last executing test programs: 7.106651223s ago: executing program 3 (id=380): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc3d) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000280)=' ', 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 6.786907431s ago: executing program 3 (id=383): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000020c0)={0xa8, 0x0, 0x0, 0xfffffffe, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8d, 0x4, "9acb237eccb318b686d3cd792dac38c002f64410ecacb1bbce9abd1bb100ec1850e3bca604b95d22d64aa8e0043dc7a60e0d3437707f1f9614a008931847114fe43b35251e510971a69527bb11d5c8a6053f1834915c3f954ce95521e0cacbcba362d375f5544c9e702afef850bef3fe8e2e0faa7908e678d1c7a609cce3dd4a40fcf2a279a2d0ddea"}]}]}, 0xa8}}, 0x40085) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x4000840) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.786722861s ago: executing program 3 (id=384): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) write(r0, &(0x7f0000000180)='1', 0x1) syz_usb_connect$uac1(0x1, 0xab, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000000990408504000010203010902990003010510050904000000010100000a240105000a000201020904010000010200000904010101010200000d240201f101050422cd545561072401099a050009050109ff0302021c0725010c0103000904020000010200000904020101010200000924020101f70309040a240202000401009499122402020800050003fa5195420690c3aa1509058209000406054507250100030700da3e92691a9a654a23e625e4fd2c3eee52bf4b95c063c1196a9ebaf167"], &(0x7f00000008c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x10, 0x34, 0x8, 0x40, 0x7}, 0x13, &(0x7f0000000340)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xf9, 0x0, 0xab, 0x7}]}, 0x4, [{0x8f, &(0x7f0000000580)=@string={0x8f, 0x3, "be8beef40d6ead99e2d1bf5e9fcc3fa411206888d7c44cfa5ef8b7cfa9ed453743d0ed5c9bafd652438929ddb1f8339aa575ce9ffc5a9a20eab8293e616ec25927ed919c4d4531c2b7a2260fc1d78792664aa3174482213f6efeb1b574872490f42632a11f4bcf0b5c78b571b0db1da44db6a5059e707097a3e5cff0f9d66e949f941d4aa0413b53e2547d8f50"}}, {0x7c, &(0x7f0000000680)=@string={0x7c, 0x3, "92de4cdd6a4ee969a9b837847fffec244c6bffae8c49914226d6d8bf0c0693741807dd482e6723d356423e5ad154f04168c1107b49b5009fa957d4255d3cbca3d9d2bf8ec20b0908b26c60119a18b26fe988d7c96d2bf9645a11c3b081d90c8d94cca91921e6d9e7c9728e874817923ca65b213d7e6c16acc9ce"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x827}}, {0x0, 0x0}]}) 4.488021787s ago: executing program 0 (id=444): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000a80)='./bus\x00', 0x1008040, &(0x7f0000000140)={[{@resuid}, {@nojournal_checksum}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@grpid}]}, 0x1, 0x5e3, &(0x7f0000000ac0)="$eJzs3U1sE9kdAPD/jGPCR2io1EptxQG1laiEcD6AlvYE16pISBwq9dJGxkQoDkax05IoUsMdVeVQtRUXemsPPbbawx5We9kj173sx3kltES7EmHFrlcTj5MQ7GACiSH+/STH7828zP//bL/xzNOMHMDAOpH9SSN+GBGXk4jRTeuGIl95otVudWWp/GRlqZxEs3nl8ySSiHi8slRut0/y5yMRsRwRP4iI94sRp9KIeDqSrTrQbltfWJyZqlYrc3l9rDF7c6y+sHj6+uzUdGW6cuPML3557vzZcxOTE5vTfdLcXCu+XF/vfHz3L3ce/Pr+3f/89/hy+W9TSVyIkXzd5n68Tq3XpBgXtiw/uxvB+ijpdwLsSCEf59lQ+n6MRiEf9Z00N+8chvckPWAXNYcjmus2FYEBkB3Ntw+k+50LsJfaxwHZ+e/jlaVmYZfOg7t5eLF1ApLFX11ZKv852vGHWnMTcXDt3OTwF8kzZybZ+eaxvUyUfWn5dkSMDw3ln//yxjxQkn/+dm688+Kjr7hZXqP3LrbeqOff/3R9/xMd9j8j7bnTV9Te/63m+7/VDvELXfZ/l3uM8fXvPv1n1/i3h+NHHePHevykQ/w0Iv7QY/x7v33nfLd1zX9FnIxO8TdmFJNu88PZysmJsWvXq5Xx1t+OMd49efxX3fsfcbhL/Nac7cG1RDb3/0CeU9pj////wf9+vLxN/J/9ZPv3v9Prfygi/vrc1p52jPHdx//+TbfcHt5OHmVHAZ36v138JJLk/os6nvv5hRMf5UWzhgAAAAAAAAAA8Bqla9eyJWlpvZympVLrHt7vxeG0Wqs3Tl2rzRfya96ORTFtX2k12qonWX0ivx63XZ/cUj9TyAMWDq3VS+Va9Wqf+w4AAAAAAAAAAAAAAAAAAABviiNb7v//srB2///Wn6sG9qvuP/kN7HfGPwyuZ8d/0rc8gL3n+x8GVnP78e94APYz3/8wuIx/GFzGPwyuZ8f/cOvpUH9yAfaW738YXMY/AAAAAAAAAAAAAAAAAAAAAAAAAADsisuXLmWP5pOVpXJWvzq0MD9T++Ppq5X6TGl2vlwq1+ZulqZrtelqpVSuzb5oe0mtdnM8bszfGmtU6o2x+sLi72dr8zfavyFWKe56jwAAAAAAAAAAAAAAAAAAAODtM7L2SNJSRLFVT9NSKeJoRBxLIrl2vVoZj4jvRMSHheJwVp/od9IAAAAAAAAAAAAAAAAAAACwz9QXFmemqtXK3I4L7S11bTOUN+htg580XjGf7QtDL9M4Ipa3bVN8Ud+3FrItvnTO7Si7+LLspJAs9/qevkmFwluY894UHny19cMPAAAAAAAAAAAAAAAAAADsqY3bgHv9j292NyEAAAAAAAAAAAAAAAAAAAAYSOlnSURkj5OjPx3ZuvZAslpYe46IP9278vdbU43G3ES2/NH68sY/8uWT/cgf6FV7nKYRkY1jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYEN9YXFmqlqtzO2wMNxDm373EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAnvg0AAP//K8O/2g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaf9) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="fb", 0x1}], 0x1, 0xc5ee, 0x2, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r1, 0x0, 0xfff, 0x9) 4.226867804s ago: executing program 0 (id=456): syz_usb_connect(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf1009050400005539000009050b00000000000009050200000005000009047d02003481af0009a00e002300de690009047d", @ANYRES64], 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.676454708s ago: executing program 3 (id=464): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffe80) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x17, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 3.478688933s ago: executing program 3 (id=465): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r0, &(0x7f0000000300)='1\x00', 0xfffffd18) 3.360041176s ago: executing program 3 (id=466): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x3ff, 0x2) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000001cc0)=0x506) 3.352027836s ago: executing program 32 (id=466): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x3ff, 0x2) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000001cc0)=0x506) 2.070448778s ago: executing program 0 (id=496): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x6}, 0x20) 2.022821049s ago: executing program 0 (id=500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1.96292882s ago: executing program 0 (id=503): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2be, &(0x7f0000000c80)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) 1.623295519s ago: executing program 0 (id=514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 1.622656279s ago: executing program 2 (id=517): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="220000000400000010000000", @ANYRESHEX=0x0], 0x48) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.547472101s ago: executing program 2 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) 1.547244921s ago: executing program 2 (id=524): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) 1.489851843s ago: executing program 2 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0xd}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0xfffffffe, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39dd, 0x4, 0x7ff, 0x80000008, 0x7, 0x7fbffffe, 0x4400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x8004, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x4, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0x80, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0xb8, 0x7fff, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xbc}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.416429114s ago: executing program 2 (id=527): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80940, 0xd2) execve(&(0x7f0000000180)='./file1\x00', &(0x7f0000000440), &(0x7f0000000a40)) 1.390377655s ago: executing program 2 (id=528): r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x7fff, 0x2000) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2083020000005737f26a29b11781bcb79508d9e072601201a4c650aebcc205be360032021b8d790421c2cd9b822ffffef6bed61d0b216507000000609033ac29f906"], 0x0, 0x0}) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000340)=""/124) r2 = syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a8cbc408e8048968"], 0x0) syz_usb_ep_read(r2, 0x2, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea0904e4224009312a4fc104a9769797ac42c65d1052f7bea4ed73fc7f4ea9a99b283c0acd8b5ab8225ba8590fe34ac794a332a7a910eb0580f9a0799078ab3cab284baaa78a99e39f9129f96034e6c8cf6118c2af6b3525ce83c15bb2456868706b72c58422aed2035d4ec66d2307a791dbf1bb16be9bece263cc06962d71"], 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x13, &(0x7f0000000040)="501cf29c49246d03906a1165bfe4842639aa9f") syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f00000001c0)={0x2, 0x100, 0xf7}) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000040)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x84, 0x4, "00000200"}, 0x0}) 1.239891888s ago: executing program 1 (id=535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a090500ff33e6a2bb0000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x44) 1.210185289s ago: executing program 1 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 650.919234ms ago: executing program 5 (id=539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="400000000308010800000000000000000a000002050003000600000014000480080009300000000b080001"], 0x40}, 0x1, 0x0, 0x0, 0xc00c890}, 0x18) 645.041814ms ago: executing program 5 (id=540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newsa={0x15c, 0x10, 0x713, 0xff8d, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in=@rand_addr=0x64010101, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xffffffffffff0001, 0x8, 0x1, 0x7000000, 0x7fffffff, 0x80000001}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x870bd2c, 0x3501, 0x2, 0x0, 0x0, 0x50}, [@offload={0xc, 0x1c, {r3, 0x3}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c54dc7cb7a"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 587.218675ms ago: executing program 5 (id=541): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x0, 0x631, &(0x7f0000001940)="$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") 322.704972ms ago: executing program 1 (id=543): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x40, 0xffffffffffffff80, 0x5, 0xffb}) 309.982122ms ago: executing program 4 (id=544): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) mmap$xdp(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x80000000) 300.637992ms ago: executing program 4 (id=545): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x1e8, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520) 209.172004ms ago: executing program 5 (id=546): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYRES16]) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1be, &(0x7f0000000280)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)) 209.017804ms ago: executing program 4 (id=547): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@migrate={0xd8, 0x21, 0x1, 0x70bd2a, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@migrate={0x50, 0x11, [{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x19}, @in=@loopback, @in=@broadcast, 0x3c}]}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@loopback}}, @policy_type={0xa}]}, 0xd8}}, 0x0) 208.845395ms ago: executing program 4 (id=548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 154.866816ms ago: executing program 1 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, ' \x00 \x00'}]}}]}, 0x200}}, 0x0) 142.667566ms ago: executing program 4 (id=550): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8178, 0x2000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000000005"], 0x44}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) 81.913078ms ago: executing program 5 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 30.842049ms ago: executing program 4 (id=552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 30.627639ms ago: executing program 1 (id=553): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x5d) 8.67875ms ago: executing program 1 (id=554): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40800, 0x0) lseek(r0, 0x101, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) dup(r2) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r2, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) dup3(r3, r2, 0x80000) read(r3, &(0x7f00000003c0)=""/213, 0xd5) read(r2, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/209, 0xd1, 0x101, 0x0, 0x0) r5 = inotify_init() read(r5, &(0x7f0000000180)=""/120, 0x78) inotify_add_watch(r5, &(0x7f0000000140)='.\x00', 0x8600072e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) ioprio_set$uid(0x3, r8, 0x2004) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r8, r9) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x1) 0s ago: executing program 5 (id=555): recvmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {0x0}], 0x5, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) kernel console output (not intermixed with test programs): T24] audit: type=1400 audit(1785558959.659:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.031451][ T24] audit: type=1400 audit(1785558959.659:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 21.795268][ T24] audit: type=1400 audit(1785558966.429:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.796892][ T271] cgroup: Unknown subsys name 'net' [ 21.818632][ T24] audit: type=1400 audit(1785558966.429:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.846003][ T24] audit: type=1400 audit(1785558966.459:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.846188][ T271] cgroup: Unknown subsys name 'devices' [ 21.989033][ T271] cgroup: Unknown subsys name 'hugetlb' [ 21.994672][ T271] cgroup: Unknown subsys name 'rlimit' [ 22.131753][ T24] audit: type=1400 audit(1785558966.769:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.155031][ T24] audit: type=1400 audit(1785558966.769:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.167170][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.180084][ T24] audit: type=1400 audit(1785558966.769:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.211992][ T24] audit: type=1400 audit(1785558966.859:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.237613][ T24] audit: type=1400 audit(1785558966.859:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 22.431975][ T24] audit: type=1400 audit(1785558967.069:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.457676][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.457735][ T24] audit: type=1400 audit(1785558967.069:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.915082][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.922210][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.929646][ T279] device bridge_slave_0 entered promiscuous mode [ 22.949823][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.956858][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.964330][ T279] device bridge_slave_1 entered promiscuous mode [ 23.010151][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.017191][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.024711][ T280] device bridge_slave_0 entered promiscuous mode [ 23.033321][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.040445][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.047921][ T280] device bridge_slave_1 entered promiscuous mode [ 23.091344][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.098529][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.105863][ T281] device bridge_slave_0 entered promiscuous mode [ 23.112942][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.120517][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.127885][ T281] device bridge_slave_1 entered promiscuous mode [ 23.156804][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.163910][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.171399][ T283] device bridge_slave_0 entered promiscuous mode [ 23.182444][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.189563][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.196930][ T282] device bridge_slave_0 entered promiscuous mode [ 23.206018][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.213185][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.220568][ T282] device bridge_slave_1 entered promiscuous mode [ 23.229333][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.236370][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.244052][ T283] device bridge_slave_1 entered promiscuous mode [ 23.364327][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.371404][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.378709][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.385719][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.416028][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.423205][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.430567][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.437686][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.449586][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.456823][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.464289][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.471431][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.484024][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.491096][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.498482][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.506004][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.518650][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.525681][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.533167][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.540207][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.569708][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.576952][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.584703][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.592541][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.599935][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.607295][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.614582][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.621819][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.629117][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.636265][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.643594][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.670126][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.678231][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.686094][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.694801][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.701863][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.710118][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.718474][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.726005][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.733364][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.741631][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.748665][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.756079][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.764323][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.771411][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.779190][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.787593][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.794807][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.802180][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.810649][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.817680][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.828147][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.836091][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.849057][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.856486][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.863925][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.884003][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.892486][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.899526][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.906940][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.915281][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.923502][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.930524][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.948600][ T281] device veth0_vlan entered promiscuous mode [ 23.956574][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.964669][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.972958][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.981456][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.990178][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.998283][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.006255][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.014322][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.022345][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.029812][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.037175][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.044631][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.068622][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.077096][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.085514][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.092555][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.100419][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.108546][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.116526][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.125212][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.133561][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.140600][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.148011][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.156108][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.164044][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.172268][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.180453][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.189443][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.197896][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.206128][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.215644][ T281] device veth1_macvtap entered promiscuous mode [ 24.229356][ T279] device veth0_vlan entered promiscuous mode [ 24.239030][ T280] device veth0_vlan entered promiscuous mode [ 24.245243][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.252948][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.261466][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.270152][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.278283][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.286156][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.294216][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.302227][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.310350][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.318512][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.325897][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.333447][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.340974][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.354527][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.363022][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.371436][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.379876][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.393457][ T280] device veth1_macvtap entered promiscuous mode [ 24.402606][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.411225][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.419307][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.434682][ T283] device veth0_vlan entered promiscuous mode [ 24.448845][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.457095][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 24.457728][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.472594][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.480166][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.488607][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.496833][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.505299][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.513454][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.522044][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.530420][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.538726][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.547174][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.555610][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.564897][ T279] device veth1_macvtap entered promiscuous mode [ 24.573650][ T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 24.587096][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.595126][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.607751][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.618915][ T283] device veth1_macvtap entered promiscuous mode [ 24.628389][ T282] device veth0_vlan entered promiscuous mode [ 24.637242][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.644931][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.652581][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.660985][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.669541][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.686910][ T282] device veth1_macvtap entered promiscuous mode [ 24.694737][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.703449][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.712329][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.720800][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.731214][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.739543][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.747924][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.756181][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.764424][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.799188][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.808125][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.816730][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.825925][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.887800][ T50] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.117685][ T307] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.127537][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.147591][ T308] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.187563][ T20] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 25.267656][ T50] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 25.276267][ T50] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 25.286752][ T50] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 25.295778][ T50] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 25.306913][ T50] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 25.367566][ T307] usb 4-1: Using ep0 maxpacket: 16 [ 25.437778][ T50] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 25.446861][ T50] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 25.454889][ T50] usb 2-1: Product: syz [ 25.459295][ T50] usb 2-1: Manufacturer: syz [ 25.487604][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 25.496852][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.505853][ T25] usb 5-1: config 0 descriptor?? [ 25.510164][ T50] cdc_wdm 2-1:1.0: skipping garbage [ 25.516064][ T50] cdc_wdm 2-1:1.0: skipping garbage [ 25.523233][ T50] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 25.557604][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 25.567647][ T308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 25.647649][ T307] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 25.656784][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.657584][ T308] usb 3-1: config 114 has an invalid interface number: 216 but max is 0 [ 25.665411][ T307] usb 4-1: Product: syz [ 25.673602][ T308] usb 3-1: config 114 has no interface number 0 [ 25.677798][ T307] usb 4-1: Manufacturer: syz [ 25.684238][ T308] usb 3-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 25.688919][ T307] usb 4-1: SerialNumber: syz [ 25.699434][ T308] usb 3-1: config 114 interface 216 has no altsetting 0 [ 25.704718][ T307] usb 4-1: config 0 descriptor?? [ 25.717590][ T20] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 25.718718][ T50] usb 2-1: USB disconnect, device number 2 [ 25.726734][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.726742][ T20] usb 1-1: Product: syz [ 25.726750][ T20] usb 1-1: Manufacturer: syz [ 25.726756][ T20] usb 1-1: SerialNumber: syz [ 25.727356][ T20] usb 1-1: config 0 descriptor?? [ 25.760507][ T307] asix: probe of 4-1:0.0 failed with error -22 [ 25.807791][ T20] hub 1-1:0.0: bad descriptor, ignoring hub [ 25.813727][ T20] hub: probe of 1-1:0.0 failed with error -5 [ 25.887580][ T308] usb 3-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 25.896908][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.905199][ T308] usb 3-1: Product: syz [ 25.909415][ T308] usb 3-1: Manufacturer: syz [ 25.914006][ T308] usb 3-1: SerialNumber: syz [ 25.947623][ T316] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 25.963864][ T312] udc-core: couldn't find an available UDC or it's busy [ 25.970936][ T312] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.979223][ T20] usb 4-1: USB disconnect, device number 2 [ 26.011054][ T319] udc-core: couldn't find an available UDC or it's busy [ 26.018290][ T319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 26.138584][ T307] usb 1-1: USB disconnect, device number 2 [ 26.168724][ T316] udc-core: couldn't find an available UDC or it's busy [ 26.175846][ T316] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 26.184274][ T316] udc-core: couldn't find an available UDC or it's busy [ 26.191477][ T316] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 26.270037][ T308] usb 3-1: USB disconnect, device number 2 [ 26.397547][ T50] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.647530][ T305] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 26.757541][ T50] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 26.766229][ T50] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 26.776630][ T50] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 26.785912][ T50] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 26.796902][ T50] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 26.808131][ T308] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.927646][ T50] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 26.936805][ T50] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 26.945198][ T50] usb 2-1: Product: syz [ 26.949457][ T50] usb 2-1: Manufacturer: syz [ 26.977528][ T15] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.988113][ T50] cdc_wdm 2-1:1.0: skipping garbage [ 26.993430][ T50] cdc_wdm 2-1:1.0: skipping garbage [ 26.999627][ T50] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 27.007821][ T305] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 27.017232][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.026886][ T305] usb 4-1: config 0 descriptor?? [ 27.167613][ T308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.177990][ T308] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 27.191357][ T308] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 27.201135][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.217545][ T15] usb 3-1: Using ep0 maxpacket: 16 [ 27.268345][ T312] udc-core: couldn't find an available UDC or it's busy [ 27.275998][ T312] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.284199][ T312] udc-core: couldn't find an available UDC or it's busy [ 27.291197][ T312] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.377638][ T15] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.457598][ T15] usb 3-1: config 7 has an invalid interface number: 161 but max is 0 [ 27.466200][ T15] usb 3-1: config 7 has no interface number 0 [ 27.472371][ T15] usb 3-1: config 7 interface 161 has no altsetting 0 [ 27.637569][ T15] usb 3-1: New USB device found, idVendor=a168, idProduct=0610, bcdDevice=8f.93 [ 27.646792][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.655040][ T15] usb 3-1: Product: syz [ 27.659635][ T15] usb 3-1: Manufacturer: syz [ 27.664232][ T15] usb 3-1: SerialNumber: syz [ 27.856165][ T308] usb 5-1: USB disconnect, device number 2 [ 27.988433][ T15] usb 3-1: USB disconnect, device number 3 [ 28.207537][ T308] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.457556][ T308] usb 5-1: Using ep0 maxpacket: 32 [ 28.561175][ T25] usb 2-1: USB disconnect, device number 3 [ 28.577667][ T308] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 28.687533][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 28.767658][ T308] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 28.776953][ T308] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 28.785566][ T308] usb 5-1: Product: syz [ 28.789776][ T308] usb 5-1: Manufacturer: syz [ 28.794545][ T308] usb 5-1: SerialNumber: syz [ 28.799991][ T308] usb 5-1: config 0 descriptor?? [ 28.817564][ T333] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 28.837804][ T308] hub 5-1:0.0: bad descriptor, ignoring hub [ 28.843949][ T308] hub: probe of 5-1:0.0 failed with error -5 [ 28.927600][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 28.977544][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.024821][ T307] usb 4-1: USB disconnect, device number 3 [ 29.097902][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.177892][ T20] usb 3-1: config 253 has an invalid interface number: 132 but max is 0 [ 29.186824][ T20] usb 3-1: config 253 has no interface number 0 [ 29.193372][ T20] usb 3-1: config 253 interface 132 altsetting 15 has an invalid endpoint with address 0x0, skipping [ 29.204658][ T20] usb 3-1: config 253 interface 132 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 29.215824][ T20] usb 3-1: config 253 interface 132 altsetting 15 has an invalid endpoint with address 0xA1, skipping [ 29.226801][ T20] usb 3-1: config 253 interface 132 altsetting 15 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 29.240297][ T20] usb 3-1: config 253 interface 132 has no altsetting 0 [ 29.337790][ T25] usb 2-1: config 253 has an invalid interface number: 237 but max is 1 [ 29.346367][ T25] usb 2-1: config 253 has an invalid interface number: 75 but max is 1 [ 29.354800][ T25] usb 2-1: config 253 has no interface number 0 [ 29.361277][ T25] usb 2-1: config 253 has no interface number 1 [ 29.367746][ T25] usb 2-1: config 253 interface 75 altsetting 4 endpoint 0x2 has an invalid bInterval 123, changing to 10 [ 29.379107][ T25] usb 2-1: config 253 interface 237 has no altsetting 0 [ 29.386050][ T25] usb 2-1: config 253 interface 75 has no altsetting 0 [ 29.407586][ T20] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=fe.b6 [ 29.416692][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.424931][ T20] usb 3-1: Product: syz [ 29.429189][ T20] usb 3-1: Manufacturer: syz [ 29.433778][ T20] usb 3-1: SerialNumber: syz [ 29.438416][ T307] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.457638][ T336] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 29.464780][ T336] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 29.538287][ T320] usb 1-1: USB disconnect, device number 3 [ 29.547527][ T25] usb 2-1: New USB device found, idVendor=0499, idProduct=500e, bcdDevice=ff.87 [ 29.558964][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.567129][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 29.567137][ T24] audit: type=1400 audit(1785558974.199:103): avc: denied { mount } for pid=344 comm="syz.0.15" name="/" dev="ramfs" ino=15117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 29.596476][ T25] usb 2-1: Product: syz [ 29.600765][ T25] usb 2-1: Manufacturer: syz [ 29.605368][ T25] usb 2-1: SerialNumber: syz [ 29.611437][ T24] audit: type=1400 audit(1785558974.239:104): avc: denied { mount } for pid=346 comm="syz.0.16" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.633458][ T24] audit: type=1400 audit(1785558974.239:105): avc: denied { remount } for pid=346 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.653054][ T24] audit: type=1400 audit(1785558974.249:106): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.750629][ T20] usb 3-1: USB disconnect, device number 4 [ 29.757574][ T308] usb 5-1: USB disconnect, device number 3 [ 29.764528][ T350] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 29.779083][ T350] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.17: bad orphan inode 13 [ 29.789431][ T350] ext4_test_bit(bit=12, block=18) = 1 [ 29.794813][ T350] is_bad_inode(inode)=0 [ 29.799019][ T350] NEXT_ORPHAN(inode)=0 [ 29.803081][ T350] max_ino=32 [ 29.806282][ T350] i_nlink=1 [ 29.809489][ T350] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.818712][ T24] audit: type=1400 audit(1785558974.459:107): avc: denied { mount } for pid=349 comm="syz.0.17" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.829410][ T350] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on [ 29.840812][ T24] audit: type=1400 audit(1785558974.459:108): avc: denied { remount } for pid=349 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.887659][ T307] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 29.896800][ T307] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 29.905156][ T307] usb 4-1: Product: syz [ 29.910494][ T307] usb 4-1: config 0 descriptor?? [ 29.948898][ T307] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 29.956888][ T307] usb 4-1: Detected FT232H [ 30.027942][ T25] usb 2-1: invalid MIDI in EP 0 [ 30.032970][ T25] snd-usb-audio: probe of 2-1:253.75 failed with error -22 [ 30.042289][ T25] usb 2-1: USB disconnect, device number 4 [ 30.127569][ T308] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 30.157619][ T307] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 30.177585][ T307] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 30.197589][ T320] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.205612][ T307] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 30.215049][ T307] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 30.224195][ T307] usb 4-1: USB disconnect, device number 4 [ 30.231029][ T307] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 30.240770][ T307] ftdi_sio 4-1:0.0: device disconnected [ 30.247928][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:253.237/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.417927][ T360] exfat: Unknown parameter 'sys_tz' [ 30.487576][ T50] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 30.507690][ T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 30.567593][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.578600][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.588431][ T320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 30.599594][ T320] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.608743][ T320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.617438][ T320] usb 1-1: config 0 descriptor?? [ 30.687600][ T308] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 30.696680][ T367] EXT4-fs (loop3): Unrecognized mount option "mb_optimize_scan=0x0000000000000001" or missing value [ 30.696690][ T308] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 30.696703][ T308] usb 5-1: Product: syz [ 30.720128][ T308] usb 5-1: Manufacturer: syz [ 30.724715][ T308] usb 5-1: SerialNumber: syz [ 30.729363][ T15] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.737499][ T308] usb 5-1: config 0 descriptor?? [ 30.757628][ T333] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 30.777813][ T308] hub 5-1:0.0: bad descriptor, ignoring hub [ 30.783810][ T308] hub: probe of 5-1:0.0 failed with error -5 [ 30.867604][ T50] usb 3-1: config 45 has an invalid interface number: 237 but max is 0 [ 30.875912][ T50] usb 3-1: config 45 has no interface number 0 [ 30.882208][ T50] usb 3-1: config 45 interface 237 has no altsetting 0 [ 30.927808][ T372] ====================================================== [ 30.927808][ T372] WARNING: the mand mount option is being deprecated and [ 30.927808][ T372] will be removed in v5.15! [ 30.927808][ T372] ====================================================== [ 31.007790][ T25] usb 5-1: USB disconnect, device number 4 [ 31.067666][ T305] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.108624][ T320] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 31.118421][ T320] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 31.125698][ T375] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.26: bad orphan inode 11862016 [ 31.141519][ T15] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.145045][ T375] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 31.149250][ T50] usb 3-1: string descriptor 0 read error: -22 [ 31.158528][ T375] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.164751][ T50] usb 3-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=aa.f8 [ 31.184182][ T50] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.200268][ T24] audit: type=1400 audit(1785558975.839:109): avc: denied { write } for pid=374 comm="syz.4.26" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.221996][ T24] audit: type=1400 audit(1785558975.839:110): avc: denied { add_name } for pid=374 comm="syz.4.26" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.268937][ T24] audit: type=1400 audit(1785558975.839:111): avc: denied { create } for pid=374 comm="syz.4.26" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 31.307519][ T305] usb 4-1: Using ep0 maxpacket: 8 [ 31.310987][ T24] audit: type=1400 audit(1785558975.839:112): avc: denied { create } for pid=374 comm="syz.4.26" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 31.388878][ T381] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 31.399924][ T381] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.420060][ T15] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 31.429377][ T305] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 31.437924][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.445894][ T15] usb 2-1: Product: syz [ 31.450181][ T305] usb 4-1: config 179 has no interface number 0 [ 31.456621][ T305] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 31.477584][ T15] usb 2-1: Manufacturer: syz [ 31.482209][ T15] usb 2-1: SerialNumber: syz [ 31.487233][ T305] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 31.507759][ T305] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 31.519059][ T305] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 31.529763][ T305] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 31.543304][ T305] usb 4-1: config 179 interface 65 has no altsetting 0 [ 31.550432][ T305] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 31.561313][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.572690][ T308] usb 3-1: USB disconnect, device number 5 [ 31.609019][ T305] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 31.678744][ T386] F2FS-fs (loop4): invalid crc value [ 31.699502][ T386] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.721578][ T386] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 31.728534][ T386] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 31.748227][ T283] attempt to access beyond end of device [ 31.748227][ T283] loop4: rw=2049, want=45104, limit=40427 [ 31.832258][ T25] usb 4-1: USB disconnect, device number 5 [ 31.847506][ T25] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 31.961043][ T365] udc-core: couldn't find an available UDC or it's busy [ 31.968214][ T365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 32.024479][ T365] udc-core: couldn't find an available UDC or it's busy [ 32.031542][ T365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 32.121326][ T396] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 32.188974][ T15] usb 2-1: USB disconnect, device number 5 [ 32.298519][ T402] loop2: p1[EZD] p3 p4 [ 32.303404][ T402] loop2: p3 start 150994944 is beyond EOD, truncated [ 32.310190][ T402] loop2: p4 start 33554434 is beyond EOD, truncated [ 32.387862][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.419283][ T410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 32.428403][ T405] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 32.428479][ T322] udevd[322]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 32.438030][ T410] System zones: [ 32.447086][ T405] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.460645][ T410] 1-12 [ 32.470850][ T410] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.35: corrupted in-inode xattr [ 32.483080][ T410] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.35: couldn't read orphan inode 15 (err -117) [ 32.495517][ T410] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue [ 32.558078][ T417] exfat: Deprecated parameter 'utf8' [ 32.563462][ T417] exfat: Deprecated parameter 'utf8' [ 32.609941][ T417] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 32.647165][ T421] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 32.660057][ T421] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 32.730299][ T421] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 32.739140][ T426] EXT4-fs (loop2): Test dummy encryption mode enabled [ 32.760720][ T426] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 32.775254][ T426] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.898529][ T433] erofs: (device loop1): mounted with root inode @ nid 36. [ 32.907517][ T305] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.002574][ T442] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.45: inode has both inline data and extents flags [ 33.016173][ T442] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.45: couldn't read orphan inode 15 (err -117) [ 33.028229][ T442] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 33.040647][ T442] EXT4-fs warning (device loop4): ext4_empty_dir:3085: inode #2: comm syz.4.45: directory missing '.' [ 33.167509][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 33.227556][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.237655][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.307553][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.318527][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.328409][ T305] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 33.337592][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.345997][ T305] usb 4-1: config 0 descriptor?? [ 33.367580][ T50] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 33.388055][ T305] hub 4-1:0.0: USB hub found [ 33.487524][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 33.492778][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 33.557700][ T308] usb 1-1: USB disconnect, device number 4 [ 33.607626][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 33.612798][ T305] hub 4-1:0.0: 1 port detected [ 33.627637][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.638961][ T20] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 33.647125][ T20] usb 2-1: config 0 has no interface number 0 [ 33.653259][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.666096][ T20] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 33.676140][ T25] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 33.685331][ T20] usb 2-1: config 0 interface 196 has no altsetting 0 [ 33.692179][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.700753][ T25] usb 3-1: config 0 descriptor?? [ 33.707699][ T308] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 33.727552][ T50] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 33.735979][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 33.744437][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 33.752771][ T50] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 33.760957][ T50] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 33.769866][ T50] usb 5-1: config 0 has no interface number 0 [ 33.775943][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 33.786995][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 33.796823][ T50] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 33.807178][ T50] usb 5-1: too many endpoints for config 0 interface 125 altsetting 255: 255, using maximum allowed: 30 [ 33.818705][ T50] usb 5-1: config 0 interface 125 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 33.832479][ T50] usb 5-1: config 0 interface 125 has no altsetting 0 [ 33.839331][ T50] usb 5-1: config 0 interface 125 has no altsetting 1 [ 33.867583][ T20] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 33.876802][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.884963][ T20] usb 2-1: Product: syz [ 33.889163][ T20] usb 2-1: Manufacturer: syz [ 33.893811][ T20] usb 2-1: SerialNumber: syz [ 33.899165][ T20] usb 2-1: config 0 descriptor?? [ 33.917592][ T446] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 33.948802][ T444] udc-core: couldn't find an available UDC or it's busy [ 33.955917][ T444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 33.964369][ T444] udc-core: couldn't find an available UDC or it's busy [ 33.971564][ T444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.028431][ T50] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 34.037560][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.045710][ T50] usb 5-1: Product: syz [ 34.050221][ T50] usb 5-1: Manufacturer: syz [ 34.054814][ T50] usb 5-1: SerialNumber: syz [ 34.059923][ T50] usb 5-1: config 0 descriptor?? [ 34.097576][ T308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.108034][ T308] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 34.118569][ T308] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 34.188016][ T444] udc-core: couldn't find an available UDC or it's busy [ 34.195058][ T444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.203291][ T444] udc-core: couldn't find an available UDC or it's busy [ 34.210281][ T444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.228361][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 34.235793][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 34.243317][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 34.250887][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 34.257608][ T305] hub 4-1:0.0: activate --> -90 [ 34.258322][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 34.270674][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 34.278106][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 34.285484][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x1 [ 34.292900][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x1 [ 34.300338][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x7 [ 34.301471][ T452] udc-core: couldn't find an available UDC or it's busy [ 34.307775][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x0 [ 34.307790][ T25] pantherlord 0003:0810:0002.0002: unknown main item tag 0x5 [ 34.307811][ T25] pantherlord 0003:0810:0002.0002: unexpected long global item [ 34.315179][ T308] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 34.322319][ T25] pantherlord 0003:0810:0002.0002: parse failed [ 34.329856][ T452] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.337132][ T25] pantherlord: probe of 0003:0810:0002.0002 failed with error -22 [ 34.346482][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 34.373314][ T446] udc-core: couldn't find an available UDC or it's busy [ 34.377576][ T308] usb 1-1: Product: syz [ 34.383360][ T446] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.390565][ T308] usb 1-1: Manufacturer: syz [ 34.401643][ T308] usb 1-1: SerialNumber: syz [ 34.406959][ T308] usb 1-1: config 0 descriptor?? [ 34.448080][ T308] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 34.465778][ T25] usb 3-1: USB disconnect, device number 6 [ 34.598789][ T50] usb 5-1: USB disconnect, device number 5 [ 34.618834][ T20] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 34.638251][ T24] kauditd_printk_skb: 21 callbacks suppressed [ 34.638261][ T24] audit: type=1400 audit(1785558979.279:134): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.677836][ T423] udc-core: couldn't find an available UDC or it's busy [ 34.689562][ T423] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.717608][ T24] audit: type=1400 audit(1785558979.279:135): avc: denied { read } for pid=134 comm="dhcpcd" name="n15" dev="tmpfs" ino=945 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.744800][ T24] audit: type=1400 audit(1785558979.279:136): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=945 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.769604][ T24] audit: type=1400 audit(1785558979.279:137): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=945 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.787576][ T423] udc-core: couldn't find an available UDC or it's busy [ 34.799673][ T24] audit: type=1400 audit(1785558979.409:138): avc: denied { create } for pid=456 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.799703][ T24] audit: type=1400 audit(1785558979.409:139): avc: denied { write } for pid=456 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=948 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.823012][ T423] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.856678][ T24] audit: type=1400 audit(1785558979.409:140): avc: denied { append } for pid=456 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=948 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.881609][ T24] audit: type=1400 audit(1785558979.489:141): avc: denied { unlink } for pid=467 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=948 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.904790][ T308] usb 4-1: USB disconnect, device number 6 [ 35.038699][ T470] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue [ 35.055503][ T24] audit: type=1400 audit(1785558979.689:142): avc: denied { mount } for pid=469 comm="syz.2.51" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.061020][ T470] EXT4-fs error (device loop2): ext4_find_extent:928: inode #2: comm syz.2.51: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 35.095891][ T474] udc-core: couldn't find an available UDC or it's busy [ 35.103076][ T474] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 35.126525][ T24] audit: type=1400 audit(1785558979.759:143): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.128067][ T25] usb 2-1: USB disconnect, device number 6 [ 35.167748][ T25] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 35.249270][ T476] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.52: Failed to acquire dquot type 1 [ 35.260737][ T476] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.52: Failed to acquire dquot type 1 [ 35.268011][ T479] exfat: Unknown parameter 'sys_tz' [ 35.274540][ T476] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.52: bg 0: block 248: padding at end of block bitmap is not set [ 35.291680][ T476] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 35.300747][ T476] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.52: Failed to acquire dquot type 1 [ 35.312095][ T476] EXT4-fs (loop4): 1 orphan inode deleted [ 35.317937][ T476] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue [ 35.329465][ T476] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.363121][ T476] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.52: Failed to acquire dquot type 1 [ 35.550786][ T501] EXT4-fs (loop4): Ignoring removed bh option [ 35.575356][ T501] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,block_validity,init_itable=0x0000000000000005,i_version,noload,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 35.603756][ T503] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 35.680790][ T503] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 35.691194][ T503] EXT4-fs (loop2): can't enable nombcache during remount [ 35.803605][ T507] F2FS-fs (loop3): fault_injection options not supported [ 35.811269][ T507] F2FS-fs (loop3): fault_type options not supported [ 35.819193][ T507] F2FS-fs (loop3): invalid crc value [ 35.825527][ T507] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.846809][ T507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.967614][ T25] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 36.067566][ T308] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.079636][ T527] F2FS-fs (loop3): fault_injection options not supported [ 36.087383][ T527] F2FS-fs (loop3): fault_type options not supported [ 36.094873][ T527] F2FS-fs (loop3): invalid crc value [ 36.101290][ T527] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.123153][ T527] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 36.127603][ T305] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 36.168632][ T307] usb 1-1: USB disconnect, device number 5 [ 36.252657][ T533] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.341294][ T543] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 36.357134][ T540] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.427554][ T308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.437769][ T308] usb 3-1: config 0 has no interfaces? [ 36.443249][ T308] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 36.452525][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.467866][ T308] usb 3-1: config 0 descriptor?? [ 36.497540][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.508821][ T550] exfat: Deprecated parameter 'utf8' [ 36.509484][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.516272][ T550] exfat: Deprecated parameter 'namecase' [ 36.523944][ T305] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 36.523954][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.524534][ T305] usb 2-1: config 0 descriptor?? [ 36.547594][ T25] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 36.560735][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.568979][ T25] usb 5-1: Product: syz [ 36.573131][ T25] usb 5-1: Manufacturer: syz [ 36.577755][ T25] usb 5-1: SerialNumber: syz [ 36.598354][ T548] F2FS-fs (loop3): invalid crc value [ 36.612871][ T550] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 36.625073][ T548] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.651763][ T548] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 36.658766][ T548] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 36.838594][ T561] EXT4-fs (loop0): Test dummy encryption mode enabled [ 36.846994][ T561] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.73: inode has both inline data and extents flags [ 36.860756][ T561] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.73: couldn't read orphan inode 15 (err -117) [ 36.865431][ T566] EXT4-fs warning (device loop3): dx_probe:806: inode #2: comm syz.3.74: Unrecognised inode hash code 255 [ 36.872784][ T561] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 36.884385][ T566] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.74: Corrupt directory, running e2fsck is recommended [ 36.907743][ T566] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 36.914459][ T561] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 36.916042][ T566] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.74: corrupted in-inode xattr [ 36.926952][ T561] EXT4-fs (loop0): re-mounted. Opts: [ 36.936315][ T566] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.74: couldn't read orphan inode 15 (err -117) [ 36.953361][ T566] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue [ 36.979962][ T566] EXT4-fs warning (device loop3): dx_probe:806: inode #2: comm syz.3.74: Unrecognised inode hash code 255 [ 36.991312][ T566] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.74: Corrupt directory, running e2fsck is recommended [ 37.004615][ T566] EXT4-fs warning (device loop3): dx_probe:806: inode #2: comm syz.3.74: Unrecognised inode hash code 255 [ 37.016071][ T566] EXT4-fs warning (device loop3): dx_probe:946: inode #2: comm syz.3.74: Corrupt directory, running e2fsck is recommended [ 37.016869][ T305] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x2 [ 37.029395][ T566] EXT4-fs (loop3): shut down requested (2) [ 37.037782][ T305] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 37.068187][ T25] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 37.134460][ T572] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e018, mo2=0000] [ 37.144001][ T572] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.75: lblock 2 mapped to illegal pblock 2 (length 1) [ 37.157953][ T572] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 48: comm syz.0.75: lblock 0 mapped to illegal pblock 48 (length 1) [ 37.172099][ T572] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.75: Failed to acquire dquot type 0 [ 37.183494][ T572] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 37.193395][ T572] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.75: mark_inode_dirty error [ 37.204657][ T582] exfat: Deprecated parameter 'namecase' [ 37.204998][ T572] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 37.210558][ T582] exfat: Deprecated parameter 'utf8' [ 37.226328][ T572] EXT4-fs (loop0): 1 orphan inode deleted [ 37.232405][ T572] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,debug,,errors=continue [ 37.252697][ T306] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.268978][ T582] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 37.278194][ T306] EXT4-fs error (device loop0): ext4_release_dquot:6266: comm kworker/u4:3: Failed to release dquot type 0 [ 37.304097][ T572] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm syz.0.75: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.322866][ T279] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 37.335871][ T279] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 37.345524][ T279] EXT4-fs error (device loop0): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error [ 37.414893][ T588] udc-core: couldn't find an available UDC or it's busy [ 37.422149][ T588] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.499208][ T590] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 37.638006][ T522] udc-core: couldn't find an available UDC or it's busy [ 37.645061][ T522] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.658130][ T599] EXT4-fs (loop0): Ignoring removed oldalloc option [ 37.669014][ T599] EXT4-fs (loop0): mounted filesystem without journal. Opts: oldalloc,minixdf,quota,,errors=continue [ 37.680131][ T599] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.694953][ T599] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 37.703488][ T599] EXT4-fs error (device loop0): ext4_dirty_inode:6181: inode #2: comm syz.0.82: mark_inode_dirty error [ 37.714945][ T599] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 37.723524][ T599] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #2: comm syz.0.82: mark_inode_dirty error [ 37.737420][ T599] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #2: comm syz.0.82: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 37.770267][ T603] udc-core: couldn't find an available UDC or it's busy [ 37.777356][ T603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.817517][ T50] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 37.857607][ T305] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 37.865100][ T305] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 37.872118][ T305] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -71 [ 37.894142][ T305] usb 2-1: USB disconnect, device number 7 [ 37.906194][ T607] fido_id[607]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 37.986155][ T603] udc-core: couldn't find an available UDC or it's busy [ 37.993677][ T603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.009688][ T603] udc-core: couldn't find an available UDC or it's busy [ 38.016753][ T603] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.057696][ T614] exfat: Deprecated parameter 'utf8' [ 38.089682][ T614] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 38.179073][ T619] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.299030][ T627] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue [ 38.337610][ T50] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 38.346732][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.354920][ T50] usb 4-1: Product: syz [ 38.359125][ T50] usb 4-1: Manufacturer: syz [ 38.363704][ T50] usb 4-1: SerialNumber: syz [ 38.459874][ T634] EXT4-fs (loop1): Test dummy encryption mode enabled [ 38.467548][ T634] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 38.482034][ T634] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.599096][ T639] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.612281][ T639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.623184][ T639] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.93: invalid indirect mapped block 9 (level 0) [ 38.636477][ T639] EXT4-fs (loop1): 1 truncate cleaned up [ 38.642483][ T639] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue [ 38.647513][ T308] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.803562][ T307] usb 3-1: USB disconnect, device number 7 [ 38.820441][ T649] 9pnet_virtio: no channels available for device ./proc [ 38.827921][ T50] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 38.897510][ T308] usb 1-1: Using ep0 maxpacket: 32 [ 38.960215][ T25] usb 5-1: USB disconnect, device number 6 [ 38.977485][ C0] usblp0: nonzero write bulk status received: -108 [ 38.984692][ T515] usblp0: removed [ 38.994625][ T656] exfat: Unknown parameter 'keep_last_dots' [ 39.062828][ T654] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 39.072530][ T654] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.083373][ T654] F2FS-fs (loop2): invalid crc value [ 39.091544][ T654] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 39.102709][ T660] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 39.132746][ T654] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 39.140519][ T654] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.171223][ T667] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 39.185439][ T667] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 39.185833][ T308] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 39.194664][ T667] ext2 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.205777][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.222523][ T308] usb 1-1: Product: syz [ 39.226704][ T308] usb 1-1: Manufacturer: syz [ 39.231736][ T308] usb 1-1: SerialNumber: syz [ 39.352007][ T672] EXT4-fs (loop1): Ignoring removed bh option [ 39.358204][ T672] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.370525][ T669] udc-core: couldn't find an available UDC or it's busy [ 39.377649][ T669] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.379688][ T672] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 39.400034][ T672] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.103: bg 0: block 248: padding at end of block bitmap is not set [ 39.414724][ T672] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.103: Failed to acquire dquot type 1 [ 39.426773][ T672] EXT4-fs (loop1): 1 truncate cleaned up [ 39.432922][ T672] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,inlinecrypt,nombcache,,errors=continue [ 39.464646][ T672] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.103: Failed to acquire dquot type 1 [ 39.482622][ T7] EXT4-fs error (device loop1): ext4_release_dquot:6266: comm kworker/u4:0: Failed to release dquot type 1 [ 39.525199][ T632] udc-core: couldn't find an available UDC or it's busy [ 39.532435][ T632] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.540934][ T25] usb 1-1: USB disconnect, device number 6 [ 39.569130][ T684] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 39.586417][ T669] udc-core: couldn't find an available UDC or it's busy [ 39.596002][ T669] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.618172][ T669] udc-core: couldn't find an available UDC or it's busy [ 39.626311][ T669] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.729572][ T693] EXT4-fs (loop2): Ignoring removed orlov option [ 39.730309][ T686] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 39.738123][ T693] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 39.743763][ T686] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 39.751510][ T693] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 39.759707][ T686] F2FS-fs (loop4): fault_injection options not supported [ 39.767094][ T693] System zones: [ 39.774323][ T697] exfat: Unknown parameter 'sys_tz' [ 39.774409][ T686] F2FS-fs (loop4): fault_type options not supported [ 39.790028][ T693] 0-1, 3-36 [ 39.790948][ T686] F2FS-fs (loop4): invalid crc value [ 39.794506][ T693] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue [ 39.820621][ T686] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.842043][ T686] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 39.849153][ T686] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.052312][ T24] kauditd_printk_skb: 58 callbacks suppressed [ 40.052323][ T24] audit: type=1400 audit(1785558984.689:185): avc: denied { remove_name } for pid=683 comm="syz.4.106" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.082302][ T283] attempt to access beyond end of device [ 40.082302][ T283] loop4: rw=2049, want=45104, limit=40427 [ 40.094803][ T24] audit: type=1400 audit(1785558984.689:186): avc: denied { unlink } for pid=683 comm="syz.4.106" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.119731][ T24] audit: type=1400 audit(1785558984.739:187): avc: denied { create } for pid=709 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.139173][ T707] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 40.139269][ T24] audit: type=1400 audit(1785558984.739:188): avc: denied { setopt } for pid=709 comm="syz.0.113" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.171438][ T24] audit: type=1400 audit(1785558984.739:189): avc: denied { connect } for pid=709 comm="syz.0.113" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.195717][ T24] audit: type=1400 audit(1785558984.739:190): avc: denied { write } for pid=709 comm="syz.0.113" laddr=fe80::d04e:77ff:fe04:e6cc lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.231714][ T24] audit: type=1400 audit(1785558984.869:191): avc: denied { append } for pid=706 comm="syz.1.110" path="/21/bus/cgroup.controllers" dev="loop1" ino=1048630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.493263][ T24] audit: type=1400 audit(1785558985.129:192): avc: denied { map_create } for pid=727 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.513067][ T24] audit: type=1400 audit(1785558985.129:193): avc: denied { bpf } for pid=727 comm="syz.0.118" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.533582][ T24] audit: type=1400 audit(1785558985.129:194): avc: denied { map_read map_write } for pid=727 comm="syz.0.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.537994][ T724] exfat: Deprecated parameter 'namecase' [ 40.559272][ T724] exfat: Deprecated parameter 'namecase' [ 40.646253][ T724] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 40.661659][ T25] usb 4-1: USB disconnect, device number 7 [ 40.666660][ T723] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 40.678302][ T25] usblp1: removed [ 40.707942][ T737] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.123: bg 0: block 4: invalid block bitmap [ 40.727415][ T737] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.740767][ T737] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.123: inode #1: comm syz.0.123: iget: illegal inode # [ 40.758557][ T737] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.123: error while reading EA inode 1 err=-117 [ 40.786183][ T737] ------------[ cut here ]------------ [ 40.791816][ T737] EA inode 11 i_nlink=1026 [ 40.791911][ T737] WARNING: CPU: 0 PID: 737 at fs/ext4/xattr.c:1002 ext4_xattr_inode_update_ref+0x4ea/0x540 [ 40.807590][ T737] Modules linked in: [ 40.811870][ T737] CPU: 1 PID: 737 Comm: syz.0.123 Not tainted syzkaller #0 [ 40.819386][ T737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.829893][ T737] RIP: 0010:ext4_xattr_inode_update_ref+0x4ea/0x540 [ 40.836545][ T737] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 19 19 be ff 49 8b 34 24 48 c7 c7 20 e2 2c 85 44 89 fa e8 e6 e4 97 02 <0f> 0b 4c 8b 74 24 08 4c 8b 64 24 10 e9 a5 fe ff ff e8 f0 89 9b 02 [ 40.856497][ T737] RSP: 0018:ffffc9000b8772c0 EFLAGS: 00010246 [ 40.862850][ T737] RAX: e0a89d0309725400 RBX: ffff88812cdcdb90 RCX: 0000000000080000 [ 40.871963][ T737] RDX: ffffc9000190c000 RSI: 000000000000fcc9 RDI: 000000000000fcca [ 40.880129][ T737] RBP: ffffc9000b8773b0 R08: ffff8881f7027453 R09: 1ffff1103ee04e8a [ 40.893858][ T737] R10: dffffc0000000000 R11: ffffed103ee04e8b R12: ffff88812cdcda70 [ 40.902180][ T737] R13: dffffc0000000000 R14: ffff88812cdcda30 R15: 0000000000000402 [ 40.910247][ T737] FS: 00007f6c2945b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 40.919420][ T737] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.926043][ T737] CR2: 0000001b2e61bff8 CR3: 000000012bda1000 CR4: 00000000003506a0 [ 40.934271][ T737] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.942669][ T737] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.951301][ T737] Call Trace: [ 40.952105][ T749] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 40.954703][ T737] ? ext4_xattr_block_csum+0x560/0x560 [ 40.965548][ T749] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.971200][ T737] ? __ext4_journal_ensure_credits+0x30/0x470 [ 40.987293][ T737] ? ext4_xattr_inode_dec_ref_all+0x394/0xf20 [ 40.993444][ T737] ext4_xattr_inode_dec_ref_all+0x91a/0xf20 [ 41.000476][ T737] ? ext4_xattr_delete_inode+0xc00/0xc00 [ 41.007224][ T737] ? __ext4_journal_ensure_credits+0x470/0x470 [ 41.013483][ T737] ? ext4_get_inode_loc+0x100/0x130 [ 41.018832][ T737] ext4_xattr_delete_inode+0xa42/0xc00 [ 41.024378][ T737] ? ext4_truncate+0xe20/0x1220 [ 41.029606][ T737] ? ext4_expand_extra_isize_ea+0x1940/0x1940 [ 41.035914][ T737] ? __ext4_mark_inode_dirty+0x444/0x610 [ 41.041667][ T737] ext4_evict_inode+0x10e2/0x1780 [ 41.048356][ T737] ? _raw_spin_unlock+0x4d/0x70 [ 41.053329][ T737] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 41.059336][ T737] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 41.065480][ T737] evict+0x4a9/0x940 [ 41.069479][ T737] ? mode_strip_sgid+0x150/0x150 [ 41.075800][ T737] ? _raw_spin_lock+0x94/0xf0 [ 41.080603][ T737] ? _raw_spin_trylock_bh+0x150/0x150 [ 41.086324][ T737] ? ext4_get_projid+0x140/0x140 [ 41.091885][ T737] ? __kasan_check_write+0x14/0x20 [ 41.096994][ T737] iput+0x654/0x7e0 [ 41.100959][ T737] ext4_orphan_cleanup+0x989/0xd40 [ 41.106142][ T737] ext4_fill_super+0x867e/0x8d90 [ 41.114294][ T737] ? ext4_mount+0x40/0x40 [ 41.118927][ T737] ? vscnprintf+0x80/0x80 [ 41.123261][ T737] ? set_blocksize+0x1eb/0x3a0 [ 41.128066][ T737] ? sb_set_blocksize+0xaa/0xf0 [ 41.132985][ T737] mount_bdev+0x26a/0x380 [ 41.137321][ T737] ? ext4_mount+0x40/0x40 [ 41.146919][ T737] ext4_mount+0x34/0x40 [ 41.151294][ T737] legacy_get_tree+0xed/0x190 [ 41.156034][ T737] ? ext4_chksum+0x180/0x180 [ 41.161004][ T737] vfs_get_tree+0x89/0x260 [ 41.165420][ T737] do_new_mount+0x25a/0xa30 [ 41.175236][ T737] path_mount+0x581/0xca0 [ 41.180063][ T737] __se_sys_mount+0x320/0x390 [ 41.186146][ T737] ? __x64_sys_mount+0xd0/0xd0 [ 41.192058][ T737] __x64_sys_mount+0xbf/0xd0 [ 41.196763][ T737] do_syscall_64+0x31/0x40 [ 41.197823][ T769] tmpfs: Unsupported parameter 'mpol' [ 41.201768][ T737] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.229415][ T737] RIP: 0033:0x7f6c2aa0328a [ 41.234041][ T737] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.464866][ T737] RSP: 002b:00007f6c2945ae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.473663][ T737] RAX: ffffffffffffffda RBX: 00007f6c2945aee0 RCX: 00007f6c2aa0328a [ 41.480223][ T793] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=793 comm=syz.1.145 [ 41.482177][ T737] RDX: 0000200000000340 RSI: 0000200000000140 RDI: 00007f6c2945aea0 [ 41.502537][ T737] RBP: 0000200000000340 R08: 00007f6c2945aee0 R09: 0000000000800718 [ 41.510764][ T737] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 41.518935][ T737] R13: 00007f6c2945aea0 R14: 00000000000004aa R15: 0000200000000680 [ 41.529544][ T737] ---[ end trace cdb015fcd73fd49e ]--- [ 41.536281][ T737] EXT4-fs (loop0): 1 orphan inode deleted [ 41.542265][ T737] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x000000000000ee01,journal_dev=0x00000000040000ff,debug_want_extra_isize=0x0000000000000060,nodiscard,resgid=0x0000000000000000,resuid=0x0000000000000000,nombcache,noblock_validity,usrquota,journal_ioprio=0x0000000000,errors=continue [ 41.573899][ T788] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 41.583237][ T788] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.602249][ T306] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.616154][ T803] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.149: inode has both inline data and extents flags [ 41.639860][ T737] EXT4-fs error (device loop0): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.0.123: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 41.641780][ T306] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 41.669813][ T803] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.149: couldn't read orphan inode 15 (err -117) [ 41.673451][ T306] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.673451][ T306] [ 41.700322][ T803] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 41.798614][ T820] netlink: 76 bytes leftover after parsing attributes in process `syz.1.154'. [ 42.028192][ T833] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 42.070827][ T846] netlink: 'syz.1.162': attribute type 5 has an invalid length. [ 42.088247][ T846] netlink: 45 bytes leftover after parsing attributes in process `syz.1.162'. [ 42.216046][ T849] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 42.227584][ T849] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.294759][ T872] process 'syz.0.174' launched './file0' with NULL argv: empty string added [ 42.411668][ T888] SELinux: Context AÇÂ)ëát·'ðÃñÐ*'属õÿkµªì is not valid (left unmapped). [ 42.608488][ T919] device veth1_macvtap left promiscuous mode [ 42.885615][ T917] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,bsddf,nobarrier,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,norecovery,nouid32,,errors=continue [ 42.958256][ T944] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 42.968558][ T944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 42.976535][ T944] System zones: 1-12 [ 42.980900][ T944] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.989837][ T944] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.204: bg 0: block 361: padding at end of block bitmap is not set [ 43.007136][ T944] EXT4-fs (loop1): Remounting filesystem read-only [ 43.014322][ T944] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 43.024405][ T944] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.204: invalid indirect mapped block 12 (level 1) [ 43.191087][ T944] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.204: invalid indirect mapped block 2 (level 2) [ 43.210954][ T944] EXT4-fs (loop1): 1 truncate cleaned up [ 43.216852][ T944] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,acl,inode_readahead_blks=0x0000000000000040,errors=remount-ro,init_itable [ 43.236287][ T951] EXT4-fs (loop4): Ignoring removed orlov option [ 43.270609][ T951] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.206: iget: bad extra_isize 90 (inode size 256) [ 43.284326][ T951] EXT4-fs (loop4): Remounting filesystem read-only [ 43.290929][ T951] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.206: error while reading EA inode 11 err=-117 [ 43.303606][ T951] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.206: iget: bad extra_isize 90 (inode size 256) [ 43.317365][ T951] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.206: error while reading EA inode 11 err=-117 [ 43.358428][ T959] SELinux: Context AÇÂ)ëát·'ðÃñÐ*'属õÿkµªì¨¶Ø´œL¨&ñÒzª [ 43.358428][ T959] : is not valid (left unmapped). [ 43.370925][ T951] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.206: iget: bad extra_isize 90 (inode size 256) [ 43.384897][ T951] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.206: error while reading EA inode 18 err=-117 [ 43.399417][ T951] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #18: comm syz.4.206: iget: bad extra_isize 90 (inode size 256) [ 43.412882][ T951] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.206: error while reading EA inode 18 err=-117 [ 43.425450][ T951] EXT4-fs (loop4): 1 orphan inode deleted [ 43.434746][ T951] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,noload,debug_want_extra_isize=0x000000000000005a,errors=remount-ro,grpid,noquota,min_batch_time=0x0000000000000003,orlov, [ 43.496714][ T972] tipc: Started in network mode [ 43.502471][ T972] tipc: Own node identity b61aa733539b, cluster identity 4711 [ 43.511746][ T972] tipc: Enabled bearer , priority 0 [ 43.518969][ T972] device syzkaller0 entered promiscuous mode [ 43.526975][ T972] tipc: Resetting bearer [ 43.533227][ T971] tipc: Resetting bearer [ 43.539466][ T971] tipc: Disabling bearer [ 43.558852][ T975] tipc: Started in network mode [ 43.563843][ T975] tipc: Own node identity 32ef347e2523, cluster identity 4711 [ 43.576026][ T975] tipc: Enabled bearer , priority 0 [ 43.596673][ T975] device syzkaller0 entered promiscuous mode [ 43.612020][ T982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 43.624805][ T973] tipc: Resetting bearer [ 43.637047][ T973] tipc: Disabling bearer [ 43.704608][ T986] tipc: Started in network mode [ 43.709555][ T986] tipc: Own node identity 4, cluster identity 4711 [ 43.716081][ T986] tipc: 32-bit node address hash set to 4 [ 43.884339][ T989] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.024902][ T1002] tipc: Enabling of bearer rejected, failed to enable media [ 44.088787][ T1008] FAT-fs (loop0): Directory bread(block 1285) failed [ 44.095583][ T1008] FAT-fs (loop0): Directory bread(block 1286) failed [ 44.102528][ T1008] FAT-fs (loop0): Directory bread(block 1287) failed [ 44.111663][ T1008] FAT-fs (loop0): Directory bread(block 1288) failed [ 44.120601][ T1008] FAT-fs (loop0): Directory bread(block 1285) failed [ 44.127563][ T1008] FAT-fs (loop0): Directory bread(block 1286) failed [ 44.134391][ T1008] FAT-fs (loop0): Directory bread(block 1287) failed [ 44.141185][ T1008] FAT-fs (loop0): Directory bread(block 1288) failed [ 44.148054][ T1008] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 44.155743][ T1008] FAT-fs (loop0): Directory bread(block 1285) failed [ 44.242915][ T1013] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.232: inode has both inline data and extents flags [ 44.256169][ T50] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 44.259910][ T1013] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.232: couldn't read orphan inode 15 (err -117) [ 44.275754][ T1013] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 44.277340][ T1017] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,grpquota, [ 44.294813][ T1017] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.337510][ T1013] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 44.377532][ T320] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.440642][ T1024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 44.502395][ T1022] EXT4-fs (loop0): Ignoring removed orlov option [ 44.508861][ T50] usb 4-1: Using ep0 maxpacket: 16 [ 44.516147][ T1022] EXT4-fs (loop0): Ignoring removed oldalloc option [ 44.529164][ T1022] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 44.537634][ T1022] System zones: 0-1, 3-12 [ 44.542421][ T1022] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,debug,max_dir_size_kb=0x0000000000000003,orlov,oldalloc,barrier=0x0000000000000006,nogrpid,resuid=0x0000000000000000,grpjquota=,,errors=continue [ 44.589924][ T1022] EXT4-fs error (device loop0): ext4_lookup:1830: inode #13: comm syz.0.234: unexpected EA_INODE flag [ 44.629219][ T50] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 44.641546][ T50] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 44.647476][ T320] usb 3-1: Using ep0 maxpacket: 32 [ 44.650248][ T50] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 44.664756][ T50] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 44.677767][ T50] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 44.692395][ T50] usb 4-1: config 0 has no interface number 0 [ 44.701764][ T50] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 44.705891][ T1058] Zero length message leads to an empty skb [ 44.714937][ T50] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 44.773885][ T50] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 44.783952][ T50] usb 4-1: too many endpoints for config 0 interface 125 altsetting 255: 255, using maximum allowed: 30 [ 44.795395][ T50] usb 4-1: config 0 interface 125 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 44.809010][ T50] usb 4-1: config 0 interface 125 has no altsetting 0 [ 44.815769][ T50] usb 4-1: config 0 interface 125 has no altsetting 1 [ 44.824149][ T1063] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #11: comm syz.1.253: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 44.842875][ T1063] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.253: couldn't read orphan inode 11 (err -117) [ 44.857706][ T1063] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 44.867791][ T320] usb 3-1: unable to get BOS descriptor or descriptor too short [ 44.937852][ T320] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 44.945665][ T320] usb 3-1: can't read configurations, error -71 [ 45.022193][ T1085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 45.067560][ T50] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 45.076847][ T50] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.084921][ T50] usb 4-1: Product: syz [ 45.089237][ T50] usb 4-1: Manufacturer: syz [ 45.097939][ T50] usb 4-1: SerialNumber: syz [ 45.110401][ T50] usb 4-1: config 0 descriptor?? [ 45.119560][ T24] kauditd_printk_skb: 81 callbacks suppressed [ 45.119571][ T24] audit: type=1400 audit(1785558989.759:276): avc: denied { write } for pid=1094 comm="syz.0.266" path="socket:[17573]" dev="sockfs" ino=17573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.157850][ T1097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.267'. [ 45.166841][ T1097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 45.230418][ T1099] attempt to access beyond end of device [ 45.230418][ T1099] loop1: rw=2049, want=140, limit=128 [ 45.244008][ T1099] attempt to access beyond end of device [ 45.244008][ T1099] loop1: rw=2049, want=142, limit=128 [ 45.254992][ T1099] Buffer I/O error on dev loop1, logical block 70, lost async page write [ 45.263631][ T1099] attempt to access beyond end of device [ 45.263631][ T1099] loop1: rw=2049, want=144, limit=128 [ 45.274604][ T1099] Buffer I/O error on dev loop1, logical block 71, lost async page write [ 45.283173][ T1099] attempt to access beyond end of device [ 45.283173][ T1099] loop1: rw=2049, want=146, limit=128 [ 45.289606][ T1102] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 45.294096][ T1099] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 45.313120][ T1099] attempt to access beyond end of device [ 45.313120][ T1099] loop1: rw=2049, want=250, limit=128 [ 45.321226][ T1102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 45.332387][ T1104] attempt to access beyond end of device [ 45.332387][ T1104] loop1: rw=2049, want=140, limit=128 [ 45.332989][ T1102] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.343505][ T1104] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 45.351955][ T1102] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.269: bad orphan inode 3 [ 45.359334][ T997] udc-core: couldn't find an available UDC or it's busy [ 45.368491][ T1102] EXT4-fs (loop0): Remounting filesystem read-only [ 45.380936][ T997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 45.382261][ T1102] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback [ 45.410716][ T1102] EXT4-fs warning (device loop0): dx_probe:860: inode #2: comm syz.0.269: dx entry: limit 0 != root limit 125 [ 45.422550][ T1102] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.269: Corrupt directory, running e2fsck is recommended [ 45.573359][ T1114] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 45.581947][ T1117] netlink: 68 bytes leftover after parsing attributes in process `syz.4.274'. [ 45.589290][ T1109] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 45.595603][ T1114] FAT-fs (loop0): Filesystem has been set read-only [ 45.629665][ T50] usb 4-1: USB disconnect, device number 8 [ 45.645989][ T1109] EXT4-fs error (device loop2): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 45.757553][ T1127] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue [ 45.771619][ T1127] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.776095][ T24] audit: type=1400 audit(1785558990.409:277): avc: denied { bind } for pid=1141 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.812995][ T1139] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.829930][ T1139] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.833972][ T24] audit: type=1400 audit(1785558990.469:278): avc: denied { create } for pid=1146 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.867864][ T24] audit: type=1400 audit(1785558990.489:279): avc: denied { create } for pid=1144 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.921161][ T24] audit: type=1400 audit(1785558990.559:280): avc: denied { append } for pid=1148 comm="syz.4.287" name="event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.986291][ T24] audit: type=1400 audit(1785558990.609:281): avc: denied { getopt } for pid=1150 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.006626][ T24] audit: type=1400 audit(1785558990.619:282): avc: denied { lock } for pid=1154 comm="syz.4.290" path="socket:[17016]" dev="sockfs" ino=17016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 46.048759][ T1157] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,data_err=ignore,,errors=continue [ 46.060849][ T1157] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.436780][ T24] audit: type=1400 audit(1785558991.069:283): avc: denied { ioctl } for pid=1200 comm="syz.0.308" path="socket:[17077]" dev="sockfs" ino=17077 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.484642][ T1189] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 46.542678][ T24] audit: type=1400 audit(1785558991.179:284): avc: denied { create } for pid=1213 comm="syz.4.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.562418][ T24] audit: type=1400 audit(1785558991.179:285): avc: denied { ioctl } for pid=1213 comm="syz.4.314" path="socket:[17105]" dev="sockfs" ino=17105 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.658871][ T307] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.681719][ T1217] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,bsddf,nobarrier,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,norecovery,nouid32,,errors=continue [ 46.767888][ T1234] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 46.897522][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 46.904060][ T1245] mmap: syz.2.326 (1245) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 46.949247][ T1251] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.024254][ T1253] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.027696][ T307] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 47.032123][ T1253] EXT4-fs (loop3): 1 orphan inode deleted [ 47.043303][ T307] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 47.045014][ T1253] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 47.053150][ T307] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 47.070586][ T1256] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.086965][ T1256] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 47.103650][ T307] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 47.107804][ T1253] EXT4-fs error (device loop3): ext4_remount:5882: Abort forced by user [ 47.118305][ T307] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 47.120437][ T1256] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.330: iget: bad i_size value: 360287970189639680 [ 47.129695][ T307] usb 2-1: config 0 has no interface number 0 [ 47.148646][ T1256] EXT4-fs (loop2): Remounting filesystem read-only [ 47.155368][ T1256] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.330: couldn't read orphan inode 15 (err -117) [ 47.167817][ T1256] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota, [ 47.167831][ T307] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 47.167852][ T307] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 47.198998][ T307] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 47.209678][ T307] usb 2-1: too many endpoints for config 0 interface 125 altsetting 255: 255, using maximum allowed: 30 [ 47.220937][ T307] usb 2-1: config 0 interface 125 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 47.234690][ T307] usb 2-1: config 0 interface 125 has no altsetting 0 [ 47.242017][ T307] usb 2-1: config 0 interface 125 has no altsetting 1 [ 47.251004][ T1264] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,bsddf,nobarrier,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,norecovery,nouid32,,errors=continue [ 47.346571][ T1274] xt_hashlimit: size too large, truncated to 1048576 [ 47.355161][ T1271] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,max_dir_size_kb=0x0000000000000003,,errors=continue [ 47.368822][ T1271] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.407564][ T307] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 47.416590][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.425096][ T307] usb 2-1: Product: syz [ 47.430417][ T307] usb 2-1: Manufacturer: syz [ 47.435020][ T307] usb 2-1: SerialNumber: syz [ 47.440309][ T307] usb 2-1: config 0 descriptor?? [ 47.442995][ T1271] EXT4-fs error (device loop2): ext4_empty_dir:3083: inode #12: block 32: comm syz.2.334: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 47.466728][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3085: inode #12: comm syz.2.334: directory missing '.' [ 47.559600][ T1287] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.577327][ T1290] xt_hashlimit: size too large, truncated to 1048576 [ 47.678895][ T1196] udc-core: couldn't find an available UDC or it's busy [ 47.691400][ T1196] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.733207][ T1299] tc_dump_action: action bad kind [ 47.845146][ T1302] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,bsddf,nobarrier,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,norecovery,nouid32,,errors=continue [ 47.901553][ T1319] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.940943][ T307] usb 2-1: USB disconnect, device number 8 [ 48.007789][ T1325] EXT4-fs (loop0): 1 orphan inode deleted [ 48.031740][ T1325] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,inlinecrypt,usrquota,jqfmt=vfsv1,nombcache,delalloc,dioread_lock,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue [ 48.154849][ T1347] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 48.209037][ T1343] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,bsddf,nobarrier,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,norecovery,nouid32,,errors=continue [ 48.297057][ T1356] netlink: 'syz.4.366': attribute type 12 has an invalid length. [ 49.656136][ T1378] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,bsddf,nobarrier,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,norecovery,nouid32,,errors=continue [ 49.739743][ T1393] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 49.748093][ T1393] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.381: corrupted in-inode xattr [ 49.760399][ T1393] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.381: couldn't read orphan inode 15 (err -117) [ 49.772358][ T1393] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue [ 49.802448][ T1402] smpboot: CPU 1 is now offline [ 49.809843][ T1402] x86: Booting SMP configuration: [ 49.814897][ T1402] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 49.821775][ T0] kvm-clock: cpu 1, msr 6e79041, secondary cpu clock [ 49.822819][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 49.843476][ T1395] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noload,,errors=continue [ 49.849907][ T1407] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.871569][ T1395] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.892343][ T1395] EXT4-fs error (device loop4): ext4_empty_dir:3074: inode #12: comm syz.4.382: invalid size [ 49.956633][ T1412] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 49.967234][ T1412] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.127563][ T308] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 50.139117][ T1453] udc-core: couldn't find an available UDC or it's busy [ 50.239965][ T1463] futex_wake_op: syz.2.404 tries to shift op by 144; fix this program [ 50.257586][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 50.257634][ T24] audit: type=1400 audit(1785558994.889:301): avc: denied { write } for pid=1450 comm="syz.2.404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.391249][ T1459] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.409780][ T1470] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.423989][ T1470] EXT4-fs (loop2): 1 truncate cleaned up [ 50.429783][ T1470] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,barrier,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nombcache,quota,nojournal_checksum, [ 50.537777][ T308] usb 4-1: device descriptor read/64, error -71 [ 50.645370][ T1486] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.415: inode has both inline data and extents flags [ 50.660153][ T1486] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.415: couldn't read orphan inode 15 (err -117) [ 50.675579][ T1486] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 50.727090][ T24] audit: type=1400 audit(1785558995.359:302): avc: denied { setattr } for pid=1483 comm="syz.4.415" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.749083][ T1492] EXT4-fs (loop2): Mount option "nodioread_nolock" incompatible with ext2 [ 50.815375][ T24] audit: type=1326 audit(1785558995.449:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1498 comm="syz.0.422" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2aa02019 code=0x7ffc0000 [ 50.860309][ T24] audit: type=1326 audit(1785558995.479:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1498 comm="syz.0.422" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2aa02019 code=0x7ffc0000 [ 50.887376][ T24] audit: type=1326 audit(1785558995.529:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1498 comm="syz.0.422" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2aa02019 code=0x7ffc0000 [ 50.912527][ T24] audit: type=1326 audit(1785558995.529:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1498 comm="syz.0.422" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2aa02019 code=0x7ffc0000 [ 50.937538][ T24] audit: type=1326 audit(1785558995.529:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1498 comm="syz.0.422" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6c2aa02019 code=0x7ffc0000 [ 50.946686][ T308] usb 4-1: device descriptor read/64, error -71 [ 50.983977][ T24] audit: type=1326 audit(1785558995.529:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1498 comm="syz.0.422" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6c2aa01d82 code=0x7ffc0000 [ 51.008626][ T24] audit: type=1326 audit(1785558995.529:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1498 comm="syz.0.422" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6c2a9c284e code=0x7ffc0000 [ 51.034649][ T24] audit: type=1326 audit(1785558995.529:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1498 comm="syz.0.422" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6c2aa01e47 code=0x7ffc0000 [ 51.782771][ T1536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 51.798671][ T1533] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,bsddf,nobarrier,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,norecovery,nouid32,,errors=continue [ 51.837610][ T308] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 51.988052][ T1557] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 51.998398][ T1557] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 52.048507][ T1557] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,nojournal_checksum,noblock_validity,nomblk_io_submit,inlinecrypt,nouid32,nomblk_io_submit,noinit_itable,grpid,,errors=continue [ 52.070043][ T1557] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.092621][ T1557] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.444: bg 0: block 112: padding at end of block bitmap is not set [ 52.107511][ T308] usb 4-1: device descriptor read/64, error -71 [ 52.110715][ T1557] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 52.114399][ T1566] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,bsddf,nobarrier,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,inlinecrypt,grpid,norecovery,nouid32,,errors=continue [ 52.146887][ T1557] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.146887][ T1557] [ 52.167632][ T1557] EXT4-fs (loop0): Total free blocks count 0 [ 52.174036][ T1557] EXT4-fs (loop0): Free/Dirty block details [ 52.181646][ T1557] EXT4-fs (loop0): free_blocks=0 [ 52.186641][ T1557] EXT4-fs (loop0): dirty_blocks=16 [ 52.191968][ T1557] EXT4-fs (loop0): Block reservation details [ 52.198497][ T1557] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 52.321875][ T1588] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.338648][ T1588] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpjquota=,noquota,barrier,auto_da_alloc,dioread_nolock, [ 52.352977][ T1588] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.462059][ T1595] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 52.478899][ T1595] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue [ 52.491317][ T1595] ext4 filesystem being mounted at /100/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.497527][ T308] usb 4-1: device descriptor read/64, error -71 [ 52.557549][ T320] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 52.599483][ T1606] Illegal XDP return value 885981240, expect packet loss! [ 52.627528][ T308] usb usb4-port1: attempt power cycle [ 52.797555][ T320] usb 1-1: Using ep0 maxpacket: 16 [ 52.867915][ T1615] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.888562][ T1615] EXT4-fs (loop3): 1 truncate cleaned up [ 52.894237][ T1615] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 52.927751][ T320] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 52.936135][ T320] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 52.938152][ T1615] loop_set_status: loop3 () has still dirty pages (nrpages=1) [ 52.944548][ T341] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 52.959535][ T320] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 52.963072][ T280] EXT4-fs error (device loop3): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 52.967904][ T320] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 52.996022][ T320] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 53.005056][ T320] usb 1-1: config 0 has no interface number 0 [ 53.011636][ T320] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 53.022737][ T320] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 53.032822][ T320] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 53.042722][ T320] usb 1-1: too many endpoints for config 0 interface 125 altsetting 255: 255, using maximum allowed: 30 [ 53.054019][ T320] usb 1-1: config 0 interface 125 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 53.067679][ T320] usb 1-1: config 0 interface 125 has no altsetting 0 [ 53.074679][ T320] usb 1-1: config 0 interface 125 has no altsetting 1 [ 53.118494][ T306] tipc: Left network mode [ 53.186395][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.193682][ T1620] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.201230][ T1620] device bridge_slave_0 entered promiscuous mode [ 53.208242][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.215339][ T1620] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.222898][ T1620] device bridge_slave_1 entered promiscuous mode [ 53.237500][ T341] usb 3-1: Using ep0 maxpacket: 16 [ 53.257608][ T320] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 53.266979][ T320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.275291][ T320] usb 1-1: Product: syz [ 53.279773][ T320] usb 1-1: Manufacturer: syz [ 53.284374][ T320] usb 1-1: SerialNumber: syz [ 53.285510][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.289942][ T320] usb 1-1: config 0 descriptor?? [ 53.296106][ T1620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.296183][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.315343][ T1620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.340239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.348660][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.356149][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.365911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.374140][ T341] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 53.374633][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.390107][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.390723][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.414566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.415322][ T341] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.423321][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.438837][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.447056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.455258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.470370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.482485][ T1620] device veth0_vlan entered promiscuous mode [ 53.491960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.500442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.508266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.522070][ T1620] device veth1_macvtap entered promiscuous mode [ 53.529397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.542161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.551471][ T1590] udc-core: couldn't find an available UDC or it's busy [ 53.559472][ T1590] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 53.574744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.647539][ T341] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.656763][ T1635] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 53.656839][ T1635] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.666217][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.684757][ T341] usb 3-1: Product: syz [ 53.689357][ T341] usb 3-1: Manufacturer: syz [ 53.694630][ T341] usb 3-1: SerialNumber: syz [ 53.703915][ T306] device bridge_slave_1 left promiscuous mode [ 53.719929][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.729534][ T306] device bridge_slave_0 left promiscuous mode [ 53.745130][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.753947][ T306] device veth0_vlan left promiscuous mode [ 53.874295][ T320] usb 1-1: USB disconnect, device number 7 [ 53.936771][ T1658] netlink: 16 bytes leftover after parsing attributes in process `syz.4.479'. [ 54.008669][ T1610] udc-core: couldn't find an available UDC or it's busy [ 54.015707][ T1610] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 54.060667][ T1610] udc-core: couldn't find an available UDC or it's busy [ 54.072985][ T1610] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 54.081018][ T1610] udc-core: couldn't find an available UDC or it's busy [ 54.088447][ T1610] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 54.096567][ T1610] udc-core: couldn't find an available UDC or it's busy [ 54.103675][ T1610] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 54.163608][ T1680] netlink: 68 bytes leftover after parsing attributes in process `syz.5.487'. [ 54.164372][ T1673] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 54.179568][ T1670] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 54.202538][ T1673] FAT-fs (loop1): Filesystem has been set read-only [ 54.209452][ T1673] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 54.220686][ T1673] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 54.377562][ T341] usb 3-1: 0:2 : does not exist [ 54.378903][ T1685] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 54.415959][ T1685] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.447686][ T1685] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 54.460489][ T1685] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.460489][ T1685] [ 54.470891][ T1685] EXT4-fs (loop4): Total free blocks count 0 [ 54.487845][ T1685] EXT4-fs (loop4): Free/Dirty block details [ 54.495778][ T1685] EXT4-fs (loop4): free_blocks=2415919104 [ 54.501732][ T1685] EXT4-fs (loop4): dirty_blocks=16 [ 54.508281][ T1685] EXT4-fs (loop4): Block reservation details [ 54.557943][ T1685] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 54.577655][ T341] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 54.585783][ T1631] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 54.599385][ T1631] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.599385][ T1631] [ 54.739558][ T1726] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.509: inode has both inline data and extents flags [ 54.753535][ T1726] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.509: couldn't read orphan inode 15 (err -117) [ 54.766051][ T1726] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 54.791923][ T341] usb 3-1: USB disconnect, device number 10 [ 54.845533][ T1742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'. [ 54.978883][ T1765] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.525: invalid indirect mapped block 4294967295 (level 1) [ 55.008939][ T1765] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.525: invalid indirect mapped block 4294967295 (level 1) [ 55.031820][ T1765] EXT4-fs (loop4): 2 truncates cleaned up [ 55.043972][ T1765] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 55.049527][ T1759] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 55.062642][ T1765] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.525: bg 0: block 5: invalid block bitmap [ 55.071449][ T1759] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.385732][ T341] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 55.627481][ T341] usb 3-1: Using ep0 maxpacket: 16 [ 55.747590][ T341] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 55.756438][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.780347][ T341] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 55.947634][ T341] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 55.957233][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.966236][ T341] usb 3-1: Product: syz [ 55.968859][ T1810] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 55.981648][ T1810] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 55.981888][ T341] usb 3-1: Manufacturer: syz [ 55.992657][ T1810] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (240!=20869) [ 56.007528][ T341] usb 3-1: SerialNumber: syz [ 56.008336][ T1810] EXT4-fs error (device loop5): ext4_get_journal_inode:5247: inode #3: comm syz.5.541: iget: bad extra_isize 65535 (inode size 1024) [ 56.026323][ T1810] EXT4-fs (loop5): no journal found [ 56.032505][ T1810] EXT4-fs (loop5): can't get journal size [ 56.039172][ T1810] EXT4-fs error (device loop5): ext4_fill_super:4959: inode #2: comm syz.5.541: iget: bad extra_isize 65535 (inode size 1024) [ 56.052627][ T1810] EXT4-fs (loop5): get root inode failed [ 56.058569][ T1810] EXT4-fs (loop5): mount failed [ 56.225234][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 56.225245][ T24] audit: type=1400 audit(1785559000.859:349): avc: denied { create } for pid=1813 comm="syz.1.543" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.261236][ T24] audit: type=1400 audit(1785559000.889:350): avc: denied { read append open } for pid=1813 comm="syz.1.543" path="/130/file0/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.276167][ T1779] udc-core: couldn't find an available UDC or it's busy [ 56.287070][ T24] audit: type=1400 audit(1785559000.899:351): avc: denied { ioctl } for pid=1813 comm="syz.1.543" path="/130/file0/cgroup.controllers" dev="loop1" ino=18 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.295091][ T1779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 56.333505][ T1779] udc-core: couldn't find an available UDC or it's busy [ 56.340663][ T1779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 56.348923][ T1779] udc-core: couldn't find an available UDC or it's busy [ 56.355978][ T1779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 56.364019][ T1779] udc-core: couldn't find an available UDC or it's busy [ 56.371168][ T1779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 56.379459][ T1827] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.466720][ T1836] ================================================================== [ 56.474931][ T1836] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3160 [ 56.483105][ T1836] Read of size 8 at addr ffff88811c31a4d8 by task syz.4.552/1836 [ 56.490814][ T1836] [ 56.493164][ T1836] CPU: 0 PID: 1836 Comm: syz.4.552 Tainted: G W syzkaller #0 [ 56.494716][ T24] audit: type=1400 audit(1785559001.099:352): avc: denied { write } for pid=1841 comm="syz.1.554" name="netstat" dev="proc" ino=4026532641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 56.501845][ T1836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.501860][ T1836] Call Trace: [ 56.501884][ T1836] __dump_stack+0x21/0x24 [ 56.501902][ T1836] dump_stack_lvl+0x1a7/0x208 [ 56.546972][ T1836] ? show_regs_print_info+0x18/0x18 [ 56.552185][ T1836] ? thaw_kernel_threads+0x220/0x220 [ 56.557481][ T1836] print_address_description+0x7f/0x2c0 [ 56.563026][ T1836] ? tc_setup_flow_action+0x88e/0x3160 [ 56.568485][ T1836] kasan_report+0x100/0x140 [ 56.572997][ T1836] ? flow_action_cookie_create+0x28/0x90 [ 56.578662][ T1836] ? tc_setup_flow_action+0x88e/0x3160 [ 56.584316][ T1836] __asan_report_load8_noabort+0x14/0x20 [ 56.589997][ T1836] tc_setup_flow_action+0x88e/0x3160 [ 56.595293][ T1836] mall_replace_hw_filter+0x2db/0x8c0 [ 56.600674][ T1836] ? pcpu_block_update_hint_alloc+0x8b7/0xc50 [ 56.606760][ T1836] ? mall_set_parms+0x450/0x450 [ 56.611630][ T1836] ? tcf_exts_destroy+0xb0/0xb0 [ 56.616483][ T1836] ? pcpu_alloc+0xf8d/0x16c0 [ 56.621082][ T1836] ? mall_set_parms+0x1a0/0x450 [ 56.625934][ T1836] mall_change+0x546/0x770 [ 56.630355][ T1836] ? __kasan_check_write+0x14/0x20 [ 56.635583][ T1836] ? mall_get+0xa0/0xa0 [ 56.639741][ T1836] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 56.645635][ T1836] tc_new_tfilter+0x1487/0x1ab0 [ 56.650577][ T1836] ? mall_get+0xa0/0xa0 [ 56.654835][ T1836] ? tcf_gate_entry_destructor+0x20/0x20 [ 56.660554][ T1836] ? 0xffffffffa0028000 [ 56.664715][ T1836] ? security_capable+0x87/0xb0 [ 56.669661][ T1836] ? ns_capable+0x8c/0xf0 [ 56.671945][ T24] audit: type=1400 audit(1785559001.269:353): avc: denied { setattr } for pid=1841 comm="syz.1.554" name="netstat" dev="proc" ino=4026532641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 56.673986][ T1836] ? netlink_net_capable+0x125/0x160 [ 56.674002][ T1836] ? tcf_gate_entry_destructor+0x20/0x20 [ 56.707963][ T1836] rtnetlink_rcv_msg+0x811/0xca0 [ 56.712906][ T1836] ? unwind_get_return_address+0x4d/0x90 [ 56.718546][ T1836] ? rtnetlink_bind+0x80/0x80 [ 56.723219][ T1836] ? stack_trace_save+0xa6/0xf0 [ 56.728166][ T1836] ? stack_trace_snprint+0xe0/0xe0 [ 56.733278][ T1836] ? avc_has_perm+0x168/0x3d0 [ 56.737955][ T1836] ? memcpy+0x56/0x70 [ 56.741934][ T1836] ? avc_has_perm+0x27f/0x3d0 [ 56.748346][ T1836] ? __kasan_slab_alloc+0xc9/0xe0 [ 56.753366][ T1836] ? avc_has_perm_noaudit+0x260/0x260 [ 56.758737][ T1836] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.764902][ T1836] ? selinux_nlmsg_lookup+0x398/0x430 [ 56.770275][ T1836] netlink_rcv_skb+0x1e9/0x430 [ 56.775039][ T1836] ? rtnetlink_bind+0x80/0x80 [ 56.779716][ T1836] ? netlink_ack+0xb30/0xb30 [ 56.784305][ T1836] ? __netlink_lookup+0x387/0x3b0 [ 56.789330][ T1836] rtnetlink_rcv+0x1c/0x20 [ 56.793750][ T1836] netlink_unicast+0x86c/0xa30 [ 56.797455][ T341] usb 3-1: 0:2 : does not exist [ 56.798505][ T1836] netlink_sendmsg+0x949/0xb70 [ 56.808083][ T1836] ? netlink_getsockopt+0x530/0x530 [ 56.813280][ T1836] ? security_socket_sendmsg+0x82/0xa0 [ 56.818741][ T1836] ? netlink_getsockopt+0x530/0x530 [ 56.824025][ T1836] ____sys_sendmsg+0x5be/0x8f0 [ 56.828793][ T1836] ? __sys_sendmsg_sock+0x40/0x40 [ 56.833854][ T1836] ? import_iovec+0x7c/0xb0 [ 56.838354][ T1836] ___sys_sendmsg+0x236/0x2e0 [ 56.843032][ T1836] ? __sys_sendmsg+0x280/0x280 [ 56.847827][ T1836] ? alloc_file+0x82/0x580 [ 56.852250][ T1836] ? __fdget+0x1a1/0x230 [ 56.856578][ T1836] __x64_sys_sendmsg+0x201/0x2d0 [ 56.861625][ T1836] ? __kasan_check_write+0x14/0x20 [ 56.866734][ T1836] ? ___sys_sendmsg+0x2e0/0x2e0 [ 56.871596][ T1836] ? __kasan_check_read+0x11/0x20 [ 56.876621][ T1836] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 56.882257][ T1836] do_syscall_64+0x31/0x40 [ 56.886676][ T1836] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.892568][ T1836] RIP: 0033:0x7f53c1ef9019 [ 56.896983][ T1836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.916644][ T1836] RSP: 002b:00007f53c0952028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.925149][ T1836] RAX: ffffffffffffffda RBX: 00007f53c2180fa0 RCX: 00007f53c1ef9019 [ 56.933127][ T1836] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 56.941194][ T1836] RBP: 00007f53c1f9000c R08: 0000000000000000 R09: 0000000000000000 [ 56.949172][ T1836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.957234][ T1836] R13: 00007f53c2181038 R14: 00007f53c2180fa0 R15: 00007ffe1b683368 [ 56.965209][ T1836] [ 56.967553][ T1836] Allocated by task 1836: [ 56.971890][ T1836] __kasan_kmalloc+0xd4/0x100 [ 56.976569][ T1836] __kmalloc+0x19f/0x330 [ 56.980815][ T1836] tcf_idr_create+0x5f/0x790 [ 56.985416][ T1836] tcf_idr_create_from_flags+0x61/0x70 [ 56.990893][ T1836] tcf_gact_init+0x2e6/0x560 [ 56.995490][ T1836] tcf_action_init_1+0x443/0x6d0 [ 57.000466][ T1836] tcf_action_init+0x227/0x780 [ 57.005240][ T1836] tcf_exts_validate+0x23c/0x540 [ 57.010178][ T1836] mall_set_parms+0x4a/0x450 [ 57.014769][ T1836] mall_change+0x47a/0x770 [ 57.019183][ T1836] tc_new_tfilter+0x1487/0x1ab0 [ 57.024136][ T1836] rtnetlink_rcv_msg+0x811/0xca0 [ 57.029072][ T1836] netlink_rcv_skb+0x1e9/0x430 [ 57.033836][ T1836] rtnetlink_rcv+0x1c/0x20 [ 57.038253][ T1836] netlink_unicast+0x86c/0xa30 [ 57.043011][ T1836] netlink_sendmsg+0x949/0xb70 [ 57.047774][ T1836] ____sys_sendmsg+0x5be/0x8f0 [ 57.052536][ T1836] ___sys_sendmsg+0x236/0x2e0 [ 57.057211][ T1836] __x64_sys_sendmsg+0x201/0x2d0 [ 57.062150][ T1836] do_syscall_64+0x31/0x40 [ 57.066566][ T1836] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 57.072442][ T1836] [ 57.074801][ T1836] The buggy address belongs to the object at ffff88811c31a400 [ 57.074801][ T1836] which belongs to the cache kmalloc-256 of size 256 [ 57.089315][ T1836] The buggy address is located 216 bytes inside of [ 57.089315][ T1836] 256-byte region [ffff88811c31a400, ffff88811c31a500) [ 57.102743][ T1836] The buggy address belongs to the page: [ 57.108400][ T1836] page:ffffea000470c680 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c31a [ 57.118714][ T1836] head:ffffea000470c680 order:1 compound_mapcount:0 [ 57.125451][ T1836] flags: 0x4000000000010200(slab|head) [ 57.130997][ T1836] raw: 4000000000010200 ffffea000468b280 0000000600000006 ffff888100043200 [ 57.139668][ T1836] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 57.148245][ T1836] page dumped because: kasan: bad access detected [ 57.154665][ T1836] page_owner tracks the page as allocated [ 57.160416][ T1836] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 190, ts 7224687472, free_ts 0 [ 57.178472][ T1836] prep_new_page+0x176/0x190 [ 57.183061][ T1836] get_page_from_freelist+0x225f/0x23f0 [ 57.188858][ T1836] __alloc_pages_nodemask+0x29a/0x640 [ 57.194238][ T1836] new_slab+0x84/0x3f0 [ 57.198303][ T1836] ___slab_alloc+0x2f8/0x4c0 [ 57.202886][ T1836] __slab_alloc+0x63/0xa0 [ 57.207215][ T1836] kmem_cache_alloc_trace+0x1a8/0x2e0 [ 57.212584][ T1836] do_seccomp+0x7be/0x1480 [ 57.216993][ T1836] prctl_set_seccomp+0x4c/0x60 [ 57.221763][ T1836] __se_sys_prctl+0x77d/0x1230 [ 57.226521][ T1836] __x64_sys_prctl+0xbf/0xd0 [ 57.231110][ T1836] do_syscall_64+0x31/0x40 [ 57.235562][ T1836] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 57.241634][ T1836] page_owner free stack trace missing [ 57.247003][ T1836] [ 57.249418][ T1836] Memory state around the buggy address: [ 57.255051][ T1836] ffff88811c31a380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.263139][ T1836] ffff88811c31a400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.271201][ T1836] >ffff88811c31a480: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 57.279251][ T1836] ^ [ 57.286191][ T1836] ffff88811c31a500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.287872][ T341] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 57.294257][ T1836] ffff88811c31a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.294260][ T1836] ================================================================== [ 57.294264][ T1836] Disabling lock debugging due to kernel taint [ 57.550031][ T341] usb 3-1: USB disconnect, device number 11