 audit(1719040509.604:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 476.037153][ T8136] loop3: detected capacity change from 0 to 256 [ 476.064595][ T8136] exfat: Deprecated parameter 'utf8' [ 476.151183][ T8136] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 476.609355][ T8143] loop0: detected capacity change from 0 to 4096 [ 476.619307][ T8143] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 476.837410][ T8143] ntfs3: loop0: failed to convert "c46c" to cp850 [ 477.036531][ T8147] loop4: detected capacity change from 0 to 1024 [ 477.240333][ T2440] hfsplus: b-tree write err: -5, ino 4 [ 477.293790][ T8151] loop3: detected capacity change from 0 to 256 [ 478.941028][ T8166] netlink: 2818 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.957475][ T8166] netlink: 39684 bytes leftover after parsing attributes in process `syz-executor.0'. [ 479.297219][ T8169] fuse: Unknown parameter 'user_id00000000000000000000' [ 480.104950][ T8176] fuse: Unknown parameter 'user_i00000000000000000000' [ 480.234509][ T8173] loop3: detected capacity change from 0 to 1024 [ 480.338131][ T3874] hfsplus: b-tree write err: -5, ino 4 [ 480.370959][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 480.370983][ T29] audit: type=1400 audit(1719040514.734:917): avc: denied { write } for pid=8177 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 480.375040][ T8178] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.745007][ T29] audit: type=1400 audit(1719040515.114:918): avc: denied { mount } for pid=8177 comm="syz-executor.4" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 481.256905][ T8187] loop0: detected capacity change from 0 to 256 [ 481.276542][ T29] audit: type=1326 audit(1719040515.494:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a647d0a9 code=0x7ffc0000 [ 481.405886][ T8186] loop3: detected capacity change from 0 to 2048 [ 481.412868][ T29] audit: type=1326 audit(1719040515.494:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a647d0a9 code=0x7ffc0000 [ 481.412973][ T29] audit: type=1326 audit(1719040515.494:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6a647d0a9 code=0x7ffc0000 [ 481.413064][ T29] audit: type=1326 audit(1719040515.504:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a647d0a9 code=0x7ffc0000 [ 481.413153][ T29] audit: type=1326 audit(1719040515.504:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6a647d0a9 code=0x7ffc0000 [ 481.413243][ T29] audit: type=1326 audit(1719040515.504:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a647d0a9 code=0x7ffc0000 [ 481.413339][ T29] audit: type=1326 audit(1719040515.514:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fd6a647d0a9 code=0x7ffc0000 [ 481.413436][ T29] audit: type=1326 audit(1719040515.514:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6a647d0a9 code=0x7ffc0000 [ 481.506240][ T8187] FAT-fs (loop0): Directory bread(block 64) failed [ 481.584989][ T8186] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.413780][ T8187] FAT-fs (loop0): Directory bread(block 65) failed [ 482.420705][ T8187] FAT-fs (loop0): Directory bread(block 66) failed [ 482.491122][ T8187] FAT-fs (loop0): Directory bread(block 67) failed [ 482.538440][ T8187] FAT-fs (loop0): Directory bread(block 68) failed [ 482.561229][ T8187] FAT-fs (loop0): Directory bread(block 69) failed [ 482.588513][ T8187] FAT-fs (loop0): Directory bread(block 70) failed [ 482.621995][ T8187] FAT-fs (loop0): Directory bread(block 71) failed [ 482.628806][ T8187] FAT-fs (loop0): Directory bread(block 72) failed [ 482.640105][ T8187] FAT-fs (loop0): Directory bread(block 73) failed [ 483.389076][ T8198] loop4: detected capacity change from 0 to 4096 [ 483.408433][ T8198] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 483.595091][ T8198] ntfs3: loop4: failed to convert "c46c" to cp850 [ 484.024655][ T8206] loop0: detected capacity change from 0 to 1024 [ 484.085753][ T51] hfsplus: b-tree write err: -5, ino 4 [ 484.971909][ T8212] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 484.984253][ T8212] netlink: 82332 bytes leftover after parsing attributes in process `syz-executor.4'. [ 485.588672][ T8217] fuse: Unknown parameter 'user_id00000000000000000000' [ 485.695050][ T8216] loop4: detected capacity change from 0 to 2048 [ 485.772290][ T8216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 485.986052][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 485.986076][ T29] audit: type=1326 audit(1719040520.354:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a647d0a9 code=0x0 [ 486.392553][ T8221] loop0: detected capacity change from 0 to 1024 [ 486.560312][ T8224] fuse: Unknown parameter 'user_i00000000000000000000' [ 486.739569][ T3879] Allocator stuck? Waited for 10 seconds [ 486.739650][ T3879] Allocator debug: [ 486.739661][ T3879] hidden8448 [ 486.739672][ T3879] btree 2816 [ 486.740506][ T3879] data 6160 [ 486.740520][ T3879] cached 0 [ 486.740531][ T3879] reserved 0 [ 486.740543][ T3879] online_reserved 26640 [ 486.740554][ T3879] nr_inodes 10 [ 486.740572][ T3879] [ 486.740582][ T3879] freelist_wait waiting [ 486.740593][ T3879] open buckets allocated1 [ 486.740605][ T3879] open buckets total 1024 [ 486.740616][ T3879] open_buckets_wait empty [ 486.740628][ T3879] open_buckets_btree 0 [ 486.740639][ T3879] open_buckets_user 0 [ 486.740650][ T3879] btree reserve cache 0 [ 486.740661][ T3879] [ 486.740670][ T3879] Dev 0: [ 486.740680][ T3879] buckets sectors fragmented [ 486.740695][ T3879] free 58 0 0 [ 486.740709][ T3879] sb 25 6152 248 [ 486.740724][ T3879] journal 8 2048 0 [ 486.740739][ T3879] btree 11 2816 0 [ 486.740754][ T3879] user 26 6160 496 [ 486.740768][ T3879] cached 0 0 0 [ 486.740783][ T3879] parity 0 0 0 [ 486.740797][ T3879] stripe 0 0 0 [ 486.740812][ T3879] need_gc_gens 0 0 0 [ 486.740827][ T3879] need_discard 0 0 0 [ 486.746431][ T3879] [ 486.746445][ T3879] reserves: [ 486.746456][ T3879] stripe 60 [ 486.746469][ T3879] normal 58 [ 486.746481][ T3879] copygc 56 [ 486.746493][ T3879] btree 28 [ 486.746505][ T3879] btree_copygc 0 [ 486.746517][ T3879] reclaim 0 [ 486.746529][ T3879] interior_updates 0 [ 486.746541][ T3879] [ 486.746551][ T3879] open buckets 0 [ 486.746570][ T3879] buckets to invalidate 0 [ 486.746582][ T3879] [ 486.746591][ T3879] Copygc debug: [ 486.746602][ T3879] Currently waiting for: 0 B [ 486.746614][ T3879] Currently waiting since: 1.00 MiB [ 486.746626][ T3879] Currently calculated wait: 0 B [ 486.746637][ T3879] [ 486.746647][ T3879] Journal debug: [ 486.746657][ T3879] flags: replay_done,running,may_skip_flush [ 486.746670][ T3879] dirty journal entries:0/32768 [ 486.746682][ T3879] seq: 18 [ 486.746692][ T3879] seq_ondisk:18 [ 486.746703][ T3879] last_seq:19 [ 486.746713][ T3879] last_seq_ondisk:18 [ 486.746724][ T3879] flushed_seq_ondisk:18 [ 486.746735][ T3879] watermark:stripe [ 486.746746][ T3879] each entry reserved:361 [ 486.746819][ T3879] nr flush writes:11 [ 486.746831][ T3879] nr noflush writes:0 [ 486.746842][ T3879] average write size:4.20 KiB [ 486.746854][ T3879] nr direct reclaim:0 [ 486.746865][ T3879] nr background reclaim:71 [ 486.746876][ T3879] reclaim kicked:0 [ 486.746887][ T3879] reclaim runs in:0 ms [ 486.746898][ T3879] blocked: 0 [ 486.746909][ T3879] current entry sectors:256 [ 486.746920][ T3879] current entry error:ok [ 486.746932][ T3879] current entry:closed [ 486.746943][ T3879] unwritten entries: [ 486.746954][ T3879] last buf closed [ 486.746964][ T3879] space: [ 486.746974][ T3879] discarded256:1536 [ 486.746985][ T3879] clean ondisk256:1536 [ 486.746996][ T3879] clean 256:1536 [ 486.747007][ T3879] total 256:2048 [ 486.747018][ T3879] dev 0: [ 486.747028][ T3879] nr 8 [ 486.747038][ T3879] bucket size256 [ 486.747049][ T3879] available6:120 [ 486.747059][ T3879] discard_idx0 [ 486.747070][ T3879] dirty_ondisk0 (seq 18) [ 486.747082][ T3879] dirty_idx0 (seq 18) [ 486.747093][ T3879] cur_idx0 (seq 18) [ 486.747104][ T3879] [ 486.791979][ T3891] hfsplus: b-tree write err: -5, ino 4 [ 487.907704][ T29] audit: type=1400 audit(1719040522.284:993): avc: denied { create } for pid=8229 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 488.161924][ T29] audit: type=1400 audit(1719040522.524:994): avc: denied { bind } for pid=8229 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 488.739394][ T29] audit: type=1326 audit(1719040523.104:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 488.817016][ T8241] loop3: detected capacity change from 0 to 256 [ 488.825481][ T29] audit: type=1326 audit(1719040523.134:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 488.907452][ T29] audit: type=1326 audit(1719040523.134:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 488.957812][ T8243] loop1: detected capacity change from 0 to 256 [ 488.981015][ T29] audit: type=1326 audit(1719040523.134:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 489.114170][ T8241] FAT-fs (loop3): Directory bread(block 64) failed [ 489.123131][ T29] audit: type=1326 audit(1719040523.144:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 489.174025][ T29] audit: type=1326 audit(1719040523.144:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 489.193745][ T8241] FAT-fs (loop3): Directory bread(block 65) failed [ 489.226925][ T8241] FAT-fs (loop3): Directory bread(block 66) failed [ 489.249926][ T8241] FAT-fs (loop3): Directory bread(block 67) failed [ 489.277943][ T8241] FAT-fs (loop3): Directory bread(block 68) failed [ 489.309113][ T29] audit: type=1326 audit(1719040523.144:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 489.318273][ T8241] FAT-fs (loop3): Directory bread(block 69) failed [ 489.354706][ T8241] FAT-fs (loop3): Directory bread(block 70) failed [ 489.392914][ T8241] FAT-fs (loop3): Directory bread(block 71) failed [ 489.412443][ T8241] FAT-fs (loop3): Directory bread(block 72) failed [ 489.419821][ T8241] FAT-fs (loop3): Directory bread(block 73) failed [ 489.858153][ T8237] loop0: detected capacity change from 0 to 32768 [ 490.150771][ T8240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8240 comm=syz-executor.1 [ 490.289554][ T8248] loop3: detected capacity change from 0 to 4096 [ 490.331130][ T8248] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 490.488281][ T8248] ntfs3: loop3: failed to convert "c46c" to cp850 [ 490.894111][ T8254] fuse: Bad value for 'fd' [ 491.040456][ T8255] netlink: 1834 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.053341][ T8255] netlink: 24388 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.161300][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 491.161326][ T29] audit: type=1326 audit(1719040525.524:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x0 [ 491.398544][ T8260] loop4: detected capacity change from 0 to 1024 [ 491.560545][ T51] hfsplus: b-tree write err: -5, ino 4 [ 491.628216][ T8268] loop3: detected capacity change from 0 to 256 [ 491.645533][ T8268] exfat: Deprecated parameter 'utf8' [ 491.775483][ T8268] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 492.108813][ T29] audit: type=1326 audit(1719040526.474:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8270 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x0 [ 492.469191][ T8277] loop1: detected capacity change from 0 to 1024 [ 492.551453][ T5155] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 492.615174][ T7969] hfsplus: b-tree write err: -5, ino 4 [ 492.778276][ T5155] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 492.827297][ T5155] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 492.859796][ T5155] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 492.939602][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.024137][ T8276] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.330969][ T5185] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 493.551012][ T5185] usb 4-1: Using ep0 maxpacket: 8 [ 493.622369][ T5185] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 493.661580][ T5185] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 493.748588][ T5185] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 493.844311][ T5185] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 493.955999][ T5185] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 493.992338][ T5158] usb 5-1: USB disconnect, device number 12 [ 494.004122][ T5185] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 494.121136][ T5185] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 494.185348][ T5185] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 494.287128][ T5185] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 494.318260][ T5185] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 494.340533][ T5185] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 494.362220][ T5185] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 494.453040][ T5185] usb 4-1: string descriptor 0 read error: -22 [ 494.483458][ T5185] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 494.509343][ T5185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.548800][ T5185] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 494.801044][ T29] audit: type=1326 audit(1719040529.154:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 494.856739][ T8284] loop1: detected capacity change from 0 to 256 [ 494.910568][ T29] audit: type=1326 audit(1719040529.154:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 494.997718][ T5185] usb 4-1: USB disconnect, device number 10 [ 495.016571][ T8284] FAT-fs (loop1): Directory bread(block 64) failed [ 495.023224][ T29] audit: type=1326 audit(1719040529.164:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 495.023323][ T29] audit: type=1326 audit(1719040529.164:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 495.023412][ T29] audit: type=1326 audit(1719040529.164:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 495.023503][ T29] audit: type=1326 audit(1719040529.164:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 495.131008][ T8284] FAT-fs (loop1): Directory bread(block 65) failed [ 495.156645][ T8284] FAT-fs (loop1): Directory bread(block 66) failed [ 495.163600][ T8284] FAT-fs (loop1): Directory bread(block 67) failed [ 495.170311][ T8284] FAT-fs (loop1): Directory bread(block 68) failed [ 495.197345][ T8284] FAT-fs (loop1): Directory bread(block 69) failed [ 495.215245][ T8284] FAT-fs (loop1): Directory bread(block 70) failed [ 495.217868][ T29] audit: type=1326 audit(1719040529.164:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 495.251483][ T29] audit: type=1326 audit(1719040529.164:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 495.278339][ T8284] FAT-fs (loop1): Directory bread(block 71) failed [ 495.291400][ T8284] FAT-fs (loop1): Directory bread(block 72) failed [ 495.298170][ T8284] FAT-fs (loop1): Directory bread(block 73) failed [ 496.109696][ T8299] loop1: detected capacity change from 0 to 256 [ 496.827677][ T8306] loop3: detected capacity change from 0 to 2048 [ 496.839260][ T8303] mkiss: ax0: crc mode is auto. [ 496.880189][ T8306] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 499.094257][ T8307] loop4: detected capacity change from 0 to 1024 [ 499.141975][ T8307] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 499.161230][ T8307] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 499.245544][ T8307] jbd2_journal_init_inode: Cannot locate journal superblock [ 499.253256][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 499.267908][ T8307] EXT4-fs (loop4): Could not load journal inode [ 499.438197][ T8318] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.447936][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 499.450828][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.464510][ T8] usb 4-1: config 0 has no interface number 0 [ 499.489807][ T8318] netlink: 65188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.503043][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.577954][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 499.624394][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.668422][ T8] usb 4-1: config 0 descriptor?? [ 499.700281][ T8] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 499.910927][ T5185] usb 4-1: USB disconnect, device number 11 [ 499.966541][ T5185] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 500.254457][ T8321] fuse: Bad value for 'fd' [ 500.416345][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 500.416369][ T29] audit: type=1326 audit(1719040534.784:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8322 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x0 [ 501.055973][ T8328] loop3: detected capacity change from 0 to 24 [ 501.083687][ T8328] romfs: Unknown parameter '/dev/ttyS3' [ 501.086736][ T8325] loop4: detected capacity change from 0 to 1024 [ 501.234541][ T8328] overlayfs: overlapping lowerdir path [ 501.417808][ T51] hfsplus: b-tree write err: -5, ino 4 [ 501.479770][ T29] audit: type=1326 audit(1719040535.754:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8329 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x0 [ 501.499034][ T8328] loop3: detected capacity change from 0 to 256 [ 501.558336][ T8328] exfat: Deprecated parameter 'utf8' [ 501.596285][ T8333] loop1: detected capacity change from 0 to 1024 [ 501.663074][ T8328] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 501.793460][ T3874] hfsplus: b-tree write err: -5, ino 4 [ 502.544334][ T29] audit: type=1326 audit(1719040536.914:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 502.639098][ T29] audit: type=1326 audit(1719040536.944:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 502.726204][ T8336] loop4: detected capacity change from 0 to 256 [ 502.788048][ T29] audit: type=1326 audit(1719040536.944:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 502.867249][ T29] audit: type=1326 audit(1719040536.964:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 502.893516][ T8336] FAT-fs (loop4): Directory bread(block 64) failed [ 502.915252][ T8336] FAT-fs (loop4): Directory bread(block 65) failed [ 502.946358][ T8336] FAT-fs (loop4): Directory bread(block 66) failed [ 502.951067][ T29] audit: type=1326 audit(1719040536.964:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 502.960940][ T8336] FAT-fs (loop4): Directory bread(block 67) failed [ 503.009204][ T8336] FAT-fs (loop4): Directory bread(block 68) failed [ 503.031051][ T8336] FAT-fs (loop4): Directory bread(block 69) failed [ 503.032517][ T29] audit: type=1326 audit(1719040536.964:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 503.037948][ T8336] FAT-fs (loop4): Directory bread(block 70) failed [ 503.128118][ T8336] FAT-fs (loop4): Directory bread(block 71) failed [ 503.141166][ T29] audit: type=1326 audit(1719040536.964:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 503.151228][ T8336] FAT-fs (loop4): Directory bread(block 72) failed [ 503.180661][ T29] audit: type=1326 audit(1719040536.964:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x7ffc0000 [ 503.226725][ T8336] FAT-fs (loop4): Directory bread(block 73) failed [ 503.272474][ T8340] loop3: detected capacity change from 0 to 1024 [ 503.388956][ T62] hfsplus: b-tree write err: -5, ino 4 [ 504.016109][ T8342] loop3: detected capacity change from 0 to 256 [ 506.279904][ T8362] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 506.301049][ T8362] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 506.384454][ T8369] loop0: detected capacity change from 0 to 128 [ 506.833395][ T8363] loop1: detected capacity change from 0 to 1024 [ 506.915218][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 506.915236][ T29] audit: type=1326 audit(1719040541.284:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8368 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a647d0a9 code=0x0 [ 506.949319][ T8363] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 506.981039][ T8363] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 507.023372][ T8363] jbd2_journal_init_inode: Cannot locate journal superblock [ 507.034769][ T29] audit: type=1400 audit(1719040541.394:1236): avc: denied { mounton } for pid=8368 comm="syz-executor.0" path="/root/syzkaller-testdir4290472992/syzkaller.KBhBDm/147/file0/file0/bus" dev="loop0" ino=1049037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 507.036634][ T8374] fuse: Bad value for 'fd' [ 507.077049][ T8363] EXT4-fs (loop1): Could not load journal inode [ 507.222776][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.235793][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.809993][ T29] audit: type=1400 audit(1719040542.174:1237): avc: denied { unmount } for pid=5117 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 508.055146][ T29] audit: type=1326 audit(1719040542.424:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 508.253589][ T8378] loop3: detected capacity change from 0 to 256 [ 508.305229][ T8378] FAT-fs (loop3): Directory bread(block 64) failed [ 508.321096][ T29] audit: type=1326 audit(1719040542.424:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 508.324845][ T8378] FAT-fs (loop3): Directory bread(block 65) failed [ 508.418878][ T8378] FAT-fs (loop3): Directory bread(block 66) failed [ 508.451020][ T8378] FAT-fs (loop3): Directory bread(block 67) failed [ 508.457784][ T8378] FAT-fs (loop3): Directory bread(block 68) failed [ 508.478653][ T29] audit: type=1326 audit(1719040542.424:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 508.562369][ T29] audit: type=1326 audit(1719040542.454:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 508.590981][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 508.605533][ T8384] loop0: detected capacity change from 0 to 1024 [ 508.612310][ T8378] FAT-fs (loop3): Directory bread(block 69) failed [ 508.733698][ T8388] random: crng reseeded on system resumption [ 509.423860][ T8388] Unrecognized hibernate image header format! [ 509.430203][ T8388] PM: hibernation: Image mismatch: architecture specific data [ 510.042148][ T8378] FAT-fs (loop3): Directory bread(block 70) failed [ 510.139660][ T8378] FAT-fs (loop3): Directory bread(block 71) failed [ 510.171073][ T29] audit: type=1326 audit(1719040542.454:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 510.195957][ T8378] FAT-fs (loop3): Directory bread(block 72) failed [ 510.196841][ T8378] FAT-fs (loop3): Directory bread(block 73) failed [ 510.231149][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 510.234115][ T29] audit: type=1326 audit(1719040542.454:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 510.289290][ T29] audit: type=1326 audit(1719040542.454:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8377 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 510.344872][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 510.407940][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 510.435088][ T3874] hfsplus: b-tree write err: -5, ino 4 [ 510.543751][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 510.674465][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 511.801102][ T8] usb 5-1: unable to read config index 1 descriptor/start: -71 [ 511.808786][ T8] usb 5-1: can't read configurations, error -71 [ 511.962827][ T8394] loop3: detected capacity change from 0 to 1024 [ 513.269505][ T2440] hfsplus: b-tree write err: -5, ino 4 [ 513.497515][ T8415] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.527776][ T8415] netlink: 41304 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.627842][ T8416] loop1: detected capacity change from 0 to 16 [ 513.837783][ T8416] erofs: (device loop1): mounted with root inode @ nid 36. [ 514.614716][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 514.614741][ T29] audit: type=1326 audit(1719040548.984:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8410 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x0 [ 514.706899][ T8428] loop0: detected capacity change from 0 to 24 [ 514.749381][ T8428] romfs: Unknown parameter '/dev/ttyS3' [ 514.914023][ T8433] fuse: Bad value for 'fd' [ 514.972604][ T8428] overlayfs: overlapping lowerdir path [ 515.418162][ T8437] loop0: detected capacity change from 0 to 256 [ 515.437039][ T8437] exfat: Deprecated parameter 'utf8' [ 515.653262][ T8439] mkiss: ax0: crc mode is auto. [ 515.709778][ T8437] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 516.159673][ T8441] loop3: detected capacity change from 0 to 1024 [ 516.166785][ T29] audit: type=1326 audit(1719040550.524:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 516.218721][ T29] audit: type=1326 audit(1719040550.574:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 516.378993][ T29] audit: type=1326 audit(1719040550.584:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 516.423870][ T8441] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 516.443488][ T8441] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 516.467102][ T8447] loop1: detected capacity change from 0 to 256 [ 516.476829][ T29] audit: type=1326 audit(1719040550.684:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 516.566339][ T8441] jbd2_journal_init_inode: Cannot locate journal superblock [ 516.574842][ T8441] EXT4-fs (loop3): Could not load journal inode [ 516.583175][ T29] audit: type=1326 audit(1719040550.684:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 516.617069][ T29] audit: type=1326 audit(1719040550.714:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 516.716741][ T29] audit: type=1326 audit(1719040550.714:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 516.781504][ T8447] FAT-fs (loop1): Directory bread(block 64) failed [ 516.794157][ T29] audit: type=1326 audit(1719040550.714:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 516.846024][ T8447] FAT-fs (loop1): Directory bread(block 65) failed [ 516.862355][ T8447] FAT-fs (loop1): Directory bread(block 66) failed [ 516.868974][ T8447] FAT-fs (loop1): Directory bread(block 67) failed [ 516.896187][ T8447] FAT-fs (loop1): Directory bread(block 68) failed [ 516.908175][ T29] audit: type=1326 audit(1719040550.714:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8445 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 516.947691][ T8447] FAT-fs (loop1): Directory bread(block 69) failed [ 517.013618][ T8447] FAT-fs (loop1): Directory bread(block 70) failed [ 517.020238][ T8447] FAT-fs (loop1): Directory bread(block 71) failed [ 517.084256][ T8447] FAT-fs (loop1): Directory bread(block 72) failed [ 517.117558][ T8447] FAT-fs (loop1): Directory bread(block 73) failed [ 517.302791][ T8455] random: crng reseeded on system resumption [ 517.668349][ T8455] Unrecognized hibernate image header format! [ 517.674841][ T8455] PM: hibernation: Image mismatch: architecture specific data [ 518.946461][ T8457] loop0: detected capacity change from 0 to 1024 [ 519.126752][ T3874] hfsplus: b-tree write err: -5, ino 4 [ 520.554913][ T4480] Bluetooth: hci1: command 0x0406 tx timeout [ 520.734684][ T8463] loop1: detected capacity change from 0 to 128 [ 520.755529][ T8463] VFS: could not find a valid V7 on loop1. [ 522.104710][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 522.104733][ T29] audit: type=1326 audit(1719040556.474:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x0 [ 522.222764][ T8497] fuse: Bad value for 'fd' [ 522.634279][ T8499] loop0: detected capacity change from 0 to 16 [ 522.936751][ T8499] erofs: (device loop0): mounted with root inode @ nid 36. [ 523.092239][ T8498] loop3: detected capacity change from 0 to 1024 [ 523.128039][ T5245] hfsplus: b-tree write err: -5, ino 4 [ 523.266567][ T6407] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 523.311141][ T29] audit: type=1400 audit(1719040557.664:1392): avc: denied { read } for pid=8500 comm="syz-executor.1" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 523.468689][ T29] audit: type=1400 audit(1719040557.664:1393): avc: denied { open } for pid=8500 comm="syz-executor.1" path="/dev/usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 523.537324][ T8506] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.4'. [ 523.727461][ T29] audit: type=1800 audit(1719040558.094:1394): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1943 res=0 errno=0 [ 523.762884][ T8507] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 523.895139][ T8506] tipc: Started in network mode [ 523.906748][ T8506] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 523.919018][ T8506] tipc: Enabling of bearer rejected, failed to enable media [ 523.988429][ T29] audit: type=1326 audit(1719040558.324:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8511 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 524.000593][ T8512] loop3: detected capacity change from 0 to 256 [ 524.065211][ T29] audit: type=1326 audit(1719040558.324:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8511 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 524.100819][ T29] audit: type=1326 audit(1719040558.324:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8511 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 524.200576][ T29] audit: type=1326 audit(1719040558.324:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8511 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 524.229243][ T29] audit: type=1326 audit(1719040558.324:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8511 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 524.336593][ T8512] FAT-fs (loop3): Directory bread(block 64) failed [ 524.401071][ T8512] FAT-fs (loop3): Directory bread(block 65) failed [ 524.405897][ T29] audit: type=1326 audit(1719040558.324:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8511 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x7ffc0000 [ 524.407842][ T8512] FAT-fs (loop3): Directory bread(block 66) failed [ 524.490000][ T8512] FAT-fs (loop3): Directory bread(block 67) failed [ 524.496880][ T8512] FAT-fs (loop3): Directory bread(block 68) failed [ 524.516383][ T8512] FAT-fs (loop3): Directory bread(block 69) failed [ 524.545065][ T8512] FAT-fs (loop3): Directory bread(block 70) failed [ 524.572111][ T8512] FAT-fs (loop3): Directory bread(block 71) failed [ 524.579232][ T8512] FAT-fs (loop3): Directory bread(block 72) failed [ 524.617559][ T8512] FAT-fs (loop3): Directory bread(block 73) failed [ 524.809862][ T8524] loop0: detected capacity change from 0 to 2048 [ 524.869600][ T8524] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 526.457834][ T8522] loop1: detected capacity change from 0 to 1024 [ 526.727858][ T5245] hfsplus: b-tree write err: -5, ino 4 [ 526.813018][ T8521] loop4: detected capacity change from 0 to 1024 [ 526.853503][ T8521] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 526.954384][ T8521] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 527.037251][ T8521] jbd2_journal_init_inode: Cannot locate journal superblock [ 527.047750][ T8521] EXT4-fs (loop4): Could not load journal inode [ 527.966497][ T8532] loop0: detected capacity change from 0 to 1024 [ 528.043503][ T8532] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 528.157111][ T8532] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 528.173454][ T8532] jbd2_journal_init_inode: Cannot locate journal superblock [ 528.180813][ T8532] EXT4-fs (loop0): Could not load journal inode [ 528.839054][ T8551] loop3: detected capacity change from 0 to 1024 [ 529.573384][ T8551] hfsplus: failed to load extents file [ 529.631977][ T8550] loop3: detected capacity change from 0 to 64 [ 530.036562][ T8554] fuse: Bad value for 'fd' [ 530.364181][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 530.364205][ T29] audit: type=1326 audit(1719040564.734:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6a647d0a9 code=0x0 [ 530.583430][ T8562] loop0: detected capacity change from 0 to 1024 [ 530.627197][ T12] hfsplus: b-tree write err: -5, ino 4 [ 530.827349][ T29] audit: type=1400 audit(1719040565.154:1454): avc: denied { ioctl } for pid=8565 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 530.904482][ T8567] binder: BINDER_SET_CONTEXT_MGR already set [ 530.942628][ T8567] binder: 8565:8567 ioctl 4018620d 20000040 returned -16 [ 531.232844][ T29] audit: type=1400 audit(1719040565.154:1455): avc: denied { write } for pid=8565 comm="syz-executor.4" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 532.267764][ T29] audit: type=1400 audit(1719040565.174:1456): avc: denied { map } for pid=8565 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 532.459036][ T29] audit: type=1400 audit(1719040565.184:1457): avc: denied { set_context_mgr } for pid=8565 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 532.614981][ T29] audit: type=1400 audit(1719040565.764:1458): avc: denied { mount } for pid=8570 comm="syz-executor.1" name="/" dev="autofs" ino=22060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 532.618771][ T8581] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.4'. [ 532.691941][ T8581] siw: device registration error -23 [ 532.708023][ T29] audit: type=1400 audit(1719040565.934:1459): avc: denied { mounton } for pid=8570 comm="syz-executor.1" path="/root/syzkaller-testdir896477805/syzkaller.bZfHSV/33/file1/file0" dev="autofs" ino=22062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 532.818789][ T29] audit: type=1400 audit(1719040566.754:1460): avc: denied { unmount } for pid=7479 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 532.974658][ T8583] loop1: detected capacity change from 0 to 2048 [ 533.058020][ T8583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.154208][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 535.281093][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 535.486737][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 535.540754][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 535.821079][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 535.845188][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.976973][ T8590] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 537.233927][ T8607] loop0: detected capacity change from 0 to 1024 [ 537.976966][ T8607] hfsplus: failed to load extents file [ 538.051823][ T8606] loop0: detected capacity change from 0 to 64 [ 538.562498][ T8] usb 5-1: USB disconnect, device number 15 [ 538.577097][ T8605] loop1: detected capacity change from 0 to 128 [ 538.609757][ T8605] VFS: could not find a valid V7 on loop1. [ 538.784815][ T8615] fuse: Unknown parameter '0x0000000000000005' [ 538.877993][ T8610] loop3: detected capacity change from 0 to 1024 [ 538.937226][ T8610] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 539.025606][ T8610] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 539.225455][ T8610] jbd2_journal_init_inode: Cannot locate journal superblock [ 539.272382][ T8610] EXT4-fs (loop3): Could not load journal inode [ 539.545233][ T29] audit: type=1400 audit(1719040573.904:1461): avc: denied { ioctl } for pid=8619 comm="syz-executor.1" path="/dev/ptp0" dev="devtmpfs" ino=1074 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 539.891281][ T8620] loop1: detected capacity change from 0 to 40427 [ 540.207852][ T8620] F2FS-fs (loop1): invalid crc value [ 541.130132][ T8620] F2FS-fs (loop1): Found nat_bits in checkpoint [ 541.226523][ T8620] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 541.616158][ T8631] loop0: detected capacity change from 0 to 24 [ 541.652550][ T8631] romfs: Unknown parameter '/dev/ttyS3' [ 542.033970][ T8631] loop0: detected capacity change from 0 to 256 [ 542.123483][ T8631] exfat: Deprecated parameter 'utf8' [ 542.377274][ T8631] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 543.206986][ T29] audit: type=1326 audit(1719040577.574:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f695e87d0a9 code=0x0 [ 543.347299][ T8651] mkiss: ax0: crc mode is auto. [ 543.672068][ T8658] loop1: detected capacity change from 0 to 2048 [ 543.696574][ T8654] loop4: detected capacity change from 0 to 1024 [ 543.728982][ T8658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.070614][ T8651] loop3: detected capacity change from 0 to 1024 [ 547.343361][ T3891] hfsplus: b-tree write err: -5, ino 4 [ 548.384901][ T8676] loop1: detected capacity change from 0 to 1024 [ 549.177018][ T8676] hfsplus: failed to load extents file [ 549.514097][ T8678] loop0: detected capacity change from 0 to 2048 [ 549.584966][ T8678] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 551.169878][ T8688] loop4: detected capacity change from 0 to 2048 [ 551.181195][ T8690] fuse: Unknown parameter '0x0000000000000005' [ 551.199128][ T8688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.992869][ T8693] mkiss: ax0: crc mode is auto. [ 554.177591][ T8693] loop3: detected capacity change from 0 to 1024 [ 554.258750][ T8693] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 554.291839][ T8693] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 554.324005][ T8693] jbd2_journal_init_inode: Cannot locate journal superblock [ 554.351214][ T29] audit: type=1400 audit(1719040588.704:1463): avc: denied { create } for pid=8700 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 554.384636][ T8693] EXT4-fs (loop3): Could not load journal inode [ 555.798187][ T8710] loop1: detected capacity change from 0 to 16 [ 555.849701][ T8710] erofs: (device loop1): mounted with root inode @ nid 36. [ 555.881539][ T929] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 555.926255][ T8710] syz-executor.1: attempt to access beyond end of device [ 555.926255][ T8710] loop1: rw=0, sector=40, nr_sectors = 8 limit=16 [ 556.110983][ T929] usb 1-1: Using ep0 maxpacket: 8 [ 556.133943][ T929] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 556.170989][ T929] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 556.242167][ T929] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 556.272096][ T929] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 556.326693][ T929] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 556.412562][ T929] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 556.476209][ T929] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 556.570615][ T929] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 556.656450][ T929] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 556.677352][ T929] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 556.771117][ T929] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 556.813253][ T929] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 559.359970][ T8730] loop3: detected capacity change from 0 to 1024 [ 559.370512][ T29] audit: type=1326 audit(1719040593.744:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x0 [ 559.616165][ T8733] loop1: detected capacity change from 0 to 1024 [ 559.867384][ T8730] hfsplus: bad catalog entry type [ 559.915820][ T62] hfsplus: b-tree write err: -5, ino 4 [ 559.975729][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 560.032039][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 560.096805][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 560.301306][ T8736] mkiss: ax0: crc mode is auto. [ 560.501418][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 560.517972][ T929] usb 1-1: string descriptor 0 read error: -71 [ 560.528960][ T929] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 560.595014][ T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.724899][ T929] usb 1-1: can't set config #168, error -71 [ 560.813311][ T929] usb 1-1: USB disconnect, device number 5 [ 561.458200][ T8736] loop4: detected capacity change from 0 to 1024 [ 561.600414][ T29] audit: type=1400 audit(1719040595.954:1465): avc: denied { mount } for pid=8745 comm="syz-executor.3" name="/" dev="hugetlbfs" ino=23390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 561.698404][ T29] audit: type=1400 audit(1719040596.044:1466): avc: denied { execute } for pid=8745 comm="syz-executor.3" path="/root/syzkaller-testdir1970176143/syzkaller.hAvjoo/174/file0/bus" dev="hugetlbfs" ino=23391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 561.764054][ T8736] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 561.775789][ T8736] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 561.881547][ T8736] jbd2_journal_init_inode: Cannot locate journal superblock [ 561.889272][ T29] audit: type=1400 audit(1719040596.254:1467): avc: denied { unmount } for pid=5118 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 561.923529][ T8736] EXT4-fs (loop4): Could not load journal inode [ 562.749824][ T8753] loop1: detected capacity change from 0 to 8 [ 563.011036][ T5110] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 563.167176][ T8741] loop0: detected capacity change from 0 to 32768 [ 563.174412][ T29] audit: type=1400 audit(1719040597.534:1468): avc: denied { write } for pid=8751 comm="syz-executor.1" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 563.231212][ T5110] usb 5-1: Using ep0 maxpacket: 8 [ 563.245334][ T5110] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 563.271514][ T5110] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 563.289843][ T5110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 563.300327][ T5110] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 563.358035][ T8741] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 563.367372][ T8741] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 563.384841][ T5110] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.428343][ T29] audit: type=1400 audit(1719040597.794:1469): avc: denied { read } for pid=8751 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 563.514891][ T5110] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 563.558056][ T5110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.570305][ T8741] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 563.638636][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 563.647696][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 563.828963][ T5110] usb 5-1: usb_control_msg returned -32 [ 563.834904][ T5110] usbtmc 5-1:16.0: can't read capabilities [ 563.844918][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 197ms [ 563.879958][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 563.901638][ T8741] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 563.954055][ T8741] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 564.205893][ T8761] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 564.417344][ T8] usb 5-1: USB disconnect, device number 16 [ 565.015228][ T8763] loop0: detected capacity change from 0 to 16 [ 565.057206][ T8763] erofs: (device loop0): mounted with root inode @ nid 36. [ 565.093541][ T8763] syz-executor.0: attempt to access beyond end of device [ 565.093541][ T8763] loop0: rw=0, sector=40, nr_sectors = 8 limit=16 [ 566.383662][ T8765] loop1: detected capacity change from 0 to 32768 [ 566.443568][ T8765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8765) [ 566.526825][ T8765] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 566.557727][ T8765] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 566.584235][ T8765] BTRFS info (device loop1): using free-space-tree [ 566.854811][ T29] audit: type=1400 audit(1719040601.214:1470): avc: denied { append } for pid=8764 comm="syz-executor.1" path="/root/syzkaller-testdir896477805/syzkaller.bZfHSV/48/file0/pids.current" dev="loop1" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 567.625568][ T7479] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 568.225821][ T8805] loop0: detected capacity change from 0 to 1024 [ 568.383340][ T8805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.432566][ T8774] loop3: detected capacity change from 0 to 40427 [ 568.480264][ T8776] loop4: detected capacity change from 0 to 40427 [ 568.609385][ T8776] F2FS-fs (loop4): Found nat_bits in checkpoint [ 568.616476][ T8774] F2FS-fs (loop3): Found nat_bits in checkpoint [ 568.657930][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.664801][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.943515][ T8805] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2786: inode #2: comm syz-executor.0: corrupted in-inode xattr: bad e_name length [ 569.055535][ T8805] EXT4-fs (loop0): Remounting filesystem read-only [ 569.070488][ T8805] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 569.832980][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 569.876972][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 569.928996][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 569.966862][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 569.976091][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 569.995962][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 570.008793][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 570.056008][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 570.071351][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 570.080707][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 570.096279][ T5117] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 570.351253][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 570.447239][ T5117] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.555185][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 570.573609][ T8667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.591314][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 570.624311][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 570.676021][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 570.705430][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 570.736405][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.781161][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 570.790288][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.856387][ T8667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.059326][ T8667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.151786][ T9] usb 2-1: usb_control_msg returned -32 [ 571.161636][ T9] usbtmc 2-1:16.0: can't read capabilities [ 571.392448][ T29] audit: type=1400 audit(1719040605.764:1471): avc: denied { connect } for pid=8831 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 571.399971][ T8667] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.591054][ T8840] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 571.876130][ T4839] usb 2-1: USB disconnect, device number 4 [ 572.796369][ T8667] bridge_slave_1: left allmulticast mode [ 572.822231][ T8667] bridge_slave_1: left promiscuous mode [ 572.852549][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.913490][ T8667] bridge_slave_0: left allmulticast mode [ 572.935825][ T8667] bridge_slave_0: left promiscuous mode [ 572.970877][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.006955][ T4480] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 573.029271][ T4480] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 573.040007][ T4480] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 573.077790][ T4480] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 573.095239][ T4480] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 573.104824][ T4480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.930769][ T8872] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 574.297796][ T8878] loop1: detected capacity change from 0 to 8 [ 574.624218][ T8667] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.656037][ T8667] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.680965][ T8667] bond0 (unregistering): Released all slaves [ 574.748672][ T8667] bond1 (unregistering): Released all slaves [ 574.993526][ T8862] workqueue: name exceeds WQ_NAME_LEN. Truncating to: <ʓ^V0ƶ`º2| }ι) [ 575.201191][ T4480] Bluetooth: hci3: command tx timeout [ 575.575803][ T29] audit: type=1400 audit(1719040609.944:1472): avc: denied { watch watch_reads } for pid=8885 comm="syz-executor.4" path="pipe:[23736]" dev="pipefs" ino=23736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 575.804241][ T8889] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.203090][ T8667] hsr_slave_0: left promiscuous mode [ 576.232884][ T8667] hsr_slave_1: left promiscuous mode [ 576.276201][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.297529][ T8667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.322374][ T8667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.340543][ T8667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.453898][ T8667] veth1_macvtap: left promiscuous mode [ 576.468869][ T8667] veth0_macvtap: left promiscuous mode [ 576.488493][ T8667] veth1_vlan: left promiscuous mode [ 576.497142][ T8667] veth0_vlan: left promiscuous mode [ 577.281234][ T4480] Bluetooth: hci3: command tx timeout [ 577.358579][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 577.570944][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 577.588384][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 577.599353][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.627630][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.640115][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.650762][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.678102][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 577.688311][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.961631][ T8] usb 2-1: usb_control_msg returned -32 [ 577.967304][ T8] usbtmc 2-1:16.0: can't read capabilities [ 578.193740][ T8667] team0 (unregistering): Port device team_slave_1 removed [ 578.347958][ T8667] team0 (unregistering): Port device team_slave_0 removed [ 578.492986][ T8913] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 579.082815][ T8] usb 2-1: USB disconnect, device number 5 [ 579.362830][ T4480] Bluetooth: hci3: command tx timeout [ 580.311629][ T29] audit: type=1326 audit(1719040614.644:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 580.400147][ T29] audit: type=1326 audit(1719040614.644:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 580.440475][ T29] audit: type=1326 audit(1719040614.644:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 580.466642][ T29] audit: type=1326 audit(1719040614.644:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 580.572212][ T29] audit: type=1326 audit(1719040614.644:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 580.649919][ T29] audit: type=1326 audit(1719040614.644:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 580.772377][ T8855] chnl_net:caif_netlink_parms(): no params data found [ 580.792297][ T29] audit: type=1326 audit(1719040614.644:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 580.950998][ T29] audit: type=1326 audit(1719040614.644:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 582.106644][ T4480] Bluetooth: hci3: command tx timeout [ 582.147361][ T29] audit: type=1326 audit(1719040614.644:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 582.328231][ T29] audit: type=1326 audit(1719040614.644:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9407d0a9 code=0x7ffc0000 [ 582.492195][ T8938] loop3: detected capacity change from 0 to 32768 [ 582.501447][ T29] audit: type=1400 audit(1719040614.804:1483): avc: denied { remount } for pid=8923 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 582.551038][ T29] audit: type=1400 audit(1719040615.504:1484): avc: denied { getopt } for pid=8932 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 582.576022][ T8938] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 582.586371][ T8938] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 582.605723][ T8938] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 582.660446][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 582.667585][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 582.789752][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 122ms [ 582.794034][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.800599][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 582.820198][ T8938] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 582.845046][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.893718][ T8855] bridge_slave_0: entered allmulticast mode [ 582.937654][ T8855] bridge_slave_0: entered promiscuous mode [ 583.002390][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.073396][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.115243][ T8855] bridge_slave_1: entered allmulticast mode [ 583.130692][ T8855] bridge_slave_1: entered promiscuous mode [ 583.367160][ T8855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.584731][ T8855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.756122][ T29] audit: type=1400 audit(1719040618.124:1485): avc: denied { write } for pid=8961 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 583.764022][ T8962] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 583.859875][ T8855] team0: Port device team_slave_0 added [ 583.900646][ T8855] team0: Port device team_slave_1 added [ 584.013384][ T8965] loop4: detected capacity change from 0 to 8 [ 585.397133][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.415151][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.441535][ T8855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.616562][ T8855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.642419][ T8855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.719185][ T8855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.435059][ T8855] hsr_slave_0: entered promiscuous mode [ 589.835229][ T8989] serio: Serial port pts0 [ 590.082008][ T8855] hsr_slave_1: entered promiscuous mode [ 590.099705][ T8855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.155257][ T8855] Cannot create hsr debugfs directory [ 590.609057][ T29] audit: type=1400 audit(1719040624.964:1486): avc: denied { read } for pid=8994 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 590.711233][ T29] audit: type=1400 audit(1719040624.964:1487): avc: denied { open } for pid=8994 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 590.813604][ T29] audit: type=1400 audit(1719040624.974:1488): avc: denied { ioctl } for pid=8994 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 591.232786][ T29] audit: type=1800 audit(1719040625.574:1489): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 592.097205][ T9017] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 592.122609][ T9017] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.4'. [ 592.406120][ T9022] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 594.414878][ T9030] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 596.075872][ T8855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 596.146936][ T8855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 596.215881][ T8855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 596.255251][ T8855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 596.302689][ T9052] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 596.779678][ T9062] loop4: detected capacity change from 0 to 16 [ 596.801324][ T9064] loop3: detected capacity change from 0 to 256 [ 596.856329][ T9062] erofs: (device loop4): mounted with root inode @ nid 36. [ 596.865403][ T8855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.905066][ T9062] syz-executor.4: attempt to access beyond end of device [ 596.905066][ T9062] loop4: rw=0, sector=40, nr_sectors = 8 limit=16 [ 596.976781][ T8855] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.027678][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.034960][ T5110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.123319][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.130618][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.882007][ T9085] overlayfs: failed to resolve './file2': -2 [ 600.903429][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.066861][ T9097] loop4: detected capacity change from 0 to 256 [ 603.375851][ T8855] veth0_vlan: entered promiscuous mode [ 603.430502][ T8855] veth1_vlan: entered promiscuous mode [ 604.193387][ T29] audit: type=1326 audit(1719040638.544:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9100 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6db267d0a9 code=0x0 [ 604.356261][ T8855] veth0_macvtap: entered promiscuous mode [ 605.013886][ T9108] loop3: detected capacity change from 0 to 1024 [ 605.032449][ T9108] EXT4-fs: quotafile must be on filesystem root [ 605.052326][ T8855] veth1_macvtap: entered promiscuous mode [ 605.127912][ T9113] serio: Serial port pts0 [ 605.252560][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.371015][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.402670][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.439863][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.481076][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.535119][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.573641][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.606690][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.638564][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.711785][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.762927][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.805175][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.860949][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.892671][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.906633][ T9133] loop4: detected capacity change from 0 to 1024 [ 605.941567][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.982492][ T8855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.018957][ T8855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.157794][ T8855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.269494][ T8855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.316623][ T8855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.368014][ T8855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.391002][ T8855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.747377][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.780570][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.924430][ T7969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.955674][ T7969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.998426][ T9155] loop3: detected capacity change from 0 to 8 [ 608.601122][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 608.624907][ T9165] loop4: detected capacity change from 0 to 512 [ 608.671680][ T9165] ext4: Unknown parameter 'nouser_xattr' [ 608.779400][ T9165] loop4: detected capacity change from 0 to 256 [ 608.812181][ T9165] exfat: Unknown parameter 'ed`@_QQDgAPJ&miNiι~Ϲ!'"⍈#OO.wvJ"kI>vy2"wS/G|39TUrUߪ4wnח֪k^_xua6' [ 608.844982][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 608.868284][ T25] usb 1-1: config 0 has no interfaces? [ 608.874068][ T29] audit: type=1400 audit(1719040643.234:1491): avc: denied { read } for pid=9150 comm="syz-executor.3" name="file2" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 608.877732][ T9155] SQUASHFS error: lzo decompression failed, data probably corrupt [ 608.924193][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 608.962221][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.973221][ T9155] SQUASHFS error: Failed to read block 0x0: -5 [ 609.022881][ T29] audit: type=1400 audit(1719040643.234:1492): avc: denied { open } for pid=9150 comm="syz-executor.3" path="/root/syzkaller-testdir1970176143/syzkaller.hAvjoo/189/file2/file2" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 609.243774][ T25] usb 1-1: config 0 descriptor?? [ 609.287272][ T9155] SQUASHFS error: lzo decompression failed, data probably corrupt [ 609.997450][ T9155] SQUASHFS error: Failed to read block 0x0: -5 [ 610.037128][ T29] audit: type=1800 audit(1719040644.394:1493): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.3" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 610.090129][ T9] usb 1-1: USB disconnect, device number 6 [ 610.198904][ T29] audit: type=1400 audit(1719040644.564:1494): avc: denied { write } for pid=9172 comm="syz-executor.4" name="usbmon0" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 614.380540][ T9188] Bluetooth: MGMT ver 1.22 [ 615.125518][ T9203] loop0: detected capacity change from 0 to 1024 [ 616.540937][ T4480] Bluetooth: hci0: command 0x0406 tx timeout [ 617.524117][ T9226] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 617.615395][ T29] audit: type=1400 audit(1719040651.964:1495): avc: denied { ioctl } for pid=9223 comm="syz-executor.4" path="socket:[25606]" dev="sockfs" ino=25606 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 617.694525][ T29] audit: type=1800 audit(1719040652.024:1496): pid=9230 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 617.730343][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 617.747639][ T9234] futex_wake_op: syz-executor.0 tries to shift op by 144; fix this program [ 617.791433][ T29] audit: type=1800 audit(1719040652.044:1497): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1948 res=0 errno=0 [ 617.885818][ T29] audit: type=1800 audit(1719040652.064:1498): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1963 res=0 errno=0 [ 617.980385][ T9219] kvm: kvm [9218]: vcpu0, guest rIP: 0x22b Unhandled WRMSR(0x11e) = 0x0 [ 617.994288][ T29] audit: type=1800 audit(1719040652.134:1499): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1963 res=0 errno=0 [ 618.563006][ T30] INFO: task syz-executor.2:5108 blocked for more than 143 seconds. [ 618.603758][ T30] Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 618.627042][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/22 07:17:33 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 618.648921][ T30] task:syz-executor.2 state:D stack:23488 pid:5108 tgid:5108 ppid:1 flags:0x00004006 [ 618.731008][ T30] Call Trace: [ 618.734358][ T30] [ 618.737326][ T30] __schedule+0xf15/0x5d00 [ 618.783190][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 618.788505][ T30] ? hlock_class+0x4e/0x130 [ 618.830907][ T30] ? __pfx___schedule+0x10/0x10 [ 618.835855][ T30] ? schedule+0x298/0x350 [ 618.840235][ T30] ? __pfx_lock_release+0x10/0x10 [ 618.882187][ T30] schedule+0xe7/0x350 [ 618.886359][ T30] schedule_preempt_disabled+0x13/0x30 [ 618.931811][ T30] __down_write_common+0x950/0x13f0 [ 618.937118][ T30] ? __pfx___down_write_common+0x10/0x10 [ 618.960893][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 618.966025][ T30] ? __pfx___might_resched+0x10/0x10 [ 618.981188][ T30] ? __pfx___might_resched+0x10/0x10 [ 618.986621][ T30] deactivate_super+0xd6/0x100 [ 619.017626][ T30] cleanup_mnt+0x222/0x450 [ 619.022656][ T30] task_work_run+0x14e/0x250 [ 619.027304][ T30] ? __pfx_task_work_run+0x10/0x10 [ 619.081161][ T30] syscall_exit_to_user_mode+0x278/0x2a0 [ 619.086908][ T30] do_syscall_64+0xda/0x250 [ 619.100896][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.106893][ T30] RIP: 0033:0x7f083e67e3d7 [ 619.111982][ T30] RSP: 002b:00007ffcd7f25f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 619.120739][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f083e67e3d7 [ 619.140876][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd7f26050 [ 619.148931][ T30] RBP: 00007ffcd7f26050 R08: 0000000000000000 R09: 0000000000000000 [ 619.163059][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd7f27100 [ 619.175293][ T30] R13: 00007f083e6d96c6 R14: 00007f083e6cadf8 R15: 000000000000001c [ 619.186340][ T30] [ 619.189647][ T30] [ 619.189647][ T30] Showing all locks held in the system: [ 619.221105][ T30] 1 lock held by khungtaskd/30: [ 619.226034][ T30] #0: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 619.297275][ T30] 3 locks held by kworker/u8:10/3879: [ 619.311091][ T30] #0: ffff8880196d4948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 619.360956][ T30] #1: ffffc9000ba27d80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 619.410870][ T30] #2: ffff88807f5e20e0 (&type->s_umount_key#100){++++}-{3:3}, at: super_trylock_shared+0x1e/0xf0 [ 619.450932][ T30] 2 locks held by getty/4837: [ 619.455686][ T30] #0: ffff88802aa440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 619.521043][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 619.570896][ T30] 1 lock held by syz-fuzzer/5096: [ 619.576007][ T30] 1 lock held by syz-executor.2/5108: [ 619.620875][ T30] #0: ffff88807f5e20e0 (&type->s_umount_key#100){++++}-{3:3}, at: deactivate_super+0xd6/0x100 [ 619.660942][ T30] 1 lock held by syz-executor.3/5118: [ 619.666392][ T30] 1 lock held by syz-executor.4/5120: [ 619.710867][ T30] 1 lock held by syz-executor.1/7479: [ 619.716319][ T30] 3 locks held by kworker/0:4/9149: [ 619.761282][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 619.801188][ T30] #1: ffffc90003357d80 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 619.850849][ T30] #2: ffffffff8dbbd0b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 619.930923][ T30] 1 lock held by syz-executor.0/9242: [ 619.936368][ T30] 4 locks held by dhcpcd-run-hook/9258: [ 619.960950][ T30] #0: ffff8880b933ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 619.991296][ T30] #1: ffff8880b9328a08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 620.050906][ T30] #2: ffff88807d140558 (ptlock_ptr(ptdesc)#2){+.+.}-{2:2}, at: __pte_offset_map_lock+0xf1/0x300 [ 620.090865][ T30] #3: ffffffff8dbb1920 (rcu_read_lock){....}-{1:2}, at: page_ext_get+0x34/0x310 [ 620.100146][ T30] 2 locks held by sed/9263: [ 620.131027][ T30] [ 620.133408][ T30] ============================================= [ 620.133408][ T30] [ 620.162176][ T30] NMI backtrace for cpu 1 [ 620.166580][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 620.176531][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 620.186719][ T30] Call Trace: [ 620.190030][ T30] [ 620.192996][ T30] dump_stack_lvl+0x116/0x1f0 [ 620.197729][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 620.202730][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 620.208805][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 620.214855][ T30] watchdog+0xf86/0x1240 [ 620.219147][ T30] ? __pfx_watchdog+0x10/0x10 [ 620.223871][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 620.229105][ T30] ? __kthread_parkme+0x148/0x220 [ 620.234159][ T30] ? __pfx_watchdog+0x10/0x10 [ 620.238861][ T30] kthread+0x2c1/0x3a0 [ 620.242960][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.248178][ T30] ? __pfx_kthread+0x10/0x10 [ 620.252797][ T30] ret_from_fork+0x45/0x80 [ 620.257249][ T30] ? __pfx_kthread+0x10/0x10 [ 620.261880][ T30] ret_from_fork_asm+0x1a/0x30 [ 620.267083][ T30] [ 620.272471][ T30] Sending NMI from CPU 1 to CPUs 0: [ 620.277742][ C0] NMI backtrace for cpu 0 [ 620.277765][ C0] CPU: 0 PID: 9149 Comm: kworker/0:4 Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 620.277794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 620.277812][ C0] Workqueue: events nsim_dev_trap_report_work [ 620.277842][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 620.277874][ C0] Code: be b0 01 00 00 e8 a0 ff ff ff 31 c0 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 14 f5 75 7e 65 8b 05 15 f5 75 7e a9 00 01 [ 620.277900][ C0] RSP: 0018:ffffc90003357738 EFLAGS: 00000246 [ 620.277920][ C0] RAX: 0000000000000000 RBX: ffffc900033577c0 RCX: ffffffff813ce5be [ 620.277938][ C0] RDX: ffff8880177f5a00 RSI: 0000000000000004 RDI: 0000000000000001 [ 620.277956][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000004 [ 620.277972][ C0] R10: 0000000000000001 R11: 0000000000000004 R12: ffffffff907f067e [ 620.277988][ C0] R13: ffffc90003357b70 R14: 0000000000000001 R15: 0000000000000001 [ 620.278005][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 620.278031][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.278050][ C0] CR2: 00007fcf1010a378 CR3: 000000000d97a000 CR4: 00000000003506f0 [ 620.278067][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 620.278083][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 620.278100][ C0] Call Trace: [ 620.278108][ C0] [ 620.278116][ C0] ? show_regs+0x8c/0xa0 [ 620.278154][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 620.278193][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 620.278229][ C0] ? nmi_handle+0x1a9/0x5c0 [ 620.278267][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 620.278295][ C0] ? default_do_nmi+0x6a/0x160 [ 620.278319][ C0] ? exc_nmi+0x170/0x1e0 [ 620.278341][ C0] ? end_repeat_nmi+0xf/0x53 [ 620.278367][ C0] ? unwind_next_frame+0xebe/0x23a0 [ 620.278413][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 620.278440][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 620.278468][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 620.278496][ C0] [ 620.278504][ C0] [ 620.278511][ C0] unwind_next_frame+0x1b21/0x23a0 [ 620.278553][ C0] ? __kasan_slab_free+0x32/0x50 [ 620.278593][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.278631][ C0] arch_stack_walk+0x100/0x170 [ 620.278660][ C0] ? kmem_cache_free+0x12f/0x3a0 [ 620.278699][ C0] ? kfree_skbmem+0x10e/0x200 [ 620.278728][ C0] stack_trace_save+0x95/0xd0 [ 620.278763][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 620.278797][ C0] ? kasan_save_stack+0x42/0x60 [ 620.278833][ C0] ? __pfx_mark_lock+0x10/0x10 [ 620.278871][ C0] ? kfree+0x12a/0x3b0 [ 620.278905][ C0] kasan_save_stack+0x33/0x60 [ 620.278966][ C0] ? kasan_save_stack+0x33/0x60 [ 620.279002][ C0] ? kasan_save_track+0x14/0x30 [ 620.279038][ C0] ? kasan_save_free_info+0x3b/0x60 [ 620.279068][ C0] ? poison_slab_object+0xf7/0x160 [ 620.279104][ C0] ? __kasan_slab_free+0x32/0x50 [ 620.279155][ C0] kasan_save_track+0x14/0x30 [ 620.279191][ C0] kasan_save_free_info+0x3b/0x60 [ 620.279222][ C0] poison_slab_object+0xf7/0x160 [ 620.279259][ C0] __kasan_slab_free+0x32/0x50 [ 620.279298][ C0] kmem_cache_free+0x12f/0x3a0 [ 620.279336][ C0] ? kfree_skbmem+0x10e/0x200 [ 620.279365][ C0] kfree_skbmem+0x10e/0x200 [ 620.279398][ C0] consume_skb+0xdd/0x170 [ 620.279434][ C0] nsim_dev_trap_report_work+0x878/0xc80 [ 620.279466][ C0] process_one_work+0x9fb/0x1b60 [ 620.279495][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 620.279522][ C0] ? __pfx_process_one_work+0x10/0x10 [ 620.279550][ C0] ? assign_work+0x1a0/0x250 [ 620.279590][ C0] worker_thread+0x6c8/0xf70 [ 620.279618][ C0] ? __kthread_parkme+0x148/0x220 [ 620.279652][ C0] ? __pfx_worker_thread+0x10/0x10 [ 620.279677][ C0] kthread+0x2c1/0x3a0 [ 620.279707][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.279733][ C0] ? __pfx_kthread+0x10/0x10 [ 620.279764][ C0] ret_from_fork+0x45/0x80 [ 620.279800][ C0] ? __pfx_kthread+0x10/0x10 [ 620.279831][ C0] ret_from_fork_asm+0x1a/0x30 [ 620.279873][ C0] [ 620.691027][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.751287][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 620.758208][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc4-syzkaller-00164-g66cc544fd75c #0 [ 620.768139][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 620.778226][ T30] Call Trace: [ 620.781539][ T30] [ 620.784487][ T30] dump_stack_lvl+0x3d/0x1f0 [ 620.789108][ T30] panic+0x6f5/0x7a0 [ 620.793038][ T30] ? __pfx_panic+0x10/0x10 [ 620.797485][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 620.802879][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 620.808893][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 620.814290][ T30] ? watchdog+0xd3d/0x1240 [ 620.818730][ T30] ? watchdog+0xd30/0x1240 [ 620.823167][ T30] watchdog+0xd4e/0x1240 [ 620.827435][ T30] ? __pfx_watchdog+0x10/0x10 [ 620.832131][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 620.837358][ T30] ? __kthread_parkme+0x148/0x220 [ 620.842415][ T30] ? __pfx_watchdog+0x10/0x10 [ 620.847111][ T30] kthread+0x2c1/0x3a0 [ 620.851208][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.856435][ T30] ? __pfx_kthread+0x10/0x10 [ 620.861061][ T30] ret_from_fork+0x45/0x80 [ 620.865527][ T30] ? __pfx_kthread+0x10/0x10 [ 620.870144][ T30] ret_from_fork_asm+0x1a/0x30 [ 620.874944][ T30] [ 620.878099][ T30] Kernel Offset: disabled [ 620.882435][ T30] Rebooting in 86400 seconds..