last executing test programs:

34.562419372s ago: executing program 3:
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0xf6, 0x0, &(0x7f00000000c0))

34.150456122s ago: executing program 3:
io_setup(0x2, &(0x7f0000000180)=<r0=>0x0)
io_destroy(r0)
syz_io_uring_setup(0x0, 0x0, 0x0, &(0x7f0000000940))
io_cancel(r0, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)

33.611888874s ago: executing program 3:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0)

33.500825381s ago: executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3)
ioctl$TUNSETTXFILTER(r0, 0x800454dd, &(0x7f0000000000))

33.207152113s ago: executing program 3:
syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f000003f600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1200014, &(0x7f0000000040)=ANY=[@ANYRES16], 0x1, 0x119f9, &(0x7f0000011a80)="$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")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
fallocate(r0, 0x11, 0x0, 0xfffffeff000)

6.424211753s ago: executing program 1:
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(0x4)

6.271554896s ago: executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x12, 0xa10, &(0x7f00000001c0)="$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")
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40))
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.668276195s ago: executing program 1:
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000001a40)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@uid}, {@umask={'umask', 0x3d, 0x3b}}, {@uid}, {@partition={'partition', 0x3d, 0xffff}}, {@shortad}, {@uid_forget}, {@unhide}]}, 0x1, 0xc54, &(0x7f00000037c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

5.129777249s ago: executing program 1:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40045b17, 0x0)

4.313859431s ago: executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
uname(&(0x7f0000000000)=""/182)

4.086404321s ago: executing program 4:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c000900080000003e"], 0x30}}, 0x0)

3.894767325s ago: executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000820000000095000000000000005ee1327715b82af381bac6fea100d265b0722536243fc81eaebed4541832eb"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x2, 0x0, @fixed}, 0xe)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'macvtap0\x00', <r4=>0x0})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='cachefiles_tmpfile\x00'}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r6, 0x107, 0x0, 0x0, &(0x7f0000000100))
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)

3.592379858s ago: executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003800)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

3.483858735s ago: executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

3.457988561s ago: executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000680)={0x28, 0x140c, 0x811, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0)

3.363522698s ago: executing program 2:
accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14)
socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r2, &(0x7f00000003c0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14)
sendmsg$tipc(r1, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000500))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
socket$key(0xf, 0x3, 0x2)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x40)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x75, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)

3.27538915s ago: executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x35, 0x0, [{0x40000091}]})

3.188415287s ago: executing program 0:
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
poll(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0x0)
fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=""/2, 0x2)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
listen(r4, 0x9)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r5, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)}}], 0x2, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0)
mount(&(0x7f0000000180)=@filename='\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x300, &(0x7f0000000300)='trans=rdma,')

3.163110194s ago: executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)

3.151249362s ago: executing program 3:
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00d841a0bf6c38c9caf8f4e88bdb1082f568ad2898112a90fb0effd1aae37d2a7076a7fff8aeb6d7352668e3a97de6cffe6576325156be4c8bf3b165702ecebeb9f87328977f714ca2813ab9fbad0578867d506619a4b10bb21ef8797729576a29e38b41effba81d407f535f452b"], 0x1, 0x5ce8, &(0x7f0000005dc0)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0)

3.072343545s ago: executing program 2:
socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c000900080000003e"], 0x30}}, 0x0)

2.197916559s ago: executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket(0x29, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0)

2.185458455s ago: executing program 0:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

2.158674962s ago: executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0x23, 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r1, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10)

2.093271363s ago: executing program 1:
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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")
unlink(&(0x7f0000000000)='./file0/file0\x00')
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0)
rmdir(&(0x7f0000000280)='./file0/file0\x00')

1.988283919s ago: executing program 0:
syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000a40)={0x2c, r1, 0x1, 0x0, 0x0, {0x9}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x0)

1.916025984s ago: executing program 4:
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x40045b17, 0x0)

1.835409033s ago: executing program 2:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
uname(&(0x7f0000000000)=""/182)

1.298770254s ago: executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0)
sysinfo(&(0x7f00000003c0)=""/67)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
fcntl$setlease(r6, 0x400, 0x0)

0s ago: executing program 0:
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
syz_open_dev$media(&(0x7f00000011c0), 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000004c0), 0x8, 0x0)
io_uring_setup(0x7455, &(0x7f0000000000))
pselect6(0x40, &(0x7f0000000580), &(0x7f0000000cc0)={0x80}, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

z
[  155.273928][ T5115] usb 3-1: Manufacturer: syz
[  155.331845][ T5115] usb 3-1: SerialNumber: syz
[  155.371100][ T5115] usb 3-1: config 0 descriptor??
[  155.395432][ T5686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  155.780790][ T5115] usb 3-1: USB disconnect, device number 2
[  155.934454][ T5696] loop4: detected capacity change from 0 to 64
[  156.859208][   T29] audit: type=1400 audit(1719247686.534:247): avc:  denied  { read write } for  pid=5700 comm="syz-executor.0" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  158.015715][   T29] audit: type=1400 audit(1719247686.534:248): avc:  denied  { open } for  pid=5700 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  158.103452][ T5716] input: syz0 as /devices/virtual/input/input8
[  160.854197][ T5732] syz-executor.0: attempt to access beyond end of device
[  160.854197][ T5732] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[  160.901292][ T5737] input: syz0 as /devices/virtual/input/input9
[  161.689046][ T5742] loop1: detected capacity change from 0 to 1024
[  162.381584][ T5742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.125792][ T5748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5748 comm=syz-executor.0
[  163.207464][ T5755] loop1: detected capacity change from 0 to 2048
[  163.309795][ T5755] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  163.388668][ T5758] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.796733][ T5755] overlay: ./file0 is not a directory
[  166.677207][ T5755] loop1: detected capacity change from 0 to 2048
[  166.767451][ T5755] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  166.960099][ T5773] overlayfs: failed to resolve './file1': -2
[  167.666910][ T5780] input: syz0 as /devices/virtual/input/input10
[  168.172901][ T5792] loop3: detected capacity change from 0 to 1024
[  168.860096][ T5790] input: syz0 as /devices/virtual/input/input11
[  168.886039][ T5792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.384637][ T5785] loop4: detected capacity change from 0 to 64
[  170.108106][ T5808] loop1: detected capacity change from 0 to 512
[  170.116350][ T5805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5805 comm=syz-executor.2
[  170.265753][ T5808] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  170.282093][ T5808] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  170.441048][ T5808] EXT4-fs (loop1): 1 truncate cleaned up
[  170.460224][ T5808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.787350][ T5813] overlayfs: failed to resolve './file0': -2
[  170.826872][   T29] audit: type=1400 audit(1719247700.494:249): avc:  denied  { create } for  pid=5800 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  170.937958][   T29] audit: type=1400 audit(1719247700.574:250): avc:  denied  { read write open } for  pid=5800 comm="syz-executor.1" path="/root/syzkaller-testdir146845544/syzkaller.CyDnQx/34/bus/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  171.033338][   T29] audit: type=1800 audit(1719247700.584:251): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0
[  171.511414][   T29] audit: type=1804 audit(1719247701.164:252): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir146845544/syzkaller.CyDnQx/34/bus/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  172.112550][ T5100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.837058][ T5833] loop4: detected capacity change from 0 to 4096
[  174.870737][ T5833] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  174.976903][ T5834] loop1: detected capacity change from 0 to 64
[  176.304868][ T5855] input: syz0 as /devices/virtual/input/input12
[  176.459697][ T5860] loop3: detected capacity change from 0 to 256
[  177.033686][ T5863] loop4: detected capacity change from 0 to 256
[  177.232190][   T29] audit: type=1400 audit(1719247706.904:253): avc:  denied  { create } for  pid=5859 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  178.186243][ T5860] syzkaller1: entered promiscuous mode
[  178.191725][ T5860] syzkaller1: entered allmulticast mode
[  178.232846][   T29] audit: type=1400 audit(1719247707.904:254): avc:  denied  { ioctl } for  pid=5866 comm="syz-executor.2" path="/dev/video0" dev="devtmpfs" ino=848 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  178.469053][ T5872] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'.
[  183.272717][   T29] audit: type=1326 audit(1719247712.914:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  183.973085][   T29] audit: type=1400 audit(1719247713.644:256): avc:  denied  { connect } for  pid=5900 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  184.089665][   T29] audit: type=1400 audit(1719247713.764:257): avc:  denied  { read } for  pid=5900 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  184.217742][   T29] audit: type=1400 audit(1719247713.794:258): avc:  denied  { open } for  pid=5900 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  184.303391][   T29] audit: type=1400 audit(1719247713.824:259): avc:  denied  { ioctl } for  pid=5900 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  185.793021][   T29] audit: type=1800 audit(1719247715.464:260): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1965 res=0 errno=0
[  186.953079][   T29] audit: type=1326 audit(1719247716.584:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5897 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  187.126044][   T29] audit: type=1804 audit(1719247716.804:262): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3477689819/syzkaller.Vmz2yB/35/bus" dev="sda1" ino=1965 res=1 errno=0
[  187.683356][   T29] audit: type=1326 audit(1719247717.334:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  187.838473][   T29] audit: type=1326 audit(1719247717.334:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  188.787272][   T29] audit: type=1326 audit(1719247717.334:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  188.851281][   T29] audit: type=1326 audit(1719247717.334:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  188.922853][ T5935] block nbd2: shutting down sockets
[  188.961445][   T29] audit: type=1326 audit(1719247717.334:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  188.999318][ T5940] loop3: detected capacity change from 0 to 256
[  189.053658][   T29] audit: type=1326 audit(1719247717.334:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  189.106641][   T29] audit: type=1326 audit(1719247717.334:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  189.171199][   T29] audit: type=1326 audit(1719247717.334:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  189.224047][   T29] audit: type=1326 audit(1719247717.334:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  189.360966][   T29] audit: type=1326 audit(1719247717.334:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  189.396687][   T29] audit: type=1326 audit(1719247717.334:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  189.439597][   T29] audit: type=1326 audit(1719247717.334:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  189.859106][ T5940] syzkaller1: entered promiscuous mode
[  189.904418][ T5940] syzkaller1: entered allmulticast mode
[  189.994337][  T928] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  190.221682][ T5947] loop4: detected capacity change from 0 to 64
[  190.234307][  T928] usb 2-1: Using ep0 maxpacket: 32
[  190.253142][  T928] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  190.310111][  T928] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  190.327361][  T928] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  190.353932][  T928] usb 2-1: Product: syz
[  190.381541][  T928] usb 2-1: Manufacturer: syz
[  190.405386][  T928] usb 2-1: SerialNumber: syz
[  190.431630][  T928] usb 2-1: config 0 descriptor??
[  190.477563][ T5951] loop3: detected capacity change from 0 to 256
[  190.497788][ T5944] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  192.441874][ T5159] usb 2-1: USB disconnect, device number 2
[  193.562154][ T5951] syzkaller1: entered promiscuous mode
[  193.631136][ T5951] syzkaller1: entered allmulticast mode
[  194.586664][ T5974] loop1: detected capacity change from 0 to 47
[  194.960920][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  194.993896][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  195.357300][   T29] kauditd_printk_skb: 55 callbacks suppressed
[  195.357838][   T29] audit: type=1800 audit(1719247725.024:330): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="overlay" ino=1976 res=0 errno=0
[  195.782038][   T29] audit: type=1800 audit(1719247725.454:331): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="overlay" ino=1957 res=0 errno=0
[  196.575020][   T29] audit: type=1400 audit(1719247726.214:332): avc:  denied  { bind } for  pid=5991 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  197.034464][ T5117] Bluetooth: hci0: command 0x0406 tx timeout
[  197.386108][   T29] audit: type=1400 audit(1719247726.224:333): avc:  denied  { setopt } for  pid=5991 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  197.520065][   T29] audit: type=1326 audit(1719247727.164:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  197.644334][   T29] audit: type=1326 audit(1719247727.164:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  197.725776][   T29] audit: type=1326 audit(1719247727.164:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  197.830929][   T29] audit: type=1326 audit(1719247727.164:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  198.014370][   T29] audit: type=1326 audit(1719247727.164:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  198.142617][   T29] audit: type=1326 audit(1719247727.164:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8de47d0a9 code=0x7fc00000
[  199.401883][ T6014] loop1: detected capacity change from 0 to 1024
[  200.191308][ T6017] loop4: detected capacity change from 0 to 2048
[  200.249436][ T6017] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  200.373713][ T6019] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.595980][ T1103] hfsplus: b-tree write err: -5, ino 4
[  201.139707][   T29] kauditd_printk_skb: 62 callbacks suppressed
[  201.139726][   T29] audit: type=1400 audit(1719247730.814:402): avc:  denied  { setopt } for  pid=6022 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  201.176236][ T6017] overlay: ./file0 is not a directory
[  202.147035][   T29] audit: type=1400 audit(1719247730.814:403): avc:  denied  { write } for  pid=6022 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  202.180393][ T5119] Bluetooth: hci4: command 0x0406 tx timeout
[  202.180418][ T5121] Bluetooth: hci1: command 0x0406 tx timeout
[  202.191481][ T5119] Bluetooth: hci2: command 0x0406 tx timeout
[  202.192478][ T5111] Bluetooth: hci3: command 0x0406 tx timeout
[  202.330097][ T6039] loop3: detected capacity change from 0 to 256
[  202.879346][ T6039] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  203.150978][ T6039] exFAT-fs (loop3): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  203.519330][ T6039] exFAT-fs (loop3): Filesystem has been set read-only
[  203.568137][ T6049] Zero length message leads to an empty skb
[  203.732812][ T6048] syz-executor.1: attempt to access beyond end of device
[  203.732812][ T6048] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  205.392097][   T29] audit: type=1400 audit(1719247735.064:404): avc:  denied  { write } for  pid=6057 comm="syz-executor.1" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  205.487730][ T6065] loop3: detected capacity change from 0 to 47
[  205.535461][   T29] audit: type=1400 audit(1719247735.204:405): avc:  denied  { read } for  pid=6057 comm="syz-executor.1" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  205.596185][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  205.619990][   T29] audit: type=1400 audit(1719247735.204:406): avc:  denied  { open } for  pid=6057 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  205.799499][   T29] audit: type=1400 audit(1719247735.234:407): avc:  denied  { create } for  pid=6057 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  205.928263][   T29] audit: type=1400 audit(1719247735.354:408): avc:  denied  { ioctl } for  pid=6057 comm="syz-executor.1" path="socket:[10220]" dev="sockfs" ino=10220 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  206.135103][   T29] audit: type=1326 audit(1719247735.464:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6057 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b1027d0a9 code=0x0
[  206.271566][   T29] audit: type=1326 audit(1719247735.944:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  206.307176][ T6072] audit: audit_backlog=65 > audit_backlog_limit=64
[  206.314072][ T6072] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  206.444571][   T29] audit: type=1326 audit(1719247735.944:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  206.544285][ T6072] audit: backlog limit exceeded
[  206.555149][   T29] audit: type=1326 audit(1719247735.944:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  206.692419][   T29] audit: type=1326 audit(1719247735.944:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  206.857150][   T29] audit: type=1326 audit(1719247735.944:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  206.964430][   T29] audit: type=1326 audit(1719247735.944:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  207.465609][   T29] audit: type=1326 audit(1719247735.944:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6050 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  207.759824][ T6083] loop4: detected capacity change from 0 to 47
[  208.180467][ T6093] loop1: detected capacity change from 0 to 256
[  208.843974][ T6093] syzkaller1: entered promiscuous mode
[  208.854566][ T6093] syzkaller1: entered allmulticast mode
[  210.404593][ T6108] loop3: detected capacity change from 0 to 256
[  213.014672][ T6116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6116 comm=syz-executor.2
[  214.706365][ T6135] loop1: detected capacity change from 0 to 256
[  214.731475][ T6135] FAT-fs (loop1): Unrecognized mount option "short
" or missing value
[  218.174580][ T5160] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  219.054323][ T5160] usb 5-1: Using ep0 maxpacket: 32
[  220.043028][ T5160] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  220.083147][ T5160] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  220.105243][ T5160] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  220.121221][ T5160] usb 5-1: Product: syz
[  220.150078][ T5160] usb 5-1: Manufacturer: syz
[  220.200385][ T5160] usb 5-1: SerialNumber: syz
[  220.222404][ T5160] usb 5-1: config 0 descriptor??
[  220.235233][ T6145] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  220.285575][ T6168] loop1: detected capacity change from 0 to 1024
[  221.591740][ T6166] syz-executor.0: attempt to access beyond end of device
[  221.591740][ T6166] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[  221.672637][   T45] usb 5-1: USB disconnect, device number 2
[  221.861388][ T6180] loop4: detected capacity change from 0 to 47
[  221.995656][ T6178] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  222.020647][ T5234] hfsplus: b-tree write err: -5, ino 4
[  223.685705][ T6195] cgroup: noprefix used incorrectly
[  223.723522][   T29] kauditd_printk_skb: 65 callbacks suppressed
[  223.723540][   T29] audit: type=1326 audit(1719247753.394:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  223.825617][   T29] audit: type=1326 audit(1719247753.444:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  223.859707][   T29] audit: type=1326 audit(1719247753.444:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  223.948613][   T29] audit: type=1326 audit(1719247753.444:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  224.073569][   T29] audit: type=1326 audit(1719247753.444:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  224.143950][ T5113] Bluetooth: hci3: unexpected event for opcode 0x2016
[  224.194465][   T29] audit: type=1326 audit(1719247753.444:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  224.237001][   T29] audit: type=1326 audit(1719247753.444:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  224.271446][   T29] audit: type=1326 audit(1719247753.444:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  224.313223][   T29] audit: type=1326 audit(1719247753.444:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  224.411094][   T29] audit: type=1326 audit(1719247753.444:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6177 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  224.511909][ T6187] loop1: detected capacity change from 0 to 32768
[  224.926944][ T6211] loop3: detected capacity change from 0 to 256
[  225.170345][ T6187] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[  225.274352][ T6187] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  225.393730][ T6211] syzkaller1: entered promiscuous mode
[  225.428317][ T6211] syzkaller1: entered allmulticast mode
[  225.474808][ T6187] bcachefs (loop1): alloc_read... done
[  225.548393][ T6187] bcachefs (loop1): stripes_read... done
[  225.593124][ T6187] bcachefs (loop1): snapshots_read... done
[  225.655384][ T6187] bcachefs (loop1): journal_replay... done
[  225.707792][ T6187] bcachefs (loop1): resume_logged_ops... done
[  225.760352][ T6187] bcachefs (loop1): going read-write
[  225.814454][ T6187] bcachefs (loop1): bch2_copygc_start(): error creating copygc thread EINTR
[  225.856626][ T6187] bcachefs (loop1): error starting copygc thread
[  225.863188][ T6187] bcachefs (loop1): going read-only
[  225.869967][ T6187] bcachefs (loop1): finished waiting for writes to stop
[  225.888890][ T6187] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  225.903517][ T6187] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  225.929430][ T6187] bcachefs (loop1): shutdown complete, journal seq 11
[  225.978971][ T6187] bcachefs (loop1): marking filesystem clean
[  226.041305][ T6187] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR
[  226.184334][ T6187] bcachefs (loop1): shutting down
[  226.234828][ T5117] Bluetooth: hci3: command 0x0406 tx timeout
[  226.391367][ T6187] bcachefs (loop1): shutdown complete
[  228.317292][ T5113] Bluetooth: hci3: command 0x0406 tx timeout
[  228.903622][   T29] kauditd_printk_skb: 59 callbacks suppressed
[  228.903636][   T29] audit: type=1400 audit(1719247758.574:551): avc:  denied  { create } for  pid=6243 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1
[  228.942901][ T6235] loop3: detected capacity change from 0 to 64
[  229.256948][ T6246] loop4: detected capacity change from 0 to 64
[  229.308851][   T29] audit: type=1400 audit(1719247758.984:552): avc:  denied  { mounton } for  pid=6243 comm="syz-executor.2" path="/root/syzkaller-testdir3477689819/syzkaller.Vmz2yB/54/file0" dev="sda1" ino=1969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1
[  229.309364][ T6245] UBIFS error (pid: 6245): cannot open "./file0", error -22
[  238.065945][ T6294] loop3: detected capacity change from 0 to 4096
[  238.082497][ T6294] ntfs3: Unknown parameter 'fou'
[  238.146764][ T6287] loop1: detected capacity change from 0 to 1024
[  239.193844][ T6293] UBIFS error (pid: 6293): cannot open "./file0", error -22
[  239.316677][ T6296] loop4: detected capacity change from 0 to 4096
[  239.362634][ T6296] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  241.113865][ T6137] hfsplus: b-tree write err: -5, ino 4
[  241.434912][ T6322] loop1: detected capacity change from 0 to 512
[  241.475955][ T6322] EXT4-fs: Ignoring removed bh option
[  241.503494][ T6322] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  241.654623][ T6322] EXT4-fs (loop1): 1 truncate cleaned up
[  241.696618][ T6322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.888633][   T29] audit: type=1400 audit(1719247771.554:553): avc:  denied  { mounton } for  pid=6320 comm="syz-executor.1" path="/root/syzkaller-testdir146845544/syzkaller.CyDnQx/57/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  242.034410][ T6322] loop1: detected capacity change from 512 to 64
[  242.084655][   T29] audit: type=1400 audit(1719247771.764:554): avc:  denied  { append } for  pid=6320 comm="syz-executor.1" path="/root/syzkaller-testdir146845544/syzkaller.CyDnQx/57/file0/memory.events" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  242.342208][ T6322] syz-executor.1: attempt to access beyond end of device
[  242.342208][ T6322] loop1: rw=2049, sector=72, nr_sectors = 2 limit=64
[  242.364464][ T6322] EXT4-fs warning (device loop1): ext4_end_bio:342: I/O error 10 writing to inode 19 starting block 36)
[  242.418908][ T6322] Buffer I/O error on device loop1, logical block 36
[  242.475007][ T6322] syz-executor.1: attempt to access beyond end of device
[  242.475007][ T6322] loop1: rw=2049, sector=510, nr_sectors = 2 limit=64
[  242.523022][ T6322] EXT4-fs warning (device loop1): ext4_end_bio:342: I/O error 10 writing to inode 19 starting block 255)
[  242.591760][ T6322] Buffer I/O error on device loop1, logical block 255
[  242.654064][ T6319] loop3: detected capacity change from 0 to 32768
[  242.686870][ T6322] syz-executor.1: attempt to access beyond end of device
[  242.686870][ T6322] loop1: rw=2049, sector=506, nr_sectors = 4 limit=64
[  242.749558][ T6322] EXT4-fs warning (device loop1): ext4_end_bio:342: I/O error 10 writing to inode 19 starting block 253)
[  242.790715][ T6322] Buffer I/O error on device loop1, logical block 253
[  242.797638][ T6322] Buffer I/O error on device loop1, logical block 254
[  242.823619][ T6322] syz-executor.1: attempt to access beyond end of device
[  242.823619][ T6322] loop1: rw=2049, sector=74, nr_sectors = 8 limit=64
[  242.918075][ T6322] EXT4-fs warning (device loop1): ext4_end_bio:342: I/O error 10 writing to inode 19 starting block 37)
[  242.930647][ T6322] Buffer I/O error on device loop1, logical block 37
[  242.937745][ T6322] Buffer I/O error on device loop1, logical block 38
[  242.944817][ T6322] Buffer I/O error on device loop1, logical block 39
[  242.951702][ T6322] Buffer I/O error on device loop1, logical block 40
[  242.981755][ T6322] syz-executor.1: attempt to access beyond end of device
[  242.981755][ T6322] loop1: rw=2049, sector=498, nr_sectors = 8 limit=64
[  243.008491][ T6322] EXT4-fs warning (device loop1): ext4_end_bio:342: I/O error 10 writing to inode 19 starting block 249)
[  243.060495][ T6322] Buffer I/O error on device loop1, logical block 249
[  243.067319][ T6322] Buffer I/O error on device loop1, logical block 250
[  243.076609][ T6319] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[  243.133284][ T6319] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  243.252886][   T29] audit: type=1400 audit(1719247772.904:555): avc:  denied  { unmount } for  pid=5100 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  243.286423][   T29] audit: type=1400 audit(1719247772.924:556): avc:  denied  { remove_name } for  pid=5100 comm="syz-executor.1" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  243.322710][   T29] audit: type=1400 audit(1719247772.924:557): avc:  denied  { unlink } for  pid=5100 comm="syz-executor.1" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  243.334554][ T6343] loop4: detected capacity change from 0 to 1024
[  243.353867][   T29] audit: type=1400 audit(1719247772.954:558): avc:  denied  { rmdir } for  pid=5100 comm="syz-executor.1" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  243.366715][ T6319] bcachefs (loop3): alloc_read... done
[  243.436643][   T29] audit: type=1400 audit(1719247772.994:559): avc:  denied  { unlink } for  pid=5100 comm="syz-executor.1" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  243.438348][ T6319] bcachefs (loop3): stripes_read... done
[  243.599306][ T6319] bcachefs (loop3): snapshots_read... done
[  243.694003][ T5100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.112849][ T6319] bcachefs (loop3): journal_replay... done
[  244.119924][   T29] audit: type=1400 audit(1719247773.074:560): avc:  denied  { unlink } for  pid=5100 comm="syz-executor.1" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  244.152303][ T6319] bcachefs (loop3): resume_logged_ops... done
[  244.183669][ T6319] bcachefs (loop3): going read-write
[  244.193830][ T6319] bcachefs (loop3): bch2_copygc_start(): error creating copygc thread EINTR
[  244.226057][ T6319] bcachefs (loop3): error starting copygc thread
[  244.284491][ T6319] bcachefs (loop3): going read-only
[  244.289757][ T6319] bcachefs (loop3): finished waiting for writes to stop
[  244.303899][ T6319] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10
[  244.325554][ T6319] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10
[  244.353154][ T6319] bcachefs (loop3): shutdown complete, journal seq 11
[  244.367764][ T6319] bcachefs (loop3): marking filesystem clean
[  244.427971][ T5234] hfsplus: b-tree write err: -5, ino 4
[  244.438300][ T6319] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR
[  244.493191][ T6319] bcachefs (loop3): shutting down
[  244.582238][ T6355] loop1: detected capacity change from 0 to 256
[  244.590599][ T6319] bcachefs (loop3): shutdown complete
[  246.330276][ T6355] syzkaller1: entered promiscuous mode
[  246.353363][ T6355] syzkaller1: entered allmulticast mode
[  247.229934][   T29] audit: type=1804 audit(1719247776.904:561): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2501696419/syzkaller.g6XVld/50/bus" dev="sda1" ino=1953 res=1 errno=0
[  247.422643][ T6376] loop1: detected capacity change from 0 to 4096
[  247.481624][ T6376] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  247.585456][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  247.742122][ T6380] loop4: detected capacity change from 0 to 2048
[  247.752650][ T6379] loop3: detected capacity change from 0 to 4096
[  247.780997][ T6379] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  247.819209][ T6380] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  247.856746][ T6380] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  247.928795][ T6380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  247.985349][ T5159] kernel write not supported for file /6388/loginuid (pid: 5159 comm: kworker/1:6)
[  248.067752][   T29] audit: type=1800 audit(1719247777.744:562): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1367 res=0 errno=0
[  250.361124][ T6409] loop4: detected capacity change from 0 to 32768
[  250.541825][ T6417] loop3: detected capacity change from 0 to 256
[  250.665435][ T6409] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[  250.683033][ T6409] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  250.727364][ T6409] bcachefs (loop4): alloc_read... done
[  250.732924][ T6409] bcachefs (loop4): stripes_read... done
[  250.738888][ T6409] bcachefs (loop4): snapshots_read... done
[  250.748443][ T6409] bcachefs (loop4): journal_replay... done
[  250.754859][ T6409] bcachefs (loop4): resume_logged_ops... done
[  250.784911][ T6409] bcachefs (loop4): going read-write
[  250.830449][ T6409] bcachefs (loop4): done starting filesystem
[  250.972172][ T6427] syz-executor.1: attempt to access beyond end of device
[  250.972172][ T6427] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[  251.887033][   T29] audit: type=1400 audit(1719247781.064:563): avc:  denied  { append open } for  pid=6408 comm="syz-executor.4" path="/root/syzkaller-testdir4257023002/syzkaller.gLmPhb/49/file0/memory.events" dev="loop4" ino=1073741829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  252.160903][   T29] audit: type=1400 audit(1719247781.164:564): avc:  denied  { write } for  pid=6408 comm="syz-executor.4" name="memory.events" dev="loop4" ino=1073741829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  252.197286][ T6417] syzkaller1: entered promiscuous mode
[  252.240963][ T6417] syzkaller1: entered allmulticast mode
[  252.304110][ T6431] syzkaller1: entered promiscuous mode
[  252.340712][ T6431] syzkaller1: entered allmulticast mode
[  253.467234][ T6437] syz-executor.4 (6437) used greatest stack depth: 16832 bytes left
[  254.333402][ T5102] bcachefs (loop4): shutting down
[  254.372407][ T5102] bcachefs (loop4): going read-only
[  254.494404][ T5102] bcachefs (loop4): finished waiting for writes to stop
[  254.565686][ T5102] bcachefs (loop4): flushing journal and stopping allocators, journal seq 14
[  254.647748][ T5102] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15
[  254.684696][ T5102] bcachefs (loop4): shutdown complete, journal seq 16
[  254.814846][ T5102] bcachefs (loop4): marking filesystem clean
[  255.906817][ T5102] bcachefs (loop4): shutdown complete
[  256.105737][ T6468] loop3: detected capacity change from 0 to 1024
[  256.318066][   T29] audit: type=1400 audit(1719247785.994:565): avc:  denied  { read write } for  pid=6466 comm="syz-executor.3" name="vmci" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  256.408689][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  256.418091][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  256.519288][   T29] audit: type=1400 audit(1719247785.994:566): avc:  denied  { open } for  pid=6466 comm="syz-executor.3" path="/dev/vmci" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  256.837747][ T6476] fuse: Bad value for 'fd'
[  257.099812][ T6478] loop1: detected capacity change from 0 to 47
[  257.361979][   T51] hfsplus: b-tree write err: -5, ino 4
[  257.919293][ T6489] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in;
[  257.919293][ T6489]    program syz-executor.3 not setting count and/or reply_len properly
[  257.983735][ T6489] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  257.992118][ T6489] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  258.005208][ T6489] bridge0: port 3(gretap0) entered blocking state
[  258.012312][ T6489] bridge0: port 3(gretap0) entered disabled state
[  258.020240][ T6489] gretap0: entered allmulticast mode
[  258.035236][ T6489] gretap0: entered promiscuous mode
[  258.062614][ T6489] bridge0: port 3(gretap0) entered blocking state
[  258.069704][ T6489] bridge0: port 3(gretap0) entered forwarding state
[  258.205985][   T29] audit: type=1400 audit(1719247787.584:567): avc:  denied  { write } for  pid=6483 comm="syz-executor.3" name="sg0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  260.177649][ T6505] loop4: detected capacity change from 0 to 47
[  260.241846][ T6486] syzkaller1: entered promiscuous mode
[  260.267724][ T6486] syzkaller1: entered allmulticast mode
[  260.443119][ T6509] loop3: detected capacity change from 0 to 47
[  260.869581][   T29] audit: type=1804 audit(1719247790.534:568): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3477689819/syzkaller.Vmz2yB/72/bus" dev="sda1" ino=1962 res=1 errno=0
[  261.561925][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  263.232726][ T6530] loop4: detected capacity change from 0 to 256
[  263.414730][ T6262] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  263.506274][ T6536] loop4: detected capacity change from 0 to 47
[  263.742292][   T29] audit: type=1326 audit(1719247793.414:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  263.903696][   T29] audit: type=1326 audit(1719247793.414:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  263.946246][   T29] audit: type=1326 audit(1719247793.414:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  263.971596][   T29] audit: type=1326 audit(1719247793.414:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  264.067321][   T29] audit: type=1326 audit(1719247793.414:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  264.105228][   T29] audit: type=1326 audit(1719247793.414:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  264.135917][   T29] audit: type=1326 audit(1719247793.414:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  264.161456][   T29] audit: type=1326 audit(1719247793.414:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  264.350658][   T29] audit: type=1326 audit(1719247793.414:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  265.876524][   T29] audit: type=1326 audit(1719247793.414:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6519 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7fc00000
[  267.931510][ T6568] loop3: detected capacity change from 0 to 2048
[  267.987830][ T6568] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  271.112819][   T29] kauditd_printk_skb: 57 callbacks suppressed
[  271.112838][   T29] audit: type=1400 audit(1719247800.784:636): avc:  denied  { unmount } for  pid=5102 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  276.952663][ T6634] loop3: detected capacity change from 0 to 256
[  276.990189][ T6634] FAT-fs (loop3): Unrecognized mount option "short
" or missing value
[  281.378082][ T6649] loop4: detected capacity change from 0 to 256
[  281.407566][ T6649] FAT-fs (loop4): Unrecognized mount option "short
" or missing value
[  284.026079][ T6647] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  284.187942][ T6657] loop3: detected capacity change from 0 to 47
[  292.051942][ T6693] loop3: detected capacity change from 0 to 4096
[  292.104101][ T6693] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  294.714726][ T6710] overlay: ./file0 is not a directory
[  294.735651][ T6717] loop4: detected capacity change from 0 to 64
[  294.795020][ T5117] Bluetooth: hci2: command tx timeout
[  295.062286][ T6709] loop3: detected capacity change from 0 to 32768
[  295.801919][ T6709] syz-executor.3: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  295.874544][ T6709] CPU: 1 PID: 6709 Comm: syz-executor.3 Not tainted 6.10.0-rc5-syzkaller #0
[  295.883380][ T6709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  295.893785][ T6709] Call Trace:
[  295.897063][ T6709]  <TASK>
[  295.900004][ T6709]  dump_stack_lvl+0x16c/0x1f0
[  295.908669][ T6709]  warn_alloc+0x24d/0x3a0
[  295.913167][ T6709]  ? __pfx_warn_alloc+0x10/0x10
[  295.918024][ T6709]  ? __bch2_darray_resize+0xd8/0x250
[  295.924152][ T6709]  ? __get_vm_area_node+0x190/0x2d0
[  295.930338][ T6709]  ? __get_vm_area_node+0x1bc/0x2d0
[  295.937525][ T6709]  __vmalloc_node_range_noprof+0xff7/0x1520
[  295.943534][ T6709]  ? __bch2_darray_resize+0xd8/0x250
[  295.948858][ T6709]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  295.955286][ T6709]  ? trace_kmalloc+0x2d/0xe0
[  295.960098][ T6709]  ? __kmalloc_node_noprof.cold+0x5a/0x5f
[  295.965929][ T6709]  ? __bch2_darray_resize+0xd8/0x250
[  295.971432][ T6709]  kvmalloc_node_noprof+0x14f/0x1a0
[  295.976827][ T6709]  ? __bch2_darray_resize+0xd8/0x250
[  295.982378][ T6709]  __bch2_darray_resize+0xd8/0x250
[  295.987489][ T6709]  bch2_fs_btree_write_buffer_init+0x2a2/0x380
[  295.993671][ T6709]  bch2_fs_alloc+0x1a50/0x2670
[  295.998450][ T6709]  ? __pfx_bch2_fs_alloc+0x10/0x10
[  296.003651][ T6709]  bch2_fs_open+0x7b5/0x1110
[  296.008301][ T6709]  ? kasan_save_free_info+0x3b/0x60
[  296.013535][ T6709]  ? __pfx_bch2_fs_open+0x10/0x10
[  296.018606][ T6709]  ? bch2_mount+0x46e/0x1230
[  296.023203][ T6709]  ? kasan_quarantine_put+0x10a/0x240
[  296.028589][ T6709]  ? lockdep_hardirqs_on+0x7c/0x110
[  296.033791][ T6709]  bch2_mount+0xe2c/0x1230
[  296.038217][ T6709]  ? __pfx_bch2_mount+0x10/0x10
[  296.043094][ T6709]  ? cred_has_capability.isra.0+0x192/0x2f0
[  296.049094][ T6709]  ? __pfx_cred_has_capability.isra.0+0x10/0x10
[  296.055351][ T6709]  ? rcu_is_watching+0x12/0xc0
[  296.060567][ T6709]  ? selinux_sb_eat_lsm_opts+0x594/0x700
[  296.067104][ T6709]  ? cap_capable+0x1cf/0x240
[  296.072019][ T6709]  ? __pfx_bch2_mount+0x10/0x10
[  296.077166][ T6709]  legacy_get_tree+0x109/0x220
[  296.081950][ T6709]  vfs_get_tree+0x8f/0x380
[  296.086545][ T6709]  path_mount+0x14e6/0x1f20
[  296.091200][ T6709]  ? kmem_cache_free+0x12f/0x3a0
[  296.096149][ T6709]  ? __pfx_path_mount+0x10/0x10
[  296.100996][ T6709]  ? putname+0x12e/0x170
[  296.105271][ T6709]  __x64_sys_mount+0x297/0x320
[  296.110051][ T6709]  ? __pfx___x64_sys_mount+0x10/0x10
[  296.115345][ T6709]  do_syscall_64+0xcd/0x250
[  296.119856][ T6709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  296.125990][ T6709] RIP: 0033:0x7f2c4847e7aa
[  296.130417][ T6709] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  296.150045][ T6709] RSP: 002b:00007f2c4912bef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
[  296.158557][ T6709] RAX: ffffffffffffffda RBX: 00007f2c4912bf80 RCX: 00007f2c4847e7aa
[  296.166645][ T6709] RDX: 0000000020011a00 RSI: 0000000020011a40 RDI: 00007f2c4912bf40
[  296.174647][ T6709] RBP: 0000000020011a00 R08: 00007f2c4912bf80 R09: 0000000001200014
[  296.182697][ T6709] R10: 0000000001200014 R11: 0000000000000202 R12: 0000000020011a40
[  296.190655][ T6709] R13: 00007f2c4912bf40 R14: 00000000000119fc R15: 0000000020000100
[  296.198618][ T6709]  </TASK>
[  296.321833][ T6709] Mem-Info:
[  296.354376][ T6709] active_anon:30475 inactive_anon:0 isolated_anon:0
[  296.354376][ T6709]  active_file:0 inactive_file:46888 isolated_file:0
[  296.354376][ T6709]  unevictable:768 dirty:1 writeback:0
[  296.354376][ T6709]  slab_reclaimable:10651 slab_unreclaimable:97760
[  296.354376][ T6709]  mapped:19302 shmem:6390 pagetables:742
[  296.354376][ T6709]  sec_pagetables:0 bounce:0
[  296.354376][ T6709]  kernel_misc_reclaimable:0
[  296.354376][ T6709]  free:1369504 free_pcp:2485 free_cma:0
[  296.874604][ T5113] Bluetooth: hci2: command 0x0406 tx timeout
[  296.927566][ T6709] Node 0 active_anon:127660kB inactive_anon:0kB active_file:0kB inactive_file:187736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76992kB dirty:4kB writeback:60kB shmem:24020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10736kB pagetables:2968kB sec_pagetables:0kB all_unreclaimable? no
[  297.237393][ T6709] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  297.274791][ T6709] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  297.331403][ T6709] lowmem_reserve[]: 0 2565 2567 0 0
[  297.341694][ T6709] Node 0 DMA32 free:1512936kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:124744kB inactive_anon:0kB active_file:0kB inactive_file:185716kB unevictable:1536kB writepending:4kB present:3129332kB managed:2654752kB mlocked:0kB bounce:0kB free_pcp:6684kB local_pcp:876kB free_cma:0kB
[  297.380389][ T6709] lowmem_reserve[]: 0 0 1 0 0
[  297.386966][ T6709] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB
[  298.267824][ T5113] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10
[  298.375400][ T6709] lowmem_reserve[]: 0 0 0 0 0
[  298.502765][ T6709] Node 1 Normal free:3950772kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:4028kB local_pcp:4028kB free_cma:0kB
[  298.671201][ T6709] lowmem_reserve[]: 0 0 0 0 0
[  298.685846][ T6709] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  298.707069][ T6709] Node 0 DMA32: 48*4kB (UME) 400*8kB (UM) 71*16kB (UME) 91*32kB (UME) 182*64kB (UME) 44*128kB (UME) 32*256kB (UME) 22*512kB (UME) 14*1024kB (UM) 3*2048kB (UM) 355*4096kB (UME) = 1518736kB
[  298.742094][ T6709] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  298.756772][ T6709] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (U) 0*128kB 2*256kB (UM) 1*512kB (M) 1*1024kB (U) 2*2048kB (U) 963*4096kB (M) = 3950772kB
[  298.794813][ T6709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  298.806393][ T6709] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  298.819868][ T6752] loop4: detected capacity change from 0 to 256
[  298.827098][ T6709] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  298.914605][ T6709] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  298.994544][ T6709] 53216 total pagecache pages
[  298.999620][ T6709] 0 pages in swap cache
[  299.140979][ T6709] Free swap  = 124456kB
[  299.151733][ T6709] Total swap = 124996kB
[  299.156301][ T6752] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[  299.164510][ T6709] 2097051 pages RAM
[  299.263791][ T6709] 0 pages HighMem/MovableOnly
[  299.279530][ T6709] 401769 pages reserved
[  299.326889][ T6709] 0 pages cma reserved
[  299.485454][ T6709] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete
[  299.696511][ T6757] loop4: detected capacity change from 0 to 47
[  300.314554][ T5113] Bluetooth: hci2: command 0x0406 tx timeout
[  300.451194][ T5117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  300.470673][ T5117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  300.511568][ T5117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  300.528141][ T5117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  300.544591][ T5117] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  300.552436][ T5117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  300.566523][   T29] audit: type=1400 audit(1719247830.244:637): avc:  denied  { mounton } for  pid=6761 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  300.798172][ T6766] loop3: detected capacity change from 0 to 64
[  300.831890][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.058885][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.281483][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.496825][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.992592][ T6761] chnl_net:caif_netlink_parms(): no params data found
[  302.084568][   T29] audit: type=1400 audit(1719247831.744:638): avc:  denied  { search } for  pid=4747 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  302.188669][   T29] audit: type=1400 audit(1719247831.754:639): avc:  denied  { read } for  pid=4747 comm="dhcpcd" name="n68" dev="tmpfs" ino=3519 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  302.210990][   T29] audit: type=1400 audit(1719247831.754:640): avc:  denied  { open } for  pid=4747 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=3519 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  302.234698][   T29] audit: type=1400 audit(1719247831.754:641): avc:  denied  { getattr } for  pid=4747 comm="dhcpcd" path="/run/udev/data/n68" dev="tmpfs" ino=3519 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  302.510640][   T12] bridge_slave_1: left allmulticast mode
[  302.541012][   T12] bridge_slave_1: left promiscuous mode
[  302.561819][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.632804][   T12] bridge_slave_0: left allmulticast mode
[  302.638919][ T5117] Bluetooth: hci1: command tx timeout
[  302.659871][   T12] bridge_slave_0: left promiscuous mode
[  302.678741][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.784280][   T29] audit: type=1400 audit(1719247832.454:642): avc:  denied  { read } for  pid=6790 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  302.871657][   T29] audit: type=1400 audit(1719247832.454:643): avc:  denied  { open } for  pid=6790 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  302.934863][   T29] audit: type=1400 audit(1719247832.454:644): avc:  denied  { getattr } for  pid=6790 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1410 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  304.215766][   T29] audit: type=1400 audit(1719247833.884:645): avc:  denied  { write } for  pid=6788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1409 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  304.714793][ T5117] Bluetooth: hci1: command tx timeout
[  304.779864][   T29] audit: type=1400 audit(1719247833.944:646): avc:  denied  { add_name } for  pid=6788 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  305.793548][ T6817] loop3: detected capacity change from 0 to 256
[  305.991358][ T6817] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  306.283380][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  306.283395][   T29] audit: type=1400 audit(1719247835.954:659): avc:  denied  { mounton } for  pid=6820 comm="syz-executor.3" path="/root/syzkaller-testdir444586456/syzkaller.h14X0r/72/file0" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1
[  306.808135][ T5117] Bluetooth: hci1: command tx timeout
[  306.818313][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  306.967107][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.011188][   T12] bond0 (unregistering): Released all slaves
[  307.492840][ T5117] Bluetooth: hci4: ACL packet for unknown connection handle 0
[  307.502012][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  307.528744][   T29] audit: type=1326 audit(1719247837.204:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7ffc0000
[  307.555899][ T6834] loop3: detected capacity change from 0 to 8
[  307.576739][   T29] audit: type=1326 audit(1719247837.204:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7ffc0000
[  307.585938][ T6818] binder: Unknown parameter 'gid'
[  307.738007][   T29] audit: type=1326 audit(1719247837.204:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c4847d0a9 code=0x7ffc0000
[  308.104526][   T29] audit: type=1326 audit(1719247837.204:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7ffc0000
[  308.212321][   T29] audit: type=1326 audit(1719247837.204:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7ffc0000
[  308.297610][   T29] audit: type=1326 audit(1719247837.224:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2c4847d0a9 code=0x7ffc0000
[  308.514829][   T29] audit: type=1326 audit(1719247837.224:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c4847d0e3 code=0x7ffc0000
[  308.594501][   T29] audit: type=1326 audit(1719247837.234:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c4847bdef code=0x7ffc0000
[  308.673933][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.682073][   T29] audit: type=1326 audit(1719247837.234:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2c4847d137 code=0x7ffc0000
[  308.718324][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.750832][ T6761] bridge_slave_0: entered allmulticast mode
[  308.771842][ T6761] bridge_slave_0: entered promiscuous mode
[  308.852099][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.874752][ T5117] Bluetooth: hci1: command tx timeout
[  308.916900][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.944509][ T6761] bridge_slave_1: entered allmulticast mode
[  308.952457][ T6761] bridge_slave_1: entered promiscuous mode
[  309.148955][ T6848] loop4: detected capacity change from 0 to 1024
[  309.619566][ T6852] loop3: detected capacity change from 0 to 4096
[  309.718736][ T6852] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  309.925279][   T12] hsr_slave_0: left promiscuous mode
[  309.985120][   T12] hsr_slave_1: left promiscuous mode
[  310.024683][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.032449][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.057339][ T5234] hfsplus: b-tree write err: -5, ino 4
[  310.116561][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.133827][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.219677][   T12] veth1_macvtap: left promiscuous mode
[  310.241533][   T12] veth0_macvtap: left promiscuous mode
[  310.273349][   T12] veth1_vlan: left promiscuous mode
[  310.306560][   T12] veth0_vlan: left promiscuous mode
[  311.055131][ T6877] loop4: detected capacity change from 0 to 64
[  313.088458][   T12] team0 (unregistering): Port device team_slave_1 removed
[  313.111076][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  313.111095][   T29] audit: type=1800 audit(1719247842.784:690): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1946 res=0 errno=0
[  313.260895][   T12] team0 (unregistering): Port device team_slave_0 removed
[  313.978407][ T6896] loop4: detected capacity change from 0 to 1024
[  314.154299][ T6896] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  319.215887][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  319.231556][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  319.784139][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.802453][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.941661][ T6885] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  320.052577][ T6916] loop4: detected capacity change from 0 to 1024
[  320.697534][ T6761] team0: Port device team_slave_0 added
[  320.739925][ T6761] team0: Port device team_slave_1 added
[  321.855468][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.862637][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.895746][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.959731][ T6929] loop3: detected capacity change from 0 to 256
[  321.975022][ T1092] hfsplus: b-tree write err: -5, ino 4
[  321.978059][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1
[  322.014053][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  322.110693][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.289473][ T6929] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  322.737503][ T6761] hsr_slave_0: entered promiscuous mode
[  322.818546][ T6761] hsr_slave_1: entered promiscuous mode
[  322.845915][ T6761] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  322.862110][ T6761] Cannot create hsr debugfs directory
[  323.002868][ T6910] binder: Unknown parameter 'gid'
[  324.796021][ T5113] Bluetooth: hci0: command tx timeout
[  326.876104][ T5117] Bluetooth: hci0: command 0x0406 tx timeout
[  327.164406][ T5117] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  327.173553][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  327.215429][   T29] audit: type=1326 audit(1719247856.884:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7ffc0000
[  327.470260][   T29] audit: type=1326 audit(1719247856.884:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7ffc0000
[  327.580425][   T29] audit: type=1326 audit(1719247856.894:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48d807d0a9 code=0x7ffc0000
[  327.658664][   T29] audit: type=1326 audit(1719247856.894:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7ffc0000
[  327.713795][ T6982] loop3: detected capacity change from 0 to 47
[  327.731939][   T29] audit: type=1326 audit(1719247856.894:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x7ffc0000
[  327.870420][ T6761] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  327.879814][   T29] audit: type=1326 audit(1719247856.914:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f48d807d0a9 code=0x7ffc0000
[  327.936733][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  327.966877][   T29] audit: type=1326 audit(1719247856.914:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f48d807d0e3 code=0x7ffc0000
[  327.976755][ T6761] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  328.113226][   T29] audit: type=1326 audit(1719247856.914:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f48d807bdef code=0x7ffc0000
[  328.192044][ T6761] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  328.236412][ T6761] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  328.315549][   T29] audit: type=1326 audit(1719247856.914:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f48d807d137 code=0x7ffc0000
[  328.465552][   T29] audit: type=1326 audit(1719247856.914:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6966 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48d807bca0 code=0x7ffc0000
[  328.734984][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.859346][ T6761] 8021q: adding VLAN 0 to HW filter on device team0
[  328.952652][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.960122][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.084835][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.092127][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.383614][ T6761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  329.695705][ T7007] loop3: detected capacity change from 0 to 256
[  329.959444][ T7007] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  330.369468][ T7015] loop4: detected capacity change from 0 to 256
[  330.606372][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.000847][ T6761] veth0_vlan: entered promiscuous mode
[  331.061559][ T6761] veth1_vlan: entered promiscuous mode
[  331.277407][ T6761] veth0_macvtap: entered promiscuous mode
[  331.323887][ T6761] veth1_macvtap: entered promiscuous mode
[  332.068991][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.324298][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.394421][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.416194][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.444563][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.485319][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.317386][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  333.367465][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.412076][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0
[  333.583285][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.641143][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.687175][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.739875][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.770090][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.807806][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.843478][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  333.886643][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.909757][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.918716][ T7037] syzkaller1: entered promiscuous mode
[  333.938503][ T7037] syzkaller1: entered allmulticast mode
[  334.000055][ T6761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.014399][ T6761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  335.171996][ T6761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  335.226425][ T6761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  335.616316][   T29] kauditd_printk_skb: 255 callbacks suppressed
[  335.616334][   T29] audit: type=1400 audit(1719247865.294:956): avc:  denied  { append } for  pid=7062 comm="syz-executor.2" name="001" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  335.729313][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.744399][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  335.832143][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  335.992864][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.701254][ T7080] trusted_key: encrypted_key: insufficient parameters specified
[  336.955930][ T7079] loop1: detected capacity change from 0 to 4096
[  336.990802][ T7080] syz-executor.4: attempt to access beyond end of device
[  336.990802][ T7080] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  337.040978][ T7079] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  337.235884][ T7059] loop3: detected capacity change from 0 to 32768
[  338.151411][ T7059] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[  338.243364][ T7110] loop4: detected capacity change from 0 to 47
[  338.785002][ T7059] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  338.854563][ T7059] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  339.744573][ T7059] bcachefs (loop3): bch2_fs_recovery(): error EINTR
[  339.767400][ T7059] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR
[  339.821616][ T7059] bcachefs (loop3): shutting down
[  339.999175][ T7059] bcachefs (loop3): shutdown complete
[  340.455841][ T5117] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  340.497200][ T5113] Bluetooth: hci3: unexpected event for opcode 0x2016
[  340.550176][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  340.773379][   T29] audit: type=1326 audit(1719247870.444:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7129 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b0367d0a9 code=0x0
[  343.709976][ T7161] loop1: detected capacity change from 0 to 256
[  343.751466][ T7161] FAT-fs (loop1): Unrecognized mount option "short
" or missing value
[  347.800910][ T7180] loop3: detected capacity change from 0 to 1024
[  348.788460][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  348.840813][   T29] audit: type=1326 audit(1719247878.514:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7186 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b0367d0a9 code=0x0
[  349.018157][   T51] hfsplus: b-tree write err: -5, ino 4
[  349.292860][ T7201] loop1: detected capacity change from 0 to 1024
[  350.010679][   T61] hfsplus: b-tree write err: -5, ino 4
[  350.466258][ T7219] loop3: detected capacity change from 0 to 256
[  351.254428][ T7215] loop1: detected capacity change from 0 to 32768
[  351.335419][ T7215] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7215)
[  351.382397][ T7222] loop4: detected capacity change from 0 to 4096
[  351.444152][ T7222] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  351.484493][ T7220] syzkaller1: entered promiscuous mode
[  351.523047][ T7220] syzkaller1: entered allmulticast mode
[  351.533786][ T7215] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  351.604652][ T7215] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  351.667814][ T7215] BTRFS info (device loop1): using free-space-tree
[  353.905511][   T29] audit: type=1400 audit(1719247883.574:959): avc:  denied  { ioctl } for  pid=7252 comm="syz-executor.4" path="/dev/raw-gadget" dev="devtmpfs" ino=733 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  354.514343][ T5159] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  354.724457][ T5159] usb 5-1: Using ep0 maxpacket: 32
[  354.788571][ T5159] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  354.821749][ T5159] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  354.831929][ T5159] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  354.888850][ T5159] usb 5-1: Product: syz
[  354.893181][ T5159] usb 5-1: Manufacturer: syz
[  354.910428][ T5159] usb 5-1: SerialNumber: syz
[  354.950838][ T5159] usb 5-1: config 0 descriptor??
[  355.128566][ T7253] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  355.747054][ T5160] usb 5-1: USB disconnect, device number 3
[  355.774538][ T7267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  355.875058][   T29] audit: type=1326 audit(1719247885.544:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7262 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x0
[  356.139734][ T6761] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  358.547457][ T7290] loop3: detected capacity change from 0 to 1024
[  358.687129][   T29] audit: type=1400 audit(1719247888.364:961): avc:  denied  { mount } for  pid=7287 comm="syz-executor.0" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  359.547161][   T29] audit: type=1400 audit(1719247889.214:962): avc:  denied  { unmount } for  pid=5110 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  359.676532][ T1108] hfsplus: b-tree write err: -5, ino 4
[  359.985435][   T29] audit: type=1400 audit(1719247889.654:963): avc:  denied  { ioctl } for  pid=7304 comm="syz-executor.2" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16913 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  360.180100][ T7308] loop3: detected capacity change from 0 to 256
[  360.206644][ T7300] loop1: detected capacity change from 0 to 64
[  360.555867][ T7313] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  361.221483][ T7316] loop3: detected capacity change from 0 to 47
[  361.495078][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  361.725749][   T29] audit: type=1326 audit(1719247891.394:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7314 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48d807d0a9 code=0x0
[  361.802183][ T7325] input: syz0 as /devices/virtual/input/input13
[  365.811838][ T7351] loop1: detected capacity change from 0 to 4096
[  365.863722][ T7351] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  367.413902][ T7360] loop3: detected capacity change from 0 to 64
[  374.940350][ T7409] loop3: detected capacity change from 0 to 2048
[  375.097633][ T7409] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  375.247807][ T7417] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  375.760950][ T7409] overlay: ./file0 is not a directory
[  376.041449][ T7409] loop3: detected capacity change from 0 to 2048
[  376.088564][ T7409] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  378.740565][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  379.131529][ T7441] loop1: detected capacity change from 0 to 256
[  379.295172][ T1245] ieee802154 phy0 wpan0: encryption failed: -22
[  379.301502][ T1245] ieee802154 phy1 wpan1: encryption failed: -22
[  379.514554][   T29] audit: type=1326 audit(1719247909.184:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  379.612248][   T29] audit: type=1326 audit(1719247909.184:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  379.681509][   T29] audit: type=1326 audit(1719247909.184:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  379.809787][   T29] audit: type=1326 audit(1719247909.184:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  379.918168][   T29] audit: type=1326 audit(1719247909.184:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  380.023406][   T29] audit: type=1326 audit(1719247909.194:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  380.090203][   T29] audit: type=1326 audit(1719247909.194:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  380.193328][   T29] audit: type=1326 audit(1719247909.194:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  380.387646][   T29] audit: type=1326 audit(1719247909.194:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  380.477235][   T29] audit: type=1326 audit(1719247909.194:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4847d0a9 code=0x7fc00000
[  380.780561][ T7441] syzkaller1: entered promiscuous mode
[  380.793866][ T7441] syzkaller1: entered allmulticast mode
[  380.798591][ T7452] loop3: detected capacity change from 0 to 64
[  381.022931][ T7456] loop4: detected capacity change from 0 to 64
[  385.368925][ T5113] Bluetooth: hci1: link tx timeout
[  385.374960][ T5113] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  385.466125][   T29] kauditd_printk_skb: 58 callbacks suppressed
[  385.466167][   T29] audit: type=1400 audit(1719247914.774:1033): avc:  denied  { connect } for  pid=7481 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  386.101110][   T29] audit: type=1400 audit(1719247914.804:1034): avc:  denied  { write } for  pid=7481 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  389.401413][ T5117] Bluetooth: hci1: command 0x0406 tx timeout
[  389.638989][   T29] audit: type=1400 audit(1719247914.974:1035): avc:  denied  { write } for  pid=7481 comm="syz-executor.1" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  389.747438][ T7494] loop4: detected capacity change from 0 to 47
[  390.129042][ T7507] input: syz0 as /devices/virtual/input/input14
[  390.161632][ T7511] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  390.185428][ T7509] input: syz0 as /devices/virtual/input/input15
[  390.473323][   T29] audit: type=1400 audit(1719247920.144:1036): avc:  denied  { bind } for  pid=7515 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  390.519296][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  390.621610][ T7516] vlan2: entered promiscuous mode
[  390.634379][ T7516] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  391.048711][   T29] audit: type=1400 audit(1719247920.714:1037): avc:  denied  { bind } for  pid=7519 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  391.136447][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  391.144976][   T29] audit: type=1400 audit(1719247920.714:1038): avc:  denied  { name_bind } for  pid=7519 comm="syz-executor.2" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  391.207465][ T7522] block nbd0: not configured, cannot reconfigure
[  391.264426][   T29] audit: type=1400 audit(1719247920.724:1039): avc:  denied  { node_bind } for  pid=7519 comm="syz-executor.2" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  391.643213][ T7538] loop3: detected capacity change from 0 to 128
[  391.711262][   T29] audit: type=1400 audit(1719247921.384:1040): avc:  denied  { getopt } for  pid=7536 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  391.815002][ T7541] loop1: detected capacity change from 0 to 128
[  391.930253][   T29] audit: type=1400 audit(1719247921.604:1041): avc:  denied  { write } for  pid=7532 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  392.044842][   T29] audit: type=1400 audit(1719247921.654:1042): avc:  denied  { listen } for  pid=7532 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  392.256644][   T29] audit: type=1400 audit(1719247921.934:1043): avc:  denied  { getopt } for  pid=7544 comm="syz-executor.4" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  392.421961][ T7555] loop1: detected capacity change from 0 to 4096
[  392.524464][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  392.553785][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  392.574187][ T7559] block nbd0: not configured, cannot reconfigure
[  392.595293][ T7561] tap0: tun_chr_ioctl cmd 2147767517
[  392.734368][    T9] usb 1-1: Using ep0 maxpacket: 8
[  392.747137][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  392.774344][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  392.788591][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  392.818231][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  392.854981][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  392.869857][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.145047][    T9] usb 1-1: usb_control_msg returned -71
[  393.171484][    T9] usbtmc 1-1:16.0: can't read capabilities
[  393.214533][    T9] usb 1-1: USB disconnect, device number 3
[  393.714706][ T5115] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  393.765362][ T7588] loop4: detected capacity change from 0 to 128
[  393.776337][ T7567] loop3: detected capacity change from 0 to 32768
[  393.936684][ T5115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  393.948575][ T5115] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[  393.958543][ T5115] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  393.973003][ T5115] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  393.982264][ T5115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.995288][ T5115] usb 2-1: config 0 descriptor??
[  394.090345][ T7590] UBIFS error (pid: 7590): cannot open "./file0", error -22
[  394.140154][ T7567] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow
[  394.234509][ T7567] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  394.310171][   T29] audit: type=1400 audit(1719247923.984:1044): avc:  denied  { bind } for  pid=7602 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[  394.334090][ T7567] bcachefs (loop3): alloc_read... done
[  394.344048][ T5113] Bluetooth: hci0: command tx timeout
[  394.384321][ T7567] bcachefs (loop3): stripes_read... done
[  394.406570][   T29] audit: type=1400 audit(1719247923.984:1045): avc:  denied  { name_bind } for  pid=7602 comm="syz-executor.0" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1
[  394.434725][ T7567] bcachefs (loop3): snapshots_read... done
[  394.459317][ T5115] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd
[  394.487047][ T7567] bcachefs (loop3): journal_replay... done
[  394.503852][ T5115] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  394.511920][   T29] audit: type=1400 audit(1719247923.984:1046): avc:  denied  { node_bind } for  pid=7602 comm="syz-executor.0" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1
[  394.522986][ T7567] bcachefs (loop3): resume_logged_ops...
[  394.534944][ T5115] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  394.561956][ T7567]  done
[  394.567881][ T7567] bcachefs (loop3): going read-write
[  394.575913][ T5115] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  394.605514][ T5115] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  394.612998][ T5115] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  394.639419][ T5115] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  394.668556][ T7567] bcachefs (loop3): done starting filesystem
[  394.745525][ T5115] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  394.811226][ T5115] usb 2-1: USB disconnect, device number 3
[  394.977047][ T1108] bcachefs (loop3 inum 1073741825 offset 0): data data checksum error, type chacha20_poly1305_80: got 17014699bc8aff84b02b should be 3f9e892ceabd1d47b0c2
[  394.985957][ T1092] bcachefs (loop3 inum 1073741827 offset 0): data data checksum error, type chacha20_poly1305_80: got d7b7aa05396b21f13a2f should be 9894d374992ac97ed273
[  395.035436][ T1092] bcachefs (loop3 inum 1073741827 offset 0): no device to read from
[  395.044519][ T1108] bcachefs (loop3 inum 1073741825 offset 0): no device to read from
[  395.214572][ T7621] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'.
[  395.231138][ T7608] loop4: detected capacity change from 0 to 40427
[  395.256077][ T7621] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  395.296779][ T7608] F2FS-fs (loop4): invalid crc value
[  395.489593][ T7608] F2FS-fs (loop4): Found nat_bits in checkpoint
[  395.703876][ T7608] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  395.793238][ T7608] F2FS-fs (loop4): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[  395.823782][ T7630] UBIFS error (pid: 7630): cannot open "./file0", error -22
[  395.862987][ T5102] syz-executor.4: attempt to access beyond end of device
[  395.862987][ T5102] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  395.903307][ T5102] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  396.302651][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  396.302671][   T29] audit: type=1400 audit(1719247925.974:1053): avc:  denied  { create } for  pid=7648 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  396.380768][   T29] audit: type=1400 audit(1719247925.974:1054): avc:  denied  { listen } for  pid=7648 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  396.450062][ T7659] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'.
[  396.466320][   T29] audit: type=1400 audit(1719247925.984:1055): avc:  denied  { accept } for  pid=7648 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  396.555235][   T29] audit: type=1400 audit(1719247926.054:1056): avc:  denied  { setopt } for  pid=7655 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  396.635211][   T29] audit: type=1400 audit(1719247926.084:1057): avc:  denied  { connect } for  pid=7654 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  396.674367][   T29] audit: type=1400 audit(1719247926.134:1058): avc:  denied  { write } for  pid=7654 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  396.724395][   T29] audit: type=1400 audit(1719247926.204:1059): avc:  denied  { read } for  pid=7654 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  396.769604][   T29] audit: type=1400 audit(1719247926.284:1060): avc:  denied  { ioctl } for  pid=7661 comm="syz-executor.1" path="socket:[18206]" dev="sockfs" ino=18206 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  396.852344][   T29] audit: type=1400 audit(1719247926.524:1061): avc:  denied  { ioctl } for  pid=7667 comm="syz-executor.4" path="socket:[19032]" dev="sockfs" ino=19032 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  397.074656][   T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  397.153209][   T29] audit: type=1400 audit(1719247926.824:1062): avc:  denied  { setopt } for  pid=7677 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  397.274384][   T45] usb 2-1: Using ep0 maxpacket: 8
[  397.299655][   T45] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  397.324465][   T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  397.336836][   T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  397.364292][   T45] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  397.386464][   T45] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  397.404292][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.634744][   T45] usb 2-1: usb_control_msg returned -71
[  397.641216][   T45] usbtmc 2-1:16.0: can't read capabilities
[  397.691127][   T45] usb 2-1: USB disconnect, device number 4
[  397.711197][ T7687] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4032167445 (64514679120 ns) > initial count (63607699792 ns). Using initial count to start timer.
[  397.768589][ T7687] kvm: pic: non byte write
[  398.723808][ T7712] loop4: detected capacity change from 0 to 512
[  398.779535][ T7712] EXT4-fs (loop4): corrupt root inode, run e2fsck
[  398.789660][ T7712] EXT4-fs (loop4): mount failed
[  398.819585][ T7716] tap0: tun_chr_ioctl cmd 1074025675
[  398.854713][ T7716] tap0: persist enabled
[  399.225993][ T7726] syz-executor.2(7726): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  399.578187][ T7728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4032167445 (64514679120 ns) > initial count (63607699792 ns). Using initial count to start timer.
[  399.622643][ T7728] kvm: pic: non byte write
[  399.653230][ T7738] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  399.678950][ T7738] netlink: 210880 bytes leftover after parsing attributes in process `syz-executor.1'.
[  399.881815][ T7742] tap0: tun_chr_ioctl cmd 1074025694
[  400.019867][ T7748] loop1: detected capacity change from 0 to 128
[  400.384405][ T7756] loop4: detected capacity change from 0 to 128
[  400.554829][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  400.759240][    T9] usb 2-1: Using ep0 maxpacket: 16
[  400.769439][    T9] usb 2-1: config 1 interface 0 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  400.787050][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  400.811351][    T9] usb 2-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40
[  400.827935][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.839278][    T9] usb 2-1: Product: syz
[  400.843499][    T9] usb 2-1: Manufacturer: syz
[  400.852492][    T9] usb 2-1: SerialNumber: syz
[  401.379350][ T7779] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  401.386603][ T7779] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  401.453981][ T7779] vhci_hcd vhci_hcd.0: Device attached
[  401.548022][ T7780] vhci_hcd: connection closed
[  401.552557][    T9] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  401.574619][   T61] vhci_hcd: stop threads
[  401.586100][   T61] vhci_hcd: release socket
[  401.614184][   T61] vhci_hcd: disconnect device
[  401.622931][    T9] usb 2-1: USB disconnect, device number 5
[  401.645077][  T928] vhci_hcd: vhci_device speed not set
[  401.879528][ T7774] loop4: detected capacity change from 0 to 32768
[  402.023558][ T7774] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open
[  402.044176][ T7774] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete
[  402.135856][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  402.135875][   T29] audit: type=1400 audit(1719247931.794:1068): avc:  denied  { create } for  pid=7802 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  402.227535][   T29] audit: type=1400 audit(1719247931.824:1069): avc:  denied  { ioctl } for  pid=7802 comm="syz-executor.0" path="socket:[20491]" dev="sockfs" ino=20491 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  402.364124][   T29] audit: type=1400 audit(1719247932.034:1070): avc:  denied  { getopt } for  pid=7808 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  402.854380][ T7774] loop4: detected capacity change from 0 to 512
[  402.862260][ T7774] EXT4-fs: Ignoring removed nomblk_io_submit option
[  402.870446][ T7774] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  402.990713][ T7774] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  403.075342][ T7774] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  403.242928][ T7774] EXT4-fs (loop4): orphan cleanup on readonly fs
[  403.317820][ T7774] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  403.412441][ T7774] EXT4-fs warning (device loop4): ext4_enable_quotas:7074: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  403.457962][ T7774] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  403.502564][ T7774] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set
[  403.577695][ T7774] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  403.616437][ T7774] EXT4-fs (loop4): 1 truncate cleaned up
[  403.634199][ T7774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  403.664438][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  403.774424][ T5102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.887483][    T9] usb 2-1: Using ep0 maxpacket: 8
[  403.911938][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  403.948615][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  403.974312][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  404.004457][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  404.034372][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  404.054004][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.139300][   T29] audit: type=1400 audit(1719247933.814:1071): avc:  denied  { read } for  pid=7831 comm="syz-executor.2" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  404.166662][ T7832] loop4: detected capacity change from 0 to 512
[  404.192454][   T29] audit: type=1400 audit(1719247933.814:1072): avc:  denied  { open } for  pid=7831 comm="syz-executor.2" path="/dev/dri/card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  404.224197][   T29] audit: type=1400 audit(1719247933.854:1073): avc:  denied  { ioctl } for  pid=7831 comm="syz-executor.2" path="/dev/dri/card1" dev="devtmpfs" ino=630 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  404.292084][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  404.298657][ T7832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.309869][    T9] usbtmc 2-1:16.0: can't read capabilities
[  404.331134][   T29] audit: type=1804 audit(1719247933.864:1074): pid=7807 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2501696419/syzkaller.g6XVld/139/file0" dev="sda1" ino=1966 res=1 errno=0
[  404.362336][ T7832] ext4 filesystem being mounted at /root/syzkaller-testdir4257023002/syzkaller.gLmPhb/110/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.447921][ T5102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.501710][ T5159] usb 2-1: USB disconnect, device number 6
[  404.512889][ T7842] fuse: Bad value for 'fd'
[  404.953667][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  404.965872][ T7860] block nbd0: not configured, cannot reconfigure
[  405.168834][   T29] audit: type=1400 audit(1719247934.834:1075): avc:  denied  { name_bind } for  pid=7863 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  405.781391][ T7856] loop4: detected capacity change from 0 to 40427
[  405.806940][ T7880] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'.
[  405.847392][ T7856] F2FS-fs (loop4): Found nat_bits in checkpoint
[  406.004193][ T7856] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  406.181237][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  406.244406][ T7891] block nbd0: not configured, cannot reconfigure
[  406.543790][   T29] audit: type=1800 audit(1719247936.094:1076): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0
[  406.774606][   T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  406.976865][ T5102] syz-executor.4: attempt to access beyond end of device
[  406.976865][ T5102] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  406.994416][   T45] usb 3-1: Using ep0 maxpacket: 8
[  407.014898][ T5102] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  407.033419][   T45] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  407.082824][   T45] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  407.131998][   T45] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  407.161353][   T45] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  407.199845][   T45] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  407.220070][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.413017][ T7898] loop1: detected capacity change from 0 to 32768
[  407.495914][ T7898] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7898)
[  407.521701][   T45] usb 3-1: GET_CAPABILITIES returned 0
[  407.533232][   T45] usbtmc 3-1:16.0: can't read capabilities
[  408.072479][ T7898] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  408.159996][   T45] usb 3-1: USB disconnect, device number 3
[  408.190577][ T7898] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  408.244880][ T7898] BTRFS info (device loop1): using free-space-tree
[  408.413722][ T7898] BTRFS error (device loop1): balance: invalid convert metadata profile single
[  408.473667][ T6761] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  409.150079][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  409.170260][ T7935] block nbd0: not configured, cannot reconfigure
[  409.248484][ T7942] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 32624. macoff=96
[  409.283342][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  409.294740][ T7946] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  409.303533][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  409.324771][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  409.571375][   T29] audit: type=1326 audit(1719247939.244:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7952 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48d807d0a9 code=0x0
[  409.610894][ T7957] tap0: tun_chr_ioctl cmd 2147767519
[  409.777914][ T5115] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  409.927631][ T7962] UBIFS error (pid: 7962): cannot open "./file0", error -22
[  409.953621][ T7949] loop1: detected capacity change from 0 to 32768
[  409.975094][ T5115] usb 5-1: Using ep0 maxpacket: 8
[  409.981915][ T7949] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7949)
[  409.996631][ T5115] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  410.023101][ T5115] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  410.030815][ T7949] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  410.036872][ T5115] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  410.063899][ T5115] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  410.073938][ T7949] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  410.089243][ T5115] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  410.090260][ T7949] BTRFS info (device loop1): using free-space-tree
[  410.124847][ T5115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.292744][  T928] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  410.300590][ T7949] BTRFS error (device loop1): balance: invalid convert metadata profile single
[  410.341404][ T6761] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  410.389767][ T5115] usb 5-1: GET_CAPABILITIES returned 0
[  410.409571][ T5115] usbtmc 5-1:16.0: can't read capabilities
[  410.540520][  T928] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  410.584465][  T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.649618][  T928] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  410.669450][  T928] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  410.689897][  T928] usb 1-1: Manufacturer: syz
[  410.696636][ T5159] usb 5-1: USB disconnect, device number 4
[  410.735332][  T928] usb 1-1: config 0 descriptor??
[  410.924344][  T928] rc_core: IR keymap rc-hauppauge not found
[  410.956307][  T928] Registered IR keymap rc-empty
[  410.973494][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.984563][  T928] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  411.000221][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.007309][  T928] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17
[  411.095320][  T928] usb 1-1: USB disconnect, device number 4
[  411.629677][ T7999] loop1: detected capacity change from 0 to 256
[  411.758265][ T7999] FAT-fs (loop1): Directory bread(block 64) failed
[  411.774476][ T7999] FAT-fs (loop1): Directory bread(block 65) failed
[  411.794309][ T7999] FAT-fs (loop1): Directory bread(block 66) failed
[  411.802521][ T7999] FAT-fs (loop1): Directory bread(block 67) failed
[  411.822558][ T7999] FAT-fs (loop1): Directory bread(block 68) failed
[  411.831560][ T7999] FAT-fs (loop1): Directory bread(block 69) failed
[  411.844484][ T7999] FAT-fs (loop1): Directory bread(block 70) failed
[  411.870143][ T7999] FAT-fs (loop1): Directory bread(block 71) failed
[  411.889340][ T7999] FAT-fs (loop1): Directory bread(block 72) failed
[  411.909518][ T7999] FAT-fs (loop1): Directory bread(block 73) failed
[  411.981069][ T8001] UBIFS error (pid: 8001): cannot open "./file0", error -22
[  412.211620][ T7995] loop4: detected capacity change from 0 to 32768
[  412.246405][ T7995] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  412.322143][ T6912] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  413.211541][ T7999] syz-executor.1: attempt to access beyond end of device
[  413.211541][ T7999] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  413.236842][ T7999] syz-executor.1: attempt to access beyond end of device
[  413.236842][ T7999] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  413.256790][   T29] audit: type=1800 audit(1719247942.934:1078): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="loop1" ino=1048756 res=0 errno=0
[  413.278446][    C0] vkms_vblank_simulate: vblank timer overrun
[  413.355107][  T928] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  413.564576][  T928] usb 5-1: Using ep0 maxpacket: 8
[  413.573378][  T928] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  413.614810][  T928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  413.644837][  T928] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  413.653342][   T29] audit: type=1804 audit(1719247943.324:1079): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2501696419/syzkaller.g6XVld/161/file0" dev="sda1" ino=1947 res=1 errno=0
[  413.666849][  T928] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  413.681108][    C0] vkms_vblank_simulate: vblank timer overrun
[  413.755444][  T928] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  413.777023][  T928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.788314][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  413.820847][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  413.844475][ T8023] nbd: socks must be embedded in a SOCK_ITEM attr
[  413.990117][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  414.009556][ T8026] tap0: tun_chr_ioctl cmd 1074025675
[  414.017525][ T8026] tap0: persist disabled
[  414.044921][  T928] usb 5-1: GET_CAPABILITIES returned 0
[  414.060709][  T928] usbtmc 5-1:16.0: can't read capabilities
[  414.309006][  T928] usb 5-1: USB disconnect, device number 5
[  414.426181][ T8021] loop1: detected capacity change from 0 to 32768
[  414.462897][   T29] audit: type=1326 audit(1719247944.134:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.494110][   T29] audit: type=1326 audit(1719247944.134:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.592149][   T29] audit: type=1326 audit(1719247944.164:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.629286][   T29] audit: type=1326 audit(1719247944.164:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.659494][   T29] audit: type=1326 audit(1719247944.164:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.693188][   T29] audit: type=1326 audit(1719247944.164:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.725946][   T29] audit: type=1326 audit(1719247944.164:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.750799][   T29] audit: type=1326 audit(1719247944.164:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.787513][   T29] audit: type=1326 audit(1719247944.164:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.810988][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  414.813560][   T29] audit: type=1326 audit(1719247944.164:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.846982][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  414.847973][   T29] audit: type=1326 audit(1719247944.164:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  414.874342][ T8043] nbd: socks must be embedded in a SOCK_ITEM attr
[  414.880945][   T29] audit: type=1326 audit(1719247944.164:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9307d0a9 code=0x7ffc0000
[  415.275496][ T5160] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  415.485147][ T5160] usb 5-1: Using ep0 maxpacket: 16
[  415.510287][ T5160] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104
[  415.515834][ T8066] loop1: detected capacity change from 0 to 1024
[  415.541545][ T5160] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  415.560936][ T5160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.562328][ T8066] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  415.601451][ T5160] usb 5-1: Product: syz
[  415.617917][ T8066] JBD2: no valid journal superblock found
[  415.630337][ T5160] usb 5-1: Manufacturer: syz
[  415.632706][ T8066] EXT4-fs (loop1): Could not load journal inode
[  415.637365][ T5160] usb 5-1: SerialNumber: syz
[  415.667322][ T5160] usb 5-1: config 0 descriptor??
[  415.684428][ T8047] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  415.707712][ T5160] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18
[  415.784680][    C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1
[  415.826882][ T8066] loop1: detected capacity change from 0 to 512
[  415.890844][ T8066] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  415.904006][  T928] usb 5-1: USB disconnect, device number 6
[  415.904111][    C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  415.940970][ T8066] EXT4-fs (loop1): blocks per group (64) and clusters per group (32768) inconsistent
[  416.073250][ T8066] loop1: detected capacity change from 0 to 512
[  417.675601][  T928] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  417.854354][  T928] usb 1-1: Using ep0 maxpacket: 8
[  417.856472][  T928] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  417.856514][  T928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  417.856546][  T928] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  417.856576][  T928] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  417.856629][  T928] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  417.856656][  T928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.900555][ T8087] overlayfs: invalid redirect ((null))
[  418.071717][ T8090] loop1: detected capacity change from 0 to 256
[  418.072265][  T928] usb 1-1: GET_CAPABILITIES returned 0
[  418.072320][  T928] usbtmc 1-1:16.0: can't read capabilities
[  418.076644][ T8090] exfat: Deprecated parameter 'namecase'
[  418.083343][ T8090] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  418.282236][    T9] usb 1-1: USB disconnect, device number 5
[  419.551353][ T8093] fuse: Bad value for 'source'
[  419.619264][   T29] kauditd_printk_skb: 10 callbacks suppressed
[  419.619285][   T29] audit: type=1400 audit(1719247949.294:1102): avc:  denied  { setopt } for  pid=8103 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  419.952983][ T8108] loop1: detected capacity change from 0 to 1764
[  419.988825][ T8108] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  419.989180][ T8108] ISOFS: unable to read i-node block
[  419.989245][ T8108] isofs_fill_super: get root inode failed
[  420.054992][ T8108] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer.
[  420.065909][ T8108] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  420.358391][   T29] audit: type=1400 audit(1719247950.034:1103): avc:  denied  { ioctl } for  pid=8113 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  420.425563][   T29] audit: type=1400 audit(1719247950.034:1104): avc:  denied  { set_context_mgr } for  pid=8113 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  420.492166][   T29] audit: type=1400 audit(1719247950.084:1105): avc:  denied  { map } for  pid=8113 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  420.520206][ T8118] loop1: detected capacity change from 0 to 2048
[  420.584773][   T29] audit: type=1400 audit(1719247950.174:1106): avc:  denied  { call } for  pid=8113 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[  420.635776][ T8118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  421.130661][   T29] audit: type=1400 audit(1719247950.804:1107): avc:  denied  { bind } for  pid=8134 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  421.256738][  T928] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  421.465326][  T928] usb 2-1: Using ep0 maxpacket: 8
[  421.489062][  T928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  421.524473][  T928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  421.533841][   T29] audit: type=1400 audit(1719247951.204:1108): avc:  denied  { connect } for  pid=8153 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  421.558278][  T928] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  421.584784][  T928] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  421.641788][  T928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  421.661121][  T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.790601][ T8159] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  421.904108][  T928] usb 2-1: GET_CAPABILITIES returned 0
[  421.926780][  T928] usbtmc 2-1:16.0: can't read capabilities
[  422.108548][  T928] usb 2-1: USB disconnect, device number 7
[  422.134837][   T29] audit: type=1400 audit(1719247951.814:1109): avc:  denied  { ioctl } for  pid=8166 comm="syz-executor.4" path="socket:[21185]" dev="sockfs" ino=21185 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  422.172652][ T8167] veth0_macvtap: left promiscuous mode
[  422.399913][ T8172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  422.682926][   T29] audit: type=1400 audit(1719247952.354:1110): avc:  denied  { bind } for  pid=8179 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  422.727278][ T8180] team0: Device batadv0 is up. Set it down before adding it as a team port
[  423.941825][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  424.352557][ T5107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  424.373327][ T5107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  424.383155][ T5107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  424.394907][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  424.423189][ T5107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  424.431671][ T5107] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  424.439607][ T5107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  424.593172][ T8200] loop1: detected capacity change from 0 to 32768
[  424.605877][    T9] usb 5-1: Using ep0 maxpacket: 8
[  424.622291][ T8200] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8200)
[  424.655657][ T8200] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  424.666401][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  424.685946][ T8200] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  424.705721][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  424.721097][ T8200] BTRFS info (device loop1): using free-space-tree
[  424.755493][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  424.791009][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  424.868821][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  424.925023][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.930726][    T9] usb 5-1: GET_CAPABILITIES returned 0
[  425.944362][    T9] usbtmc 5-1:16.0: can't read capabilities
[  426.018875][ T5158] usb 5-1: USB disconnect, device number 7
[  426.092022][   T29] audit: type=1400 audit(1719247955.764:1111): avc:  denied  { rmdir } for  pid=8199 comm="syz-executor.1" name="file0" dev="loop1" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  426.117165][ T7567] ------------[ cut here ]------------
[  426.123026][ T7567] btree trans held srcu lock (delaying memory reclaim) for 29 seconds
[  426.123520][ T7567] WARNING: CPU: 1 PID: 7567 at fs/bcachefs/btree_iter.c:2996 bch2_trans_srcu_unlock+0x4b3/0x590
[  426.142540][ T7567] Modules linked in:
[  426.146794][ T7567] CPU: 1 PID: 7567 Comm: syz-executor.3 Not tainted 6.10.0-rc5-syzkaller #0
[  426.156234][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  426.166404][ T7567] RIP: 0010:bch2_trans_srcu_unlock+0x4b3/0x590
[  426.172612][ T7567] Code: 91 09 48 c7 c7 c0 39 7e 8b 48 b8 c3 f5 28 5c 8f c2 f5 28 48 29 da 48 c1 ea 02 48 f7 e2 48 c1 ea 02 48 89 d6 e8 ce 08 61 fd 90 <0f> 0b 90 90 e9 24 fe ff ff e8 cf ed 9e fd 90 0f 0b 90 e9 6b fe ff
2024/06/24 16:52:35 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  426.193592][ T7567] RSP: 0018:ffffc9000344f990 EFLAGS: 00010282
[  426.201120][ T7567] RAX: 0000000000000000 RBX: 00000001000024f8 RCX: ffffc9000a49f000
[  426.209683][ T7567] RDX: 0000000000040000 RSI: ffffffff81500076 RDI: 0000000000000001
[  426.217926][ T7567] RBP: ffffffff8d80f200 R08: 0000000000000001 R09: 0000000000000000
[  426.226436][ T7567] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888024f44041
[  426.235122][ T7567] R13: fffffffffffff894 R14: ffff888024f44000 R15: 0000000000000040
[  426.244054][ T7567] FS:  00007f2c4912c6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[  426.253391][ T7567] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  426.260364][ T7567] CR2: 0000001b31e33000 CR3: 000000001e882000 CR4: 00000000003506f0
[  426.268568][ T7567] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  426.276670][ T7567] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  426.284768][ T7567] Call Trace:
[  426.289256][ T7567]  <TASK>
[  426.292218][ T7567]  ? show_regs+0x8c/0xa0
[  426.297457][ T7567]  ? __warn+0xe5/0x3c0
[  426.301620][ T7567]  ? __wake_up_klogd.part.0+0x99/0xf0
[  426.307131][ T7567]  ? bch2_trans_srcu_unlock+0x4b3/0x590
[  426.312727][ T7567]  ? report_bug+0x3c0/0x580
[  426.317381][ T7567]  ? handle_bug+0x3d/0x70
[  426.321841][ T7567]  ? exc_invalid_op+0x17/0x50
[  426.326675][ T7567]  ? asm_exc_invalid_op+0x1a/0x20
[  426.331745][ T7567]  ? __warn_printk+0x1a6/0x350
[  426.336644][ T7567]  ? bch2_trans_srcu_unlock+0x4b3/0x590
[  426.342232][ T7567]  ? __pfx_bch2_trans_srcu_unlock+0x10/0x10
[  426.348472][ T7567]  bch2_trans_begin+0x101b/0x1330
[  426.353539][ T7567]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  426.359648][ T7567]  ? __pfx_bch2_trans_begin+0x10/0x10
[  426.365217][ T7567]  __bchfs_fallocate+0x466/0x15d0
[  426.370294][ T7567]  ? __pfx___bchfs_fallocate+0x10/0x10
[  426.375909][ T7567]  ? __up_read+0x1fb/0x760
[  426.380406][ T7567]  ? __bchfs_fallocate+0x1e5/0x15d0
[  426.385889][ T7567]  bch2_fallocate_dispatch+0x74b/0xf70
[  426.392544][ T7567]  ? __pfx_bch2_fallocate_dispatch+0x10/0x10
[  426.399571][ T7567]  ? selinux_file_permission+0x125/0x590
[  426.405440][ T7567]  ? __pfx_bch2_fallocate_dispatch+0x10/0x10
[  426.411469][ T7567]  vfs_fallocate+0x4b8/0xfb0
[  426.416439][ T7567]  __x64_sys_fallocate+0xd5/0x140
[  426.421519][ T7567]  do_syscall_64+0xcd/0x250
[  426.426172][ T7567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.432109][ T7567] RIP: 0033:0x7f2c4847d0a9
[  426.436633][ T7567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  426.456435][ T7567] RSP: 002b:00007f2c4912c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  426.464966][ T7567] RAX: ffffffffffffffda RBX: 00007f2c485b3f80 RCX: 00007f2c4847d0a9
[  426.472986][ T7567] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004
[  426.481391][ T7567] RBP: 00007f2c484ec074 R08: 0000000000000000 R09: 0000000000000000
[  426.489589][ T7567] R10: 00000fffffeff000 R11: 0000000000000246 R12: 0000000000000000
[  426.498837][ T7567] R13: 000000000000000b R14: 00007f2c485b3f80 R15: 00007ffde29e8c58
[  426.507856][ T7567]  </TASK>
[  426.510975][ T7567] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  426.518279][ T7567] CPU: 1 PID: 7567 Comm: syz-executor.3 Not tainted 6.10.0-rc5-syzkaller #0
[  426.526982][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  426.537069][ T7567] Call Trace:
[  426.540364][ T7567]  <TASK>
[  426.543311][ T7567]  dump_stack_lvl+0x3d/0x1f0
[  426.548034][ T7567]  panic+0x6f5/0x7a0
[  426.551969][ T7567]  ? __pfx_panic+0x10/0x10
[  426.556455][ T7567]  ? show_trace_log_lvl+0x363/0x500
[  426.561736][ T7567]  ? bch2_trans_srcu_unlock+0x4b3/0x590
[  426.567314][ T7567]  check_panic_on_warn+0xab/0xb0
[  426.572294][ T7567]  __warn+0xf1/0x3c0
[  426.576265][ T7567]  ? __wake_up_klogd.part.0+0x99/0xf0
[  426.581668][ T7567]  ? bch2_trans_srcu_unlock+0x4b3/0x590
[  426.587247][ T7567]  report_bug+0x3c0/0x580
[  426.591604][ T7567]  handle_bug+0x3d/0x70
[  426.595822][ T7567]  exc_invalid_op+0x17/0x50
[  426.600354][ T7567]  asm_exc_invalid_op+0x1a/0x20
[  426.605232][ T7567] RIP: 0010:bch2_trans_srcu_unlock+0x4b3/0x590
[  426.611420][ T7567] Code: 91 09 48 c7 c7 c0 39 7e 8b 48 b8 c3 f5 28 5c 8f c2 f5 28 48 29 da 48 c1 ea 02 48 f7 e2 48 c1 ea 02 48 89 d6 e8 ce 08 61 fd 90 <0f> 0b 90 90 e9 24 fe ff ff e8 cf ed 9e fd 90 0f 0b 90 e9 6b fe ff
[  426.631072][ T7567] RSP: 0018:ffffc9000344f990 EFLAGS: 00010282
[  426.637177][ T7567] RAX: 0000000000000000 RBX: 00000001000024f8 RCX: ffffc9000a49f000
[  426.645153][ T7567] RDX: 0000000000040000 RSI: ffffffff81500076 RDI: 0000000000000001
[  426.653741][ T7567] RBP: ffffffff8d80f200 R08: 0000000000000001 R09: 0000000000000000
[  426.661712][ T7567] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888024f44041
[  426.669681][ T7567] R13: fffffffffffff894 R14: ffff888024f44000 R15: 0000000000000040
[  426.677656][ T7567]  ? __warn_printk+0x1a6/0x350
[  426.682448][ T7567]  ? __pfx_bch2_trans_srcu_unlock+0x10/0x10
[  426.688365][ T7567]  bch2_trans_begin+0x101b/0x1330
[  426.693496][ T7567]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  426.699491][ T7567]  ? __pfx_bch2_trans_begin+0x10/0x10
[  426.704880][ T7567]  __bchfs_fallocate+0x466/0x15d0
[  426.709940][ T7567]  ? __pfx___bchfs_fallocate+0x10/0x10
[  426.715416][ T7567]  ? __up_read+0x1fb/0x760
[  426.719853][ T7567]  ? __bchfs_fallocate+0x1e5/0x15d0
[  426.725056][ T7567]  bch2_fallocate_dispatch+0x74b/0xf70
[  426.730526][ T7567]  ? __pfx_bch2_fallocate_dispatch+0x10/0x10
[  426.736514][ T7567]  ? selinux_file_permission+0x125/0x590
[  426.742174][ T7567]  ? __pfx_bch2_fallocate_dispatch+0x10/0x10
[  426.748184][ T7567]  vfs_fallocate+0x4b8/0xfb0
[  426.752961][ T7567]  __x64_sys_fallocate+0xd5/0x140
[  426.757994][ T7567]  do_syscall_64+0xcd/0x250
[  426.762766][ T7567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  426.768675][ T7567] RIP: 0033:0x7f2c4847d0a9
[  426.773196][ T7567] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  426.792814][ T7567] RSP: 002b:00007f2c4912c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  426.801411][ T7567] RAX: ffffffffffffffda RBX: 00007f2c485b3f80 RCX: 00007f2c4847d0a9
[  426.809471][ T7567] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000004
[  426.817442][ T7567] RBP: 00007f2c484ec074 R08: 0000000000000000 R09: 0000000000000000
[  426.825415][ T7567] R10: 00000fffffeff000 R11: 0000000000000246 R12: 0000000000000000
[  426.833383][ T7567] R13: 000000000000000b R14: 00007f2c485b3f80 R15: 00007ffde29e8c58
[  426.841354][ T7567]  </TASK>
[  426.844590][ T7567] Kernel Offset: disabled
[  426.849036][ T7567] Rebooting in 86400 seconds..