last executing test programs: 13.265153505s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x8, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r10, @ANYBLOB="887b231fce"], 0x28}}, 0x0) 12.170980612s ago: executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18}}], 0x18}, 0x0) 12.025588561s ago: executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x48, 0x0}}], 0x1, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, &(0x7f0000000000)={'wlan0\x00'}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 11.847689097s ago: executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15247425060608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 11.644369891s ago: executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14e56313660608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 11.488437595s ago: executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) fcntl$setsig(r0, 0xa, 0x21) syz_emit_ethernet(0x66, &(0x7f0000000540)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @random="a10824cc01c1", @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x28, 0x29, 0x0, @dev, @mcast2, {[@hopopts={0x0, 0x3, '\x00', [@ra={0x5, 0x2, 0x80}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x100000009]}}, @enc_lim={0x4, 0x1, 0xff}]}]}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x181}]}]}, 0x38}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x4, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007"]) openat(0xffffffffffffffff, 0x0, 0x0, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x26, &(0x7f0000000080)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000003c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0x19}) 11.485959522s ago: executing program 2: getpid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x6, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000007090400001202060000052406000005240020000d240f01000000000000000000090582020002"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 11.392897035s ago: executing program 3: r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="c70000df5d31ed5bf11132aa970eac31607868959a7f571f7bf00db01e5bcfe7d7bfd2167925a92e85ae463adcb8eee151dd56abda51fcbc3b0080000051d9507d6c8f11bdbca74a17c0c8abf7ae6e3b65604b8ab6561c51ad178e4f4e", @ANYRES16=0x0, @ANYBLOB="030125bd7000fedbdf2504000000080006000900000054000180090006006c626c6300000000140003007f00000100000000000000000000000008000b007369700008000800050000000c00070011000000000000000c0007000000000000000000080009004600000030000380080001000200000008000500ac1e0001050008007a00"], 0xd8}, 0x1, 0x0, 0x0, 0x24040089}, 0x4008000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, 0x0, 0x40}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r4, 0x0, 0x0) 10.015466404s ago: executing program 3: openat$sysfs(0xffffffffffffff9c, 0x0, 0x202801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) 9.926252196s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4, 0x2}]}]]}, 0x48}}, 0x0) 9.530259346s ago: executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x4) 9.365098569s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x8, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000001c0)=""/36, 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r4}, &(0x7f0000000940), &(0x7f0000000980)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES64], 0x100000530) 8.985085583s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x200000000000000) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000b80)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x129, 0x800}, 0x9, 0x4, 0x7, 0xfbbc, 0x0, 0x0, 0xbe8}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x5b40, 0x4) 7.799343409s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 7.74872268s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 7.234650278s ago: executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'C$'}]}, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x2000014}) syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x54f6, &(0x7f0000005800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40560000ac318762e00000000e6a957ff5aa054382e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000280)=[{}], 0x4000) 6.530879053s ago: executing program 1: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_ttl={{0x14, 0x0, 0x8}}], 0x18}}], 0x2, 0x0) 6.395365268s ago: executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x701, 0x0) rename(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r2, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 6.253189409s ago: executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x4376ea830d55d49b}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.128173369s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 3.577718103s ago: executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) r2 = dup2(r0, r0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000380)=0x200000000) 3.54146457s ago: executing program 3: unshare(0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c646174615f666c7573682c6e6f6c617a7974696d652c6673796e635f6d6f64653d7374726963742c001827c2d09d3f1e9c02703d781f1b7ee30bf2f165dfa0d69bfc19c41aac5231f308907d0b74c85cefb4bad7e06bed6468c62148007a9e5e78e772043966711372bb1244845c7bf2e232170708648ce99dd70ae38e5e68c83804703c4922ce1c7f94d4d3bbe72e59dc39927b54c7beba90b7d841fe9f71613835f9a4d45663ac"], 0x1, 0x54f9, &(0x7f000000ab40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x2000000}) 3.369637795s ago: executing program 1: syz_mount_image$bcachefs(&(0x7f0000011a00), &(0x7f0000000040)='./file0\x00', 0x1200014, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f747970653d26917b2e5b762c6f626a5f726f6c653d466f4b575da958b90959894fb3aa677b95506a43a6d5694ea86b2a"], 0x1, 0x119fa, &(0x7f0000011a40)="$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") 2.167292428s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = dup(r0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup3(r1, r2, 0x0) read$FUSE(r3, 0x0, 0x0) 1.97753981s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 1.44827755s ago: executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000140)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x4) 1.275830579s ago: executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', 0x0}) 1.12403889s ago: executing program 0: bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(&(0x7f0000000080), 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x0, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r4}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000340)={0x0, {0x0, 0x0, 0x0, 0x7fff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00'}, 0x10) write$uinput_user_dev(r5, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) 359.973ms ago: executing program 1: openat$sysfs(0xffffffffffffff9c, 0x0, 0x202801, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc) 0s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): Quotacheck needed: Please wait. [ 402.189155][ T2481] veth1_vlan: left promiscuous mode [ 402.194539][ T2481] veth0_vlan: left promiscuous mode [ 402.249291][ T8893] XFS (loop0): Quotacheck: Done. [ 402.547501][ T8906] tmpfs: Unknown parameter 'nr_blo' [ 403.060498][ T7729] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 406.348684][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 406.406950][ T8920] loop2: detected capacity change from 0 to 4096 [ 406.414835][ T2481] team0 (unregistering): Port device team_slave_1 removed [ 406.434252][ T8920] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 406.577535][ T8920] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 406.578844][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 406.606914][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 406.661650][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 406.699654][ T2481] team0 (unregistering): Port device team_slave_0 removed [ 406.734023][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.743269][ T1148] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 406.758681][ T9] usb 1-1: config 0 descriptor?? [ 406.761386][ T5106] Bluetooth: hci1: command 0x0406 tx timeout [ 406.807495][ T29] audit: type=1400 audit(1719091947.516:479): avc: denied { append } for pid=8919 comm="syz-executor.2" name="sg0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 406.962627][ T1148] usb 2-1: device descriptor read/64, error -71 [ 407.044105][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 407.124365][ T9] usb 1-1: USB disconnect, device number 6 [ 407.174970][ T9] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 407.242246][ T1148] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 407.409056][ T1148] usb 2-1: device descriptor read/64, error -71 [ 407.540365][ T1148] usb usb2-port1: attempt power cycle [ 407.694079][ T8924] loop4: detected capacity change from 0 to 32768 [ 407.895565][ T8924] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8924) [ 408.807193][ T1148] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 408.899358][ T8924] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 408.910722][ T8924] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 408.922338][ T8924] BTRFS info (device loop4): using free-space-tree [ 409.074741][ T8950] tmpfs: Bad value for 'mpol' [ 409.267460][ T8953] loop2: detected capacity change from 0 to 164 [ 409.427009][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.434835][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.448386][ T8777] bridge_slave_0: entered allmulticast mode [ 409.506089][ T8777] bridge_slave_0: entered promiscuous mode [ 409.683685][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.726948][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.809236][ T8777] bridge_slave_1: entered allmulticast mode [ 409.831406][ T8777] bridge_slave_1: entered promiscuous mode [ 410.025987][ T8777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.101493][ T8777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.423801][ T8777] team0: Port device team_slave_0 added [ 410.432387][ T8965] tmpfs: Bad value for 'mpol' [ 410.437846][ T1148] usb 2-1: device descriptor read/8, error -71 [ 410.518255][ T8777] team0: Port device team_slave_1 added [ 410.647152][ T8968] loop2: detected capacity change from 0 to 164 [ 410.676231][ T8972] loop1: detected capacity change from 0 to 64 [ 410.722261][ T7020] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 410.783626][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.832513][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.879095][ T8777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.045089][ T8777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.117457][ T8777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.190828][ T8777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.068749][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 412.595233][ T8777] hsr_slave_0: entered promiscuous mode [ 412.623340][ T8777] hsr_slave_1: entered promiscuous mode [ 412.650996][ T8777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.676947][ T9] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 412.693910][ T8777] Cannot create hsr debugfs directory [ 412.718498][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.754058][ T9] usb 1-1: Product: syz [ 412.779162][ T9] usb 1-1: Manufacturer: syz [ 412.799039][ T9] usb 1-1: SerialNumber: syz [ 412.830247][ T9] usb 1-1: config 0 descriptor?? [ 412.872194][ T9] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 007 [ 414.471670][ T8998] loop4: detected capacity change from 0 to 65536 [ 414.660200][ T8998] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 414.721645][ T8998] XFS (loop4): Ending clean mount [ 414.732619][ T8998] XFS (loop4): Quotacheck needed: Please wait. [ 414.790370][ T9010] loop2: detected capacity change from 0 to 256 [ 414.798837][ T9010] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 415.129754][ T8986] loop0: detected capacity change from 0 to 40427 [ 415.172892][ T8986] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 415.181884][ T8986] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 415.198841][ T8986] F2FS-fs (loop0): invalid crc value [ 415.211959][ T8998] XFS (loop4): Quotacheck: Done. [ 415.252710][ T8986] F2FS-fs (loop0): Found nat_bits in checkpoint [ 415.321540][ T8986] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 415.329060][ T8986] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 415.359622][ T9014] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 415.377781][ T9] i2c i2c-1: failure reading functionality [ 415.414619][ T9014] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 415.450534][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 415.714781][ T9017] tmpfs: Unknown parameter 'nr_blo' [ 416.492439][ T9] usb 1-1: USB disconnect, device number 7 [ 416.519623][ T7020] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 418.182054][ T8777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 418.252678][ T8777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 418.352140][ T8777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 418.397333][ T8777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 420.040484][ T1148] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 420.747573][ T29] audit: type=1326 audit(1719091961.456:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9061 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cd747d0a9 code=0x0 [ 420.811896][ T8777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.894271][ T8777] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.908847][ T1148] usb 1-1: device descriptor read/64, error -71 [ 420.940198][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.947369][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.028527][ T1148] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 422.048988][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.056181][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.418212][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 422.863826][ T9077] loop0: detected capacity change from 0 to 65536 [ 423.018011][ T9077] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 423.246901][ T9077] XFS (loop0): Ending clean mount [ 423.254201][ T9077] XFS (loop0): Quotacheck needed: Please wait. [ 423.338866][ T9077] XFS (loop0): Quotacheck: Done. [ 423.382850][ T5153] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 423.411125][ T8777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.635843][ T5153] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 423.671581][ T5153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.728531][ T9101] tmpfs: Unknown parameter 'nr_blo' [ 425.768645][ T5153] usb 3-1: Product: syz [ 425.772852][ T5153] usb 3-1: Manufacturer: syz [ 425.777462][ T5153] usb 3-1: SerialNumber: syz [ 425.871210][ T8777] veth0_vlan: entered promiscuous mode [ 425.904923][ T7729] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 425.931827][ T8777] veth1_vlan: entered promiscuous mode [ 425.968050][ T5153] usb 3-1: config 0 descriptor?? [ 426.023687][ T8777] veth0_macvtap: entered promiscuous mode [ 426.072530][ T5153] usb 3-1: can't set config #0, error -71 [ 426.102305][ T8777] veth1_macvtap: entered promiscuous mode [ 426.135884][ T5153] usb 3-1: USB disconnect, device number 2 [ 426.161910][ T9105] loop4: detected capacity change from 0 to 64 [ 426.191751][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.230706][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.278682][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.325555][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.386868][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.470296][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.749931][ T9108] loop2: detected capacity change from 0 to 65536 [ 426.769552][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.788645][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.814756][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.992597][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.003436][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.015602][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.026107][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.036028][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.047493][ T9108] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 427.069315][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.080660][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.096356][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.118272][ T8777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.142909][ T9108] XFS (loop2): Ending clean mount [ 427.150024][ T9108] XFS (loop2): Quotacheck needed: Please wait. [ 427.215247][ T8777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.303935][ T8777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.316708][ T9108] XFS (loop2): Quotacheck: Done. [ 427.338688][ T8777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.388763][ T8777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.766411][ T9136] tmpfs: Unknown parameter 'nr_blo' [ 428.584923][ T8127] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 428.868170][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.906050][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.079500][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.118886][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.479933][ T29] audit: type=1326 audit(1719091970.186:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598027d0a9 code=0x0 [ 429.871339][ T9160] dccp_close: ABORT with 32 bytes unread [ 430.300190][ T5157] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 430.328211][ T29] audit: type=1326 audit(1719091971.036:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9163 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfea87d0a9 code=0x0 [ 431.238890][ T5157] usb 1-1: device descriptor read/64, error -71 [ 431.304970][ T9143] loop1: detected capacity change from 0 to 32768 [ 431.352399][ T9143] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9143) [ 432.461325][ T9143] BTRFS error (device loop1): open_ctree failed [ 432.474368][ T5157] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 432.839136][ T5157] usb 1-1: device descriptor read/64, error -71 [ 433.089861][ T45] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 433.100179][ T5157] usb usb1-port1: attempt power cycle [ 434.214990][ T45] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 434.228791][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.239507][ T45] usb 5-1: Product: syz [ 434.243703][ T45] usb 5-1: Manufacturer: syz [ 434.248312][ T45] usb 5-1: SerialNumber: syz [ 434.264108][ T45] usb 5-1: config 0 descriptor?? [ 434.282385][ T45] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 039 [ 434.431841][ T5157] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 434.919311][ T9199] loop2: detected capacity change from 0 to 65536 [ 435.104863][ T5157] usb 1-1: device descriptor read/8, error -71 [ 435.247047][ T9199] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 435.327986][ T9199] XFS (loop2): Ending clean mount [ 435.337928][ T9199] XFS (loop2): Quotacheck needed: Please wait. [ 435.929072][ T9184] loop4: detected capacity change from 0 to 40427 [ 436.024128][ T9184] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 436.034629][ T9184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 436.052798][ T9199] XFS (loop2): Quotacheck: Done. [ 436.058146][ T9184] F2FS-fs (loop4): invalid crc value [ 436.311579][ T9184] F2FS-fs (loop4): Found nat_bits in checkpoint [ 436.697278][ T9232] tmpfs: Unknown parameter 'nr_blo' [ 436.791030][ T45] i2c i2c-1: failure reading functionality [ 436.853770][ T45] i2c i2c-1: connected i2c-tiny-usb device [ 437.315067][ T45] usb 5-1: USB disconnect, device number 39 [ 437.337152][ T8127] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 438.563696][ T29] audit: type=1326 audit(1719091979.276:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x0 [ 440.518302][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.536211][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.807777][ T9280] input: syz0 as /devices/virtual/input/input19 [ 442.042779][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 442.238727][ T25] usb 1-1: device descriptor read/64, error -71 [ 442.628557][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 442.839844][ T25] usb 1-1: device descriptor read/64, error -71 [ 442.948541][ T5149] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 443.310110][ T9288] loop4: detected capacity change from 0 to 65536 [ 443.327317][ T25] usb usb1-port1: attempt power cycle [ 443.469091][ T9288] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 443.608690][ T5149] usb 3-1: Using ep0 maxpacket: 8 [ 443.798741][ T5149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 161, changing to 11 [ 443.816745][ T5149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1097, setting to 1024 [ 443.828783][ T5149] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 443.837895][ T5149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.881363][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 444.105184][ T5149] usb 3-1: config 0 descriptor?? [ 444.111685][ T9278] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 444.127661][ T9288] XFS (loop4): Ending clean mount [ 444.134887][ T9288] XFS (loop4): Quotacheck needed: Please wait. [ 444.200865][ T9288] XFS (loop4): Quotacheck: Done. [ 444.536056][ T5149] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 444.585229][ T5149] usb 3-1: USB disconnect, device number 3 [ 444.623307][ T9307] tmpfs: Unknown parameter 'nr_blo' [ 444.718608][ T1148] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 445.156081][ T5149] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 445.252641][ T25] usb 1-1: device descriptor read/8, error -71 [ 445.262792][ T7020] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 445.335087][ T1148] usb 4-1: Using ep0 maxpacket: 8 [ 445.372013][ T1148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.427552][ T1148] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 445.438653][ T1148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.475063][ T1148] usb 4-1: config 0 descriptor?? [ 445.591409][ T9311] loop0: detected capacity change from 0 to 1764 [ 446.681364][ T1148] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 446.749316][ T1148] usb 4-1: USB disconnect, device number 7 [ 446.784250][ T1148] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 447.053418][ T29] audit: type=1804 audit(1719091987.766:484): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir677565277/syzkaller.fLksXg/38/bus" dev="sda1" ino=1963 res=1 errno=0 [ 447.472812][ T29] audit: type=1326 audit(1719091988.186:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cd747d0a9 code=0x0 [ 447.838847][ T5149] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 448.018613][ T5149] usb 2-1: device descriptor read/64, error -71 [ 448.207964][ T9335] loop3: detected capacity change from 0 to 32768 [ 448.268780][ T9335] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9335) [ 448.328508][ T5149] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 448.395724][ T9335] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 448.438636][ T9335] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 448.475598][ T9335] BTRFS info (device loop3): using free-space-tree [ 448.518592][ T5149] usb 2-1: device descriptor read/64, error -71 [ 448.729603][ T5149] usb usb2-port1: attempt power cycle [ 449.133782][ T9366] input: syz0 as /devices/virtual/input/input20 [ 449.432735][ T5149] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 449.558005][ T5154] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 449.592323][ T5149] usb 2-1: device descriptor read/8, error -71 [ 449.788789][ T5154] usb 3-1: Using ep0 maxpacket: 8 [ 450.455896][ T5154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.471562][ T5154] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.484241][ T5154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.498507][ T5149] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 450.519711][ T5154] usb 3-1: config 0 descriptor?? [ 450.871403][ T5149] usb 2-1: device descriptor read/8, error -71 [ 451.010105][ T5149] usb usb2-port1: unable to enumerate USB device [ 451.020976][ T5154] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 451.082860][ T5154] usb 3-1: USB disconnect, device number 4 [ 451.285541][ T5154] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 453.854682][ T8777] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 457.155651][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 457.205231][ T29] audit: type=1326 audit(1719091997.906:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598027d0a9 code=0x0 [ 457.963059][ T5106] Bluetooth: hci3: command 0x0406 tx timeout [ 458.167177][ T9418] loop1: detected capacity change from 0 to 32768 [ 458.179588][ T9438] input: syz0 as /devices/virtual/input/input21 [ 458.257143][ T9418] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9418) [ 458.550868][ T9418] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 458.609554][ T9418] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 458.639245][ T9418] BTRFS info (device loop1): using free-space-tree [ 458.778901][ T9445] loop3: detected capacity change from 0 to 256 [ 458.818000][ T9445] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 458.963915][ T9461] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 458.974321][ T9461] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.897960][ T5116] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 461.846474][ T9485] loop0: detected capacity change from 0 to 65536 [ 461.935120][ T9485] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 462.025133][ T9485] XFS (loop0): Ending clean mount [ 462.032361][ T9485] XFS (loop0): Quotacheck needed: Please wait. [ 462.132674][ T9485] XFS (loop0): Quotacheck: Done. [ 462.393692][ T9509] tmpfs: Unknown parameter 'nr_blo' [ 462.842523][ T7729] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 465.949287][ T29] audit: type=1326 audit(1719092006.646:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfea87d0a9 code=0x0 [ 466.280341][ T9531] dccp_close: ABORT with 32 bytes unread [ 466.662452][ T29] audit: type=1326 audit(1719092007.376:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9538 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e63c7d0a9 code=0x0 [ 467.264309][ T9551] loop4: detected capacity change from 0 to 65536 [ 467.325704][ T9551] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 467.480587][ T9551] XFS (loop4): Ending clean mount [ 467.492416][ T9551] XFS (loop4): Quotacheck needed: Please wait. [ 467.575063][ T9551] XFS (loop4): Quotacheck: Done. [ 468.045610][ T9578] tmpfs: Unknown parameter 'nr_blo' [ 468.785660][ T29] audit: type=1800 audit(1719092009.486:489): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1966 res=0 errno=0 [ 469.253505][ T9581] loop2: detected capacity change from 0 to 65536 [ 469.316541][ T7020] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 469.387068][ T9581] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 469.422415][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 469.447017][ T9581] XFS (loop2): Ending clean mount [ 469.455749][ T9581] XFS (loop2): Quotacheck needed: Please wait. [ 469.519498][ T9581] XFS (loop2): Quotacheck: Done. [ 469.810755][ T9594] tmpfs: Unknown parameter 'nr_blo' [ 470.337059][ T8127] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 470.411033][ T29] audit: type=1326 audit(1719092011.116:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9595 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x0 [ 476.612988][ T9619] loop2: detected capacity change from 0 to 512 [ 476.736016][ T9619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.776906][ T9619] ext4 filesystem being mounted at /root/syzkaller-testdir716255580/syzkaller.uvytGn/47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.501256][ T9632] loop1: detected capacity change from 0 to 65536 [ 477.566394][ T9607] loop3: detected capacity change from 0 to 32768 [ 477.619275][ T9607] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9607) [ 477.696831][ T9632] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 477.715715][ T9643] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 477.725080][ T9643] nbd: must specify a device to reconfigure [ 477.904057][ T9607] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 477.918263][ T9632] XFS (loop1): Ending clean mount [ 477.926510][ T9632] XFS (loop1): Quotacheck needed: Please wait. [ 477.938695][ T9607] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 477.948506][ T9607] BTRFS info (device loop3): using free-space-tree [ 478.054785][ T9632] XFS (loop1): Quotacheck: Done. [ 478.356797][ T9662] tmpfs: Unknown parameter 'nr_blo' [ 479.122599][ T5116] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 479.243703][ T9633] loop0: detected capacity change from 0 to 32768 [ 479.316949][ T9633] BTRFS: device /dev/loop0 (7:0) using temp-fsid 2fc0b583-e4e5-498d-b86f-4cef61fee5a5 [ 479.368834][ T9633] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9633) [ 479.621397][ T9607] BTRFS error (device loop3): open_ctree failed [ 479.629044][ T9633] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 479.675850][ T9633] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 479.737098][ T9633] BTRFS info (device loop0): using free-space-tree [ 480.117370][ T29] audit: type=1326 audit(1719092020.826:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9685 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598027d0a9 code=0x0 [ 480.363507][ T7729] BTRFS info (device loop0): last unmount of filesystem 2fc0b583-e4e5-498d-b86f-4cef61fee5a5 [ 480.643928][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 480.724996][ T8127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.642374][ T9695] team0: Port device bridge2 added [ 485.686968][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 487.386453][ T9728] loop0: detected capacity change from 0 to 1764 [ 487.543831][ T29] audit: type=1804 audit(1719092028.256:492): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir677565277/syzkaller.fLksXg/54/bus" dev="sda1" ino=1943 res=1 errno=0 [ 488.028763][ T5149] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 488.255133][ T5149] usb 4-1: Using ep0 maxpacket: 8 [ 488.267608][ T5149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.292132][ T5149] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 488.318645][ T5149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.326960][ T9732] loop4: detected capacity change from 0 to 32768 [ 488.339312][ T5149] usb 4-1: config 0 descriptor?? [ 488.348561][ T9732] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9732) [ 488.387157][ T9735] loop2: detected capacity change from 0 to 32768 [ 488.413944][ T9732] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 488.433218][ T9732] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 488.449511][ T29] audit: type=1326 audit(1719092029.156:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9746 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x0 [ 488.474830][ T9735] BTRFS: device /dev/loop2 (7:2) using temp-fsid 8f7a57ce-bea7-4f6a-a5bc-92b0e5f07f4b [ 488.498530][ T9732] BTRFS info (device loop4): using free-space-tree [ 488.540755][ T9735] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9735) [ 488.597133][ T9735] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 488.622835][ T5149] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 488.634278][ T9735] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 488.668735][ T9735] BTRFS info (device loop2): using free-space-tree [ 488.817554][ T5149] usb 4-1: USB disconnect, device number 8 [ 488.836912][ T5149] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 489.577881][ T9732] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 489.583431][ T9732] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 489.609900][ T9775] dccp_close: ABORT with 32 bytes unread [ 489.627731][ T9732] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 489.643582][ T9732] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 489.915135][ T9732] BTRFS error (device loop4): open_ctree failed [ 490.092030][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 490.125833][ T9795] team0: Port device bridge1 added [ 490.441070][ T9792] loop1: detected capacity change from 0 to 65536 [ 490.490174][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 490.533723][ T9792] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 490.609133][ T8127] BTRFS info (device loop2): last unmount of filesystem 8f7a57ce-bea7-4f6a-a5bc-92b0e5f07f4b [ 490.680776][ T9792] XFS (loop1): Ending clean mount [ 490.701797][ T9792] XFS (loop1): Quotacheck needed: Please wait. [ 490.839476][ T9792] XFS (loop1): Quotacheck: Done. [ 491.331431][ T9818] tmpfs: Unknown parameter 'nr_blo' [ 492.378498][ T5149] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 492.634186][ T5149] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 492.694503][ T5149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.758682][ T5149] usb 1-1: Product: syz [ 492.773155][ T5149] usb 1-1: Manufacturer: syz [ 492.798558][ T5149] usb 1-1: SerialNumber: syz [ 492.829820][ T5116] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 492.838916][ T5149] usb 1-1: config 0 descriptor?? [ 492.850500][ T5149] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 018 [ 494.260250][ T9812] loop0: detected capacity change from 0 to 40427 [ 494.277854][ T9812] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 494.286917][ T9812] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 494.300409][ T9812] F2FS-fs (loop0): invalid crc value [ 494.327647][ T9812] F2FS-fs (loop0): Found nat_bits in checkpoint [ 494.455142][ T9812] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 494.462696][ T9812] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 494.480200][ T5149] i2c i2c-1: failure reading functionality [ 494.559682][ T5149] i2c i2c-1: connected i2c-tiny-usb device [ 494.593599][ T5149] usb 1-1: USB disconnect, device number 18 [ 494.778221][ T29] audit: type=1326 audit(1719092035.486:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cd747d0a9 code=0x0 [ 495.389809][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 495.513043][ T9861] team0: Port device bridge3 added [ 495.567868][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 496.088922][ T29] audit: type=1804 audit(1719092036.806:495): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir716255580/syzkaller.uvytGn/52/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 496.129457][ T25] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 496.219835][ T9856] loop1: detected capacity change from 0 to 40427 [ 496.324480][ T9856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 496.331026][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 496.341434][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.373405][ T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 496.408461][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.440352][ T25] usb 5-1: config 0 descriptor?? [ 496.526218][ T9856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 497.066664][ T25] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 497.442462][ T9865] loop0: detected capacity change from 0 to 32768 [ 497.449589][ T29] audit: type=1326 audit(1719092038.166:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9875 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598027d0a9 code=0x0 [ 497.477074][ T9865] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9865) [ 497.500468][ T25] usb 5-1: USB disconnect, device number 40 [ 497.503236][ T5116] syz-executor.1: attempt to access beyond end of device [ 497.503236][ T5116] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 497.516458][ T25] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 497.547568][ T9865] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 497.562695][ T9865] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 497.598565][ T9865] BTRFS info (device loop0): using free-space-tree [ 497.618540][ T5116] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 497.664755][ T5116] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 497.851598][ T29] audit: type=1804 audit(1719092038.566:497): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir907740592/syzkaller.kH5qwN/26/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 497.878800][ C1] vkms_vblank_simulate: vblank timer overrun [ 498.091134][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 498.318525][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 498.405621][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.399800][ T25] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 499.410989][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.427163][ T25] usb 3-1: config 0 descriptor?? [ 500.440305][ T25] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 500.546902][ T25] usb 3-1: USB disconnect, device number 5 [ 501.951669][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.958146][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.989981][ T25] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 502.199216][ T7729] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 502.448643][ T5157] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 502.571990][ T53] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 502.582226][ T53] CPU: 1 PID: 53 Comm: kworker/u9:0 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 502.592320][ T53] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 502.602377][ T53] Workqueue: hci2 hci_rx_work [ 502.607071][ T53] Call Trace: [ 502.610347][ T53] [ 502.613272][ T53] dump_stack_lvl+0x16c/0x1f0 [ 502.617951][ T53] sysfs_warn_dup+0x7f/0xa0 [ 502.622457][ T53] sysfs_create_dir_ns+0x24d/0x2b0 [ 502.627570][ T53] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 502.633205][ T53] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 502.638578][ T53] ? do_raw_spin_unlock+0x172/0x230 [ 502.643777][ T53] kobject_add_internal+0x2c8/0x990 [ 502.648989][ T53] kobject_add+0x16f/0x240 [ 502.653425][ T53] ? __pfx_kobject_add+0x10/0x10 [ 502.658364][ T53] ? do_raw_spin_unlock+0x172/0x230 [ 502.663583][ T53] ? kobject_put+0xbe/0x5b0 [ 502.668094][ T53] device_add+0x289/0x1a70 [ 502.672520][ T53] ? __pfx_dev_set_name+0x10/0x10 [ 502.677541][ T53] ? __pfx_device_add+0x10/0x10 [ 502.682395][ T53] ? mgmt_send_event_skb+0x2f0/0x460 [ 502.687681][ T53] hci_conn_add_sysfs+0x17e/0x230 [ 502.692709][ T53] le_conn_complete_evt+0x1078/0x1d80 [ 502.698081][ T53] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 502.703796][ T53] ? trace_contention_end+0xea/0x140 [ 502.709076][ T53] ? __mutex_lock+0x1a6/0x9c0 [ 502.713754][ T53] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 502.719648][ T53] ? skb_pull_data+0x166/0x210 [ 502.724409][ T53] hci_le_meta_evt+0x2e2/0x5d0 [ 502.729172][ T53] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 502.735587][ T53] hci_event_packet+0x664/0x1170 [ 502.740523][ T53] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 502.745811][ T53] ? __pfx_hci_event_packet+0x10/0x10 [ 502.751194][ T53] ? mark_held_locks+0x9f/0xe0 [ 502.755965][ T53] ? kcov_remote_start+0x3d1/0x6e0 [ 502.761075][ T53] ? lockdep_hardirqs_on+0x7c/0x110 [ 502.766273][ T53] hci_rx_work+0x2c4/0x1610 [ 502.770778][ T53] process_one_work+0x9fb/0x1b60 [ 502.775715][ T53] ? __pfx_lock_acquire+0x10/0x10 [ 502.780745][ T53] ? __pfx_process_one_work+0x10/0x10 [ 502.786114][ T53] ? assign_work+0x1a0/0x250 [ 502.790709][ T53] worker_thread+0x6c8/0xf70 [ 502.795300][ T53] ? __pfx_worker_thread+0x10/0x10 [ 502.800406][ T53] kthread+0x2c1/0x3a0 [ 502.804477][ T53] ? _raw_spin_unlock_irq+0x23/0x50 [ 502.809671][ T53] ? __pfx_kthread+0x10/0x10 [ 502.814261][ T53] ret_from_fork+0x45/0x80 [ 502.818684][ T53] ? __pfx_kthread+0x10/0x10 [ 502.823273][ T53] ret_from_fork_asm+0x1a/0x30 [ 502.828047][ T53] [ 502.837776][ T53] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 502.854821][ T53] Bluetooth: hci2: failed to register connection device [ 502.869067][ T5157] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 502.882357][ T5157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.890504][ T5157] usb 5-1: Product: syz [ 502.894685][ T5157] usb 5-1: Manufacturer: syz [ 502.899822][ T5157] usb 5-1: SerialNumber: syz [ 502.907449][ T5157] usb 5-1: config 0 descriptor?? [ 502.916217][ T5157] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 041 [ 505.330958][ T9922] loop4: detected capacity change from 0 to 40427 [ 505.389326][ T5157] i2c i2c-1: failure reading functionality [ 505.420156][ T9922] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 505.429220][ T9922] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 505.441828][ T9922] F2FS-fs (loop4): invalid crc value [ 505.460883][ T5157] i2c i2c-1: connected i2c-tiny-usb device [ 505.475638][ T9922] F2FS-fs (loop4): Found nat_bits in checkpoint [ 505.536875][ T9922] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 505.544181][ T9922] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 505.563849][ T29] audit: type=1326 audit(1719092046.276:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9938 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598027d0a9 code=0x0 [ 505.600678][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 505.627792][ T9] usb 5-1: USB disconnect, device number 41 [ 506.167305][ T29] audit: type=1326 audit(1719092046.876:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cd747d0a9 code=0x0 [ 506.550454][ T29] audit: type=1800 audit(1719092047.266:500): pid=9951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1956 res=0 errno=0 [ 506.846899][ T9944] loop1: detected capacity change from 0 to 40427 [ 506.881269][ T9944] F2FS-fs (loop1): Found nat_bits in checkpoint [ 507.410887][ T9961] loop4: detected capacity change from 0 to 65536 [ 507.630686][ T9961] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 508.510443][ T9961] XFS (loop4): Ending clean mount [ 508.530980][ T9961] XFS (loop4): Quotacheck needed: Please wait. [ 508.739663][ T9961] XFS (loop4): Quotacheck: Done. [ 509.012385][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 509.197946][ T9986] tmpfs: Unknown parameter 'nr_blo' [ 510.018470][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 510.034467][ T7020] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 510.040369][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 510.068551][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 510.077614][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.150801][ T9] usb 1-1: config 0 descriptor?? [ 510.377769][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 510.449616][ T29] audit: type=1326 audit(1719092051.156:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9987 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e63c7d0a9 code=0x0 [ 510.477736][ T9] usb 1-1: USB disconnect, device number 19 [ 510.512412][ T9] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 510.551051][ T9984] loop3: detected capacity change from 0 to 32768 [ 510.594154][ T9984] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9984) [ 510.697654][ T9984] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 510.727396][ T9984] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 510.758754][ T9984] BTRFS info (device loop3): using free-space-tree [ 510.952831][T10009] dccp_close: ABORT with 32 bytes unread [ 511.255939][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 512.359229][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 512.589698][T10026] team0: Port device bridge1 added [ 512.654648][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 512.722852][ T29] audit: type=1326 audit(1719092053.436:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e63c7d0a9 code=0x0 [ 512.848518][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 513.065434][ T25] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 513.094956][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.147666][ T25] usb 1-1: Product: syz [ 513.178334][ T25] usb 1-1: Manufacturer: syz [ 513.200524][ T25] usb 1-1: SerialNumber: syz [ 513.279188][ T25] usb 1-1: config 0 descriptor?? [ 513.310975][ T25] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 020 [ 513.325171][T10041] loop2: detected capacity change from 0 to 512 [ 513.365354][T10041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.458986][T10041] ext4 filesystem being mounted at /root/syzkaller-testdir716255580/syzkaller.uvytGn/61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 513.815586][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.894136][ T29] audit: type=1800 audit(1719092054.606:503): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1965 res=0 errno=0 [ 514.250166][T10030] loop0: detected capacity change from 0 to 40427 [ 514.281698][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 514.292680][ T8777] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 514.321758][T10030] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 514.330744][T10030] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 514.366506][T10030] F2FS-fs (loop0): invalid crc value [ 514.379852][T10030] F2FS-fs (loop0): Found nat_bits in checkpoint [ 514.458718][T10030] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 514.465774][T10030] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 514.489184][ T25] i2c i2c-1: failure reading functionality [ 514.559112][ T25] i2c i2c-1: connected i2c-tiny-usb device [ 514.587582][ T25] usb 1-1: USB disconnect, device number 20 [ 515.406661][ T29] audit: type=1326 audit(1719092056.116:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e63c7d0a9 code=0x0 [ 517.988576][ T1148] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 518.278518][ T1148] usb 1-1: Using ep0 maxpacket: 8 [ 518.294757][ T1148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.439258][ T1148] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 518.511989][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.719304][ T1148] usb 1-1: config 0 descriptor?? [ 519.037691][ T1148] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 519.258239][ T1148] usb 1-1: USB disconnect, device number 21 [ 519.273490][ T1148] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 520.092411][ T29] audit: type=1326 audit(1719092060.806:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e63c7d0a9 code=0x0 [ 520.173968][ T29] audit: type=1326 audit(1719092060.836:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598027d0a9 code=0x0 [ 520.286560][ T8127] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.908620][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 521.927910][ T29] audit: type=1800 audit(1719092062.626:507): pid=10098 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1954 res=0 errno=0 [ 521.995677][ T25] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 522.033020][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.082587][ T25] usb 3-1: Product: syz [ 522.087939][ T25] usb 3-1: Manufacturer: syz [ 522.101686][ T25] usb 3-1: SerialNumber: syz [ 522.117674][ T25] usb 3-1: config 0 descriptor?? [ 522.150077][ T25] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 006 [ 524.183962][T10117] loop1: detected capacity change from 0 to 65536 [ 524.551338][T10101] loop2: detected capacity change from 0 to 40427 [ 524.582308][T10101] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 524.591760][T10101] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 524.620768][T10101] F2FS-fs (loop2): invalid crc value [ 524.640405][T10101] F2FS-fs (loop2): Found nat_bits in checkpoint [ 524.641367][T10117] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 524.716864][T10101] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 524.725336][T10101] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 525.388796][ T25] i2c i2c-1: failure reading functionality [ 525.409758][T10117] XFS (loop1): Ending clean mount [ 525.416889][T10117] XFS (loop1): Quotacheck needed: Please wait. [ 525.482677][ T25] i2c i2c-1: connected i2c-tiny-usb device [ 525.513249][T10117] XFS (loop1): Quotacheck: Done. [ 525.548913][ T25] usb 3-1: USB disconnect, device number 6 [ 526.295143][T10143] tmpfs: Unknown parameter 'nr_blo' [ 529.988528][ T5157] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 530.203315][ T5116] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 531.542222][ T29] audit: type=1326 audit(1719092072.246:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x0 [ 533.435792][ T29] audit: type=1800 audit(1719092074.146:509): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1950 res=0 errno=0 [ 536.068579][ T1148] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 536.308564][ T1148] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 536.317604][ T1148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.366453][ T1148] usb 1-1: Product: syz [ 536.381011][ T1148] usb 1-1: Manufacturer: syz [ 536.385638][ T1148] usb 1-1: SerialNumber: syz [ 536.414549][ T1148] usb 1-1: config 0 descriptor?? [ 536.437683][ T1148] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 022 [ 536.453648][T10209] tmpfs: Bad value for 'mpol' [ 536.653444][T10212] loop2: detected capacity change from 0 to 164 [ 537.910312][T10200] loop0: detected capacity change from 0 to 40427 [ 537.927030][T10200] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 537.936094][T10200] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 537.947602][T10200] F2FS-fs (loop0): invalid crc value [ 537.964317][T10200] F2FS-fs (loop0): Found nat_bits in checkpoint [ 538.091448][T10200] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 538.098576][T10200] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 538.132728][ T1148] i2c i2c-1: failure reading functionality [ 538.186797][ T1148] i2c i2c-1: connected i2c-tiny-usb device [ 538.235920][ T1148] usb 1-1: USB disconnect, device number 22 [ 538.969748][ T5153] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 539.934850][ T5153] usb 2-1: device descriptor read/64, error -71 [ 542.148532][ T5153] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 547.752106][ T5153] usb 2-1: device descriptor read/64, error -110 [ 547.888862][ T5153] usb usb2-port1: attempt power cycle [ 548.256825][T10264] loop1: detected capacity change from 0 to 512 [ 548.330895][T10264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.394509][T10264] ext4 filesystem being mounted at /root/syzkaller-testdir4085678210/syzkaller.gWJWsw/240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 549.520205][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 549.738458][ T25] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 549.963492][ T25] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 550.013180][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.034806][ T25] usb 5-1: Product: syz [ 550.039168][ T25] usb 5-1: Manufacturer: syz [ 550.043843][ T25] usb 5-1: SerialNumber: syz [ 550.130223][ T25] usb 5-1: config 0 descriptor?? [ 550.157005][ T25] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 043 [ 551.674839][T10297] loop3: detected capacity change from 0 to 65536 [ 552.003857][T10288] loop4: detected capacity change from 0 to 40427 [ 552.020606][T10288] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 552.029988][T10288] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 552.060679][T10288] F2FS-fs (loop4): invalid crc value [ 552.072040][T10288] F2FS-fs (loop4): Found nat_bits in checkpoint [ 552.127809][T10288] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 552.134959][T10288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 552.157241][T10297] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 552.167320][ T25] i2c i2c-1: failure reading functionality [ 552.193572][ T25] i2c i2c-1: connected i2c-tiny-usb device [ 555.969532][T10297] XFS (loop3): AIL initialisation failed: error -12 [ 557.181723][T10297] XFS (loop3): log mount failed [ 557.280866][ T25] usb 5-1: USB disconnect, device number 43 [ 557.581565][ T5116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.048463][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 559.224852][ T45] usb 3-1: device descriptor read/64, error -71 [ 561.518457][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 562.063979][T10343] loop2: detected capacity change from 0 to 65536 [ 562.552739][T10343] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 562.675978][ T5157] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 562.787009][T10343] XFS (loop2): Ending clean mount [ 562.794698][T10343] XFS (loop2): Quotacheck needed: Please wait. [ 564.190841][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.314991][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.747190][ T5157] usb 2-1: string descriptor 0 read error: -71 [ 567.767852][ T5157] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 567.780905][T10343] XFS (loop2): Quotacheck: Done. [ 567.803463][ T5157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.829220][ T5157] usb 2-1: config 0 descriptor?? [ 567.838251][ T5157] usb 2-1: can't set config #0, error -71 [ 567.850786][ T5157] usb 2-1: USB disconnect, device number 22 [ 567.879934][ T8127] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 569.025725][T10370] loop4: detected capacity change from 0 to 65536 [ 569.233223][T10370] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 575.113401][T10370] XFS (loop4): Ending clean mount [ 575.123758][T10370] XFS (loop4): Quotacheck needed: Please wait. [ 575.302544][T10370] XFS (loop4): Quotacheck: Done. [ 575.377122][ T7020] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 575.778589][ T1148] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 576.519184][ T1148] usb 2-1: device descriptor read/64, error -71 [ 576.975448][T10404] loop3: detected capacity change from 0 to 65536 [ 577.043138][T10404] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 577.143558][ T1148] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 577.184479][T10404] XFS (loop3): Ending clean mount [ 577.202555][T10404] XFS (loop3): Quotacheck needed: Please wait. [ 577.286076][T10404] XFS (loop3): Quotacheck: Done. [ 577.304205][ T1148] usb 2-1: device descriptor read/64, error -71 [ 577.663263][ T1148] usb usb2-port1: attempt power cycle [ 579.695586][T10418] tmpfs: Unknown parameter 'nr_blo' [ 579.982050][ T8777] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 580.528470][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 580.797762][T10427] loop1: detected capacity change from 0 to 65536 [ 580.988996][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 581.009073][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 581.009106][T10427] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 581.029165][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 161, changing to 11 [ 581.088605][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1097, setting to 1024 [ 581.114055][T10427] XFS (loop1): Ending clean mount [ 581.121259][T10427] XFS (loop1): Quotacheck needed: Please wait. [ 581.128923][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 581.158762][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.204738][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 581.254993][ T8] usb 3-1: config 0 descriptor?? [ 581.358461][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.402907][ T8] usb 3-1: can't set config #0, error -71 [ 581.422039][ T9] usb 5-1: Product: syz [ 581.426237][ T9] usb 5-1: Manufacturer: syz [ 581.451616][ T8] usb 3-1: USB disconnect, device number 9 [ 581.465066][ T9] usb 5-1: SerialNumber: syz [ 582.343681][ T9] usb 5-1: config 0 descriptor?? [ 582.346274][T10427] XFS (loop1): Quotacheck: Done. [ 582.394506][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 044 [ 582.873187][T10454] tmpfs: Unknown parameter 'nr_blo' [ 583.601376][T10425] loop4: detected capacity change from 0 to 40427 [ 583.633722][T10425] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 583.645749][T10425] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 583.666576][T10425] F2FS-fs (loop4): invalid crc value [ 583.675994][T10425] F2FS-fs (loop4): Found nat_bits in checkpoint [ 583.680958][ T5116] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 583.774644][T10425] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 583.781768][T10425] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 583.794725][ T9] i2c i2c-1: failure reading functionality [ 583.848240][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 583.978534][ T29] audit: type=1326 audit(1719092124.676:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10462 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cd747d0a9 code=0x0 [ 584.002022][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.132113][ T9] usb 5-1: USB disconnect, device number 44 [ 585.368434][ T5149] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 585.389043][T10474] loop3: detected capacity change from 0 to 256 [ 585.396858][T10474] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 585.503646][ T9628] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 585.578825][ T5149] usb 1-1: device descriptor read/64, error -71 [ 585.617096][T10477] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 585.628586][T10477] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 585.868680][ T5149] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 586.048699][ T5149] usb 1-1: device descriptor read/64, error -71 [ 586.209271][ T5149] usb usb1-port1: attempt power cycle [ 587.968321][ T5149] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 588.029514][ T5149] usb 1-1: device descriptor read/8, error -71 [ 588.287862][T10510] input: syz0 as /devices/virtual/input/input22 [ 588.663848][T10509] loop1: detected capacity change from 0 to 65536 [ 589.141212][T10509] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 591.958528][T10509] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop1": -EINTR [ 591.961435][T10509] XFS (loop1): log mount failed [ 596.306992][T10539] loop0: detected capacity change from 0 to 256 [ 596.345438][T10539] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 596.499608][T10545] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 596.520024][T10545] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 598.139141][ T1148] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 598.319432][ T1148] usb 2-1: device descriptor read/64, error -71 [ 598.638795][ T1148] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 598.882535][ T1148] usb 2-1: device descriptor read/64, error -71 [ 599.281493][ T1148] usb usb2-port1: attempt power cycle [ 599.809322][ T1148] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 599.858881][ T1148] usb 2-1: device descriptor read/8, error -71 [ 599.884986][ T29] audit: type=1326 audit(1719092140.586:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f598027d0a9 code=0x0 [ 600.387372][ T1148] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 600.619756][ T1148] usb 2-1: device descriptor read/8, error -71 [ 600.657240][T10568] dccp_close: ABORT with 32 bytes unread [ 600.739794][ T1148] usb usb2-port1: unable to enumerate USB device [ 600.938457][ T5157] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 601.036217][T10238] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 601.779722][T10238] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 601.798745][T10238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.806852][T10238] usb 3-1: Product: syz [ 601.828534][ T5157] usb 1-1: Using ep0 maxpacket: 8 [ 601.839702][T10238] usb 3-1: Manufacturer: syz [ 601.844409][T10238] usb 3-1: SerialNumber: syz [ 601.861664][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 161, changing to 11 [ 601.902812][T10238] usb 3-1: config 0 descriptor?? [ 601.915948][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1097, setting to 1024 [ 601.933527][T10238] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 010 [ 601.992282][ T5157] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 602.034491][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.086412][ T5157] usb 1-1: config 0 descriptor?? [ 602.115788][T10563] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 602.889703][T10586] loop3: detected capacity change from 0 to 65536 [ 604.201181][T10567] loop2: detected capacity change from 0 to 40427 [ 604.301673][T10567] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 604.310889][T10567] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 604.327899][T10567] F2FS-fs (loop2): invalid crc value [ 604.345287][T10586] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 604.348129][T10567] F2FS-fs (loop2): Found nat_bits in checkpoint [ 604.417396][ T5157] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 604.439213][T10567] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 604.446775][T10567] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 604.474067][T10238] i2c i2c-1: failure reading functionality [ 604.480925][ T5157] usb 1-1: USB disconnect, device number 27 [ 604.509871][ T5157] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 604.528018][T10586] XFS (loop3): Ending clean mount [ 604.541949][T10238] i2c i2c-1: connected i2c-tiny-usb device [ 604.569788][T10586] XFS (loop3): Quotacheck needed: Please wait. [ 604.580200][T10238] usb 3-1: USB disconnect, device number 10 [ 604.603330][T10607] loop4: detected capacity change from 0 to 256 [ 604.663227][T10607] exfat: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 604.724850][T10586] XFS (loop3): Quotacheck: Done. [ 604.757535][ T29] audit: type=1326 audit(1719092145.466:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10612 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x0 [ 605.102742][T10618] tmpfs: Unknown parameter 'nr_blo' [ 605.855178][T10610] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 605.911110][T10610] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 605.955548][ T8777] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 606.397817][ T29] audit: type=1804 audit(1719092147.106:513): pid=10617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir677565277/syzkaller.fLksXg/86/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 606.408539][T10238] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 606.425140][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.668820][T10238] usb 5-1: device descriptor read/64, error -71 [ 607.130738][T10238] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 607.670367][T10238] usb 5-1: device descriptor read/64, error -71 [ 607.795884][T10238] usb usb5-port1: attempt power cycle [ 608.948476][T10238] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 609.056296][T10238] usb 5-1: device descriptor read/8, error -71 [ 609.806216][T10640] loop0: detected capacity change from 0 to 65536 [ 610.222071][T10640] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 610.395540][T10640] XFS (loop0): Ending clean mount [ 610.410224][T10640] XFS (loop0): Quotacheck needed: Please wait. [ 610.497842][T10640] XFS (loop0): Quotacheck: Done. [ 610.933595][T10666] tmpfs: Unknown parameter 'nr_blo' [ 611.887677][ T7729] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 612.763206][T10673] loop4: detected capacity change from 0 to 65536 [ 613.238527][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 613.289896][T10673] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 613.410768][T10673] XFS (loop4): Ending clean mount [ 613.418051][T10673] XFS (loop4): Quotacheck needed: Please wait. [ 613.453329][T10673] XFS (loop4): Quotacheck: Done. [ 613.484220][ T45] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 613.748867][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.757942][ T45] usb 4-1: Product: syz [ 613.763326][ T45] usb 4-1: Manufacturer: syz [ 613.767958][ T45] usb 4-1: SerialNumber: syz [ 613.782639][ T45] usb 4-1: config 0 descriptor?? [ 613.870320][T10689] tmpfs: Unknown parameter 'nr_blo' [ 613.973058][ T45] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 009 [ 614.448531][ T7020] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 614.788538][ T1148] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 614.979889][ T1148] usb 3-1: device descriptor read/64, error -71 [ 615.005114][T10670] loop3: detected capacity change from 0 to 40427 [ 615.029491][T10670] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 615.038481][T10670] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 615.086852][T10670] F2FS-fs (loop3): invalid crc value [ 615.140218][T10670] F2FS-fs (loop3): Found nat_bits in checkpoint [ 615.221435][T10670] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 615.229304][T10670] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 615.298834][ T45] i2c i2c-1: failure reading functionality [ 615.353855][ T45] i2c i2c-1: connected i2c-tiny-usb device [ 615.362564][ T45] usb 4-1: USB disconnect, device number 9 [ 615.448561][ T1148] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 616.368492][ T1148] usb 3-1: device descriptor read/64, error -71 [ 616.489237][ T1148] usb usb3-port1: attempt power cycle [ 617.028971][ T1148] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 617.230924][ T1148] usb 3-1: device descriptor read/8, error -71 [ 617.739336][ T1148] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 618.708539][ T1148] usb 3-1: device not accepting address 14, error -71 [ 618.746097][ T1148] usb usb3-port1: unable to enumerate USB device [ 618.846136][T10728] loop0: detected capacity change from 0 to 512 [ 618.932239][T10728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.005522][T10728] ext4 filesystem being mounted at /root/syzkaller-testdir677565277/syzkaller.fLksXg/93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.131508][T10728] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 619.140864][T10728] nbd: must specify a device to reconfigure [ 619.226700][ T7729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.007323][T10741] input: syz0 as /devices/virtual/input/input23 [ 624.279817][T10761] loop1: detected capacity change from 0 to 65536 [ 624.542235][T10761] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 624.589489][T10761] XFS (loop1): Ending clean mount [ 624.596733][T10761] XFS (loop1): Quotacheck needed: Please wait. [ 625.020211][T10761] XFS (loop1): Quotacheck: Done. [ 625.024796][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.239520][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.251663][ T25] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 626.293505][T10783] loop2: detected capacity change from 0 to 65536 [ 626.910499][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 626.981091][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.002241][ T25] usb 5-1: config 0 has no interfaces? [ 627.007838][ T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 627.018038][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.034507][ T25] usb 5-1: config 0 descriptor?? [ 627.036632][ T5116] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 627.059157][T10783] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 627.245646][T10783] XFS (loop2): Ending clean mount [ 627.283283][T10783] XFS (loop2): Quotacheck needed: Please wait. [ 627.301722][ T25] usb 5-1: USB disconnect, device number 49 [ 627.402847][T10783] XFS (loop2): Quotacheck: Done. [ 627.861373][T10802] tmpfs: Unknown parameter 'nr_blo' [ 628.651020][T10802] syz-executor.2 (10802) used greatest stack depth: 21840 bytes left [ 628.739661][ T8127] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 631.027840][ T29] audit: type=1326 audit(1719092171.736:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10823 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x0 [ 631.787178][T10823] dccp_close: ABORT with 32 bytes unread [ 632.218168][T10837] loop3: detected capacity change from 0 to 65536 [ 632.314142][T10837] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 632.501144][T10837] XFS (loop3): Ending clean mount [ 632.520538][T10837] XFS (loop3): Quotacheck needed: Please wait. [ 633.011382][T10847] loop0: detected capacity change from 0 to 65536 [ 633.178633][T10837] XFS (loop3): Quotacheck: Done. [ 633.204332][T10847] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 633.277896][T10834] loop1: detected capacity change from 0 to 32768 [ 633.302459][T10834] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10834) [ 633.552612][T10847] XFS (loop0): Ending clean mount [ 633.583533][T10834] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 633.595771][T10847] XFS (loop0): Quotacheck needed: Please wait. [ 634.182876][T10834] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 634.220523][T10834] BTRFS info (device loop1): using free-space-tree [ 634.246295][ T8777] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 634.273259][T10847] XFS (loop0): Quotacheck: Done. [ 634.551578][T10834] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 634.552967][T10834] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 634.572535][T10834] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 635.029418][T10238] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 635.250790][T10834] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 635.442359][T10834] BTRFS error (device loop1): open_ctree failed [ 635.503425][ T7729] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 635.528569][T10238] usb 5-1: Using ep0 maxpacket: 8 [ 635.551510][T10238] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.585264][T10238] usb 5-1: config 0 has no interfaces? [ 635.605527][T10238] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 635.653039][T10238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.700350][T10238] usb 5-1: config 0 descriptor?? [ 635.914491][T10238] usb 5-1: USB disconnect, device number 50 [ 636.911843][T10891] loop3: detected capacity change from 0 to 65536 [ 637.019252][T10891] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 637.190852][T10891] XFS (loop3): Ending clean mount [ 637.219608][T10891] XFS (loop3): Quotacheck needed: Please wait. [ 637.283744][T10889] loop1: detected capacity change from 0 to 32768 [ 637.335754][T10891] XFS (loop3): Quotacheck: Done. [ 637.695812][T10907] loop0: detected capacity change from 0 to 65536 [ 637.725636][T10889] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (10889) [ 637.777259][T10889] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 637.934217][T10889] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 637.945587][T10889] BTRFS info (device loop1): using free-space-tree [ 638.038802][T10918] tmpfs: Unknown parameter 'nr_blo' [ 638.355819][T10907] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 638.823981][T10907] XFS (loop0): Ending clean mount [ 638.839917][T10907] XFS (loop0): Quotacheck needed: Please wait. [ 638.865860][ T8777] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 638.974628][T10907] XFS (loop0): Quotacheck: Done. [ 639.041724][ T5116] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 639.433617][T10938] tmpfs: Unknown parameter 'nr_blo' [ 640.369174][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 640.577268][ T9] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 640.606387][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.638992][ T9] usb 3-1: Product: syz [ 640.648404][ T9] usb 3-1: Manufacturer: syz [ 640.653020][ T9] usb 3-1: SerialNumber: syz [ 640.690449][ T7729] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 640.691958][ T9] usb 3-1: config 0 descriptor?? [ 640.751862][ T9] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 015 [ 642.489584][T10936] loop2: detected capacity change from 0 to 40427 [ 642.502033][T10936] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 642.511010][T10936] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 642.538408][T10936] F2FS-fs (loop2): invalid crc value [ 642.726521][T10936] F2FS-fs (loop2): Found nat_bits in checkpoint [ 643.112348][ T9] i2c i2c-1: failure reading functionality [ 643.137214][T10950] loop4: detected capacity change from 0 to 65536 [ 643.250090][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 643.311487][ T9] usb 3-1: USB disconnect, device number 15 [ 643.382016][T10950] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 643.652533][T10950] XFS (loop4): Ending clean mount [ 643.717128][T10950] XFS (loop4): Quotacheck needed: Please wait. [ 648.590019][T10950] XFS (loop4): Quotacheck: Done. [ 648.694527][ T7020] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 648.908286][T10984] tmpfs: Bad value for 'mpol' [ 649.217610][T10988] loop2: detected capacity change from 0 to 164 [ 649.296811][ T5157] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 652.978435][ T5157] usb 2-1: Using ep0 maxpacket: 8 [ 653.959007][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 654.954412][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 654.962242][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 654.969985][ T5157] usb 2-1: device descriptor read/all, error -32 [ 656.425598][T10995] loop0: detected capacity change from 0 to 65536 [ 656.447824][ T5157] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 656.613898][T10995] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 657.074579][T11003] loop3: detected capacity change from 0 to 65536 [ 657.199472][T10995] XFS (loop0): Ending clean mount [ 657.213079][T10995] XFS (loop0): Quotacheck needed: Please wait. [ 657.249350][T11003] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 657.311033][T10995] XFS (loop0): Quotacheck: Done. [ 658.085159][T11025] tmpfs: Unknown parameter 'nr_blo' [ 658.816894][T11003] XFS (loop3): Ending clean mount [ 658.823567][T11003] XFS (loop3): Quotacheck needed: Please wait. [ 658.928535][ T7729] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 658.993959][T11003] XFS (loop3): Quotacheck: Done. [ 659.229117][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 659.291026][T11029] tmpfs: Unknown parameter 'nr_blo' [ 660.172218][ T8777] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 660.416414][ T29] audit: type=1800 audit(1719092201.126:515): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1940 res=0 errno=0 [ 660.438236][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.528388][ T9] usb 3-1: device not accepting address 16, error -71 [ 661.352938][ T29] audit: type=1326 audit(1719092202.006:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11036 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x0 [ 661.368766][T11033] loop2: detected capacity change from 0 to 65536 [ 661.539468][T11033] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 661.592985][T11033] XFS (loop2): Ending clean mount [ 661.628905][T11033] XFS (loop2): Quotacheck needed: Please wait. [ 661.725850][T11033] XFS (loop2): Quotacheck: Done. [ 661.998596][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 662.132980][T11050] tmpfs: Unknown parameter 'nr_blo' [ 662.213205][ T9] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 662.225535][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.242387][ T9] usb 4-1: Product: syz [ 662.252523][ T9] usb 4-1: Manufacturer: syz [ 662.257317][ T9] usb 4-1: SerialNumber: syz [ 662.289960][ T9] usb 4-1: config 0 descriptor?? [ 662.316850][ T9] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 010 [ 662.391895][T11052] loop0: detected capacity change from 0 to 16 [ 662.447836][ T8127] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 662.483321][T11052] erofs: (device loop0): mounted with root inode @ nid 36. [ 662.603025][ T29] audit: type=1400 audit(1719092203.316:517): avc: denied { read } for pid=11051 comm="syz-executor.0" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 662.657986][ T29] audit: type=1400 audit(1719092203.346:518): avc: denied { open } for pid=11051 comm="syz-executor.0" path="/dev/input/mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 662.723789][T11053] syz-executor.0: attempt to access beyond end of device [ 662.723789][T11053] loop0: rw=0, sector=1049272, nr_sectors = 32 limit=16 [ 662.776680][T11053] syz-executor.0: attempt to access beyond end of device [ 662.776680][T11053] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 662.797017][T11053] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 16 of nid 36 [ 662.806180][T11053] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 662.988525][ T29] audit: type=1400 audit(1719092203.696:519): avc: denied { write } for pid=11054 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 663.056760][T11057] loop4: detected capacity change from 0 to 2048 [ 663.075167][ T29] audit: type=1400 audit(1719092203.786:520): avc: denied { mounton } for pid=11054 comm="syz-executor.4" path="/root/syzkaller-testdir4239254045/syzkaller.YgKv5z/144/file0" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 663.127654][T11057] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 663.155419][T11057] UDF-fs: Scanning with blocksize 512 failed [ 663.214659][T11057] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 663.222474][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 663.268398][T11057] UDF-fs: Scanning with blocksize 1024 failed [ 663.298729][T11057] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 663.328487][T11057] UDF-fs: Scanning with blocksize 2048 failed [ 663.364220][T11057] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 663.392460][T11049] loop3: detected capacity change from 0 to 40427 [ 663.398799][T11057] UDF-fs: Scanning with blocksize 4096 failed [ 663.416720][T11049] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 663.425791][T11049] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 663.438117][T11049] F2FS-fs (loop3): invalid crc value [ 663.438418][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 663.464626][T11049] F2FS-fs (loop3): Found nat_bits in checkpoint [ 663.473393][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.549482][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 663.603759][T11049] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 663.610983][T11049] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 663.626566][ T9] i2c i2c-1: failure reading functionality [ 663.627823][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.641102][ T9] i2c i2c-1: connected i2c-tiny-usb device [ 663.676675][ T9] usb 4-1: USB disconnect, device number 10 [ 663.687867][T11057] loop4: detected capacity change from 0 to 128 [ 663.713337][ T25] usb 2-1: config 0 descriptor?? [ 663.722708][T11063] tmpfs: Bad value for 'mpol' [ 663.756180][ T25] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 664.647690][ T29] audit: type=1400 audit(1719092205.346:521): avc: denied { ioctl } for pid=11054 comm="syz-executor.4" path="socket:[34976]" dev="sockfs" ino=34976 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 664.689542][ T25] usb 2-1: USB disconnect, device number 32 [ 664.862997][T11068] loop0: detected capacity change from 0 to 164 [ 670.603723][T11075] loop2: detected capacity change from 0 to 65536 [ 670.664963][T11075] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 670.741622][ T29] audit: type=1326 audit(1719092211.456:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11077 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x0 [ 670.913738][T11075] XFS (loop2): Ending clean mount [ 670.924209][T11075] XFS (loop2): Quotacheck needed: Please wait. [ 670.939529][ T29] audit: type=1400 audit(1719092211.656:523): avc: denied { create } for pid=11074 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 670.970816][ T29] audit: type=1400 audit(1719092211.686:524): avc: denied { ioctl } for pid=11074 comm="syz-executor.1" path="socket:[35018]" dev="sockfs" ino=35018 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 671.048284][T11075] XFS (loop2): Quotacheck: Done. [ 671.285029][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 671.318887][ T29] audit: type=1804 audit(1719092212.016:525): pid=11095 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir677565277/syzkaller.fLksXg/106/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 671.387236][T11100] tmpfs: Unknown parameter 'nr_blo' [ 672.142338][ T8127] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 672.847470][T11107] loop3: detected capacity change from 0 to 65536 [ 673.118184][T11109] loop0: detected capacity change from 0 to 40427 [ 673.134068][T11109] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 673.144507][T11109] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 673.155937][T11109] F2FS-fs (loop0): invalid crc value [ 673.164763][T11107] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 673.191538][T11109] F2FS-fs (loop0): Found nat_bits in checkpoint [ 673.274029][T11109] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 673.281291][T11109] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 673.449643][T11107] XFS (loop3): Ending clean mount [ 673.458458][T11107] XFS (loop3): Quotacheck needed: Please wait. [ 673.536789][T11107] XFS (loop3): Quotacheck: Done. [ 674.565215][T11122] tmpfs: Unknown parameter 'nr_blo' [ 674.846875][ T29] audit: type=1400 audit(1719092215.536:526): avc: denied { getopt } for pid=11125 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 674.860441][ T8777] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 674.866630][ C0] vkms_vblank_simulate: vblank timer overrun [ 675.057926][T11129] loop4: detected capacity change from 0 to 1024 [ 675.090121][T11129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 675.331253][T11129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.214090][ T7020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.482403][ T29] audit: type=1400 audit(1719092217.186:527): avc: denied { recv } for pid=7020 comm="syz-executor.4" saddr=10.128.0.169 src=30006 daddr=10.128.1.118 dest=42836 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 682.119617][ T29] audit: type=1326 audit(1719092222.836:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x0 [ 682.143022][ C1] vkms_vblank_simulate: vblank timer overrun [ 682.359311][ T45] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 682.616944][T11168] loop2: detected capacity change from 0 to 40427 [ 682.635169][T11168] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 682.644212][T11168] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 682.654727][T11168] F2FS-fs (loop2): invalid crc value [ 682.706397][T11161] overlayfs: failed to resolve './file0': -2 [ 682.715785][T11168] F2FS-fs (loop2): Found nat_bits in checkpoint [ 682.781178][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 682.788845][T11168] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 682.795873][T11168] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 682.830140][ T29] audit: type=1400 audit(1719092223.536:529): avc: denied { setopt } for pid=11157 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 682.858425][ T45] usb 5-1: Using ep0 maxpacket: 8 [ 682.873084][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 161, changing to 11 [ 682.912907][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1097, setting to 1024 [ 682.924490][ T45] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 682.934280][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.951792][ T45] usb 5-1: config 0 descriptor?? [ 682.972711][T11154] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 683.002465][ T29] audit: type=1800 audit(1719092223.716:530): pid=11170 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1964 res=0 errno=0 [ 683.031222][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 683.052053][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.076387][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 683.107967][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.155788][ T25] usb 4-1: config 0 descriptor?? [ 683.176315][ T25] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 683.228895][ T45] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 683.247186][ T45] usb 5-1: USB disconnect, device number 51 [ 683.258150][ T45] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 683.401345][ T9] usb 4-1: USB disconnect, device number 11 [ 683.419665][ T29] audit: type=1400 audit(1719092224.126:531): avc: denied { bind } for pid=11173 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 685.520414][T11193] loop3: detected capacity change from 0 to 1024 [ 685.540071][T11193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 685.674296][T11195] input: syz0 as /devices/virtual/input/input24 [ 685.740648][T11193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.941453][ T29] audit: type=1326 audit(1719092226.646:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e63c7d0a9 code=0x0 [ 686.430052][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.439094][ T1238] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.633641][T11206] loop0: detected capacity change from 0 to 65536 [ 686.726831][ T8777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.763587][T11206] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 686.817482][T11206] XFS (loop0): Ending clean mount [ 686.825102][T11206] XFS (loop0): Quotacheck needed: Please wait. [ 686.897313][T11206] XFS (loop0): Quotacheck: Done. [ 686.974675][T11213] bond1: entered promiscuous mode [ 686.990183][T11213] bond1: entered allmulticast mode [ 687.019234][T11213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 687.348453][T11227] tmpfs: Unknown parameter 'nr_blo' [ 687.940816][T11228] loop2: detected capacity change from 0 to 128 [ 688.224753][ T7729] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 688.282687][ T29] audit: type=1800 audit(1719092228.976:533): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048628 res=0 errno=0 [ 688.363882][T11230] loop3: detected capacity change from 0 to 40427 [ 688.378454][T11230] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 688.388400][T11230] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 688.472206][ T29] audit: type=1400 audit(1719092229.166:534): avc: denied { getopt } for pid=11226 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 688.580698][T11230] F2FS-fs (loop3): invalid crc value [ 688.623216][T11233] loop1: detected capacity change from 0 to 512 [ 688.728831][T11230] F2FS-fs (loop3): Found nat_bits in checkpoint [ 688.730587][T11233] EXT4-fs: Invalid want_extra_isize 7 [ 689.097070][T11230] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 689.106469][T11230] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 689.246208][ T29] audit: type=1400 audit(1719092229.956:535): avc: denied { unlink } for pid=11231 comm="syz-executor.1" name="#1" dev="sda1" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 689.759202][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 690.059951][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 690.176890][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 690.340858][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 690.399999][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 690.434809][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.484114][ T9] usb 5-1: config 0 descriptor?? [ 690.493069][ T9] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 690.692957][T10238] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 690.729683][ T9] usb 5-1: USB disconnect, device number 52 [ 690.928084][T10238] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 690.960507][T10238] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.994225][T10238] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 691.009383][ T29] audit: type=1400 audit(1719092231.626:536): avc: denied { add_name } for pid=11257 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 691.051128][T10238] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.093906][ T29] audit: type=1400 audit(1719092231.636:537): avc: denied { create } for pid=11257 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 691.103522][T10238] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.114999][ T29] audit: type=1400 audit(1719092231.656:538): avc: denied { associate } for pid=11257 comm="syz-executor.2" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 691.142810][T10238] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 691.172769][T10238] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 691.182958][T10238] usb 2-1: Product: syz [ 691.187384][T10238] usb 2-1: Manufacturer: syz [ 691.226543][T10238] cdc_wdm 2-1:1.0: skipping garbage [ 691.237181][T10238] cdc_wdm 2-1:1.0: skipping garbage [ 691.248450][ T45] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 691.252804][T10238] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 691.276227][T10238] cdc_wdm 2-1:1.0: Unknown control protocol [ 691.430215][T11246] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 691.440778][T11246] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 691.449385][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.467937][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 691.477029][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.498419][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.507196][ T45] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 691.527632][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.542517][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.558682][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.573426][ T45] usb 1-1: config 0 descriptor?? [ 691.598844][ T45] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 691.797294][ T45] usb 2-1: USB disconnect, device number 33 [ 691.841888][ T25] usb 1-1: USB disconnect, device number 28 [ 692.022250][ T29] audit: type=1400 audit(1719092232.736:539): avc: denied { read } for pid=11271 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 692.633156][T11279] loop1: detected capacity change from 0 to 2048 [ 692.759112][T11279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.038635][T11292] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 693.669049][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 693.916653][ T5116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.040070][ T29] audit: type=1400 audit(1719092234.756:540): avc: denied { create } for pid=11311 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 694.083998][ T45] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 694.105536][ T29] audit: type=1400 audit(1719092234.786:541): avc: denied { write } for pid=11311 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 694.159118][T10238] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 694.329069][ T45] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 694.329102][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 694.329127][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 694.329185][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.329218][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.335602][ T45] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 694.335636][ T45] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 694.335663][ T45] usb 1-1: Product: syz [ 694.335683][ T45] usb 1-1: Manufacturer: syz [ 694.348041][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 694.348062][ T45] cdc_wdm 1-1:1.0: skipping garbage [ 694.352465][ T45] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 694.352488][ T45] cdc_wdm 1-1:1.0: Unknown control protocol [ 694.359896][ T9070] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 694.386424][T10238] usb 4-1: Using ep0 maxpacket: 8 [ 694.398598][T10238] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.398653][T10238] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 694.398705][T10238] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 694.398734][T10238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.401645][T10238] usb 4-1: config 0 descriptor?? [ 694.405573][T10238] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 694.576825][ T9070] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 694.576861][ T9070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.599517][ T9070] usb 5-1: config 0 descriptor?? [ 694.604333][ T9070] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 694.623652][ T9] usb 4-1: USB disconnect, device number 12 [ 694.668093][T11307] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 694.673755][T11307] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 694.679292][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.679691][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.696756][T11307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.697102][T11307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.768612][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.773907][T11326] vlan0: entered allmulticast mode [ 695.039580][ T5157] usb 1-1: USB disconnect, device number 29 [ 695.117613][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 695.206660][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 695.727374][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.039216][ T9070] usb 5-1: USB disconnect, device number 53 [ 696.135480][T11338] loop1: detected capacity change from 0 to 32768 [ 696.159152][T11338] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11338) [ 696.218383][T11338] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 696.251439][T11338] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 696.272111][T11338] BTRFS info (device loop1): using free-space-tree [ 696.474739][T11338] BTRFS info (device loop1): rebuilding free space tree [ 696.610325][T11382] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.3'. [ 696.621485][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 696.699178][T11384] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 696.709206][ T5116] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 696.718441][ T9070] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 696.780094][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 696.938627][ T9070] usb 3-1: Using ep0 maxpacket: 8 [ 696.978704][ T9070] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.023113][ T9070] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 697.053370][ T29] audit: type=1400 audit(1719092237.756:542): avc: denied { setopt } for pid=11389 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 697.070280][ T9070] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 697.073103][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.108176][T11386] loop3: detected capacity change from 0 to 4096 [ 697.111461][ T9070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.150074][T11386] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 697.237891][T11386] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 697.272267][ T9070] usb 3-1: config 0 descriptor?? [ 697.303266][ T9070] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 697.514255][ T9070] usb 3-1: USB disconnect, device number 18 [ 697.833635][ T29] audit: type=1400 audit(1719092238.526:543): avc: denied { ioctl } for pid=11385 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35419 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 697.860010][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.619488][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 698.714917][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 698.906440][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 699.082142][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.098244][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.261810][T11438] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.269133][T11438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.310812][T11438] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.318018][T11438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.346084][ T29] audit: type=1400 audit(1719092240.056:544): avc: denied { egress } for pid=5153 comm="kworker/0:5" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 699.463966][ T29] audit: type=1400 audit(1719092240.056:545): avc: denied { sendto } for pid=5153 comm="kworker/0:5" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 699.523062][T11443] loop4: detected capacity change from 0 to 4096 [ 699.579983][T11443] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 699.820264][T11418] loop2: detected capacity change from 0 to 32768 [ 699.888551][T11418] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11418) [ 700.023751][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 700.119264][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 700.284064][T11449] loop0: detected capacity change from 0 to 65536 [ 700.341247][T11418] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 700.355496][T11443] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 700.402087][T11418] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 700.439218][T11449] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 700.626287][T11418] BTRFS info (device loop2): using free-space-tree [ 700.700536][T11449] XFS (loop0): Ending clean mount [ 700.707783][T11449] XFS (loop0): Quotacheck needed: Please wait. [ 700.759978][T11441] loop1: detected capacity change from 0 to 40427 [ 701.169081][T11441] F2FS-fs (loop1): Found nat_bits in checkpoint [ 701.267555][T11418] BTRFS info (device loop2): rebuilding free space tree [ 701.378033][T11441] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 701.464845][T11449] XFS (loop0): Quotacheck: Done. [ 701.477671][ T5116] syz-executor.1: attempt to access beyond end of device [ 701.477671][ T5116] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 701.569328][ T8127] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 701.588240][ T5116] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 701.816864][T11494] tmpfs: Unknown parameter 'nr_blo' [ 702.257386][ T29] audit: type=1326 audit(1719092242.966:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfea87d0a9 code=0x7fc00000 [ 702.352309][ T29] audit: type=1326 audit(1719092242.966:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbfea87d0a9 code=0x7fc00000 [ 702.432401][ T7729] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 702.623384][T11503] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 702.953748][ T29] audit: type=1326 audit(1719092243.666:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfea87d0a9 code=0x7fc00000 [ 703.023094][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 703.065963][ T29] audit: type=1326 audit(1719092243.666:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfea87d0a9 code=0x7fc00000 [ 703.168376][ T29] audit: type=1326 audit(1719092243.666:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfea87d0a9 code=0x7fc00000 [ 703.207079][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 703.268871][ T29] audit: type=1326 audit(1719092243.666:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfea87d0a9 code=0x7fc00000 [ 703.392892][ T29] audit: type=1326 audit(1719092243.666:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfea87d0a9 code=0x7fc00000 [ 703.470447][T11517] dccp_close: ABORT with 32 bytes unread [ 703.530811][T11519] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 703.568918][ T29] audit: type=1326 audit(1719092243.666:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfea87d0a9 code=0x7fc00000 [ 703.962107][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 704.165320][T11534] loop1: detected capacity change from 0 to 256 [ 704.552081][T11536] loop2: detected capacity change from 0 to 2048 [ 704.581524][T11536] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2546, location=2546 [ 704.611277][T11513] loop4: detected capacity change from 0 to 40427 [ 704.613862][T11521] loop3: detected capacity change from 0 to 32768 [ 704.655944][T11521] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11521) [ 704.681721][T11536] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 704.725814][T11513] F2FS-fs (loop4): Found nat_bits in checkpoint [ 704.768814][T11521] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 704.818471][T11521] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 704.849590][T11521] BTRFS info (device loop3): using free-space-tree [ 704.978420][T11561] ubi1: attaching mtd0 [ 704.998617][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 704.998656][ T29] audit: type=1400 audit(1719092245.696:559): avc: denied { ioctl } for pid=11546 comm="syz-executor.1" path="/dev/nullb0" dev="devtmpfs" ino=681 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 705.112132][T11513] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 705.545779][T11521] BTRFS info (device loop3): rebuilding free space tree [ 705.614674][ T29] audit: type=1326 audit(1719092245.926:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x7fc00000 [ 705.730716][ T29] audit: type=1326 audit(1719092245.926:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2c80c7d0a9 code=0x7fc00000 [ 705.778011][ T29] audit: type=1326 audit(1719092246.286:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x7fc00000 [ 705.846945][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 705.861303][ T29] audit: type=1326 audit(1719092246.286:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c80c7d0a9 code=0x7fc00000 [ 705.954364][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 705.978936][ T7020] syz-executor.4: attempt to access beyond end of device [ 705.978936][ T7020] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 705.993748][ T29] audit: type=1326 audit(1719092246.326:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x7fc00000 [ 706.018653][ T7020] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 706.061846][ T8777] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 706.178429][ T29] audit: type=1326 audit(1719092246.356:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x7fc00000 [ 706.223195][ T29] audit: type=1326 audit(1719092246.386:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x7fc00000 [ 706.241657][T11573] loop1: detected capacity change from 0 to 4096 [ 706.305124][T11573] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 706.369678][ T29] audit: type=1326 audit(1719092246.386:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x7fc00000 [ 706.450569][T11573] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 706.506655][ T29] audit: type=1326 audit(1719092246.386:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11544 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c80c7d0a9 code=0x7fc00000 [ 706.564616][T11573] ntfs3: loop1: Failed to load $MFT (-22). [ 706.926266][T11580] loop0: detected capacity change from 0 to 128 [ 707.222946][T11598] ubi1: attaching mtd0 [ 707.462017][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 708.747027][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 709.475851][T11649] loop1: detected capacity change from 0 to 2048 [ 709.579928][T11649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.873110][T11660] ubi0: attaching mtd0 [ 709.891512][T11660] ubi0: scanning is finished [ 709.896168][T11660] ubi0: empty MTD device detected [ 710.547762][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 710.547802][ T29] audit: type=1400 audit(1719092251.226:581): avc: denied { ioctl } for pid=11648 comm="syz-executor.1" path="socket:[37133]" dev="sockfs" ino=37133 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 711.030799][T11660] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 711.104852][ T5116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.252721][ T29] audit: type=1400 audit(1719092251.966:582): avc: denied { ioctl } for pid=11675 comm="syz-executor.2" path="socket:[37177]" dev="sockfs" ino=37177 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 711.279417][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 711.344879][ T29] audit: type=1400 audit(1719092252.016:583): avc: denied { setopt } for pid=11675 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 712.697100][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 712.944848][T11713] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 712.984393][T11711] tipc: Started in network mode [ 713.012244][T11711] tipc: Node identity 000000000000002d0000000000000001, cluster identity 4711 [ 713.094989][T11711] tipc: Enabling of bearer rejected, failed to enable media [ 713.182345][ T29] audit: type=1400 audit(1719092253.896:584): avc: denied { create } for pid=11714 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 713.343791][ T29] audit: type=1400 audit(1719092253.936:585): avc: denied { connect } for pid=11714 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 713.379486][ T29] audit: type=1400 audit(1719092253.956:586): avc: denied { read } for pid=11714 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 713.453406][ T29] audit: type=1400 audit(1719092254.006:587): avc: denied { ioctl } for pid=11714 comm="syz-executor.4" path="socket:[36691]" dev="sockfs" ino=36691 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 713.538446][ T29] audit: type=1400 audit(1719092254.076:588): avc: denied { write } for pid=11714 comm="syz-executor.4" path="socket:[36693]" dev="sockfs" ino=36693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 713.838876][ T29] audit: type=1326 audit(1719092254.526:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfea87d0a9 code=0x7fc00000 [ 713.881925][T11737] loop0: detected capacity change from 0 to 512 [ 713.962054][ T29] audit: type=1326 audit(1719092254.536:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11728 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbfea87d0a9 code=0x7fc00000 [ 713.986026][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.017625][T11737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.062402][T11737] ext4 filesystem being mounted at /root/syzkaller-testdir677565277/syzkaller.fLksXg/141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 715.579206][ T45] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 715.596220][ T7729] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.883802][T11767] loop1: detected capacity change from 0 to 256 [ 716.014967][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.973526][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 716.991823][ T45] usb 3-1: string descriptor 0 read error: -71 [ 716.998054][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 717.012319][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 717.192148][ T45] usb 3-1: can't set config #1, error -71 [ 717.248829][ T45] usb 3-1: USB disconnect, device number 19 [ 717.284671][T11779] loop4: detected capacity change from 0 to 128 [ 717.293509][T11779] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 717.566387][T11779] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 717.572375][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 717.572438][ T29] audit: type=1400 audit(1719092258.026:628): avc: denied { mount } for pid=11772 comm="syz-executor.3" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 717.605180][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.653054][ T29] audit: type=1800 audit(1719092258.366:629): pid=11776 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=1048632 res=0 errno=0 [ 717.748871][ T29] audit: type=1400 audit(1719092258.456:630): avc: denied { unmount } for pid=8777 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 718.595672][T11766] loop0: detected capacity change from 0 to 32768 [ 718.640554][T11766] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1) [ 718.640554][T11766] downgrade (size 40): [ 718.640554][T11766] version: 0.16: reflink_p_fix [ 718.640554][T11766] recovery passes: [ 718.640554][T11766] errors: [ 718.640554][T11766] [ 718.672667][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.688012][T11786] loop3: detected capacity change from 0 to 40427 [ 719.729253][T11786] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 719.754786][T11786] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 719.849642][T11786] F2FS-fs (loop3): Found nat_bits in checkpoint [ 720.021680][T11786] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 720.059412][T11786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 723.207074][T11822] loop1: detected capacity change from 0 to 32768 [ 723.656860][T11822] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 723.718930][T11822] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 723.915612][T11822] bcachefs (loop1): alloc_read... done [ 723.917951][T11825] loop3: detected capacity change from 0 to 40427 [ 723.948362][T11822] bcachefs (loop1): stripes_read... done [ 723.973570][T11822] bcachefs (loop1): snapshots_read... done [ 724.072955][T11822] bcachefs (loop1): journal_replay... done [ 724.218145][T11825] F2FS-fs (loop3): Found nat_bits in checkpoint [ 724.258478][T11822] bcachefs (loop1): resume_logged_ops... done [ 724.265075][T11822] bcachefs (loop1): going read-write [ 724.283061][T11852] input: syz0 as /devices/virtual/input/input25 [ 724.557666][T11822] bcachefs (loop1): done starting filesystem [ 724.659363][ T5116] bcachefs (loop1): shutting down [ 724.664846][ T5116] bcachefs (loop1): going read-only [ 724.713125][ T5116] bcachefs (loop1): finished waiting for writes to stop [ 724.773658][T11825] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 724.791488][ T5116] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 724.828879][ T5116] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 724.977039][ T5116] ------------[ cut here ]------------ [ 724.982604][ T5116] kernel BUG at fs/bcachefs/journal.c:1184! [ 725.008396][ T5116] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 725.015358][ T5116] CPU: 1 PID: 5116 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 2024/06/22 21:37:45 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 725.025770][ T5116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 725.035818][ T5116] RIP: 0010:bch2_fs_journal_stop+0x361/0x390 [ 725.041815][ T5116] Code: c1 ea 03 80 3c 02 00 75 35 48 8b ab 38 06 00 00 4c 89 f7 48 89 ee e8 4e b0 82 fd 49 39 ee 0f 84 29 fe ff ff e8 d0 b5 82 fd 90 <0f> 0b 4c 89 e7 e8 b5 73 de fd e9 fa fd ff ff e8 1b f6 db 06 48 89 [ 725.061407][ T5116] RSP: 0018:ffffc9000338fa78 EFLAGS: 00010293 [ 725.067457][ T5116] RAX: 0000000000000000 RBX: ffff888066a4a5c0 RCX: ffffffff840b2e02 [ 725.075412][ T5116] RDX: ffff888061cb3c00 RSI: ffffffff840b2e10 RDI: 0000000000000006 [ 725.083369][ T5116] RBP: 000000000000000a R08: 0000000000000006 R09: 000000000000000b [ 725.091321][ T5116] R10: 000000000000000a R11: 0000000000000002 R12: ffff888066a4a600 [ 725.099274][ T5116] R13: 1ffff92000671f4f R14: 000000000000000b R15: 0000000000000000 [ 725.107225][ T5116] FS: 000055558b9c1480(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 725.116136][ T5116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.122725][ T5116] CR2: 00007f2c818e56c6 CR3: 0000000061cd2000 CR4: 00000000003506f0 [ 725.130681][ T5116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 725.138635][ T5116] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 725.146588][ T5116] Call Trace: [ 725.149851][ T5116] [ 725.152765][ T5116] ? show_regs+0x8c/0xa0 [ 725.157002][ T5116] ? die+0x36/0xa0 [ 725.160716][ T5116] ? do_trap+0x232/0x430 [ 725.164942][ T5116] ? bch2_fs_journal_stop+0x361/0x390 [ 725.170302][ T5116] ? bch2_fs_journal_stop+0x361/0x390 [ 725.175658][ T5116] ? do_error_trap+0xf4/0x230 [ 725.180319][ T5116] ? bch2_fs_journal_stop+0x361/0x390 [ 725.185675][ T5116] ? handle_invalid_op+0x34/0x40 [ 725.190596][ T5116] ? bch2_fs_journal_stop+0x361/0x390 [ 725.195953][ T5116] ? exc_invalid_op+0x2e/0x50 [ 725.200618][ T5116] ? asm_exc_invalid_op+0x1a/0x20 [ 725.205633][ T5116] ? bch2_fs_journal_stop+0x352/0x390 [ 725.211338][ T5116] ? bch2_fs_journal_stop+0x360/0x390 [ 725.216694][ T5116] ? bch2_fs_journal_stop+0x361/0x390 [ 725.222050][ T5116] ? bch2_fs_journal_stop+0x360/0x390 [ 725.227412][ T5116] ? __pfx_bch2_fs_journal_stop+0x10/0x10 [ 725.233119][ T5116] ? __bch2_btree_flush_all+0x387/0x760 [ 725.238652][ T5116] __bch2_fs_read_only+0x334/0x500 [ 725.243745][ T5116] bch2_fs_read_only+0x9b2/0xf10 [ 725.248667][ T5116] ? __pfx_bch2_fs_read_only+0x10/0x10 [ 725.254109][ T5116] ? __pfx___might_resched+0x10/0x10 [ 725.259382][ T5116] ? __pfx_bch2_put_super+0x10/0x10 [ 725.264568][ T5116] __bch2_fs_stop+0xfc/0x540 [ 725.269145][ T5116] ? __pfx_hook_sb_delete+0x10/0x10 [ 725.274331][ T5116] ? __pfx___bch2_fs_stop+0x10/0x10 [ 725.279511][ T5116] ? __pfx_evict_inodes+0x10/0x10 [ 725.284522][ T5116] ? __pfx_bch2_put_super+0x10/0x10 [ 725.289707][ T5116] generic_shutdown_super+0x159/0x3d0 [ 725.295067][ T5116] bch2_kill_sb+0x3b/0x50 [ 725.299406][ T5116] deactivate_locked_super+0xbe/0x1a0 [ 725.304761][ T5116] deactivate_super+0xde/0x100 [ 725.309510][ T5116] cleanup_mnt+0x222/0x450 [ 725.313912][ T5116] task_work_run+0x14e/0x250 [ 725.318484][ T5116] ? __pfx_task_work_run+0x10/0x10 [ 725.323575][ T5116] syscall_exit_to_user_mode+0x278/0x2a0 [ 725.329196][ T5116] do_syscall_64+0xda/0x250 [ 725.333686][ T5116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.339569][ T5116] RIP: 0033:0x7f4e63c7e3d7 [ 725.343972][ T5116] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 725.363563][ T5116] RSP: 002b:00007ffcb36c6698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 725.371956][ T5116] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4e63c7e3d7 [ 725.379909][ T5116] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb36c6750 [ 725.387859][ T5116] RBP: 00007ffcb36c6750 R08: 0000000000000000 R09: 0000000000000000 [ 725.395812][ T5116] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb36c7800 [ 725.403763][ T5116] R13: 00007f4e63cd96c6 R14: 00000000000b0309 R15: 0000000000000001 [ 725.411718][ T5116] [ 725.414714][ T5116] Modules linked in: [ 725.506820][ T29] audit: type=1400 audit(1719092266.146:631): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=48088 daddr=10.128.1.118 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 725.540789][ T5116] ---[ end trace 0000000000000000 ]--- [ 725.546268][ T5116] RIP: 0010:bch2_fs_journal_stop+0x361/0x390 [ 725.578461][ T5116] Code: c1 ea 03 80 3c 02 00 75 35 48 8b ab 38 06 00 00 4c 89 f7 48 89 ee e8 4e b0 82 fd 49 39 ee 0f 84 29 fe ff ff e8 d0 b5 82 fd 90 <0f> 0b 4c 89 e7 e8 b5 73 de fd e9 fa fd ff ff e8 1b f6 db 06 48 89 [ 725.618348][ T5116] RSP: 0018:ffffc9000338fa78 EFLAGS: 00010293 [ 725.624442][ T5116] RAX: 0000000000000000 RBX: ffff888066a4a5c0 RCX: ffffffff840b2e02 [ 725.629455][ T8777] syz-executor.3: attempt to access beyond end of device [ 725.629455][ T8777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 725.638320][ T5116] RDX: ffff888061cb3c00 RSI: ffffffff840b2e10 RDI: 0000000000000006 [ 725.689904][ T5116] RBP: 000000000000000a R08: 0000000000000006 R09: 000000000000000b [ 725.697899][ T5116] R10: 000000000000000a R11: 0000000000000002 R12: ffff888066a4a600 [ 725.698348][ T8777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 725.759744][ T5116] R13: 1ffff92000671f4f R14: 000000000000000b R15: 0000000000000000 [ 725.767744][ T5116] FS: 000055558b9c1480(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 725.860026][ T5116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.866644][ T5116] CR2: 0000000020aa3030 CR3: 0000000061cd2000 CR4: 00000000003506f0 [ 725.918469][ T5116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 725.926466][ T5116] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 725.968402][ T5116] Kernel panic - not syncing: Fatal exception [ 725.974688][ T5116] Kernel Offset: disabled [ 725.978996][ T5116] Rebooting in 86400 seconds..