last executing test programs: 1m38.585419258s ago: executing program 32 (id=152): io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xaa41, 0x800, 0x4, 0x1eb}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="f7ed", 0x2}], 0x1) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) close(0x3) 1m31.686406704s ago: executing program 33 (id=269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x81, 0x0, 0x1}, 'u'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x54}}, 0x20040054) 1m29.673568532s ago: executing program 34 (id=313): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m21.779313007s ago: executing program 35 (id=548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001, 0x110}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}}}]}, 0x44}}, 0x84000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x3c}}, 0x20004000) 1m14.113041008s ago: executing program 36 (id=664): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto(r0, &(0x7f0000000540)="f6b4ff270e6532b2d40765f9e8b460bd68b7e03a08d842e54efc234e21b4fec0541e98608bd3070ff700079b3dc0d7520e7351a1b4266e018855fc4819c097783f98064577274ff947328e4fa0ac578dfad9dba45afb427b80a1b4825dc8e8f06667f93a3d429d004d1933f47ac6e2d5d8b1e58d4eb92fa0a5c5b87b800712e299d0c714c78406947586a02fb600029a4daeb3efe7cba41f2d2d6626f63c7c7f0271cbac55d23e0afc639d9810", 0xfe6d621e554cffe6, 0xd63a66976f7dfbe0, 0x0, 0x0) 1m14.111319267s ago: executing program 7 (id=667): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1m13.264645388s ago: executing program 7 (id=677): io_setup(0xc, &(0x7f0000000180)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_getevents(r0, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000040)={0x77359400}) 1m13.112212326s ago: executing program 7 (id=681): chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000240)='./file0\x00') 1m13.071057579s ago: executing program 7 (id=682): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8, 0x0, 0x1, 0xffffffff, 0x4}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = gettid() kcmp(r1, r0, 0xb44c031f136537ae, 0xffffffffffffffff, 0xffffffffffffffff) 1m12.864267651s ago: executing program 7 (id=683): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="d7", 0xffffff2a}], 0x1}, 0x20004001) sendmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="14"], 0x18, 0x40091}, 0x8001) 1m12.735740679s ago: executing program 7 (id=684): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000440)=""/164, 0xa4}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 1m12.683656641s ago: executing program 37 (id=684): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000440)=""/164, 0xa4}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) 1m12.447604076s ago: executing program 4 (id=695): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) 1m12.096642446s ago: executing program 4 (id=692): r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[]) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) 1m11.727425238s ago: executing program 4 (id=698): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYRES64], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xdffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x12) 1m11.499702712s ago: executing program 4 (id=701): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000240)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@test_dummy_encryption}]}, 0x3, 0x45c, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000020240)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) symlinkat(&(0x7f0000000cc0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000d40)='./file6\x00') syz_mount_image$fuse(0x0, 0x0, 0x3813009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x130) 1m11.197680339s ago: executing program 4 (id=702): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008085}, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r0, 0x1, &(0x7f0000000140)={0x1b, 0x7, 0x7}) 1m10.604084174s ago: executing program 4 (id=712): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) 1m10.572117926s ago: executing program 38 (id=712): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) 1m8.682965317s ago: executing program 3 (id=749): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 1m8.657012639s ago: executing program 3 (id=751): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m8.517106717s ago: executing program 3 (id=764): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m8.364486606s ago: executing program 3 (id=759): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m8.274936411s ago: executing program 3 (id=761): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x3, {{0x2, 0x4e23, @multicast2}}}, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1m8.191790286s ago: executing program 3 (id=763): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 1m8.142150719s ago: executing program 39 (id=763): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 1m2.859812749s ago: executing program 6 (id=843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1m2.837388761s ago: executing program 6 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r4 = dup2(r2, r2) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r3, 0xa, 0x12, r4, 0x0) 1m2.620605504s ago: executing program 6 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x809b}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @void, {@generic={0x8906, "e20293e94f0f1ccea00e8b4263a25570b4d89e6842099395c499c965fac04955c03c56801b2705"}}}}, 0x39) 1m2.49993444s ago: executing program 6 (id=857): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695ff5babb8e653d302c756e695f78646329ca924f45a413305f3d302c757466383d312c73686f72746e616d57c1b1830711383d302c726f6469722c696f636861727365743d69736f383835392d352c73686f72746e616d653d6d697865642c696f636861667365743d63703933322c726f6469722c756e695f786c6174653d312c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c00"], 0x25, 0x365, &(0x7f00000009c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8010, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00') 1m2.459120033s ago: executing program 6 (id=858): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000200)=0x40) 1m2.35595514s ago: executing program 6 (id=864): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 1m2.309459012s ago: executing program 40 (id=864): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 7.371482045s ago: executing program 1 (id=1738): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 6.965526139s ago: executing program 1 (id=1750): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x8, 0x0, 0x0}}, 0x10) 6.879626484s ago: executing program 1 (id=1751): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.031143613s ago: executing program 1 (id=1758): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlink(&(0x7f0000000340)='./file0/file1\x00') 4.42067285s ago: executing program 1 (id=1765): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) 4.113652748s ago: executing program 1 (id=1771): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x12, &(0x7f00000000c0)={0xfffffff7, 0xfffff42f, 0x8}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff8]}, 0x8, 0x80800) read$watch_queue(r2, &(0x7f0000000300)=""/176, 0xb0) 4.021245943s ago: executing program 41 (id=1771): rt_sigprocmask(0x2, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x12, &(0x7f00000000c0)={0xfffffff7, 0xfffff42f, 0x8}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff8]}, 0x8, 0x80800) read$watch_queue(r2, &(0x7f0000000300)=""/176, 0xb0) 3.168622204s ago: executing program 9 (id=1783): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 3.138903595s ago: executing program 9 (id=1785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x1f, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.983775284s ago: executing program 9 (id=1788): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000001e40)=""/104, 0x45}], 0x2}}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x44}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2.844685123s ago: executing program 9 (id=1789): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 2.828386563s ago: executing program 9 (id=1790): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) 2.510144742s ago: executing program 0 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x80001) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0xfffffffe, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) 2.416135828s ago: executing program 2 (id=1798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x9120}], 0x1, 0x0, 0x0, 0x0) 2.21343651s ago: executing program 2 (id=1809): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.200817471s ago: executing program 2 (id=1800): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000080000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) 2.184223422s ago: executing program 2 (id=1801): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) 2.163987262s ago: executing program 2 (id=1802): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x5, 0x0, 0xfffffffc}) 1.906221488s ago: executing program 8 (id=1806): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x232c486, 0x0, 0x3, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 1.815701644s ago: executing program 8 (id=1808): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000140)=0x0) close(r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x7, 0x4) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x300}]) 1.637625834s ago: executing program 8 (id=1811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x2, 0x4000, 0x2000, &(0x7f0000ff8000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4b, &(0x7f00000001c0)=[@cr4={0x1, 0x1420c7}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.616519465s ago: executing program 0 (id=1812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 823.741642ms ago: executing program 5 (id=1818): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x64045b0b, 0x801) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000004c0)={0x0, r1}) write$eventfd(r1, &(0x7f0000000140)=0x1ff, 0x8) 779.163695ms ago: executing program 5 (id=1819): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) 704.197149ms ago: executing program 5 (id=1820): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000240)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@utf8}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, 0x0, &(0x7f0000000040)) 492.069571ms ago: executing program 0 (id=1821): syz_clone3(&(0x7f0000000040)={0xa00000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 491.941242ms ago: executing program 5 (id=1823): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x2, @void}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r2, 0x25, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) 481.696362ms ago: executing program 8 (id=1824): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xee, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) 452.925504ms ago: executing program 5 (id=1825): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x8, r3, 0x3}, 0xc) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 270.310395ms ago: executing program 8 (id=1826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8582, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x4008840) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0xffe0, 0x1}, {}, {0x8, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x14, 0xc7}}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x4}, {0x4}}]}}]}, 0x4c}}, 0x0) 269.609705ms ago: executing program 5 (id=1827): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x1, 0x16, "01b5b908d13f272aa7af579c6c4fa11f0fc556f40a02"}, 0x0}) 220.838858ms ago: executing program 0 (id=1828): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, r1, &(0x7f0000000040)={r2, r1}) 196.632549ms ago: executing program 0 (id=1829): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r1, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x8, 0xfffffffffffffdef, 0x0}}, 0x10) 186.15316ms ago: executing program 8 (id=1830): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2) 179.95328ms ago: executing program 0 (id=1831): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) chdir(&(0x7f0000001180)='./bus\x00') mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) 38.595619ms ago: executing program 9 (id=1832): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1833): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x1, 0x7, 0x800006, 0xfffffff7, 0x200}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): esystem in 2th superblock [ 81.226962][ T3256] F2FS-fs (loop5): invalid crc value [ 81.233718][ T3256] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 81.268456][ T3256] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 81.275670][ T3256] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 81.569209][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 81.645747][ T28] audit: type=1400 audit(1768951746.580:440): avc: denied { append } for pid=3272 comm="syz.5.1088" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 81.671270][ T3275] xt_hashlimit: size too large, truncated to 1048576 [ 81.784222][ T3287] loop5: detected capacity change from 0 to 512 [ 81.804341][ T3287] EXT4-fs: Ignoring removed i_version option [ 81.823455][ T3287] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 81.852942][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 82.003863][ T3290] loop2: detected capacity change from 0 to 40427 [ 82.018851][ T3290] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 82.027561][ T3290] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 82.046789][ T3290] F2FS-fs (loop2): invalid crc value [ 82.066727][ T3290] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 82.102169][ T3299] loop1: detected capacity change from 0 to 512 [ 82.117230][ T3299] EXT4-fs: Ignoring removed i_version option [ 82.138581][ T3299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 82.166616][ T3290] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 82.173796][ T3290] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 82.244088][ T3306] loop9: detected capacity change from 0 to 512 [ 82.251460][ T3306] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.257943][ T3306] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.274722][ T3306] EXT4-fs (loop9): Test dummy encryption mode enabled [ 82.292904][ T3306] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 82.318742][ T3306] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 82.336876][ T3306] System zones: 1-12 [ 82.369134][ T3306] EXT4-fs (loop9): 1 truncate cleaned up [ 82.385183][ T3306] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 82.448243][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.456622][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 82.478123][ T28] audit: type=1326 audit(1768951747.410:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3313 comm="syz.9.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab19acb9 code=0x7ffc0000 [ 82.526443][ T28] audit: type=1326 audit(1768951747.410:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3313 comm="syz.9.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab19acb9 code=0x7ffc0000 [ 82.568989][ T28] audit: type=1326 audit(1768951747.460:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3313 comm="syz.9.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f93ab199b97 code=0x7ffc0000 [ 82.593593][ T28] audit: type=1326 audit(1768951747.460:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3313 comm="syz.9.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab19acb9 code=0x7ffc0000 [ 82.617352][ T28] audit: type=1326 audit(1768951747.460:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3313 comm="syz.9.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab19acb9 code=0x7ffc0000 [ 82.651904][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.661920][ T28] audit: type=1326 audit(1768951747.460:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3313 comm="syz.9.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f93ab19acb9 code=0x7ffc0000 [ 82.685769][ T28] audit: type=1400 audit(1768951747.460:447): avc: denied { mount } for pid=3313 comm="syz.9.1103" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.686121][ T24] usb 2-1: too many endpoints for config 1 interface 2 altsetting 251: 196, using maximum allowed: 30 [ 82.709313][ T28] audit: type=1326 audit(1768951747.460:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3313 comm="syz.9.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab19acb9 code=0x7ffc0000 [ 82.742795][ T28] audit: type=1326 audit(1768951747.460:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3313 comm="syz.9.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab19acb9 code=0x7ffc0000 [ 82.766178][ T3294] loop5: detected capacity change from 0 to 131072 [ 82.767097][ T24] usb 2-1: config 1 interface 2 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 82.776309][ T28] audit: type=1326 audit(1768951747.460:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3313 comm="syz.9.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f93ab19acb9 code=0x7ffc0000 [ 82.804213][ T24] usb 2-1: config 1 interface 2 has no altsetting 2 [ 82.821031][ T3294] F2FS-fs (loop5): Test dummy encryption mode enabled [ 82.828385][ T24] usb 2-1: config 1 interface 1 has no altsetting 0 [ 82.842814][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.851966][ T3294] F2FS-fs (loop5): invalid crc value [ 82.857463][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.866177][ T24] usb 2-1: Product: syz [ 82.871049][ T24] usb 2-1: Manufacturer: syz [ 82.875889][ T24] usb 2-1: SerialNumber: syz [ 82.881225][ T3294] F2FS-fs (loop5): Found nat_bits in checkpoint [ 82.924769][ T3294] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 83.096504][ T24] usb 2-1: USB disconnect, device number 4 [ 83.115491][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.467992][ T3347] loop0: detected capacity change from 0 to 512 [ 83.478132][ T3347] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.484881][ T3347] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.500630][ T3347] EXT4-fs (loop0): Test dummy encryption mode enabled [ 83.525368][ T3347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.558077][ T3347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 83.568857][ T3347] System zones: 1-12 [ 83.577056][ T3347] EXT4-fs (loop0): 1 truncate cleaned up [ 83.607970][ T3347] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 83.636059][ T2222] EXT4-fs (loop1): unmounting filesystem. [ 83.650888][ T3343] loop9: detected capacity change from 0 to 40427 [ 83.665179][ T3343] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 83.689856][ T3343] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 83.718481][ T3343] F2FS-fs (loop9): invalid crc value [ 83.741479][ T2360] EXT4-fs (loop0): unmounting filesystem. [ 83.747413][ T3343] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 83.757038][ T3366] loop1: detected capacity change from 0 to 512 [ 83.816768][ T3366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.841885][ T3366] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.853149][ T3343] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 83.862835][ T3343] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 83.941509][ T2222] EXT4-fs (loop1): unmounting filesystem. [ 83.949935][ T3343] bio_check_eod: 10 callbacks suppressed [ 83.949950][ T3343] syz.9.1112: attempt to access beyond end of device [ 83.949950][ T3343] loop9: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 83.978514][ T3343] syz.9.1112: attempt to access beyond end of device [ 83.978514][ T3343] loop9: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 83.999961][ T3343] syz.9.1112: attempt to access beyond end of device [ 83.999961][ T3343] loop9: rw=2049, sector=53264, nr_sectors = 16 limit=40427 [ 84.055192][ T2760] syz-executor: attempt to access beyond end of device [ 84.055192][ T2760] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 84.261516][ T3361] loop2: detected capacity change from 0 to 131072 [ 84.276700][ T3361] F2FS-fs (loop2): Test dummy encryption mode enabled [ 84.294568][ T3361] F2FS-fs (loop2): invalid crc value [ 84.307829][ T3361] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.343614][ T3393] loop9: detected capacity change from 0 to 40427 [ 84.353335][ T3393] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 84.362190][ T3393] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 84.370781][ T3361] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.390567][ T3393] F2FS-fs (loop9): invalid crc value [ 84.407197][ T3393] F2FS-fs (loop9): Found nat_bits in checkpoint [ 84.448371][ T3393] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 84.455507][ T3393] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 84.650415][ T3410] loop0: detected capacity change from 0 to 512 [ 84.659729][ T3412] loop2: detected capacity change from 0 to 128 [ 84.671407][ T3410] EXT4-fs: Ignoring removed i_version option [ 84.695981][ T3410] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 84.727677][ T3418] loop2: detected capacity change from 0 to 512 [ 84.741554][ T3418] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.753801][ T3418] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.768045][ T3418] EXT4-fs (loop2): Test dummy encryption mode enabled [ 84.775287][ T3418] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.795069][ T3418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 84.799414][ T3427] loop9: detected capacity change from 0 to 512 [ 84.803384][ T3418] System zones: 1-12 [ 84.814799][ T3418] EXT4-fs (loop2): 1 truncate cleaned up [ 84.820663][ T3418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.851252][ T2656] EXT4-fs (loop2): unmounting filesystem. [ 84.858499][ T3427] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 84.867561][ T3427] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.888393][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 84.958170][ T3443] syzkaller0: tun_chr_ioctl cmd 35111 [ 85.002622][ T294] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.011363][ T3445] loop9: detected capacity change from 0 to 512 [ 85.025454][ T3445] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.045864][ T3445] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 85.055064][ T3445] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.076680][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 85.113412][ T40] kernel write not supported for file [eventfd] (pid: 40 comm: kworker/1:1) [ 85.154728][ T3462] loop5: detected capacity change from 0 to 512 [ 85.169204][ T3462] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.175748][ T3462] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.183851][ T3462] EXT4-fs (loop5): Test dummy encryption mode enabled [ 85.190766][ T3462] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.201839][ T3462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 85.202309][ T294] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.211413][ T3462] System zones: 1-12 [ 85.220147][ T294] usb 1-1: too many endpoints for config 1 interface 2 altsetting 251: 196, using maximum allowed: 30 [ 85.232824][ T294] usb 1-1: config 1 interface 2 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 85.246246][ T294] usb 1-1: config 1 interface 2 has no altsetting 2 [ 85.252934][ T294] usb 1-1: config 1 interface 1 has no altsetting 0 [ 85.261263][ T294] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.275468][ T294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.283567][ T294] usb 1-1: Product: syz [ 85.287826][ T294] usb 1-1: Manufacturer: syz [ 85.292241][ T3462] EXT4-fs (loop5): 1 truncate cleaned up [ 85.292990][ T294] usb 1-1: SerialNumber: syz [ 85.299549][ T3462] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 85.329419][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 85.358061][ T3472] loop5: detected capacity change from 0 to 512 [ 85.412429][ T3472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 85.429438][ T3472] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.463945][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 85.517177][ T294] usb 1-1: USB disconnect, device number 5 [ 85.560454][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.650931][ T3498] loop5: detected capacity change from 0 to 128 [ 85.669313][ T3498] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 85.681821][ T3498] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.720328][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 85.724276][ T3501] loop9: detected capacity change from 0 to 512 [ 85.733974][ T3501] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.741198][ T3501] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.760963][ T3501] EXT4-fs (loop9): Test dummy encryption mode enabled [ 85.766583][ T3503] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 85.779526][ T3501] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 85.790923][ T3501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 85.799447][ T3501] System zones: 1-12 [ 85.804108][ T3501] EXT4-fs (loop9): 1 truncate cleaned up [ 85.810039][ T3501] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 85.825110][ T3506] loop2: detected capacity change from 0 to 128 [ 85.854770][ T3506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.864322][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 85.871610][ T3506] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.910079][ T3515] __nla_validate_parse: 4 callbacks suppressed [ 85.910093][ T3515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1173'. [ 85.926965][ T3515] device xfrm1 entered promiscuous mode [ 85.940943][ T3515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1173'. [ 85.955175][ T3517] loop2: detected capacity change from 0 to 128 [ 85.975589][ T3517] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 85.986735][ T3517] FAT-fs (loop2): Filesystem has been set read-only [ 85.994057][ T3517] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 86.061544][ T3533] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 86.101972][ T3539] loop0: detected capacity change from 0 to 128 [ 86.117174][ T3539] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.181563][ T3545] loop5: detected capacity change from 0 to 2048 [ 86.186144][ T3549] loop0: detected capacity change from 0 to 256 [ 86.210713][ T3549] FAT-fs (loop0): Directory bread(block 64) failed [ 86.220440][ T3549] FAT-fs (loop0): Directory bread(block 65) failed [ 86.227064][ T3549] FAT-fs (loop0): Directory bread(block 66) failed [ 86.239828][ T3545] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.240920][ T3549] FAT-fs (loop0): Directory bread(block 67) failed [ 86.262681][ T3549] FAT-fs (loop0): Directory bread(block 68) failed [ 86.270157][ T3549] FAT-fs (loop0): Directory bread(block 69) failed [ 86.282258][ T3549] FAT-fs (loop0): Directory bread(block 70) failed [ 86.289040][ T3549] FAT-fs (loop0): Directory bread(block 71) failed [ 86.295787][ T3549] FAT-fs (loop0): Directory bread(block 72) failed [ 86.302486][ T3549] FAT-fs (loop0): Directory bread(block 73) failed [ 86.368709][ T3563] loop0: detected capacity change from 0 to 512 [ 86.375501][ T3563] EXT4-fs: Ignoring removed i_version option [ 86.402749][ T3569] validate_nla: 6 callbacks suppressed [ 86.402762][ T3569] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 86.453844][ T3575] device veth0 entered promiscuous mode [ 86.461148][ T3575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 86.628242][ T40] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 86.688236][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.811579][ T40] usb 6-1: Using ep0 maxpacket: 32 [ 86.821033][ T40] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 86.830890][ T40] usb 6-1: config 0 has no interface number 0 [ 86.837362][ T40] usb 6-1: config 0 interface 184 has no altsetting 0 [ 86.845940][ T3581] loop9: detected capacity change from 0 to 128 [ 86.853922][ T40] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 86.861168][ T3581] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.873380][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.882898][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.894129][ T24] usb 1-1: too many endpoints for config 1 interface 2 altsetting 251: 196, using maximum allowed: 30 [ 86.906083][ T40] usb 6-1: Product: syz [ 86.910475][ T40] usb 6-1: Manufacturer: syz [ 86.915126][ T40] usb 6-1: SerialNumber: syz [ 86.919992][ T24] usb 1-1: config 1 interface 2 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 86.933641][ T24] usb 1-1: config 1 interface 2 has no altsetting 2 [ 86.940526][ T40] usb 6-1: config 0 descriptor?? [ 86.945554][ T24] usb 1-1: config 1 interface 1 has no altsetting 0 [ 86.952775][ T40] smsc75xx v1.0.0 [ 86.957934][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.967101][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.975376][ T24] usb 1-1: Product: syz [ 86.979613][ T24] usb 1-1: Manufacturer: syz [ 86.985676][ T24] usb 1-1: SerialNumber: syz [ 87.006799][ T3587] netlink: 172 bytes leftover after parsing attributes in process `syz.9.1204'. [ 87.066653][ T3591] kvm: apic: phys broadcast and lowest prio [ 87.158264][ T334] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.209671][ T24] usb 1-1: USB disconnect, device number 6 [ 87.358230][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 87.364629][ T334] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 87.373969][ T334] usb 2-1: config 1 has no interface number 1 [ 87.380194][ T334] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 87.390748][ T334] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 87.403699][ T334] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.416077][ T334] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.425225][ T334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.433457][ T334] usb 2-1: Product: syz [ 87.437677][ T334] usb 2-1: Manufacturer: syz [ 87.442339][ T334] usb 2-1: SerialNumber: syz [ 87.528321][ T19] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 87.678874][ T3604] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 87.709345][ T19] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.721864][ T19] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.731299][ T19] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 87.739547][ T19] usb 10-1: Product: syz [ 87.743895][ T19] usb 10-1: SerialNumber: syz [ 87.756480][ T40] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 87.769986][ T40] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.783690][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 87.783702][ T28] audit: type=1400 audit(1768951752.720:530): avc: denied { mount } for pid=3607 comm="syz.0.1215" name="/" dev="configfs" ino=14482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 87.812673][ T28] audit: type=1400 audit(1768951752.730:531): avc: denied { search } for pid=3607 comm="syz.0.1215" name="/" dev="configfs" ino=14482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.835214][ T28] audit: type=1400 audit(1768951752.730:532): avc: denied { read } for pid=3607 comm="syz.0.1215" name="/" dev="configfs" ino=14482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.850956][ T334] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 87.866428][ T28] audit: type=1400 audit(1768951752.730:533): avc: denied { open } for pid=3607 comm="syz.0.1215" path="/" dev="configfs" ino=14482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.889577][ T3610] loop0: detected capacity change from 0 to 256 [ 87.896504][ T3610] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.907445][ T3610] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 87.918131][ T3610] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 87.932888][ T28] audit: type=1400 audit(1768951752.870:534): avc: denied { mounton } for pid=3609 comm="syz.0.1216" path="/68/bus/file0/file0" dev="loop0" ino=1048688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.958025][ T28] audit: type=1400 audit(1768951752.880:535): avc: denied { remove_name } for pid=3609 comm="syz.0.1216" name="file0" dev="loop0" ino=1048687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.981455][ T28] audit: type=1400 audit(1768951752.880:536): avc: denied { rename } for pid=3609 comm="syz.0.1216" name="file0" dev="loop0" ino=1048687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.004594][ T28] audit: type=1400 audit(1768951752.880:537): avc: denied { rmdir } for pid=3609 comm="syz.0.1216" name="bus" dev="loop0" ino=1048689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.004910][ T40] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 88.040774][ T40] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 88.054709][ T40] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 88.065024][ T3613] loop0: detected capacity change from 0 to 256 [ 88.072635][ T40] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 88.072767][ T3613] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.083109][ T40] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 88.093601][ T3613] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 88.104828][ T40] usb 6-1: USB disconnect, device number 6 [ 88.123569][ T3613] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 88.146621][ T28] audit: type=1400 audit(1768951753.080:538): avc: denied { mounton } for pid=3612 comm="syz.0.1217" path="/69/file1/file0" dev="loop0" ino=1048694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.559721][ T3630] loop0: detected capacity change from 0 to 512 [ 88.566382][ T3630] EXT4-fs: Ignoring removed i_version option [ 88.569210][ T3635] netlink: 'syz.2.1227': attribute type 12 has an invalid length. [ 88.580838][ T3635] netlink: 'syz.2.1227': attribute type 29 has an invalid length. [ 88.588908][ T3635] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1227'. [ 88.598944][ T3635] netlink: 'syz.2.1227': attribute type 2 has an invalid length. [ 88.607050][ T3635] netlink: 'syz.2.1227': attribute type 3 has an invalid length. [ 88.615055][ T3635] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1227'. [ 88.675301][ T334] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 88.691210][ T334] usb 2-1: USB disconnect, device number 5 [ 88.798388][ T19] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 88.810970][ T19] cdc_ncm 10-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 88.821820][ T19] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 88.898772][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.914538][ T335] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 89.011135][ T19] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 89.024725][ T19] usb 10-1: USB disconnect, device number 5 [ 89.039740][ T28] audit: type=1400 audit(1768951753.980:539): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 89.052456][ T19] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 89.099973][ T335] usb 1-1: unable to get BOS descriptor or descriptor too short [ 89.112204][ T335] usb 1-1: too many endpoints for config 1 interface 2 altsetting 251: 196, using maximum allowed: 30 [ 89.130662][ T335] usb 1-1: config 1 interface 2 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 89.144816][ T335] usb 1-1: config 1 interface 2 has no altsetting 2 [ 89.153431][ T335] usb 1-1: config 1 interface 1 has no altsetting 0 [ 89.170386][ T335] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.199434][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.216382][ T335] usb 1-1: Product: syz [ 89.225273][ T335] usb 1-1: Manufacturer: syz [ 89.238478][ T335] usb 1-1: SerialNumber: syz [ 89.240210][ T3666] loop5: detected capacity change from 0 to 512 [ 89.259830][ T3669] device ip6gre1 entered promiscuous mode [ 89.309759][ T3666] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.380421][ T3666] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #18: comm syz.5.1246: corrupted inode contents [ 89.397696][ T3666] EXT4-fs (loop5): Remounting filesystem read-only [ 89.405293][ T3666] EXT4-fs error (device loop5): ext4_dirty_inode:6135: inode #18: comm syz.5.1246: mark_inode_dirty error [ 89.433187][ T3666] EXT4-fs (loop5): Remounting filesystem read-only [ 89.445193][ T3666] EXT4-fs error (device loop5): ext4_do_update_inode:5270: inode #18: comm syz.5.1246: corrupted inode contents [ 89.464818][ T3666] EXT4-fs (loop5): Remounting filesystem read-only [ 89.480876][ T335] usb 1-1: USB disconnect, device number 7 [ 89.503801][ T3666] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2964: inode #18: comm syz.5.1246: mark_inode_dirty error [ 89.544984][ T3666] EXT4-fs (loop5): Remounting filesystem read-only [ 89.553018][ T3666] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #18: comm syz.5.1246: mark inode dirty (error -117) [ 89.577261][ T3666] EXT4-fs (loop5): Remounting filesystem read-only [ 89.593599][ T3666] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 89.714311][ T3706] user requested TSC rate below hardware speed [ 89.754225][ T3712] xt_hashlimit: size too large, truncated to 1048576 [ 90.002486][ T3725] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3725 comm=syz.9.1253 [ 90.011232][ T3717] loop5: detected capacity change from 0 to 40427 [ 90.063984][ T3717] F2FS-fs (loop5): Found nat_bits in checkpoint [ 90.127386][ T3740] loop2: detected capacity change from 0 to 1024 [ 90.142003][ T3717] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 90.188126][ T2743] syz-executor: attempt to access beyond end of device [ 90.188126][ T2743] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 90.205091][ T3750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3750 comm=syz.9.1263 [ 90.238387][ T3753] binder: 3747:3753 ioctl c0306201 0 returned -14 [ 90.247979][ T3754] tipc: New replicast peer: 100.1.1.1 [ 90.249401][ T3755] loop0: detected capacity change from 0 to 512 [ 90.253629][ T3754] tipc: Enabled bearer , priority 10 [ 90.314236][ T3755] EXT4-fs: Ignoring removed i_version option [ 90.357049][ T3767] SELinux: failed to load policy [ 90.708233][ T19] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 90.899628][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.910217][ T19] usb 1-1: too many endpoints for config 1 interface 2 altsetting 251: 196, using maximum allowed: 30 [ 90.930971][ T19] usb 1-1: config 1 interface 2 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 90.957244][ T19] usb 1-1: config 1 interface 2 has no altsetting 2 [ 90.970485][ T19] usb 1-1: config 1 interface 1 has no altsetting 0 [ 90.989822][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 91.008207][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.029892][ T19] usb 1-1: Product: syz [ 91.034080][ T19] usb 1-1: Manufacturer: syz [ 91.038766][ T19] usb 1-1: SerialNumber: syz [ 91.061271][ T3798] loop2: detected capacity change from 0 to 40427 [ 91.088105][ T3798] F2FS-fs (loop2): invalid crc value [ 91.097638][ T3798] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.157792][ T3798] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.182783][ T2656] syz-executor: attempt to access beyond end of device [ 91.182783][ T2656] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 91.268380][ T19] usb 1-1: USB disconnect, device number 8 [ 91.451769][ T3828] loop9: detected capacity change from 0 to 512 [ 91.478695][ T398] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 91.547052][ T3834] loop2: detected capacity change from 0 to 2048 [ 91.569764][ T3838] loop1: detected capacity change from 0 to 128 [ 91.598031][ T3838] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.670341][ T3845] loop2: detected capacity change from 0 to 512 [ 91.683443][ T3845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.699852][ T3845] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.774383][ T3857] loop2: detected capacity change from 0 to 512 [ 91.791371][ T3857] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.804070][ T1187] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.830223][ T3857] ext4 filesystem being mounted at /108/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.886816][ T3857] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.1304: corrupted inode contents [ 91.900277][ T3857] EXT4-fs error (device loop2): ext4_dirty_inode:6135: inode #2: comm syz.2.1304: mark_inode_dirty error [ 91.914927][ T3857] EXT4-fs error (device loop2): ext4_do_update_inode:5270: inode #2: comm syz.2.1304: corrupted inode contents [ 91.927002][ T3857] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1304: mark_inode_dirty error [ 92.050741][ T3878] loop2: detected capacity change from 0 to 256 [ 92.057321][ T3878] exfat: Deprecated parameter 'namecase' [ 92.063118][ T3878] exfat: Deprecated parameter 'namecase' [ 92.068857][ T3878] exfat: Deprecated parameter 'utf8' [ 92.077810][ T3878] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 92.346499][ T3890] loop2: detected capacity change from 0 to 512 [ 92.358542][ T3890] EXT4-fs: Ignoring removed i_version option [ 92.603950][ T3893] loop1: detected capacity change from 0 to 512 [ 92.612856][ T3893] EXT4-fs (loop1): 1 truncate cleaned up [ 92.638262][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.679363][ T3898] loop1: detected capacity change from 0 to 8192 [ 92.819522][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.827925][ T24] usb 3-1: too many endpoints for config 1 interface 2 altsetting 251: 196, using maximum allowed: 30 [ 92.839150][ T24] usb 3-1: config 1 interface 2 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 92.852422][ T24] usb 3-1: config 1 interface 2 has no altsetting 2 [ 92.859057][ T24] usb 3-1: config 1 interface 1 has no altsetting 0 [ 92.869314][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.878539][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.886709][ T24] usb 3-1: Product: syz [ 92.891112][ T24] usb 3-1: Manufacturer: syz [ 92.895806][ T24] usb 3-1: SerialNumber: syz [ 93.058352][ T40] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 93.114014][ T24] usb 3-1: USB disconnect, device number 5 [ 93.259399][ T40] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 93.268690][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.277430][ T40] usb 1-1: config 0 descriptor?? [ 93.325750][ T3922] loop5: detected capacity change from 0 to 131072 [ 93.329927][ T3598] udevd[3598]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.349169][ T3922] F2FS-fs (loop5): invalid crc value [ 93.362854][ T3922] F2FS-fs (loop5): Found nat_bits in checkpoint [ 93.401505][ T3922] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 93.579467][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 93.579484][ T28] audit: type=1400 audit(1768951758.520:573): avc: denied { append } for pid=3928 comm="syz.5.1331" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.658299][ T28] audit: type=1400 audit(1768951758.590:574): avc: denied { sqpoll } for pid=3932 comm="syz.2.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 93.848234][ T488] Bluetooth: hci0: command 0x1003 tx timeout [ 93.854354][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.005255][ T3951] loop1: detected capacity change from 0 to 256 [ 94.014588][ T3951] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 94.228228][ T6] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 94.271250][ T28] audit: type=1400 audit(1768951759.210:575): avc: denied { create } for pid=3952 comm="syz.1.1341" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.291994][ T28] audit: type=1400 audit(1768951759.210:576): avc: denied { read } for pid=3952 comm="syz.1.1341" name="file0" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.314410][ T28] audit: type=1400 audit(1768951759.210:577): avc: denied { open } for pid=3952 comm="syz.1.1341" path="/126/file0" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.373666][ T28] audit: type=1400 audit(1768951759.310:578): avc: denied { unlink } for pid=2222 comm="syz-executor" name="file0" dev="tmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.429468][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.440613][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.451015][ T6] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.464062][ T6] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.473297][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.488920][ T3958] loop1: detected capacity change from 0 to 512 [ 94.497379][ T6] usb 10-1: config 0 descriptor?? [ 94.499778][ T40] usb 1-1: Cannot set autoneg [ 94.505156][ T3958] EXT4-fs: Ignoring removed i_version option [ 94.515302][ T40] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 94.537673][ T40] usb 1-1: USB disconnect, device number 9 [ 94.670081][ T3971] loop5: detected capacity change from 0 to 256 [ 94.676756][ T3971] exfat: Deprecated parameter 'utf8' [ 94.685957][ T3971] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 94.764613][ T28] audit: type=1400 audit(1768951759.700:579): avc: denied { write } for pid=3976 comm="syz.5.1351" name="unix" dev="proc" ino=4026532769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 94.858246][ T334] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 94.865804][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 94.905735][ T6] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 94.914748][ T6] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 94.999129][ T28] audit: type=1400 audit(1768951759.940:580): avc: denied { read } for pid=3985 comm="syz.5.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.030200][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.059808][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.067494][ T334] usb 3-1: unable to get BOS descriptor or descriptor too short [ 95.075933][ T24] usb 2-1: too many endpoints for config 1 interface 2 altsetting 251: 196, using maximum allowed: 30 [ 95.086923][ T334] usb 3-1: not running at top speed; connect to a high speed hub [ 95.094751][ T24] usb 2-1: config 1 interface 2 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 196 [ 95.108004][ T24] usb 2-1: config 1 interface 2 has no altsetting 2 [ 95.114695][ T24] usb 2-1: config 1 interface 1 has no altsetting 0 [ 95.121527][ T334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.131763][ T334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.141912][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.151038][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.159084][ T24] usb 2-1: Product: syz [ 95.163312][ T24] usb 2-1: Manufacturer: syz [ 95.167931][ T24] usb 2-1: SerialNumber: syz [ 95.172927][ T334] usb 3-1: string descriptor 0 read error: -22 [ 95.179412][ T334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.188819][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.199191][ T334] usb 3-1: 0:2 : does not exist [ 95.860492][ T3990] SELinux: failed to load policy [ 95.991542][ T28] audit: type=1400 audit(1768951760.930:581): avc: denied { read write } for pid=4000 comm="syz.1.1361" name="file1" dev="tmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.021278][ T28] audit: type=1400 audit(1768951760.960:582): avc: denied { open } for pid=4000 comm="syz.1.1361" path="/131/file0/file1" dev="overlay" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.397674][ T3994] loop5: detected capacity change from 0 to 131072 [ 96.412986][ T3994] F2FS-fs (loop5): Test dummy encryption mode enabled [ 96.438107][ T3994] F2FS-fs (loop5): invalid crc value [ 96.444911][ T3994] F2FS-fs (loop5): Found nat_bits in checkpoint [ 96.484842][ T3994] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 96.502690][ T4005] loop1: detected capacity change from 0 to 131072 [ 96.511271][ T4005] F2FS-fs (loop1): invalid crc value [ 96.520958][ T334] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 96.541873][ T4005] F2FS-fs (loop1): Found nat_bits in checkpoint [ 96.567705][ T4005] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 96.584678][ T334] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 96.592868][ T4014] F2FS-fs (loop5): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 96.601634][ T334] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 96.624972][ T24] usb 2-1: USB disconnect, device number 6 [ 96.633921][ T334] usb 3-1: USB disconnect, device number 6 [ 96.829772][ T4020] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 96.839563][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 97.028572][ T4036] loop1: detected capacity change from 0 to 512 [ 97.037499][ T4036] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1373: inode has both inline data and extents flags [ 97.048351][ T488] Bluetooth: hci0: command 0x1003 tx timeout [ 97.051698][ T4036] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1373: couldn't read orphan inode 15 (err -117) [ 97.056719][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.070322][ T294] usb 10-1: USB disconnect, device number 6 [ 97.222458][ T4055] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 97.230272][ T335] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 97.270856][ T4060] loop0: detected capacity change from 0 to 4096 [ 97.309782][ T4063] loop0: detected capacity change from 0 to 2048 [ 97.429263][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.440254][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.450231][ T335] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 97.459510][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.468048][ T335] usb 3-1: config 0 descriptor?? [ 97.613743][ T4066] loop9: detected capacity change from 0 to 512 [ 97.625786][ T4066] EXT4-fs: Ignoring removed bh option [ 97.640235][ T4066] EXT4-fs mount: 34 callbacks suppressed [ 97.640248][ T4066] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 97.655979][ T4066] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.677419][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 97.850579][ T4078] binder: 4077:4078 ioctl c0306201 0 returned -14 [ 97.857558][ T4078] binder: 4077:4078 ioctl 89f8 0 returned -22 [ 97.864060][ T4078] binder: 4077:4078 ioctl 541b 0 returned -22 [ 97.876212][ T335] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 97.884175][ T335] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 97.896286][ T335] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 97.904192][ T335] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 97.978236][ T335] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 97.986226][ T335] hid-steam 0003:28DE:1142.0009: No HID_FEATURE_REPORT submitted - nothing to read [ 98.058312][ T4041] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 98.244064][ T4041] usb 10-1: Using ep0 maxpacket: 32 [ 98.252135][ T4041] usb 10-1: config 0 has no interfaces? [ 98.258523][ T4041] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.267724][ T4041] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.276125][ T4041] usb 10-1: SerialNumber: syz [ 98.284454][ T4041] usb 10-1: config 0 descriptor?? [ 98.312360][ T4101] loop5: detected capacity change from 0 to 256 [ 98.327463][ T4101] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.338286][ T4101] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 98.350024][ T4101] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 98.421971][ T4103] loop5: detected capacity change from 0 to 256 [ 98.442374][ T4103] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 98.452731][ T4103] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 98.462903][ T4103] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 98.473200][ T334] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 98.498358][ T24] usb 10-1: USB disconnect, device number 7 [ 98.510198][ T4105] input: syz1 as /devices/virtual/input/input14 [ 98.622525][ T4087] loop1: detected capacity change from 0 to 131072 [ 98.669348][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.681070][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.691032][ T334] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.704058][ T334] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.713379][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.728770][ T334] usb 1-1: config 0 descriptor?? [ 98.888267][ T40] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 99.048517][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 99.048542][ T28] audit: type=1326 audit(1768951763.990:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.9.1410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93ab19acb9 code=0x0 [ 99.079276][ T40] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 99.087399][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.099206][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.109630][ T40] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.122786][ T40] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.132047][ T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.141446][ T334] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 99.149892][ T40] usb 6-1: config 0 descriptor?? [ 99.156121][ T334] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.205927][ T4122] loop1: detected capacity change from 0 to 131072 [ 99.219809][ T4122] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.257429][ T4122] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.271347][ T4122] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 99.278989][ T4122] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 99.525026][ T4137] loop2: detected capacity change from 0 to 128 [ 99.548646][ T4137] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 99.558453][ T40] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 99.567064][ T4137] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.576341][ T40] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 99.622698][ T40] plantronics 0003:047F:FFFF.000C: hiddev97,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 99.625424][ T4142] SELinux: unknown common [ 99.638815][ T2656] EXT4-fs (loop2): unmounting filesystem. [ 99.641295][ T4142] SELinux: failed to load policy [ 99.699152][ T4148] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2166916015 (4333832030 ns) > initial count (2654969024 ns). Using initial count to start timer. [ 99.762834][ T4154] ------------[ cut here ]------------ [ 99.768374][ T4154] WARNING: CPU: 0 PID: 4154 at mm/page_alloc.c:5841 __alloc_pages+0x298/0x480 [ 99.777268][ T4154] Modules linked in: [ 99.781243][ T4154] CPU: 0 PID: 4154 Comm: syz.2.1417 Not tainted syzkaller #0 [ 99.788654][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.798752][ T4154] RIP: 0010:__alloc_pages+0x298/0x480 [ 99.804168][ T4154] Code: 0c 25 28 00 00 00 48 3b 8c 24 c0 00 00 00 0f 85 a3 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 ad ba bd 05 01 <0f> 0b eb 95 a9 00 00 08 00 48 8b 54 24 08 75 17 44 89 f6 81 e6 7f [ 99.811976][ T4156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 99.823828][ T4154] RSP: 0018:ffffc9000dd0f6e0 EFLAGS: 00010246 [ 99.823849][ T4154] RAX: ffffc9000dd0f700 RBX: 000000000000000f RCX: 0000000000000000 [ 99.846801][ T4154] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc9000dd0f768 [ 99.854846][ T4154] RBP: ffffc9000dd0f7f8 R08: ffffc9000dd0f767 R09: ffffc9000dd0f750 [ 99.862854][ T4154] R10: dffffc0000000000 R11: fffff52001ba1eed R12: dffffc0000000000 [ 99.870870][ T4154] R13: 0000000000000000 R14: 0000000000040dc0 R15: 1ffff92001ba1ee0 [ 99.878893][ T4154] FS: 00007fac212e96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 99.887853][ T4154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.894523][ T4154] CR2: 0000200000019000 CR3: 000000010fb51000 CR4: 00000000003506b0 [ 99.902551][ T4154] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.910606][ T4154] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.918627][ T4154] Call Trace: [ 99.921940][ T4154] [ 99.924892][ T4154] ? __cfi___alloc_pages+0x10/0x10 [ 99.930299][ T4154] ? kasan_save_alloc_info+0x25/0x30 [ 99.935630][ T4154] ? __kasan_slab_alloc+0x72/0x80 [ 99.940838][ T4154] ? slab_post_alloc_hook+0x6d/0x2d0 [ 99.946166][ T4154] ? ebitmap_read+0x398/0x920 [ 99.950914][ T4154] __kmalloc_large_node+0xa1/0x1c0 [ 99.956054][ T4154] ? hashtab_init+0xcd/0x160 [ 99.960719][ T4154] __kmalloc+0xe0/0x1e0 [ 99.964917][ T4154] hashtab_init+0xcd/0x160 [ 99.969403][ T4154] symtab_init+0x40/0x60 [ 99.973675][ T4154] policydb_read+0x971/0x25f0 [ 99.978433][ T4154] ? __cfi_policydb_read+0x10/0x10 [ 99.982141][ T4159] loop9: detected capacity change from 0 to 256 [ 99.983563][ T4154] ? __kasan_kmalloc+0x95/0xb0 [ 99.983591][ T4154] ? security_load_policy+0x120/0xeb0 [ 100.000052][ T4154] ? kmalloc_trace+0x40/0xb0 [ 100.004669][ T4154] security_load_policy+0x15b/0xeb0 [ 100.007692][ T4159] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.009976][ T4154] ? irqentry_exit+0x37/0x40 [ 100.009999][ T4154] ? exc_page_fault+0x5e/0xb0 [ 100.029932][ T4154] ? asm_exc_page_fault+0x27/0x30 [ 100.035011][ T4154] ? __cfi_security_load_policy+0x10/0x10 [ 100.040799][ T4154] ? copy_user_enhanced_fast_string+0xa/0x40 [ 100.041749][ T4159] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 100.046852][ T4154] sel_write_load+0x386/0x600 [ 100.046886][ T4154] ? __cfi_sel_write_load+0x10/0x10 [ 100.065247][ T4154] ? security_file_permission+0x94/0xb0 [ 100.065319][ T4159] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 100.070854][ T4154] ? __cfi_sel_write_load+0x10/0x10 [ 100.088076][ T4154] vfs_write+0x40e/0xce0 [ 100.092385][ T4154] ? __cfi_vfs_write+0x10/0x10 [ 100.097220][ T4154] ? __kasan_check_write+0x14/0x20 [ 100.102402][ T4154] ? mutex_lock+0x93/0x1b0 [ 100.106846][ T4154] ? __cfi_mutex_lock+0x10/0x10 [ 100.111821][ T4154] ? __fdget_pos+0x2cd/0x380 [ 100.116441][ T4154] ? ksys_write+0x71/0x250 [ 100.120931][ T4154] ksys_write+0x149/0x250 [ 100.125294][ T4154] ? __cfi_ksys_write+0x10/0x10 [ 100.130201][ T4154] ? fpregs_restore_userregs+0x128/0x260 [ 100.135866][ T4154] __x64_sys_write+0x7b/0x90 [ 100.140552][ T4154] x64_sys_call+0x27b/0x9a0 [ 100.145092][ T4154] do_syscall_64+0x4c/0xa0 [ 100.149581][ T4154] ? clear_bhb_loop+0x30/0x80 [ 100.154313][ T4154] ? clear_bhb_loop+0x30/0x80 [ 100.159053][ T4154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.164979][ T4154] RIP: 0033:0x7fac2039acb9 [ 100.169459][ T4154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.189114][ T4154] RSP: 002b:00007fac212e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.197584][ T4154] RAX: ffffffffffffffda RBX: 00007fac20615fa0 RCX: 00007fac2039acb9 [ 100.205608][ T4154] RDX: 00000000000190da RSI: 0000200000000000 RDI: 0000000000000003 [ 100.213616][ T4154] RBP: 00007fac20408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 100.221682][ T4154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.229693][ T4154] R13: 00007fac20616038 R14: 00007fac20615fa0 R15: 00007fff4ba2af28 [ 100.237705][ T4154] [ 100.240793][ T4154] ---[ end trace 0000000000000000 ]--- [ 100.246328][ T4154] SELinux: failed to load policy [ 100.247645][ T4041] usb 3-1: USB disconnect, device number 7 [ 100.258659][ T4041] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 100.290162][ T4161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.304236][ T28] audit: type=1400 audit(1768951765.240:593): avc: denied { create } for pid=4162 comm="syz.2.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.346923][ T4167] device erspan0 entered promiscuous mode [ 100.353165][ T4167] device erspan0 left promiscuous mode [ 100.371638][ T28] audit: type=1400 audit(1768951765.310:594): avc: denied { append } for pid=4168 comm="syz.1.1424" name="event1" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.438313][ C1] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 100.448489][ T734] usb 6-1: USB disconnect, device number 7 [ 100.858249][ T4041] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 100.978486][ T4174] loop5: detected capacity change from 0 to 512 [ 101.001820][ T4174] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 101.011845][ T4174] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1426: bad orphan inode 15 [ 101.022262][ T4174] ext4_test_bit(bit=14, block=18) = 1 [ 101.027908][ T4174] is_bad_inode(inode)=0 [ 101.032355][ T4174] NEXT_ORPHAN(inode)=1023 [ 101.036798][ T4174] max_ino=32 [ 101.040187][ T4174] i_nlink=0 [ 101.043426][ T4174] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 101.056108][ T4174] ext2 filesystem being mounted at /119/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 101.058295][ T4041] usb 2-1: Using ep0 maxpacket: 16 [ 101.078603][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 101.090884][ T4041] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 101.114579][ T4041] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 101.126188][ T4041] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 101.140471][ T4041] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.154740][ T4041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.182643][ T4041] usb 2-1: SerialNumber: syz [ 101.201280][ T4169] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 101.258852][ T334] usb 1-1: USB disconnect, device number 10 [ 101.370163][ T4196] loop2: detected capacity change from 0 to 16 [ 101.401133][ T4196] erofs: (device loop2): mounted with root inode @ nid 36. [ 101.418357][ T4196] SELinux: (dev loop2, type erofs) getxattr errno 117 [ 101.434864][ T4169] loop1: detected capacity change from 0 to 2048 [ 101.492911][ T4169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.518642][ T4041] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 101.529686][ T4041] usb 2-1: USB disconnect, device number 7 [ 101.873080][ T4200] loop2: detected capacity change from 0 to 40427 [ 101.891710][ T4200] F2FS-fs (loop2): invalid crc value [ 101.909139][ T4200] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.946713][ T4200] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.961930][ T28] audit: type=1400 audit(1768951766.900:595): avc: denied { setattr } for pid=4199 comm="syz.2.1435" name="file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 101.999818][ T2656] syz-executor: attempt to access beyond end of device [ 101.999818][ T2656] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.024051][ T4192] loop0: detected capacity change from 0 to 131072 [ 102.044421][ T4192] F2FS-fs (loop0): invalid crc value [ 102.099560][ T4192] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.189485][ T4185] loop9: detected capacity change from 0 to 131072 [ 102.207605][ T4185] F2FS-fs (loop9): invalid crc value [ 102.218244][ T4192] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.229004][ T4185] F2FS-fs (loop9): Found nat_bits in checkpoint [ 102.258840][ T2222] EXT4-fs (loop1): unmounting filesystem. [ 102.345456][ T4215] loop5: detected capacity change from 0 to 8192 [ 102.365194][ T4185] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 102.396757][ T28] audit: type=1400 audit(1768951767.330:596): avc: denied { mounton } for pid=4214 comm="syz.5.1438" path="/123/file2/bus" dev="loop5" ino=1048707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 102.423929][ T4217] loop2: detected capacity change from 0 to 8192 [ 102.466522][ T2743] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 102.480233][ T2743] FAT-fs (loop5): Filesystem has been set read-only [ 102.562352][ T28] audit: type=1400 audit(1768951767.500:597): avc: denied { getopt } for pid=4227 comm="syz.5.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.593316][ T4228] 9p: Unknown uid 00000000004294967295 [ 102.664290][ T28] audit: type=1400 audit(1768951767.600:598): avc: denied { ioctl } for pid=4235 comm="syz.1.1447" path="socket:[34028]" dev="sockfs" ino=34028 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.789158][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.843797][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 102.863141][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.880863][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 102.898597][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.917864][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.937170][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.955025][ T4256] loop9: detected capacity change from 0 to 512 [ 102.961489][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.962333][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.974846][ T4256] EXT4-fs: Ignoring removed orlov option [ 102.983286][ T4256] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.013946][ T4256] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2196: inode #15: comm syz.9.1442: corrupted in-inode xattr [ 103.026386][ T4256] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1442: couldn't read orphan inode 15 (err -117) [ 103.041551][ T4256] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 103.052823][ T28] audit: type=1400 audit(1768951767.990:599): avc: denied { watch } for pid=4255 comm="syz.9.1442" path="/101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.117281][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 103.219570][ T4281] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 103.231792][ T4281] netlink: 'syz.1.1466': attribute type 4 has an invalid length. [ 103.290066][ T4292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 103.310354][ T4294] loop1: detected capacity change from 0 to 128 [ 103.399358][ T4041] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 103.430140][ T4307] xt_hashlimit: size too large, truncated to 1048576 [ 103.456133][ T4310] input: syz0 as /devices/virtual/input/input16 [ 103.589535][ T4041] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.600598][ T4041] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 103.609855][ T4041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.620427][ T4041] usb 1-1: config 0 descriptor?? [ 103.654055][ T28] audit: type=1400 audit(1768951768.590:600): avc: denied { write } for pid=4325 comm="syz.9.1484" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 103.708800][ T28] audit: type=1400 audit(1768951768.650:601): avc: denied { shutdown } for pid=4330 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 103.820319][ T4337] xt_hashlimit: size too large, truncated to 1048576 [ 103.828110][ T294] kernel read not supported for file /usbmon0 (pid: 294 comm: kworker/0:2) [ 103.942233][ T4343] kvm [4342]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 104.038242][ T4041] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 104.054174][ T4346] device ip6gre1 entered promiscuous mode [ 104.059919][ T4041] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input17 [ 104.111187][ T4351] loop5: detected capacity change from 0 to 1024 [ 104.119165][ T4351] EXT4-fs: Ignoring removed orlov option [ 104.132928][ T4041] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 104.142900][ T4351] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 104.188749][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 104.249520][ C0] usb 1-1: input irq status -75 received [ 104.260275][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 104.260290][ T28] audit: type=1400 audit(1768951769.200:603): avc: denied { write } for pid=4366 comm="syz.5.1499" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.342205][ T4373] loop1: detected capacity change from 0 to 2048 [ 104.368053][ T4041] kernel write not supported for file bpf-prog (pid: 4041 comm: kworker/0:5) [ 104.380065][ T4373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.456010][ T294] usb 1-1: USB disconnect, device number 11 [ 104.555554][ T2222] EXT4-fs (loop1): unmounting filesystem. [ 104.564650][ T4393] net_ratelimit: 3321 callbacks suppressed [ 104.564663][ T4393] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.579752][ T4393] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.588829][ T4393] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.597875][ T4393] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.606952][ T4393] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.616021][ T4393] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.625084][ T4393] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.634144][ T4393] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.643232][ T4393] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.652297][ T4393] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 104.679916][ T28] audit: type=1400 audit(1768951769.620:604): avc: denied { create } for pid=4396 comm="syz.1.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.816988][ T4402] loop1: detected capacity change from 0 to 8192 [ 104.859965][ T4404] loop9: detected capacity change from 0 to 512 [ 104.875779][ T4402] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 104.905362][ T4402] FAT-fs (loop1): Filesystem has been set read-only [ 104.923851][ T4404] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #3: comm syz.9.1515: corrupted inode contents [ 104.944848][ T4404] EXT4-fs error (device loop9): ext4_dirty_inode:6135: inode #3: comm syz.9.1515: mark_inode_dirty error [ 104.968790][ T4404] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #3: comm syz.9.1515: corrupted inode contents [ 104.991139][ T4404] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #3: comm syz.9.1515: mark_inode_dirty error [ 105.005732][ T28] audit: type=1400 audit(1768951769.940:605): avc: denied { setcheckreqprot } for pid=4407 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.028631][ T4404] Quota error (device loop9): write_blk: dquota write failed [ 105.048484][ T4404] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 105.077085][ T4404] EXT4-fs error (device loop9): ext4_acquire_dquot:6796: comm syz.9.1515: Failed to acquire dquot type 0 [ 105.088816][ T4395] loop2: detected capacity change from 0 to 40427 [ 105.096372][ T4404] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #16: comm syz.9.1515: corrupted inode contents [ 105.110240][ T4395] F2FS-fs (loop2): invalid crc value [ 105.115740][ T4404] EXT4-fs error (device loop9): ext4_dirty_inode:6135: inode #16: comm syz.9.1515: mark_inode_dirty error [ 105.128139][ T4395] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.146015][ T4404] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #16: comm syz.9.1515: corrupted inode contents [ 105.170607][ T4404] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #16: comm syz.9.1515: mark_inode_dirty error [ 105.190108][ T4395] F2FS-fs (loop2): Start checkpoint disabled! [ 105.196492][ T4404] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #16: comm syz.9.1515: corrupted inode contents [ 105.209171][ T4395] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 105.216610][ T4404] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 105.225493][ T4395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 105.236507][ T4404] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #16: comm syz.9.1515: corrupted inode contents [ 105.248945][ T4404] EXT4-fs error (device loop9): ext4_truncate:4320: inode #16: comm syz.9.1515: mark_inode_dirty error [ 105.270882][ T4404] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 105.280584][ T4404] EXT4-fs (loop9): 1 truncate cleaned up [ 105.286287][ T4404] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 105.296197][ T4404] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.323772][ T28] audit: type=1400 audit(1768951770.260:606): avc: denied { map } for pid=4394 comm="syz.2.1512" path="/141/file1/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 105.346452][ T4395] syz.2.1512: attempt to access beyond end of device [ 105.346452][ T4395] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 105.360417][ T335] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.387963][ T4417] loop0: detected capacity change from 0 to 2048 [ 105.423489][ T43] kworker/u4:2: attempt to access beyond end of device [ 105.423489][ T43] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 105.439491][ T4417] loop0: p1 < > p4 [ 105.448907][ T4417] loop0: p4 size 8388608 extends beyond EOD, truncated [ 105.477016][ T28] audit: type=1400 audit(1768951770.410:607): avc: denied { read append } for pid=4416 comm="syz.0.1519" name="loop0p4" dev="devtmpfs" ino=1465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.480909][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 105.544172][ T3598] udevd[3598]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 105.552768][ T28] audit: type=1400 audit(1768951770.410:608): avc: denied { open } for pid=4416 comm="syz.0.1519" path="/dev/loop0p4" dev="devtmpfs" ino=1465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.559957][ T335] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 105.578126][ T28] audit: type=1400 audit(1768951770.470:609): avc: denied { mounton } for pid=4419 comm="syz.0.1522" path="/99/file0" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.614647][ T398] udevd[398]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 105.631936][ T4391] loop5: detected capacity change from 0 to 131072 [ 105.642338][ T4391] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 105.649437][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.660363][ T4391] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 105.668761][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.678787][ T335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.691833][ T335] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.700942][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.709558][ T335] usb 2-1: config 0 descriptor?? [ 105.721126][ T4391] F2FS-fs (loop5): invalid crc value [ 105.737713][ T4391] F2FS-fs (loop5): Found nat_bits in checkpoint [ 105.777438][ T4429] loop9: detected capacity change from 0 to 256 [ 105.801866][ T4429] FAT-fs (loop9): Directory bread(block 1285) failed [ 105.809189][ T4429] FAT-fs (loop9): Directory bread(block 1286) failed [ 105.815984][ T4429] FAT-fs (loop9): Directory bread(block 1287) failed [ 105.823073][ T4391] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 105.830253][ T4429] FAT-fs (loop9): Directory bread(block 1288) failed [ 105.837023][ T4391] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 105.846750][ T4429] FAT-fs (loop9): Directory bread(block 1285) failed [ 105.856553][ T4429] FAT-fs (loop9): Directory bread(block 1286) failed [ 105.864107][ T4429] FAT-fs (loop9): Directory bread(block 1287) failed [ 105.871133][ T4429] FAT-fs (loop9): Directory bread(block 1288) failed [ 105.877932][ T4429] FAT-fs (loop9): FAT read failed (blocknr 1281) [ 105.884746][ T4429] FAT-fs (loop9): Directory bread(block 1285) failed [ 105.935952][ T4437] netlink: 'syz.2.1527': attribute type 12 has an invalid length. [ 105.944649][ T4437] netlink: 'syz.2.1527': attribute type 29 has an invalid length. [ 105.956357][ T4437] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1527'. [ 105.965714][ T4437] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 105.973692][ T4437] netlink: 'syz.2.1527': attribute type 2 has an invalid length. [ 105.983375][ T4437] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1527'. [ 106.010311][ T4441] loop2: detected capacity change from 0 to 16 [ 106.026290][ T4441] erofs: (device loop2): mounted with root inode @ nid 36. [ 106.090093][ T28] audit: type=1400 audit(1768951771.030:610): avc: denied { read } for pid=4446 comm="syz.2.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.123289][ T335] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 106.133217][ T335] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 106.268253][ T4041] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 106.301522][ T4457] loop5: detected capacity change from 0 to 512 [ 106.308121][ T4457] EXT4-fs: Ignoring removed i_version option [ 106.317522][ T4457] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 106.343946][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 106.359218][ T4460] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 106.401971][ T4466] loop0: detected capacity change from 0 to 256 [ 106.411142][ T4466] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 106.438264][ T334] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.479362][ T4041] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.490440][ T4041] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.500514][ T4041] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.513576][ T4041] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.522748][ T4041] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.545244][ T4041] usb 10-1: config 0 descriptor?? [ 106.619365][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.630461][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.640241][ T334] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.653284][ T334] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.662586][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.671361][ T334] usb 3-1: config 0 descriptor?? [ 106.818248][ T40] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 106.953189][ T4041] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 106.960738][ T4041] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 106.968144][ T4041] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 106.975692][ T4041] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 106.983365][ T4041] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 106.992391][ T4041] plantronics 0003:047F:FFFF.000F: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 106.999843][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.015893][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.025894][ T40] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.039014][ T40] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.048108][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.057566][ T40] usb 1-1: config 0 descriptor?? [ 107.078881][ T334] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 107.086335][ T334] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 107.093983][ T334] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 107.101630][ T334] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 107.109038][ T334] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 107.116443][ T334] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 107.123915][ T334] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 107.131532][ T334] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 107.140538][ T334] plantronics 0003:047F:FFFF.0010: hiddev98,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 107.157376][ T334] usb 10-1: USB disconnect, device number 8 [ 107.438272][ C0] plantronics 0003:047F:FFFF.000E: usb_submit_urb(ctrl) failed: -1 [ 107.448743][ T335] usb 3-1: USB disconnect, device number 8 [ 107.465668][ T40] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 107.475277][ T40] plantronics 0003:047F:FFFF.0011: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 107.642608][ T4496] loop5: detected capacity change from 0 to 40427 [ 107.652576][ T4496] F2FS-fs (loop5): invalid crc value [ 107.659126][ T4496] F2FS-fs (loop5): Found nat_bits in checkpoint [ 107.699655][ T4496] F2FS-fs (loop5): Start checkpoint disabled! [ 107.706256][ T4496] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 107.709079][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.714736][ T4496] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 107.748475][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 107.756571][ T4496] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 107.767906][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.783756][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 107.789971][ T4496] syz.5.1548: attempt to access beyond end of device [ 107.789971][ T4496] loop5: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 107.793476][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.814271][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.822733][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.831190][ T1187] kworker/u4:6: attempt to access beyond end of device [ 107.831190][ T1187] loop5: rw=2049, sector=45224, nr_sectors = 16 limit=40427 [ 107.831261][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.854018][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.925656][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.997509][ T4511] loop1: detected capacity change from 0 to 512 [ 108.060968][ T4511] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.070012][ T4511] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.117657][ T2222] EXT4-fs (loop1): unmounting filesystem. [ 108.140309][ T4534] loop1: detected capacity change from 0 to 512 [ 108.161237][ T4534] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1562: inode has both inline data and extents flags [ 108.175137][ T4534] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1562: couldn't read orphan inode 15 (err -117) [ 108.187910][ T4534] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.215410][ T2222] EXT4-fs (loop1): unmounting filesystem. [ 108.243702][ T4543] loop1: detected capacity change from 0 to 1024 [ 108.258958][ T294] usb 2-1: USB disconnect, device number 8 [ 108.268933][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 108.274111][ T4545] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 108.291475][ T4545] overlayfs: failed to set xattr on upper [ 108.297659][ T4545] overlayfs: ...falling back to index=off,metacopy=off. [ 108.301603][ T2222] EXT4-fs (loop1): unmounting filesystem. [ 108.319871][ T4545] overlayfs: ...falling back to xino=off. [ 108.336936][ T4545] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 108.438122][ T40] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 108.457052][ T40] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.598227][ T734] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.779342][ T734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.789544][ T734] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.799110][ T734] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.808525][ T734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.816569][ T734] usb 3-1: SerialNumber: syz [ 109.027788][ T734] usb 3-1: 0:2 : does not exist [ 109.036896][ T734] usb 3-1: USB disconnect, device number 9 [ 109.248722][ T3598] udevd[3598]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 109.319921][ T4586] loop5: detected capacity change from 0 to 1024 [ 109.338012][ T4588] fuse: Unknown parameter 'Name: syz.9.1583 [ 109.338012][ T4588] Umask: 0077 [ 109.338012][ T4588] State: R (running) [ 109.338012][ T4588] Tgid: 306 [ 109.338012][ T4588] Ngid: 0 [ 109.338012][ T4588] Pid: 307 [ 109.338012][ T4588] PPid: 1 [ 109.338012][ T4588] TracerPid: 0 [ 109.338012][ T4588] Uid: 0 0 0 0 [ 109.338012][ T4588] Gid: 0 0 0 0 [ 109.338012][ T4588] FDSize: 256 [ 109.338012][ T4588] Groups: 0 10 [ 109.338012][ T4588] NStgid: 306 [ 109.338012][ T4588] NSpid: 307 [ 109.338012][ T4588] NSpgid: 306 [ 109.338012][ T4588] NSsid: 0 [ 109.338012][ T4588] VmPeak: 93988 kB [ 109.338012][ T4588] VmSize: 93988 kB [ 109.338012][ T4588] VmLck: 0 kB [ 109.338012][ T4588] VmPin: 0 kB [ 109.338012][ T4588] VmHWM: 23140 kB [ 109.338012][ T4588] VmRSS: 23140 kB [ 109.338012][ T4588] RssAnon: 1372 kB [ 109.338012][ T4588] RssFile: 21768 kB [ 109.338012][ T4588] RssShmem: 0 kB [ 109.338012][ T4588] VmData: 28392 kB [ 109.338843][ T4588] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1583'. [ 109.359975][ T4586] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 109.471310][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 109.556034][ T734] usb 1-1: USB disconnect, device number 12 [ 109.581772][ T4610] loop5: detected capacity change from 0 to 256 [ 109.600713][ T4610] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.615195][ T4610] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 109.632448][ T4610] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 109.672419][ T4616] netlink: 'syz.5.1594': attribute type 12 has an invalid length. [ 109.681343][ T4616] netlink: 'syz.5.1594': attribute type 29 has an invalid length. [ 109.689681][ T4616] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1594'. [ 109.698917][ T4616] netlink: 'syz.5.1594': attribute type 2 has an invalid length. [ 109.709868][ T4616] netlink: 'syz.5.1594': attribute type 3 has an invalid length. [ 109.717834][ T4616] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1594'. [ 109.767907][ T4620] user requested TSC rate below hardware speed [ 109.819640][ T4631] device ip6gre2 entered promiscuous mode [ 109.998231][ T734] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 110.028236][ T853] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 110.078240][ T294] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 110.178240][ T734] usb 1-1: Using ep0 maxpacket: 32 [ 110.184526][ T734] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 110.192848][ T734] usb 1-1: config 0 has no interface number 0 [ 110.199006][ T734] usb 1-1: config 0 interface 184 has no altsetting 0 [ 110.207265][ T734] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 110.216361][ T734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.224411][ T734] usb 1-1: Product: syz [ 110.228288][ T853] usb 6-1: Using ep0 maxpacket: 16 [ 110.228667][ T734] usb 1-1: Manufacturer: syz [ 110.236288][ T853] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.238386][ T734] usb 1-1: SerialNumber: syz [ 110.248321][ T853] usb 6-1: config 1 has no interface number 1 [ 110.258271][ T853] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 110.268922][ T853] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 110.269412][ T734] usb 1-1: config 0 descriptor?? [ 110.284269][ T853] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.290107][ T734] smsc75xx v1.0.0 [ 110.300468][ T294] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.313133][ T853] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.322295][ T853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.330615][ T853] usb 6-1: Product: syz [ 110.334842][ T294] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.343962][ T853] usb 6-1: Manufacturer: syz [ 110.348588][ T853] usb 6-1: SerialNumber: syz [ 110.353667][ T294] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 110.362089][ T294] usb 3-1: Product: syz [ 110.366377][ T294] usb 3-1: SerialNumber: syz [ 110.773457][ T853] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 111.091779][ T734] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 111.102631][ T734] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 111.313436][ T734] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 111.324309][ T734] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 111.334012][ T734] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 111.344296][ T734] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 111.353742][ T734] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 111.364769][ T734] usb 1-1: USB disconnect, device number 13 [ 111.381991][ T294] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 111.388525][ T294] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 111.395917][ T294] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 111.577228][ T853] usb 6-1: 2:1: cannot get freq at ep 0x82 [ 111.585541][ T294] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 111.599684][ T853] usb 6-1: USB disconnect, device number 8 [ 111.612749][ T294] usb 3-1: USB disconnect, device number 10 [ 111.631869][ T294] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 111.728668][ T4643] loop9: detected capacity change from 0 to 512 [ 111.753795][ T4643] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 111.762868][ T4643] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.800964][ T4643] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #18: comm syz.9.1605: corrupted inode contents [ 111.813079][ T4643] EXT4-fs (loop9): Remounting filesystem read-only [ 111.819938][ T4643] EXT4-fs error (device loop9): ext4_dirty_inode:6135: inode #18: comm syz.9.1605: mark_inode_dirty error [ 111.843988][ T4643] EXT4-fs (loop9): Remounting filesystem read-only [ 111.851275][ T398] udevd[398]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.857569][ T4643] EXT4-fs error (device loop9): ext4_do_update_inode:5270: inode #18: comm syz.9.1605: corrupted inode contents [ 111.920433][ T4643] EXT4-fs (loop9): Remounting filesystem read-only [ 111.932660][ T4643] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2964: inode #18: comm syz.9.1605: mark_inode_dirty error [ 111.961132][ T4643] EXT4-fs (loop9): Remounting filesystem read-only [ 111.972161][ T4643] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2967: inode #18: comm syz.9.1605: mark inode dirty (error -117) [ 111.985033][ T4643] EXT4-fs (loop9): Remounting filesystem read-only [ 111.991824][ T4643] EXT4-fs warning (device loop9): ext4_evict_inode:299: xattr delete (err -117) [ 112.045119][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 112.151139][ T4663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4663 comm=syz.5.1612 [ 112.270820][ T4674] input: syz0 as /devices/virtual/input/input19 [ 112.365562][ T4676] loop2: detected capacity change from 0 to 2048 [ 112.418368][ T4676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 112.477944][ T4676] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.500923][ T4670] loop0: detected capacity change from 0 to 40427 [ 112.551121][ T4670] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.609609][ T2656] EXT4-fs (loop2): unmounting filesystem. [ 112.650854][ T4670] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.662504][ T4695] loop2: detected capacity change from 0 to 512 [ 112.683183][ T4695] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1623: inode has both inline data and extents flags [ 112.702038][ T4695] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1623: couldn't read orphan inode 15 (err -117) [ 112.714439][ T4695] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.738289][ T734] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 112.749770][ T2656] EXT4-fs (loop2): unmounting filesystem. [ 112.788847][ T2360] syz-executor: attempt to access beyond end of device [ 112.788847][ T2360] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 112.903191][ T4704] SELinux: unknown common [ 112.903207][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 112.903219][ T28] audit: type=1326 audit(1768951777.840:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.1.1628" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2117d9acb9 code=0x0 [ 112.908142][ T4704] SELinux: failed to load policy [ 112.945485][ T4708] loop2: detected capacity change from 0 to 256 [ 112.949724][ T734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.962984][ T734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.977062][ T4708] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.987380][ T734] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.989351][ T4708] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 113.011574][ T4708] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 113.029347][ T734] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.039288][ T734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.055062][ T734] usb 6-1: config 0 descriptor?? [ 113.126071][ T4720] input: syz0 as /devices/virtual/input/input20 [ 113.219932][ T4723] loop9: detected capacity change from 0 to 2048 [ 113.251312][ T4723] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 113.285872][ T4723] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.315365][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 113.359077][ T4730] loop9: detected capacity change from 0 to 512 [ 113.399987][ T4730] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.1637: inode has both inline data and extents flags [ 113.423432][ T4730] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1637: couldn't read orphan inode 15 (err -117) [ 113.435824][ T4730] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 113.464049][ T734] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 113.480731][ T734] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 113.504099][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 113.992924][ T4751] loop0: detected capacity change from 0 to 256 [ 113.999425][ T294] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 114.016552][ T4751] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.027491][ T4751] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 114.037533][ T4751] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 114.090245][ T4756] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2166916015 (4333832030 ns) > initial count (2654969024 ns). Using initial count to start timer. [ 114.168370][ T334] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 114.209413][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.220672][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.230503][ T294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.247595][ T294] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.259842][ T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.274439][ T4762] input: syz0 as /devices/virtual/input/input22 [ 114.281718][ T294] usb 3-1: config 0 descriptor?? [ 114.359295][ T334] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 114.367753][ T334] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.378903][ T334] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.388803][ T334] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.402028][ T334] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.416397][ T334] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.431337][ T334] usb 10-1: config 0 descriptor?? [ 114.690641][ T294] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 114.700079][ T294] plantronics 0003:047F:FFFF.0014: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 114.839578][ T334] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 114.848425][ T334] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 114.857110][ T334] plantronics 0003:047F:FFFF.0015: hiddev98,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 114.959130][ T4041] usb 3-1: USB disconnect, device number 11 [ 114.978253][ T287] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.109774][ T853] usb 10-1: USB disconnect, device number 9 [ 115.158215][ T287] usb 1-1: Using ep0 maxpacket: 16 [ 115.164453][ T287] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 115.175617][ T287] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 115.185418][ T287] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 115.199112][ T287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.208396][ T287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 115.216452][ T287] usb 1-1: SerialNumber: syz [ 115.222344][ T4769] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.410335][ T4785] loop5: detected capacity change from 0 to 512 [ 115.421215][ T4785] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1656: inode has both inline data and extents flags [ 115.442696][ T4785] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1656: couldn't read orphan inode 15 (err -117) [ 115.456282][ T4769] loop0: detected capacity change from 0 to 2048 [ 115.468546][ T4785] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 115.489884][ T28] audit: type=1326 audit(1768951780.430:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.2.1658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac2039acb9 code=0x0 [ 115.520112][ T4769] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.535443][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 115.542955][ T40] usb 6-1: USB disconnect, device number 9 [ 115.549744][ T28] audit: type=1400 audit(1768951780.490:627): avc: denied { create } for pid=4790 comm="syz.2.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 115.569271][ T287] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 115.578032][ T287] usb 1-1: USB disconnect, device number 14 [ 115.636438][ T4804] input: syz1 as /devices/virtual/input/input24 [ 115.685591][ T4806] loop9: detected capacity change from 0 to 4096 [ 115.697776][ T4806] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 115.717234][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 116.002986][ T4809] loop5: detected capacity change from 0 to 131072 [ 116.017512][ T4809] F2FS-fs (loop5): invalid crc value [ 116.029810][ T4814] loop9: detected capacity change from 0 to 256 [ 116.038279][ T4814] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.049642][ T4809] F2FS-fs (loop5): Found nat_bits in checkpoint [ 116.077588][ T4814] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 116.089790][ T4809] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 116.097890][ T4814] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 116.293139][ T2360] EXT4-fs (loop0): unmounting filesystem. [ 116.343467][ T4825] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1670'. [ 116.415291][ T4838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 116.438304][ T40] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 116.532934][ T28] audit: type=1400 audit(1768951781.470:628): avc: denied { bind } for pid=4846 comm="syz.5.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.629501][ T40] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.646471][ T40] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.656628][ T40] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 116.667118][ T40] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.688331][ T40] usb 10-1: config 0 descriptor?? [ 116.863035][ T4840] loop2: detected capacity change from 0 to 131072 [ 116.896325][ T4840] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.934925][ T4840] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.964951][ T4840] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 116.973435][ T4840] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 117.097058][ T40] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 117.108477][ T40] hid-steam 0003:28DE:1142.0016: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 117.138278][ T40] hid-steam 0003:28DE:1142.0017: unknown main item tag 0x0 [ 117.146238][ T40] hid-steam 0003:28DE:1142.0017: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 117.228243][ T40] hid-steam 0003:28DE:1142.0016: Steam wireless receiver connected [ 117.246354][ T40] hid-steam 0003:28DE:1142.0016: No HID_FEATURE_REPORT submitted - nothing to read [ 117.300926][ T4862] loop2: detected capacity change from 0 to 256 [ 117.332532][ T4862] FAT-fs (loop2): Directory bread(block 64) failed [ 117.341336][ T4862] FAT-fs (loop2): Directory bread(block 65) failed [ 117.347984][ T4862] FAT-fs (loop2): Directory bread(block 66) failed [ 117.355881][ T4862] FAT-fs (loop2): Directory bread(block 67) failed [ 117.363021][ T4862] FAT-fs (loop2): Directory bread(block 68) failed [ 117.369875][ T4862] FAT-fs (loop2): Directory bread(block 69) failed [ 117.376481][ T4862] FAT-fs (loop2): Directory bread(block 70) failed [ 117.383230][ T4862] FAT-fs (loop2): Directory bread(block 71) failed [ 117.389940][ T4862] FAT-fs (loop2): Directory bread(block 72) failed [ 117.396565][ T4862] FAT-fs (loop2): Directory bread(block 73) failed [ 117.535150][ T4864] loop5: detected capacity change from 0 to 512 [ 117.560746][ T4864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.593552][ T4864] EXT4-fs (loop5): 1 truncate cleaned up [ 117.602517][ T4864] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 117.708878][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 117.913306][ T4869] loop5: detected capacity change from 0 to 256 [ 117.941837][ T4855] loop0: detected capacity change from 0 to 262144 [ 117.950362][ T4869] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.964142][ T4869] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 117.973314][ T4869] FAT-fs (loop5): Filesystem has been set read-only [ 117.998845][ T4855] F2FS-fs (loop0): invalid crc value [ 118.023998][ T4855] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.047423][ T4874] netlink: 'syz.2.1688': attribute type 3 has an invalid length. [ 118.055301][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 118.081192][ T4855] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.106988][ T4855] F2FS-fs (loop0): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix [ 118.461296][ T28] audit: type=1400 audit(1768951783.400:629): avc: denied { listen } for pid=4895 comm="syz.5.1698" path=2F3138342FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 118.573209][ T4906] loop0: detected capacity change from 0 to 512 [ 118.579899][ T4906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.588888][ T4906] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1692: inode #1: comm syz.0.1692: iget: illegal inode # [ 118.602128][ T4906] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1692: error while reading EA inode 1 err=-117 [ 118.614864][ T4906] EXT4-fs (loop0): 1 orphan inode deleted [ 118.620830][ T4906] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.647010][ T2360] EXT4-fs (loop0): unmounting filesystem. [ 118.683908][ T4912] SELinux: failed to load policy [ 118.792324][ T4916] loop0: detected capacity change from 0 to 40427 [ 118.802708][ T4916] F2FS-fs (loop0): invalid crc value [ 118.809438][ T4916] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.876833][ T4916] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.918626][ T2360] syz-executor: attempt to access beyond end of device [ 118.918626][ T2360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.138767][ T4041] usb 10-1: USB disconnect, device number 10 [ 119.146553][ T4041] hid-steam 0003:28DE:1142.0016: Steam wireless receiver disconnected [ 119.567975][ T4941] loop5: detected capacity change from 0 to 2048 [ 119.610283][ T4940] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2166916015 (4333832030 ns) > initial count (2654969024 ns). Using initial count to start timer. [ 119.641415][ T4941] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 119.707058][ T2743] EXT4-fs (loop5): unmounting filesystem. [ 119.858986][ T4975] loop2: detected capacity change from 0 to 1024 [ 119.866636][ T4975] EXT4-fs: Ignoring removed orlov option [ 119.889297][ T4975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.911765][ T2656] EXT4-fs (loop2): unmounting filesystem. [ 119.999605][ T4988] kvm [4987]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 120.100681][ T4996] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2166916015 (4333832030 ns) > initial count (2654969024 ns). Using initial count to start timer. [ 120.554825][ T5019] loop5: detected capacity change from 0 to 40427 [ 120.581755][ T5019] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 120.614330][ T5019] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 120.634723][ T5033] xt_hashlimit: size too large, truncated to 1048576 [ 120.647856][ T5019] F2FS-fs (loop5): Found nat_bits in checkpoint [ 120.657035][ T5038] loop2: detected capacity change from 0 to 256 [ 120.686343][ T5038] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.717375][ T5038] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 120.752451][ T5038] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 120.783456][ T5019] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 120.800752][ T5019] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 120.875571][ T5046] loop0: detected capacity change from 0 to 256 [ 120.897281][ T5046] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.925386][ T5046] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 120.958156][ T5046] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 120.996839][ T28] audit: type=1400 audit(1768951785.930:630): avc: denied { rename } for pid=5045 comm="syz.0.1754" name="file0" dev="loop0" ino=1048756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.044809][ T28] audit: type=1400 audit(1768951785.960:631): avc: denied { unlink } for pid=5045 comm="syz.0.1754" name="file1" dev="loop0" ino=1048757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.118236][ T853] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 121.217966][ T5039] syz.1.1751 (5039) used greatest stack depth: 20512 bytes left [ 121.284499][ T5021] loop9: detected capacity change from 0 to 131072 [ 121.294298][ T5021] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 121.302465][ T5021] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 121.309363][ T853] usb 3-1: Using ep0 maxpacket: 16 [ 121.316675][ T5021] F2FS-fs (loop9): Found nat_bits in checkpoint [ 121.323852][ T853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.355286][ T853] usb 3-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 121.364683][ T853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.373803][ T853] usb 3-1: config 0 descriptor?? [ 121.382152][ T5021] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 121.389657][ T5021] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 121.782694][ T853] saitek 0003:0738:1705.0018: unknown main item tag 0x0 [ 121.789720][ T853] saitek 0003:0738:1705.0018: unknown main item tag 0x0 [ 121.796664][ T853] saitek 0003:0738:1705.0018: collection stack underflow [ 121.803723][ T853] saitek 0003:0738:1705.0018: item 0 0 0 12 parsing failed [ 121.811084][ T853] saitek 0003:0738:1705.0018: parse failed [ 121.816903][ T853] saitek: probe of 0003:0738:1705.0018 failed with error -22 [ 121.984042][ T853] usb 3-1: USB disconnect, device number 12 [ 122.513546][ T5063] xt_hashlimit: size too large, truncated to 1048576 [ 122.669957][ T28] audit: type=1400 audit(1768951787.610:632): avc: denied { connect } for pid=5066 comm="syz.2.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.716751][ T28] audit: type=1400 audit(1768951787.630:633): avc: denied { write } for pid=5066 comm="syz.2.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.756966][ T5053] loop1: detected capacity change from 0 to 40427 [ 122.783524][ T5053] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 122.818228][ T5053] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 122.845824][ T5053] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.924555][ T5053] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 122.938647][ T5053] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 122.943836][ T5079] loop0: detected capacity change from 0 to 512 [ 122.967377][ T5079] EXT4-fs: Ignoring removed orlov option [ 122.975837][ T5077] SELinux: ebitmap start bit (4092) is not a multiple of the map unit size (64) [ 122.980078][ T5079] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.991794][ T28] audit: type=1400 audit(1768951787.930:634): avc: denied { setopt } for pid=5074 comm="syz.5.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.023437][ T5079] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 123.035405][ T28] audit: type=1400 audit(1768951787.940:635): avc: denied { create } for pid=5052 comm="syz.1.1758" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.043369][ T2222] syz-executor: attempt to access beyond end of device [ 123.043369][ T2222] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 123.071329][ T5077] SELinux: failed to load policy [ 123.074001][ T28] audit: type=1400 audit(1768951787.950:636): avc: denied { link } for pid=5052 comm="syz.1.1758" name="#3b" dev="loop1" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.076910][ T2222] syz-executor: attempt to access beyond end of device [ 123.076910][ T2222] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 123.125329][ T28] audit: type=1400 audit(1768951787.950:637): avc: denied { rename } for pid=5052 comm="syz.1.1758" name="#3c" dev="loop1" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 123.162954][ T28] audit: type=1400 audit(1768951788.100:638): avc: denied { getopt } for pid=5081 comm="syz.2.1767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.186796][ T43] kworker/u4:2: attempt to access beyond end of device [ 123.186796][ T43] loop1: rw=2049, sector=40960, nr_sectors = 88 limit=40427 [ 123.233649][ T5084] syz.0.1768 uses obsolete (PF_INET,SOCK_PACKET) [ 123.418651][ T5088] loop9: detected capacity change from 0 to 40427 [ 123.428209][ T287] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 123.436613][ T5088] F2FS-fs (loop9): invalid crc value [ 123.444434][ T5088] F2FS-fs (loop9): Found nat_bits in checkpoint [ 123.485631][ T5088] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 123.605507][ T2760] syz-executor: attempt to access beyond end of device [ 123.605507][ T2760] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.620291][ T287] usb 3-1: Using ep0 maxpacket: 16 [ 123.628260][ T287] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 123.643028][ T287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.651250][ T287] usb 3-1: Product: syz [ 123.657764][ T287] usb 3-1: Manufacturer: syz [ 123.662561][ T287] usb 3-1: SerialNumber: syz [ 123.678657][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.685840][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.690366][ T287] r8152-cfgselector 3-1: config 0 descriptor?? [ 123.695039][ T5095] device bridge_slave_0 entered promiscuous mode [ 123.706680][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.713878][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.721942][ T5095] device bridge_slave_1 entered promiscuous mode [ 123.781583][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.788666][ T5095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.795939][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.802974][ T5095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.836889][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.845220][ T719] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.855473][ T719] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.878295][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.886559][ T719] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.893638][ T719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.911412][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.925436][ T719] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.932529][ T719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.949069][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.957508][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.974696][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.985635][ T5095] device veth0_vlan entered promiscuous mode [ 123.992706][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.010102][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.019459][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.026995][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.035250][ T5095] device veth1_macvtap entered promiscuous mode [ 124.046894][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.058484][ T719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.113960][ T5082] loop2: detected capacity change from 0 to 512 [ 124.126744][ T5082] EXT4-fs: Ignoring removed bh option [ 124.138741][ T5082] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.150778][ T5082] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 124.227229][ T287] r8152-cfgselector 3-1: Unknown version 0x0000 [ 124.237022][ T287] r8152-cfgselector 3-1: bad CDC descriptors [ 124.251587][ T287] r8152-cfgselector 3-1: Unknown version 0x0000 [ 124.261183][ T287] r8152-cfgselector 3-1: USB disconnect, device number 13 [ 124.301768][ T5133] loop9: detected capacity change from 0 to 512 [ 124.308461][ T5133] EXT4-fs: Ignoring removed i_version option [ 124.326308][ T5133] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 124.355430][ T2760] EXT4-fs (loop9): unmounting filesystem. [ 124.391720][ T5141] loop8: detected capacity change from 0 to 256 [ 124.400771][ T5141] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 124.439752][ T5146] loop8: detected capacity change from 0 to 256 [ 124.449114][ T5146] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 124.928880][ T5164] loop0: detected capacity change from 0 to 512 [ 124.945705][ T5164] EXT4-fs: Ignoring removed i_version option [ 124.964348][ T5164] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.978318][ T287] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 125.017243][ T2360] EXT4-fs (loop0): unmounting filesystem. [ 125.045049][ T5169] loop8: detected capacity change from 0 to 256 [ 125.057285][ T5169] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 125.069120][ T5169] FAT-fs (loop8): Filesystem has been set read-only [ 125.075801][ T5169] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 125.169395][ T287] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.180455][ T287] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.190313][ T287] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.203388][ T287] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.212575][ T287] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.221227][ T287] usb 10-1: config 0 descriptor?? [ 125.498691][ T28] audit: type=1400 audit(1768951790.440:639): avc: denied { watch } for pid=5191 comm="syz.5.1805" path="/194/file0" dev="incremental-fs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.623226][ T5194] loop8: detected capacity change from 0 to 512 [ 125.629898][ T5194] EXT4-fs: Ignoring removed i_version option [ 125.635938][ T287] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 125.638717][ T335] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 125.651332][ T287] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 125.674143][ T5194] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 125.725306][ T5095] EXT4-fs (loop8): unmounting filesystem. [ 125.849340][ T335] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 125.857510][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.872458][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.882584][ T335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.925044][ T335] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.937071][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.955161][ T335] usb 3-1: config 0 descriptor?? [ 126.363705][ T335] plantronics 0003:047F:FFFF.001A: unknown main item tag 0xd [ 126.377506][ T335] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 126.394106][ T335] plantronics 0003:047F:FFFF.001A: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 126.797427][ T5235] loop5: detected capacity change from 0 to 256 [ 126.830001][ T5235] FAT-fs (loop5): Directory bread(block 64) failed [ 126.840993][ T5235] FAT-fs (loop5): Directory bread(block 65) failed [ 126.852485][ T5235] FAT-fs (loop5): Directory bread(block 66) failed [ 126.864735][ T5235] FAT-fs (loop5): Directory bread(block 67) failed [ 126.875730][ T5235] FAT-fs (loop5): Directory bread(block 68) failed [ 126.886757][ T5235] FAT-fs (loop5): Directory bread(block 69) failed [ 126.897799][ T5235] FAT-fs (loop5): Directory bread(block 70) failed [ 126.908901][ T5235] FAT-fs (loop5): Directory bread(block 71) failed [ 126.919839][ T5235] FAT-fs (loop5): Directory bread(block 72) failed [ 126.935817][ T5235] FAT-fs (loop5): Directory bread(block 73) failed [ 126.948403][ C1] plantronics 0003:047F:FFFF.0019: usb_submit_urb(ctrl) failed: -1 [ 126.958562][ T4041] usb 3-1: USB disconnect, device number 14 [ 126.969715][ T28] audit: type=1400 audit(1768951791.910:640): avc: denied { getopt } for pid=5234 comm="syz.5.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.990107][ T719] kworker/u4:5: attempt to access beyond end of device [ 126.990107][ T719] loop5: rw=1, sector=1224, nr_sectors = 256 limit=256 [ 127.004050][ T719] kworker/u4:5: attempt to access beyond end of device [ 127.004050][ T719] loop5: rw=1, sector=1512, nr_sectors = 148 limit=256 [ 127.055651][ T5242] loop8: detected capacity change from 0 to 512 [ 127.084283][ T5244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1825'. [ 127.093266][ T5242] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.093269][ T5244] device bridge_slave_1 left promiscuous mode [ 127.093487][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.119702][ T5244] device bridge_slave_0 left promiscuous mode [ 127.125955][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.134138][ T5242] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 127.144017][ T5242] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.163813][ T5242] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.1824: corrupted inode contents [ 127.176494][ T5242] EXT4-fs error (device loop8): ext4_dirty_inode:6135: inode #2: comm syz.8.1824: mark_inode_dirty error [ 127.195998][ T5242] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.1824: corrupted inode contents [ 127.210316][ T5242] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.1824: mark_inode_dirty error [ 127.238956][ T5095] EXT4-fs (loop8): unmounting filesystem. [ 127.278030][ T5251] netlink: 'syz.8.1826': attribute type 4 has an invalid length. [ 127.343414][ T5259] loop8: detected capacity change from 0 to 512 [ 127.350733][ T5259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.380463][ T5259] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 127.389859][ T5259] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.398654][ T5261] loop0: detected capacity change from 0 to 8192 [ 127.438388][ T5259] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.1830: corrupted inode contents [ 127.451315][ T5259] EXT4-fs error (device loop8): ext4_dirty_inode:6135: inode #2: comm syz.8.1830: mark_inode_dirty error [ 127.468079][ T5259] EXT4-fs error (device loop8): ext4_do_update_inode:5270: inode #2: comm syz.8.1830: corrupted inode contents [ 127.481052][ T5259] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.1830: mark_inode_dirty error [ 127.495024][ T28] audit: type=1400 audit(1768951792.430:641): avc: denied { mounton } for pid=5260 comm="syz.0.1831" path="/146/file0/bus" dev="loop0" ino=1048771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 127.526945][ T2360] ------------[ cut here ]------------ [ 127.532745][ T2360] kernel BUG at fs/namei.c:2962! [ 127.538300][ T2360] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 127.544404][ T2360] CPU: 1 PID: 2360 Comm: syz-executor Tainted: G W syzkaller #0 [ 127.553439][ T2360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.563506][ T2360] RIP: 0010:may_delete+0x701/0x710 [ 127.568643][ T2360] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 90 ed f3 ff e9 77 fe ff ff e8 46 c1 ae ff 0f 0b e8 3f c1 ae ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 127.588279][ T2360] RSP: 0018:ffffc9000330fc20 EFLAGS: 00010293 [ 127.594375][ T2360] RAX: ffffffff81c28881 RBX: ffff88810c369440 RCX: ffff888114fa8000 [ 127.602439][ T2360] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 127.610424][ T2360] RBP: ffffc9000330fc88 R08: 0000000000000003 R09: 0000000000000004 [ 127.618403][ T2360] R10: dffffc0000000000 R11: fffff52000661f64 R12: dffffc0000000000 [ 127.626383][ T2360] R13: 0000000000000001 R14: ffff8881180c0470 R15: 1ffff1102186d288 [ 127.634364][ T2360] FS: 0000555574ab1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 127.643310][ T2360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.649895][ T2360] CR2: 0000555574ae49c8 CR3: 0000000121db2000 CR4: 00000000003506a0 [ 127.657880][ T2360] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.665890][ T2360] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.673873][ T2360] Call Trace: [ 127.677165][ T2360] [ 127.680115][ T2360] vfs_rmdir+0x32/0x500 [ 127.684287][ T2360] incfs_kill_sb+0x105/0x220 [ 127.688913][ T2360] deactivate_locked_super+0xb5/0x120 [ 127.694298][ T2360] deactivate_super+0xaf/0xe0 [ 127.698975][ T2360] cleanup_mnt+0x474/0x500 [ 127.703396][ T2360] __cleanup_mnt+0x19/0x20 [ 127.707810][ T2360] task_work_run+0x1e1/0x250 [ 127.712407][ T2360] ? __cfi_task_work_run+0x10/0x10 [ 127.717526][ T2360] ? __x64_sys_umount+0x12d/0x170 [ 127.722554][ T2360] ? __cfi___x64_sys_umount+0x10/0x10 [ 127.727934][ T2360] exit_to_user_mode_loop+0x9b/0xb0 [ 127.733162][ T2360] exit_to_user_mode_prepare+0x87/0xd0 [ 127.738630][ T2360] syscall_exit_to_user_mode+0x1a/0x30 [ 127.744115][ T2360] do_syscall_64+0x58/0xa0 [ 127.748554][ T2360] ? clear_bhb_loop+0x30/0x80 [ 127.753239][ T2360] ? clear_bhb_loop+0x30/0x80 [ 127.757934][ T2360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.763834][ T2360] RIP: 0033:0x7f51ca39bf17 [ 127.768251][ T2360] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 127.787867][ T2360] RSP: 002b:00007ffddc5969d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 127.796296][ T2360] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f51ca39bf17 [ 127.804278][ T2360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddc596a90 [ 127.812250][ T2360] RBP: 00007ffddc596a90 R08: 00007ffddc597a90 R09: 00000000ffffffff [ 127.820233][ T2360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffddc597b80 [ 127.828207][ T2360] R13: 00007f51ca40471f R14: 000000000001f20c R15: 00007ffddc598c50 [ 127.836190][ T2360] [ 127.839219][ T2360] Modules linked in: [ 127.844119][ T4774] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 127.850441][ T28] audit: type=1400 audit(1768951792.780:642): avc: denied { write } for pid=274 comm="syz-executor" path="pipe:[14881]" dev="pipefs" ino=14881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 127.861972][ T2360] ---[ end trace 0000000000000000 ]--- [ 127.891146][ T2360] RIP: 0010:may_delete+0x701/0x710 [ 127.915425][ T5095] EXT4-fs (loop8): unmounting filesystem. [ 127.941820][ T2360] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 90 ed f3 ff e9 77 fe ff ff e8 46 c1 ae ff 0f 0b e8 3f c1 ae ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 127.988269][ T2360] RSP: 0018:ffffc9000330fc20 EFLAGS: 00010293 [ 127.994384][ T2360] RAX: ffffffff81c28881 RBX: ffff88810c369440 RCX: ffff888114fa8000 [ 128.018209][ T2360] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 128.026215][ T2360] RBP: ffffc9000330fc88 R08: 0000000000000003 R09: 0000000000000004 [ 128.034376][ T2360] R10: dffffc0000000000 R11: fffff52000661f64 R12: dffffc0000000000 [ 128.042784][ T2360] R13: 0000000000000001 R14: ffff8881180c0470 R15: 1ffff1102186d288 [ 128.052863][ T2360] FS: 0000555574ab1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 128.068688][ T853] usb 10-1: USB disconnect, device number 11 [ 128.086489][ T2360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.096748][ T2360] CR2: 00007f93ac074ff8 CR3: 0000000121db2000 CR4: 00000000003526a0 [ 128.115784][ T2360] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.128812][ T2360] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.136847][ T2360] Kernel panic - not syncing: Fatal exception [ 128.143495][ T2360] Kernel Offset: disabled [ 128.147816][ T2360] Rebooting in 86400 seconds..