last executing test programs: 46.355601241s ago: executing program 3 (id=6671): r0 = socket(0x840000000002, 0x3, 0x100) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) unshare(0x6060600) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002280)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 44.892011097s ago: executing program 3 (id=6684): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002000400baacfb276a25ebe4d93aac0d19979f7212ad"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110011837fb106d0481c2da5c010203012402"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 41.519687125s ago: executing program 3 (id=6706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 41.449644662s ago: executing program 3 (id=6707): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) 41.216237435s ago: executing program 3 (id=6708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r1, 0x60b, 0x70bd2d}, 0x14}}, 0x0) 40.119973115s ago: executing program 3 (id=6715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x21801, 0x1103}}, 0x20}}, 0x4048084) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 40.119680135s ago: executing program 32 (id=6715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x21801, 0x1103}}, 0x20}}, 0x4048084) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 3.352417944s ago: executing program 0 (id=7520): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") truncate(&(0x7f0000000000)='./bus\x00', 0x9471) 3.059612803s ago: executing program 0 (id=7525): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.69359039s ago: executing program 1 (id=7532): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@uuid_null}], [{@hash}]}) 2.316620238s ago: executing program 1 (id=7533): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) epoll_create1(0x80000) 2.204085759s ago: executing program 1 (id=7535): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="1e35", 0x2}], 0x1) 2.155623174s ago: executing program 1 (id=7536): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) 2.122040057s ago: executing program 1 (id=7537): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x10000002]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 2.052077824s ago: executing program 1 (id=7538): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000540)={0x20, 0x3, 0x6, "c92b96220797"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x20, 0x15, 0x2, "e696"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.990568961s ago: executing program 4 (id=7539): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 1.828528247s ago: executing program 0 (id=7542): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2800c1e, &(0x7f0000000000)={[{@test_dummy_encryption}, {@usrjquota}]}, 0xff, 0x249, &(0x7f0000000500)="$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") 1.818619158s ago: executing program 2 (id=7544): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x2b}}}}], 0x20}, 0x0) 1.79372668s ago: executing program 5 (id=7545): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x111) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) pwritev2(r1, 0x0, 0x0, 0x800001, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0xfdef) 1.779849911s ago: executing program 2 (id=7546): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") truncate(&(0x7f0000000000)='./bus\x00', 0x9471) finit_module(0xffffffffffffffff, 0x0, 0x0) 1.723077727s ago: executing program 5 (id=7547): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(&(0x7f0000000000)='./bus\x00', 0x9471) 1.682910201s ago: executing program 5 (id=7548): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 1.324019977s ago: executing program 2 (id=7549): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x2b}}}}], 0x20}, 0x0) rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) 1.180681021s ago: executing program 0 (id=7550): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) gettid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) 1.032761406s ago: executing program 4 (id=7551): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, 0x0) 436.006506ms ago: executing program 4 (id=7552): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 435.812736ms ago: executing program 5 (id=7553): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)}], 0x1}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffe0) 394.19625ms ago: executing program 4 (id=7554): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, &(0x7f00000005c0)=""/240, 0x3e, 0xf0, 0x1}, 0x20) unshare(0x400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) 363.243204ms ago: executing program 2 (id=7555): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write(r1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@uuid_null}], [{@hash}]}) 363.099183ms ago: executing program 4 (id=7556): syz_emit_ethernet(0x2b, &(0x7f0000000240)={@broadcast, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x8, 0x1d, 0x68, 0x0, 0xe, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0xff, 0x0, @broadcast, "1b"}}}}}, 0x0) 283.878741ms ago: executing program 4 (id=7557): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 268.999213ms ago: executing program 0 (id=7558): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') 181.816322ms ago: executing program 5 (id=7559): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 161.281193ms ago: executing program 0 (id=7560): syz_usb_connect(0x2, 0x63, &(0x7f0000000a00)={{0x12, 0x1, 0x250, 0xe4, 0x63, 0xd7, 0x40, 0x1199, 0x6856, 0xe642, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x3, 0xcd, 0x80, 0x2, [{{0x9, 0x4, 0x8, 0x80, 0x7, 0x45, 0xd, 0xc1, 0x8, [], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x2, 0xfa, 0x81}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x8, 0x3, 0xf7}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x5, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x9, 0x2, 0xb}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xc, 0x9, 0xf2}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xb4, 0x5, 0x7}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0xcb, 0x65, 0x2}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 113.612638ms ago: executing program 5 (id=7561): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 77.618492ms ago: executing program 2 (id=7562): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, 0x0) 0s ago: executing program 2 (id=7563): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): udit(1763337369.437:1206): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.975540][ T28] audit: type=1400 audit(1763337369.437:1207): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.998573][ T28] audit: type=1400 audit(1763337369.437:1208): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.020168][ T28] audit: type=1400 audit(1763337369.437:1209): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 776.041318][T15699] EXT4-fs (loop0): unmounting filesystem. [ 776.070848][ T28] audit: type=1400 audit(1763337369.437:1210): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 776.098024][ T28] audit: type=1400 audit(1763337369.437:1211): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 776.218390][T16745] netem: change failed [ 776.264582][T16752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6320'. [ 776.385709][ T489] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 776.577180][ T489] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 776.611360][ T489] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 776.664536][ T489] usb 3-1: config 0 interface 0 has no altsetting 0 [ 776.704391][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.713617][ T489] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 776.741403][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.757279][ T489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.782038][T16766] device bridge_slave_0 entered promiscuous mode [ 776.805299][ T489] usb 3-1: config 0 descriptor?? [ 776.824940][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.838171][T16730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 776.866519][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.900410][T16766] device bridge_slave_1 entered promiscuous mode [ 777.053291][T16730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.070174][T16730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.101109][ T489] usbhid 3-1:0.0: can't add hid device: -71 [ 777.110894][ T489] usbhid: probe of 3-1:0.0 failed with error -71 [ 777.143073][ T489] usb 3-1: USB disconnect, device number 33 [ 777.190250][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.197364][T16766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.204685][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.211748][T16766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.330823][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 777.342874][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.366381][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.576341][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 777.595706][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.602799][ T1473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.620500][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 777.635939][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.643032][ T1473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.672702][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 777.691179][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 777.703644][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 777.715659][ T489] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 777.726099][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 777.751636][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 777.766294][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 777.790165][T16766] device veth0_vlan entered promiscuous mode [ 777.806313][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 777.814742][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 777.842600][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 777.860427][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 777.870514][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 777.890776][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 777.905728][ T489] usb 3-1: Using ep0 maxpacket: 32 [ 777.912236][T16766] device veth1_macvtap entered promiscuous mode [ 777.918963][ T489] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 777.944036][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 777.952007][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 777.972299][ T489] usb 3-1: config 0 interface 0 has no altsetting 0 [ 777.979593][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 777.987810][ T489] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 778.016330][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 778.025446][ T489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.044975][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 778.059400][ T489] usb 3-1: config 0 descriptor?? [ 778.069572][ T489] hub 3-1:0.0: USB hub found [ 778.266879][ T489] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 778.501583][ T489] usbhid 3-1:0.0: can't add hid device: -71 [ 778.508078][ T489] usbhid: probe of 3-1:0.0 failed with error -71 [ 778.530016][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6333'. [ 778.556372][ T489] usb 3-1: USB disconnect, device number 34 [ 778.892002][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6336'. [ 780.074333][T16821] loop4: detected capacity change from 0 to 512 [ 780.116137][T16821] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 780.218104][T16834] overlayfs: missing 'workdir' [ 780.223857][T16821] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 780.237578][T16835] loop2: detected capacity change from 0 to 128 [ 780.244371][T16835] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 780.320017][T16847] netem: change failed [ 780.405386][ T356] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 780.555826][ T800] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 780.806720][ T800] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.817091][ T800] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.830017][ T800] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 780.839155][ T800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.847876][ T800] usb 2-1: config 0 descriptor?? [ 780.853810][ T800] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 781.055003][ T4136] usb 2-1: USB disconnect, device number 25 [ 781.166505][T16865] overlayfs: missing 'workdir' [ 781.652948][T16878] incfs: Can't find or create .index dir in ./file0 [ 781.659825][T16878] incfs: mount failed -14 [ 782.443892][T16884] netlink: 'syz.2.6366': attribute type 4 has an invalid length. [ 782.706092][T16900] overlayfs: missing 'workdir' [ 783.679818][T16913] No source specified [ 784.019906][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6378'. [ 784.829631][ T28] audit: type=1400 audit(1763337378.327:1212): avc: denied { bind } for pid=16937 comm="syz.4.6389" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 784.904716][ T28] audit: type=1400 audit(1763337378.357:1213): avc: denied { node_bind } for pid=16937 comm="syz.4.6389" saddr=fe80::39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 785.012144][ T28] audit: type=1400 audit(1763337378.507:1214): avc: denied { mounton } for pid=16946 comm="syz.0.6391" path="/103/file0" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 785.605709][ T489] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 785.795699][ T489] usb 2-1: Using ep0 maxpacket: 8 [ 785.805906][ T489] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 785.816368][T16957] loop2: detected capacity change from 0 to 16 [ 785.823052][ T489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.831797][T16957] erofs: (device loop2): mounted with root inode @ nid 36. [ 785.840568][ T28] audit: type=1400 audit(1763337379.337:1215): avc: denied { mounton } for pid=16956 comm="syz.2.6394" path="/34/file0/file0" dev="loop2" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 785.841196][ T489] usb 2-1: Product: syz [ 785.866819][ T28] audit: type=1400 audit(1763337379.367:1216): avc: denied { read } for pid=16956 comm="syz.2.6394" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 785.868239][ T489] usb 2-1: Manufacturer: syz [ 785.891967][ T28] audit: type=1400 audit(1763337379.397:1217): avc: denied { open } for pid=16956 comm="syz.2.6394" path="/34/file0/file0/file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 785.895114][ T489] usb 2-1: SerialNumber: syz [ 785.927021][ T489] usb 2-1: config 0 descriptor?? [ 786.020569][T16976] incfs: Can't find or create .index dir in ./file0 [ 786.032882][T16976] incfs: mount failed -14 [ 787.043124][T16998] overlayfs: statfs failed on './file0' [ 787.244355][T17005] loop4: detected capacity change from 0 to 128 [ 787.251177][T17005] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 787.385571][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6415'. [ 787.417644][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6416'. [ 787.451502][ T4136] usb 2-1: USB disconnect, device number 26 [ 787.472434][T17017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6411'. [ 788.260070][T17041] tipc: Enabling of bearer rejected, failed to enable media [ 788.321037][T17040] tipc: Started in network mode [ 788.328036][T17040] tipc: Node identity a653bf8fb1c5, cluster identity 4711 [ 788.335476][T17040] tipc: Enabled bearer , priority 0 [ 788.343727][T17043] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6430'. [ 788.353433][T17038] tipc: Resetting bearer [ 788.370617][T17038] tipc: Disabling bearer [ 788.433679][T17049] incfs: Can't find or create .index dir in ./file0 [ 788.445711][ T4136] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 788.446064][T17049] incfs: mount failed -14 [ 788.531724][T17052] tipc: Enabled bearer , priority 0 [ 788.559983][T17050] tipc: Resetting bearer [ 788.580002][T17050] tipc: Disabling bearer [ 788.652826][ T4136] usb 5-1: unable to get BOS descriptor or descriptor too short [ 788.676054][ T4136] usb 5-1: not running at top speed; connect to a high speed hub [ 788.687271][T17061] loop2: detected capacity change from 0 to 128 [ 788.707768][ T4136] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.734372][ T4136] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 788.760575][ T4136] usb 5-1: string descriptor 0 read error: -22 [ 788.775748][ T4136] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.536647][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6440'. [ 789.976763][ T4136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.988811][ T4136] usb 5-1: 0:2 : does not exist [ 790.002051][T17074] netlink: 'syz.1.6442': attribute type 4 has an invalid length. [ 790.029259][T17077] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6443'. [ 790.064344][ T28] audit: type=1400 audit(1763337383.557:1218): avc: denied { bind } for pid=17079 comm="syz.1.6445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 790.106090][ T28] audit: type=1400 audit(1763337383.587:1219): avc: denied { setopt } for pid=17079 comm="syz.1.6445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 790.166834][T17086] fuseblk: Bad value for 'fd' [ 790.425780][ T19] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 790.505686][ T6] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 790.626763][ T19] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.636990][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 790.650485][ T19] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 790.659641][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.676531][T17105] loop1: detected capacity change from 0 to 512 [ 790.679741][ T19] usb 4-1: config 0 descriptor?? [ 790.689511][ T19] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 790.703657][ T6] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 790.704795][T17105] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 790.713235][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.722160][T17105] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.729999][ T6] usb 3-1: Product: syz [ 790.745233][ T6] usb 3-1: Manufacturer: syz [ 790.749941][ T6] usb 3-1: SerialNumber: syz [ 790.755458][ T6] usb 3-1: config 0 descriptor?? [ 790.774695][T15332] EXT4-fs (loop1): unmounting filesystem. [ 790.890718][ T6] usb 4-1: USB disconnect, device number 27 [ 790.981379][T17121] fuse: root generation should be zero [ 790.998945][ T4136] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 791.008955][ T4136] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 791.016652][T17124] loop1: detected capacity change from 0 to 256 [ 791.020718][ T4136] usb 5-1: USB disconnect, device number 35 [ 791.034944][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 791.043711][T17124] FAT-fs (loop1): Directory bread(block 64) failed [ 791.057467][T17124] FAT-fs (loop1): Directory bread(block 65) failed [ 791.064042][T17124] FAT-fs (loop1): Directory bread(block 66) failed [ 791.070832][T17124] FAT-fs (loop1): Directory bread(block 67) failed [ 791.077550][T17124] FAT-fs (loop1): Directory bread(block 68) failed [ 791.084115][T17124] FAT-fs (loop1): Directory bread(block 69) failed [ 791.090869][T17124] FAT-fs (loop1): Directory bread(block 70) failed [ 791.097486][T17124] FAT-fs (loop1): Directory bread(block 71) failed [ 791.104094][T17124] FAT-fs (loop1): Directory bread(block 72) failed [ 791.110877][T17124] FAT-fs (loop1): Directory bread(block 73) failed [ 791.739046][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6473'. [ 792.454635][T17166] netlink: 304 bytes leftover after parsing attributes in process `syz.1.6480'. [ 792.504994][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6481'. [ 792.649686][T17174] kvm: pic: non byte read [ 792.654678][T17174] kvm: pic: single mode not supported [ 792.654742][T17174] kvm: pic: non byte read [ 792.665452][T17174] kvm: pic: single mode not supported [ 792.665468][T17174] kvm: pic: level sensitive irq not supported [ 792.671243][T17174] kvm: pic: non byte read [ 792.682758][T17174] kvm: pic: non byte read [ 792.687818][T17174] kvm: pic: non byte read [ 792.692797][T17174] kvm: pic: single mode not supported [ 792.692860][T17174] kvm: pic: non byte read [ 792.705296][T17174] kvm: pic: single mode not supported [ 792.705313][T17174] kvm: pic: level sensitive irq not supported [ 792.711095][T17174] kvm: pic: non byte read [ 792.724673][T17174] kvm: pic: non byte read [ 792.729786][T17174] kvm: pic: non byte read [ 792.734752][T17174] kvm: pic: non byte read [ 792.740205][T17174] kvm: pic: level sensitive irq not supported [ 792.742088][T17174] kvm: pic: level sensitive irq not supported [ 792.749005][T17174] kvm: pic: single mode not supported [ 792.755789][T17174] kvm: pic: single mode not supported [ 792.761226][T17174] kvm: pic: level sensitive irq not supported [ 792.767471][T17174] kvm: pic: level sensitive irq not supported [ 793.362878][ T800] usb 3-1: USB disconnect, device number 35 [ 793.750528][ T28] audit: type=1400 audit(1763337387.247:1220): avc: denied { view } for pid=17213 comm="syz.1.6499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 795.497793][T17260] fuseblk: Bad value for 'fd' [ 796.515665][ T800] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 796.705684][ T800] usb 3-1: Using ep0 maxpacket: 8 [ 796.719697][ T800] usb 3-1: unable to get BOS descriptor or descriptor too short [ 796.739103][ T4136] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 796.739131][ T800] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 796.758298][ T800] usb 3-1: can't read configurations, error -71 [ 796.925718][ T4136] usb 5-1: Using ep0 maxpacket: 32 [ 796.932126][ T4136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.953349][ T4136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.973600][ T4136] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 797.000685][ T4136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.024639][ T4136] usb 5-1: config 0 descriptor?? [ 797.679210][T17334] block device autoloading is deprecated and will be removed. [ 797.789253][ T4136] hid (null): report_id 0 is invalid [ 797.812518][ T4136] hid-generic 0003:0403:6030.0008: report_id 0 is invalid [ 797.821312][ T4136] hid-generic 0003:0403:6030.0008: item 0 0 1 8 parsing failed [ 797.831559][T17344] netlink: 'syz.3.6552': attribute type 4 has an invalid length. [ 798.982875][ T4136] hid-generic: probe of 0003:0403:6030.0008 failed with error -22 [ 798.995447][T17360] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1045 sclass=netlink_xfrm_socket pid=17360 comm=syz.0.6557 [ 799.009952][ T4136] usb 5-1: USB disconnect, device number 36 [ 799.595514][T17380] loop0: detected capacity change from 0 to 128 [ 799.631337][T17380] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 799.711948][T17389] netem: change failed [ 799.737269][T17391] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1045 sclass=netlink_xfrm_socket pid=17391 comm=syz.2.6569 [ 800.856379][T17417] loop5: detected capacity change from 0 to 7 [ 801.456902][T17445] fuse: Unknown parameter 'group_id00000000000000000000' [ 801.515724][ T291] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 801.557504][ T28] audit: type=1400 audit(1763337395.057:1221): avc: denied { connect } for pid=17453 comm="syz.4.6594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 801.674697][T17463] incfs: Backing dir is not set, filesystem can't be mounted. [ 801.682316][T17463] incfs: mount failed -2 [ 801.725743][ T291] usb 3-1: Using ep0 maxpacket: 8 [ 801.735477][ T291] usb 3-1: unable to get BOS descriptor or descriptor too short [ 801.744313][ T291] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 801.752314][ T291] usb 3-1: can't read configurations, error -71 [ 801.967162][ T28] audit: type=1400 audit(1763337395.467:1222): avc: denied { read write } for pid=17470 comm="syz.0.6602" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 801.993226][ T28] audit: type=1400 audit(1763337395.467:1223): avc: denied { open } for pid=17470 comm="syz.0.6602" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 802.025777][ T19] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 802.463881][ T489] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 802.595738][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 802.602147][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.613116][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.623146][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 802.636521][ T19] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 802.645861][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.654556][ T19] usb 5-1: config 0 descriptor?? [ 802.675721][ T489] usb 4-1: Using ep0 maxpacket: 32 [ 802.682124][ T489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.693468][ T489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.703524][ T489] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 802.712653][ T489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.722021][ T489] usb 4-1: config 0 descriptor?? [ 802.728502][ T489] hub 4-1:0.0: USB hub found [ 802.901978][T17486] picdev_read: 12 callbacks suppressed [ 802.901998][T17486] kvm: pic: non byte read [ 802.912304][T17486] kvm: pic: non byte read [ 802.917048][T17486] kvm: pic: non byte read [ 802.921471][T17486] kvm: pic: non byte read [ 802.926094][T17486] kvm: pic: non byte read [ 802.930500][T17486] kvm: pic: non byte read [ 802.934897][T17486] kvm: pic: non byte read [ 802.940361][T17486] kvm: pic: non byte read [ 802.944750][T17486] kvm: pic: non byte read [ 802.949447][T17486] kvm: pic: non byte read [ 802.959341][ T489] hub 4-1:0.0: 1 port detected [ 803.068910][T17467] random: crng reseeded on system resumption [ 803.075017][ T28] audit: type=1400 audit(1763337396.567:1224): avc: denied { read write } for pid=17466 comm="syz.4.6600" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 803.127956][ T28] audit: type=1400 audit(1763337396.567:1225): avc: denied { ioctl open } for pid=17466 comm="syz.4.6600" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 803.130289][ T19] hid-generic 0003:0955:7214.0009: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 803.163832][T17500] loop0: detected capacity change from 0 to 2048 [ 803.171703][T17502] netem: change failed [ 803.176747][ T489] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 803.192237][ T489] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 803.202549][T17500] EXT4-fs: Ignoring removed bh option [ 803.213632][ T489] usbhid 4-1:0.0: can't add hid device: -71 [ 803.220712][ T489] usbhid: probe of 4-1:0.0 failed with error -71 [ 803.244608][T17500] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 803.256151][ T489] usb 4-1: USB disconnect, device number 28 [ 803.267800][ T28] audit: type=1400 audit(1763337396.767:1226): avc: denied { create } for pid=17497 comm="syz.0.6611" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 803.274750][T17500] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 803.297365][ T28] audit: type=1400 audit(1763337396.767:1227): avc: denied { write } for pid=17497 comm="syz.0.6611" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 803.304461][T17500] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 803.337681][T17500] EXT4-fs (loop0): This should not happen!! Data will be lost [ 803.337681][T17500] [ 803.347509][T17500] EXT4-fs (loop0): Total free blocks count 0 [ 803.353501][T17500] EXT4-fs (loop0): Free/Dirty block details [ 803.359686][T17500] EXT4-fs (loop0): free_blocks=2415919104 [ 803.365447][T17500] EXT4-fs (loop0): dirty_blocks=16 [ 803.370692][T17500] EXT4-fs (loop0): Block reservation details [ 803.376756][T17500] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 803.382954][T17513] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 803.403460][ T291] usb 5-1: USB disconnect, device number 37 [ 803.445348][T17515] loop2: detected capacity change from 0 to 128 [ 803.452927][T17515] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 803.505721][ T19] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 803.516043][ T356] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 803.864667][T17522] incfs: Backing dir is not set, filesystem can't be mounted. [ 803.872650][T17522] incfs: mount failed -2 [ 803.945818][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 803.958202][ T19] usb 2-1: unable to get BOS descriptor or descriptor too short [ 803.985019][ T19] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 803.996063][ T19] usb 2-1: can't read configurations, error -71 [ 804.878760][T17540] loop4: detected capacity change from 0 to 512 [ 804.887867][T17541] netem: change failed [ 804.927071][T17540] EXT4-fs (loop4): Test dummy encryption mode enabled [ 804.933889][T17540] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 804.990269][T17540] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.6626: bad orphan inode 131083 [ 805.009610][T17540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 805.066616][T17540] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 805.117195][T16766] EXT4-fs (loop4): unmounting filesystem. [ 805.189082][T17557] loop1: detected capacity change from 0 to 128 [ 805.195982][T17557] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 805.268020][ T335] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 805.649492][T17573] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6632'. [ 805.773025][T17582] fuse: Bad value for 'fd' [ 805.805654][T17532] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 805.985670][T17532] usb 3-1: Using ep0 maxpacket: 8 [ 805.995193][T17532] usb 3-1: unable to get BOS descriptor or descriptor too short [ 806.006197][T17532] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 806.014809][T17532] usb 3-1: can't read configurations, error -71 [ 806.539264][T17594] loop4: detected capacity change from 0 to 128 [ 806.759352][T17594] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 806.806395][T17596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6646'. [ 806.984196][T17602] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6648'. [ 807.082366][T17609] netem: change failed [ 807.242569][T17620] loop0: detected capacity change from 0 to 512 [ 807.264358][T17620] EXT4-fs (loop0): 1 truncate cleaned up [ 807.512123][T17620] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 807.543334][T17620] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.6656: bg 0: block 465: padding at end of block bitmap is not set [ 807.570982][T17620] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 807.603597][T17620] EXT4-fs (loop0): This should not happen!! Data will be lost [ 807.603597][T17620] [ 807.616710][T17620] EXT4-fs (loop0): Total free blocks count 0 [ 807.622767][T17620] EXT4-fs (loop0): Free/Dirty block details [ 807.630138][T17620] EXT4-fs (loop0): free_blocks=0 [ 807.635292][T17620] EXT4-fs (loop0): dirty_blocks=66 [ 807.652999][T17620] EXT4-fs (loop0): Block reservation details [ 807.659300][T17620] EXT4-fs (loop0): i_reserved_data_blocks=66 [ 807.764667][T15699] EXT4-fs (loop0): unmounting filesystem. [ 808.810398][T17655] loop4: detected capacity change from 0 to 128 [ 809.037941][T17655] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 809.058736][T17659] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1279 sclass=netlink_xfrm_socket pid=17659 comm=syz.0.6668 [ 809.086148][T17659] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1045 sclass=netlink_xfrm_socket pid=17659 comm=syz.0.6668 [ 809.645950][T17677] loop1: detected capacity change from 0 to 512 [ 809.674230][T17677] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 810.807086][T17706] loop0: detected capacity change from 0 to 128 [ 810.886859][T17706] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 810.967101][ T356] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 811.365697][ T585] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 811.373450][ T800] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 812.135688][ T585] usb 4-1: Using ep0 maxpacket: 32 [ 812.142034][ T800] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.152462][ T585] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 812.165757][ T800] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 812.177772][ T585] usb 4-1: config 0 has no interface number 0 [ 812.190103][ T800] usb 5-1: config 1 has no interface number 0 [ 812.197895][ T585] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 812.245670][ T800] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 812.268975][T17726] loop2: detected capacity change from 0 to 512 [ 812.296598][T17726] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 812.305275][T17726] EXT4-fs (loop2): orphan cleanup on readonly fs [ 812.312542][T17726] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 812.321854][T17726] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 812.331982][T17726] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.6693: Failed to acquire dquot type 1 [ 812.344075][T17726] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6693: bg 0: block 40: padding at end of block bitmap is not set [ 812.351281][ T585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.360013][T17726] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 812.376622][ T800] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.384565][T17726] EXT4-fs (loop2): 1 truncate cleaned up [ 812.391644][ T585] usb 4-1: Product: syz [ 812.392945][T17726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 812.395908][ T800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.395932][ T800] usb 5-1: Product: syz [ 812.417082][ T585] usb 4-1: Manufacturer: syz [ 812.421707][ T585] usb 4-1: SerialNumber: syz [ 812.427028][T17726] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 812.443413][ T585] usb 4-1: config 0 descriptor?? [ 812.478317][T16464] EXT4-fs (loop2): unmounting filesystem. [ 812.690729][ T800] usb 5-1: Manufacturer: syz [ 812.748564][T17733] tipc: Started in network mode [ 812.754008][T17733] tipc: Node identity 10001, cluster identity 4711 [ 812.758843][ T800] usb 5-1: SerialNumber: syz [ 812.760841][T17733] tipc: Node number set to 65537 [ 812.777375][ T800] usb 5-1: selecting invalid altsetting 1 [ 813.033709][T17740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.043138][T17740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.055668][T17532] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 813.245638][T17532] usb 3-1: Using ep0 maxpacket: 32 [ 813.256376][T17532] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 813.264588][T17532] usb 3-1: config 0 has no interface number 0 [ 813.274011][T17532] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 813.283173][T17532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.291248][T17532] usb 3-1: Product: syz [ 813.295637][T17532] usb 3-1: Manufacturer: syz [ 813.300290][T17532] usb 3-1: SerialNumber: syz [ 813.305705][T17532] usb 3-1: config 0 descriptor?? [ 813.378428][ T800] cdc_ncm 5-1:1.1: SET_NTB_FORMAT failed [ 813.404863][ T800] usb 5-1: selecting invalid altsetting 1 [ 813.410824][ T800] cdc_ncm 5-1:1.1: bind() failure [ 813.417872][ T800] usb 5-1: USB disconnect, device number 38 [ 813.514601][T17532] usb 3-1: USB disconnect, device number 42 [ 814.088378][ T489] usb 4-1: USB disconnect, device number 29 [ 814.185664][ T800] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 814.197340][T17764] loop3: detected capacity change from 0 to 1024 [ 814.204166][T17764] EXT4-fs: Ignoring removed bh option [ 814.266805][T17764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 814.280453][ T28] audit: type=1400 audit(1763337407.777:1228): avc: denied { write } for pid=17763 comm="syz.3.6707" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 814.286364][T17764] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.6707: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 814.322131][T17764] EXT4-fs (loop3): Remounting filesystem read-only [ 814.338337][ T28] audit: type=1400 audit(1763337407.777:1229): avc: denied { add_name } for pid=17763 comm="syz.3.6707" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 814.359944][T15620] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /141/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 814.360353][ T28] audit: type=1400 audit(1763337407.777:1230): avc: denied { setattr } for pid=17763 comm="syz.3.6707" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 814.391064][T15620] EXT4-fs (loop3): Remounting filesystem read-only [ 814.411094][T15620] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /141/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 814.411808][ T585] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 814.433698][T15620] EXT4-fs (loop3): Remounting filesystem read-only [ 814.441682][ T28] audit: type=1400 audit(1763337407.777:1231): avc: denied { write open } for pid=17763 comm="syz.3.6707" path=2F202864656C6574656429 dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 814.441933][ T800] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 814.447464][T15620] EXT4-fs error (device loop3): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 814.471374][ T800] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 814.499212][ T800] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 814.508116][T15620] EXT4-fs (loop3): Remounting filesystem read-only [ 814.515521][ T800] usb 5-1: config 220 has no interface number 2 [ 814.521796][T15620] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 814.528353][ T800] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 814.542223][ T28] audit: type=1400 audit(1763337407.777:1232): avc: denied { remove_name } for pid=17763 comm="syz.3.6707" name="#5d" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 814.555800][ T800] usb 5-1: config 220 interface 0 has no altsetting 0 [ 814.577700][T15620] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /141/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 814.584631][ T800] usb 5-1: config 220 interface 76 has no altsetting 0 [ 814.606325][ T28] audit: type=1400 audit(1763337407.777:1233): avc: denied { rename } for pid=17763 comm="syz.3.6707" name="#5d" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 814.613517][ T800] usb 5-1: config 220 interface 1 has no altsetting 0 [ 814.635205][T15620] EXT4-fs (loop3): Remounting filesystem read-only [ 814.642050][ T28] audit: type=1400 audit(1763337407.777:1234): avc: denied { unlink } for pid=17763 comm="syz.3.6707" name="#5d" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 814.648622][T15620] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /141/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 814.675827][ T585] usb 3-1: Using ep0 maxpacket: 8 [ 814.693248][T15620] EXT4-fs (loop3): Remounting filesystem read-only [ 814.698591][ T800] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 814.704498][ T28] audit: type=1400 audit(1763337407.777:1235): avc: denied { unlink } for pid=17763 comm="syz.3.6707" name="#5e" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 814.735526][T15620] EXT4-fs error (device loop3): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 814.736123][ T800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.763597][T15620] EXT4-fs (loop3): Remounting filesystem read-only [ 814.764125][ T800] usb 5-1: Product: syz [ 814.774504][ T800] usb 5-1: Manufacturer: syz [ 814.779502][ T800] usb 5-1: SerialNumber: syz [ 814.785176][T15620] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 814.792040][ T585] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 814.809045][T15620] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /141/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 814.809115][ T585] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.839764][ T585] usb 3-1: Product: syz [ 814.844097][ T585] usb 3-1: Manufacturer: syz [ 814.847658][T15620] EXT4-fs (loop3): Remounting filesystem read-only [ 814.855963][T15620] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /141/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 814.862176][ T585] usb 3-1: SerialNumber: syz [ 814.882536][T15620] EXT4-fs (loop3): Remounting filesystem read-only [ 814.887855][ T585] usb 3-1: config 0 descriptor?? [ 814.889665][T15620] EXT4-fs error (device loop3): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 814.914127][T15620] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 814.929772][T15620] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 814.945035][T15620] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 814.960268][T15620] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 814.975316][T15620] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 815.003419][T15620] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 815.024250][T15620] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 815.047685][T17778] netlink: 'syz.0.6713': attribute type 16 has an invalid length. [ 815.047787][T15620] EXT4-fs warning (device loop3): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 815.055729][T17778] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.6713'. [ 815.072098][ T800] uvcvideo 5-1:220.1: Unknown video format c07fffff-ffff-ffff-ffff-ff0500000000 [ 815.089128][ T800] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 815.100896][ T800] usb 5-1: No valid video chain found. [ 815.106882][ T800] usb 5-1: selecting invalid altsetting 0 [ 815.128400][ T800] usb 5-1: USB disconnect, device number 39 [ 815.230066][T14463] tipc: Left network mode [ 815.589780][T17785] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.597083][T17785] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.604502][T17785] device bridge_slave_0 entered promiscuous mode [ 815.613256][T17785] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.620463][T17785] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.627950][T17785] device bridge_slave_1 entered promiscuous mode [ 815.680216][T17785] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.687330][T17785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.694619][T17785] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.701792][T17785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.724853][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 815.732555][ T1473] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.740418][ T1473] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.751737][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 815.760042][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.767107][ T1473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.776124][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 815.784576][ T1473] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.791659][ T1473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.804452][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 815.813230][T14463] device bridge_slave_1 left promiscuous mode [ 815.819609][T14463] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.827288][T14463] device bridge_slave_0 left promiscuous mode [ 815.833502][T14463] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.841894][T14463] device veth1_macvtap left promiscuous mode [ 815.848002][T14463] device veth0_vlan left promiscuous mode [ 815.997874][T12983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 816.011811][T12983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 816.023729][T12983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 816.032090][T12983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 816.039850][T12983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 816.048808][T17785] device veth0_vlan entered promiscuous mode [ 816.138389][T17785] device veth1_macvtap entered promiscuous mode [ 816.376950][T12983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 816.390422][T12983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 816.400231][T12983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 816.415839][T17806] netem: change failed [ 816.425596][T17812] loop1: detected capacity change from 0 to 128 [ 816.436205][T17812] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 816.616460][T17823] fuse: Unknown parameter 'user_id00000000000000000000' [ 816.672572][T17827] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6722'. [ 816.745724][ T342] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 816.927439][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.944897][ T342] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 816.957366][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.969500][ T342] usb 5-1: config 0 descriptor?? [ 817.005648][T17532] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 817.092546][ T4136] usb 3-1: USB disconnect, device number 43 [ 817.105358][T17842] netem: change failed [ 817.167035][T17848] fuse: Unknown parameter 'user_id00000000000000000000' [ 817.195685][T17532] usb 6-1: Using ep0 maxpacket: 16 [ 817.204258][T17532] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024 [ 817.215702][T17532] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 817.225919][T17532] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 817.236049][ T19] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 817.243704][T17532] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 817.253827][T17532] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 817.264624][T17532] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.273836][T17532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 817.281978][T17532] usb 6-1: SerialNumber: syz [ 817.288511][T17835] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 817.296079][T17835] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 817.378834][ T342] hid-generic 0003:1038:12B6.000A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 817.435418][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.446583][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.457615][ T19] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 817.466882][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.476026][ T19] usb 1-1: config 0 descriptor?? [ 817.515309][T17532] usb 6-1: USB disconnect, device number 2 [ 817.526413][T17874] 9pnet_fd: Insufficient options for proto=fd [ 817.575271][T17880] netlink: 'syz.1.6752': attribute type 16 has an invalid length. [ 817.580205][ T800] usb 5-1: USB disconnect, device number 40 [ 817.584913][T17880] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.6752'. [ 817.883803][ T19] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 817.892482][ T19] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 817.904630][ T19] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 818.291422][ C0] hid-thrustmaster 0003:044F:B65D.000B: URB to get model id failed with error -71 [ 818.291535][ T800] usb 1-1: USB disconnect, device number 30 [ 818.600403][T17909] binder: 17908:17909 unknown command 0 [ 818.606211][T17909] binder: 17908:17909 ioctl c0306201 200000000080 returned -22 [ 818.615577][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 818.615591][ T28] audit: type=1400 audit(1763337412.107:1243): avc: denied { map } for pid=17908 comm="syz.1.6764" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 818.617294][T17909] binder: 17908:17909 ioctl c0306201 200000000300 returned -11 [ 818.653574][ T28] audit: type=1400 audit(1763337412.117:1244): avc: denied { call } for pid=17908 comm="syz.1.6764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 818.673157][ T28] audit: type=1400 audit(1763337412.117:1245): avc: denied { read } for pid=17908 comm="syz.1.6764" path="socket:[88333]" dev="sockfs" ino=88333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 818.749220][T17914] 9pnet_fd: Insufficient options for proto=fd [ 818.785757][T17532] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 818.793449][ T4136] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 818.850468][T17921] netlink: 'syz.0.6769': attribute type 16 has an invalid length. [ 818.858542][T17921] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.6769'. [ 818.984309][T17925] picdev_read: 502 callbacks suppressed [ 818.984328][T17925] kvm: pic: non byte read [ 818.994648][T17925] kvm: pic: non byte read [ 818.999058][T17532] usb 5-1: Using ep0 maxpacket: 8 [ 819.004221][ T4136] usb 3-1: Using ep0 maxpacket: 16 [ 819.009664][T17925] kvm: pic: non byte read [ 819.014447][T17925] kvm: pic: non byte read [ 819.019355][T17925] kvm: pic: non byte read [ 819.066713][T17925] kvm: pic: non byte read [ 819.128765][T17925] kvm: pic: non byte read [ 819.151017][T17925] kvm: pic: non byte read [ 819.173887][T17925] kvm: pic: non byte read [ 819.196195][T17925] kvm: pic: non byte read [ 819.522116][T17532] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 819.530510][ T4136] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 819.540631][ T4136] usb 3-1: config 0 has no interface number 0 [ 819.546793][T17532] usb 5-1: config 179 has no interface number 0 [ 819.553069][T17532] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 819.564409][ T4136] usb 3-1: config 0 interface 41 has no altsetting 0 [ 819.571200][T17532] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 819.582780][T17532] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 819.594281][T17532] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 819.604517][T17532] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 819.618063][T17532] usb 5-1: config 179 interface 65 has no altsetting 0 [ 819.625238][T17532] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 819.634488][T17532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.642769][ T4136] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 819.652258][ T4136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.663227][ T4136] usb 3-1: Product: syz [ 819.672609][T17532] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input35 [ 819.684265][ T4136] usb 3-1: Manufacturer: syz [ 819.689378][ T4136] usb 3-1: SerialNumber: syz [ 819.716124][ T4136] usb 3-1: config 0 descriptor?? [ 819.741270][ T4136] CoreChips: probe of 3-1:0.41 failed with error -22 [ 819.801414][T17933] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6773'. [ 819.810984][T17933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6773'. [ 819.889450][ T4136] usb 5-1: USB disconnect, device number 41 [ 819.895537][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 819.917638][ T4136] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 819.933708][T17532] usb 3-1: USB disconnect, device number 44 [ 820.335605][T17947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6778'. [ 820.906748][T17960] netlink: 'syz.2.6783': attribute type 12 has an invalid length. [ 820.946765][T17961] loop4: detected capacity change from 0 to 128 [ 820.977405][T17961] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 821.155667][ T19] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 821.456757][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 821.474259][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.494436][ T19] usb 6-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 821.512967][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.522230][ T19] usb 6-1: config 0 descriptor?? [ 821.665660][T17532] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 821.808093][ T28] audit: type=1400 audit(1763337415.307:1246): avc: denied { map } for pid=17984 comm="syz.4.6794" path="socket:[89182]" dev="sockfs" ino=89182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 821.857290][T17988] loop4: detected capacity change from 0 to 256 [ 821.880229][T17532] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 821.891498][T17532] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 821.901795][T17532] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bf.9d [ 821.913750][T17532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.929039][T17993] loop2: detected capacity change from 0 to 512 [ 821.940078][ T19] elo 0003:04E7:0030.000C: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.5-1/input0 [ 821.954705][T17975] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 821.968349][T17532] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 821.983195][T17993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 821.989013][ T335] udevd[335]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 822.002421][T17993] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 822.024683][ T28] audit: type=1400 audit(1763337415.527:1247): avc: denied { unlink } for pid=17992 comm="syz.2.6798" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 822.048535][T17993] Quota error (device loop2): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 822.060199][T17993] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 822.071134][T17993] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.6798: Failed to acquire dquot type 0 [ 822.093015][T16464] EXT4-fs (loop2): unmounting filesystem. [ 822.140013][T17532] usb 6-1: USB disconnect, device number 3 [ 822.182639][T12472] usb 2-1: USB disconnect, device number 29 [ 822.546401][T18012] loop0: detected capacity change from 0 to 128 [ 822.553075][T18012] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 823.593162][T18047] fuse: Unknown parameter '0x0000000000000006' [ 823.647597][T18049] loop0: detected capacity change from 0 to 8192 [ 823.658675][ T28] audit: type=1400 audit(1763337417.157:1248): avc: denied { remount } for pid=18048 comm="syz.0.6817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 824.041530][ T28] audit: type=1400 audit(1763337417.537:1249): avc: denied { execute } for pid=18059 comm="syz.5.6821" path="/20/blkio.bfq.group_wait_time" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 824.192638][ T28] audit: type=1400 audit(1763337417.687:1250): avc: denied { getopt } for pid=18071 comm="syz.2.6826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 824.354254][ T28] audit: type=1400 audit(1763337417.847:1251): avc: denied { read } for pid=18076 comm="syz.2.6827" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 824.377291][ T28] audit: type=1400 audit(1763337417.847:1252): avc: denied { open } for pid=18076 comm="syz.2.6827" path="/113/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 824.505669][ T800] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 824.660784][ T28] audit: type=1400 audit(1763337418.157:1253): avc: denied { ioctl } for pid=18101 comm="syz.0.6840" path="socket:[88853]" dev="sockfs" ino=88853 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 824.687035][ T19] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 824.695665][ T800] usb 5-1: Using ep0 maxpacket: 32 [ 824.702001][ T800] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 824.729353][ T800] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 824.747931][ T800] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 824.764404][ T800] usb 5-1: Product: syz [ 824.772812][ T800] usb 5-1: Manufacturer: syz [ 824.782542][ T800] usb 5-1: SerialNumber: syz [ 824.793057][ T800] usb 5-1: config 0 descriptor?? [ 824.803680][T18077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 824.815723][ T800] hub 5-1:0.0: bad descriptor, ignoring hub [ 824.825803][ T800] hub: probe of 5-1:0.0 failed with error -5 [ 824.888562][ T19] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 824.901540][ T19] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 824.911019][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.925156][ T19] usb 3-1: config 0 descriptor?? [ 824.930636][T18092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 824.941456][ T19] hub 3-1:0.0: bad descriptor, ignoring hub [ 824.947560][ T19] hub: probe of 3-1:0.0 failed with error -5 [ 824.953963][ T19] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 824.978829][T18118] loop0: detected capacity change from 0 to 256 [ 824.989925][T18118] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 824.998715][T18118] FAT-fs (loop0): Filesystem has been set read-only [ 825.054971][ T28] audit: type=1400 audit(1763337418.547:1254): avc: denied { setopt } for pid=18123 comm="syz.0.6851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 825.080199][T18126] tipc: Started in network mode [ 825.085087][T18126] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 825.094353][T18126] tipc: Enabled bearer , priority 10 [ 825.186607][ T800] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 825.194717][ T489] usb 5-1: USB disconnect, device number 42 [ 825.385652][ T800] usb 2-1: Using ep0 maxpacket: 32 [ 825.392134][ T800] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 825.400784][ T800] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 825.409660][ T800] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 825.418779][ T800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 825.428740][ T800] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 825.438573][ T800] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 825.451978][ T800] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 825.461192][ T800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.470429][ T800] usb 2-1: config 0 descriptor?? [ 825.495699][ T291] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 825.675742][ T291] usb 5-1: Using ep0 maxpacket: 32 [ 825.680435][ T800] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 825.693634][ T291] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 825.706539][ T291] usb 5-1: string descriptor 0 read error: -22 [ 825.712942][ T291] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 825.714635][ T800] usb 2-1: USB disconnect, device number 30 [ 825.722460][ T291] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 825.737477][ T291] usb 5-1: config 0 descriptor?? [ 825.742848][T18077] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 825.751054][ T291] hub 5-1:0.0: bad descriptor, ignoring hub [ 825.754163][ T800] usblp0: removed [ 825.757342][ T291] hub: probe of 5-1:0.0 failed with error -5 [ 826.023940][ T28] audit: type=1326 audit(1763337419.517:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.0.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bad78f6c9 code=0x7ffc0000 [ 826.048182][ T28] audit: type=1326 audit(1763337419.517:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.0.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bad78f6c9 code=0x7ffc0000 [ 826.072039][ T28] audit: type=1326 audit(1763337419.517:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18146 comm="syz.0.6861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bad78f6c9 code=0x7ffc0000 [ 826.095773][T17532] tipc: Node number set to 4269801494 [ 826.101332][ T291] usb 5-1: USB disconnect, device number 43 [ 826.265669][ T800] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 826.385698][ T291] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 826.395807][T17532] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 826.445677][ T800] usb 2-1: Using ep0 maxpacket: 32 [ 826.451981][ T800] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 826.460419][ T800] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 826.469071][ T800] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 826.478096][ T800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 826.490784][T18155] netem: change failed [ 826.495760][ T800] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 826.511010][ T800] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 826.525966][ T800] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 826.535063][ T800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.535360][T18159] loop4: detected capacity change from 0 to 512 [ 826.544772][ T800] usb 2-1: config 0 descriptor?? [ 826.570157][T18159] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 826.579221][T17532] usb 6-1: Using ep0 maxpacket: 32 [ 826.580142][T18159] ext4 filesystem being mounted at /97/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.585389][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 826.612182][ T291] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.622186][T17532] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 826.631057][ T291] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 826.640153][T17532] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.650620][ T291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.658680][T17532] usb 6-1: config 0 has no interface number 0 [ 826.664777][T17532] usb 6-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 826.678325][T17532] usb 6-1: config 0 interface 8 has no altsetting 0 [ 826.685200][ T291] usb 1-1: config 0 descriptor?? [ 826.691400][T16766] EXT4-fs (loop4): unmounting filesystem. [ 826.692838][T17532] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 826.706273][T17532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.714284][T17532] usb 6-1: Product: syz [ 826.718495][T17532] usb 6-1: Manufacturer: syz [ 826.723111][T17532] usb 6-1: SerialNumber: syz [ 826.728834][T17532] usb 6-1: config 0 descriptor?? [ 826.760874][ T800] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 826.938349][T17532] usb 6-1: USB disconnect, device number 4 [ 827.035656][ T4136] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 827.093940][ T291] hid-generic 0003:258A:0036.000D: hidraw0: USB HID v0.00 Device [HID 258a:0036] on usb-dummy_hcd.0-1/input0 [ 827.116465][ T291] usb 2-1: USB disconnect, device number 31 [ 827.215698][ T4136] usb 5-1: Using ep0 maxpacket: 32 [ 827.222035][ T4136] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 827.230366][ T4136] usb 5-1: config 4 has no interface number 0 [ 827.236654][ T4136] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.247760][ T4136] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.257734][ T4136] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 827.266977][ T4136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.277954][ T4136] hub 5-1:4.128: USB hub found [ 827.294931][ T19] usb 1-1: USB disconnect, device number 31 [ 827.322977][T18111] usblp0: removed [ 827.478618][ T4136] hub 5-1:4.128: 2 ports detected [ 827.483755][ T4136] hub 5-1:4.128: Using single TT (err -22) [ 827.515808][ T585] usb 3-1: USB disconnect, device number 45 [ 827.679194][ T4136] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 827.686937][ T4136] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 827.736019][ T4136] usb 5-1: USB disconnect, device number 44 [ 827.765695][ T800] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 827.951046][T18187] loop0: detected capacity change from 0 to 8192 [ 827.966725][ T800] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.977551][ T800] usb 6-1: config 0 has no interfaces? [ 827.983084][ T800] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 827.992463][T18187] loop0: p1[EZD] p2 p3 p4 [ 827.992904][ T800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.007278][T18187] loop0: p3 start 117772289 is beyond EOD, truncated [ 828.011496][ T800] usb 6-1: config 0 descriptor?? [ 828.014066][T18187] loop0: p4 size 262144 extends beyond EOD, truncated [ 828.115731][ T335] udevd[335]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 828.126725][ T567] udevd[567]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 828.139218][ T356] udevd[356]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 828.222058][ T800] usb 6-1: USB disconnect, device number 5 [ 828.566389][T18222] loop1: detected capacity change from 0 to 128 [ 828.630399][T18227] binder: 18225:18227 unknown command 0 [ 828.636127][T18227] binder: 18225:18227 ioctl c0306201 200000000080 returned -22 [ 828.689064][T18231] kvm: vcpu 0: requested 124 ns lapic timer period limited to 200000 ns [ 828.697643][T18231] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 828.795696][ T800] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 828.842011][T18234] loop1: detected capacity change from 0 to 4096 [ 828.853522][T18234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 828.873178][T18234] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 828.915687][ T585] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 828.943108][T15332] EXT4-fs (loop1): unmounting filesystem. [ 828.985664][ T800] usb 3-1: Using ep0 maxpacket: 8 [ 828.992954][ T800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.014641][T18242] picdev_read: 502 callbacks suppressed [ 829.014662][T18242] kvm: pic: non byte read [ 829.017327][ T800] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 829.022558][T18242] kvm: pic: non byte read [ 829.024640][ T800] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 829.037857][T18242] kvm: pic: non byte read [ 829.042737][ T800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.051656][T18242] kvm: pic: non byte read [ 829.057348][ T800] usb 3-1: config 0 descriptor?? [ 829.065670][T18242] kvm: pic: non byte read [ 829.076920][T18242] kvm: pic: non byte read [ 829.081270][T18242] kvm: pic: non byte read [ 829.085768][T18242] kvm: pic: non byte read [ 829.090170][T18242] kvm: pic: non byte read [ 829.094512][T18242] kvm: pic: non byte read [ 829.132407][T18253] binder: 18252:18253 unknown command 0 [ 829.138123][T18253] binder: 18252:18253 ioctl c0306201 200000000080 returned -22 [ 829.147884][ T585] usb 1-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 110 [ 829.165193][T18257] netem: change failed [ 829.167484][T18256] tmpfs: Unsupported parameter 'mpol' [ 829.174806][ T585] usb 1-1: config 16 has an invalid descriptor of length 109, skipping remainder of the config [ 829.195573][ T585] usb 1-1: config 16 has no interfaces? [ 829.201637][ T585] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 829.224758][ T585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.291299][T18269] loop1: detected capacity change from 0 to 128 [ 829.300916][T18269] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 829.447789][ T291] usb 1-1: USB disconnect, device number 32 [ 829.485413][ T800] hid-rmi 0003:06CB:81A7.000E: unknown main item tag 0x7 [ 829.495669][ T800] hid-rmi 0003:06CB:81A7.000E: unbalanced collection at end of report description [ 829.505234][ T800] hid-rmi 0003:06CB:81A7.000E: parse failed [ 829.515732][ T19] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 829.518266][T18271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6915'. [ 829.532680][ T800] hid-rmi: probe of 0003:06CB:81A7.000E failed with error -22 [ 829.706015][ T19] usb 6-1: no configurations [ 829.710678][ T19] usb 6-1: can't read configurations, error -22 [ 829.713487][ T800] usb 3-1: USB disconnect, device number 46 [ 829.875699][ T19] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 830.003734][T18279] binder: 18278:18279 unknown command 0 [ 830.009538][T18279] binder: 18278:18279 ioctl c0306201 200000000080 returned -22 [ 830.043176][T18283] netem: change failed [ 830.076143][ T19] usb 6-1: no configurations [ 830.081105][ T19] usb 6-1: can't read configurations, error -22 [ 830.087669][ T19] usb usb6-port1: attempt power cycle [ 830.221872][T18302] binder: 18300:18302 unknown command 0 [ 830.227570][T18302] binder: 18300:18302 ioctl c0306201 200000000080 returned -22 [ 830.259528][T18302] binder_alloc: 18300: binder_alloc_buf, no vma [ 830.266201][T18302] binder: 18300:18302 ioctl c0306201 200000000300 returned -11 [ 830.316747][ T800] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 830.341515][T18316] tipc: Enabling of bearer rejected, media not registered [ 830.578078][ T800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 830.678080][ T800] usb 1-1: New USB device found, idVendor=54ef, idProduct=6047, bcdDevice= 0.20 [ 830.718326][ T800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.730748][ T800] usb 1-1: config 0 descriptor?? [ 830.757621][ T19] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 830.796437][ T19] usb 6-1: no configurations [ 830.801129][ T19] usb 6-1: can't read configurations, error -22 [ 830.882952][T18353] binder: 18352:18353 unknown command 0 [ 830.888985][T18353] binder: 18352:18353 ioctl c0306201 200000000080 returned -22 [ 830.897748][T18353] binder_alloc: 18352: binder_alloc_buf, no vma [ 830.904266][T18353] binder: 18352:18353 ioctl c0306201 200000000300 returned -11 [ 830.940646][ T800] usb 1-1: USB disconnect, device number 33 [ 830.955772][ T19] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 830.986419][ T19] usb 6-1: no configurations [ 830.991132][ T19] usb 6-1: can't read configurations, error -22 [ 830.997710][ T19] usb usb6-port1: unable to enumerate USB device [ 831.079902][T18364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6958'. [ 831.639852][T18386] netem: change failed [ 831.672951][T18388] binder: 18387:18388 unknown command 0 [ 831.678686][T18388] binder: 18387:18388 ioctl c0306201 200000000080 returned -22 [ 831.687479][T18388] binder_alloc: 18387: binder_alloc_buf, no vma [ 831.694044][T18388] binder: 18387:18388 ioctl c0306201 200000000300 returned -11 [ 831.748803][T18392] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 831.815539][T18396] loop1: detected capacity change from 0 to 16 [ 831.828861][T18396] erofs: (device loop1): mounted with root inode @ nid 36. [ 831.844048][T18396] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 831.854449][T18396] erofs: (device loop1): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 831.864298][T18396] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 831.873252][T18396] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 831.882989][ T585] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 831.917627][T18398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6973'. [ 832.246519][ T585] usb 1-1: Using ep0 maxpacket: 32 [ 832.258141][ T585] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 832.335290][ T585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.367447][T18408] overlayfs: missing 'workdir' [ 832.392683][ T585] usb 1-1: Product: syz [ 832.398524][ T585] usb 1-1: Manufacturer: syz [ 832.403544][T18411] binder: 18410:18411 unknown command 0 [ 832.403602][ T585] usb 1-1: SerialNumber: syz [ 832.409992][T18411] binder: 18410:18411 ioctl c0306201 200000000080 returned -22 [ 832.420666][ T585] usb 1-1: config 0 descriptor?? [ 832.489782][T18415] incfs: Backing dir is not set, filesystem can't be mounted. [ 832.497384][T18415] incfs: mount failed -2 [ 832.599710][T18426] loop2: detected capacity change from 0 to 256 [ 832.614552][T18426] exfat: Deprecated parameter 'namecase' [ 832.620607][T18426] exfat: Deprecated parameter 'utf8' [ 832.629317][T18426] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 832.662386][T18426] exFAT-fs (loop2): error, found bogus dentry(16) beyond unused empty group(15) (start_clu : 5, cur_clu : 5) [ 832.674091][T18426] exFAT-fs (loop2): Filesystem has been set read-only [ 832.825673][ T4136] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 832.844115][T18433] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6989'. [ 832.924431][T18441] incfs: Backing dir is not set, filesystem can't be mounted. [ 832.938388][T18441] incfs: mount failed -2 [ 832.985701][ T4136] usb 6-1: device descriptor read/64, error -71 [ 833.013875][T18454] overlayfs: unrecognized mount option "uuid=null" or missing value [ 833.052038][T18458] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 833.066730][T14463] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 833.085177][T14463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 833.105507][T14463] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 833.109565][T18460] netlink: 388 bytes leftover after parsing attributes in process `syz.2.7001'. [ 833.122454][T14463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 833.122886][T14463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 833.159004][T14463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 833.178537][T14463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 833.201652][T14463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 833.246982][T18476] netlink: 'syz.4.7009': attribute type 3 has an invalid length. [ 833.285658][ T4136] usb 6-1: device descriptor read/64, error -71 [ 833.294077][T18484] tmpfs: Unsupported parameter 'mpol' [ 833.349020][T18494] binder: 18493:18494 unknown command 0 [ 833.354620][T18494] binder: 18493:18494 ioctl c0306201 200000000080 returned -22 [ 833.363681][T18494] binder: 18493:18494 ioctl c0306201 200000000300 returned -11 [ 833.475237][T18510] binder: 18509:18510 unknown command 0 [ 833.481253][T18510] binder: 18509:18510 ioctl c0306201 200000000080 returned -22 [ 833.523026][T18514] overlayfs: unrecognized mount option "uuid=null" or missing value [ 833.528808][T18516] netlink: 388 bytes leftover after parsing attributes in process `syz.4.7028'. [ 833.565713][ T4136] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 833.600561][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 833.600579][ T28] audit: type=1400 audit(1763337427.097:1271): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 833.611443][T18525] can0: slcan on ptm0. [ 833.637747][ T28] audit: type=1400 audit(1763337427.137:1272): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.678263][ T28] audit: type=1400 audit(1763337427.137:1273): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=29627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 833.700483][ T28] audit: type=1400 audit(1763337427.137:1274): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=29627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 833.731160][ T28] audit: type=1400 audit(1763337427.137:1275): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=29627 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 833.736759][ T4136] usb 6-1: device descriptor read/64, error -71 [ 833.762219][T18523] can0 (unregistered): slcan off ptm0. [ 833.780236][ T28] audit: type=1400 audit(1763337427.197:1276): avc: denied { read } for pid=18533 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.806999][ T28] audit: type=1400 audit(1763337427.197:1277): avc: denied { open } for pid=18533 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.834002][ T28] audit: type=1400 audit(1763337427.197:1278): avc: denied { getattr } for pid=18533 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.884686][ T28] audit: type=1400 audit(1763337427.377:1279): avc: denied { write } for pid=18532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.914846][T18555] overlayfs: unrecognized mount option "uuid=null" or missing value [ 833.931967][ T28] audit: type=1400 audit(1763337427.377:1280): avc: denied { add_name } for pid=18532 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.963489][T18559] netlink: 388 bytes leftover after parsing attributes in process `syz.4.7041'. [ 834.004616][T18564] fuseblk: Bad value for 'fd' [ 834.055754][ T4136] usb 6-1: device descriptor read/64, error -71 [ 834.175724][ T4136] usb usb6-port1: attempt power cycle [ 834.178684][T18571] loop4: detected capacity change from 0 to 40427 [ 834.188190][T18571] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 834.197373][T18571] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 834.205670][T18571] F2FS-fs (loop4): fault_injection options not supported [ 834.212773][T18571] F2FS-fs (loop4): old and new quota format mixing [ 834.240566][T18589] overlayfs: unrecognized mount option "uuid=null" or missing value [ 834.368764][T18607] loop1: detected capacity change from 0 to 256 [ 834.558219][T18628] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7069'. [ 834.558479][T18629] loop1: detected capacity change from 0 to 128 [ 834.582995][T18629] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 834.585669][ T4136] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 834.605745][T12472] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 834.686258][ T585] usb 1-1: USB disconnect, device number 34 [ 834.691915][ T4136] usb 6-1: device descriptor read/8, error -71 [ 834.738421][T18644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7076'. [ 834.816976][T18648] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7067'. [ 834.846669][ T4136] usb 6-1: device descriptor read/8, error -71 [ 834.867607][T12472] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 834.886448][T12472] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 834.901148][T12472] usb 5-1: config 150 has no interface number 0 [ 834.921673][T12472] usb 5-1: config 150 interface 204 has no altsetting 0 [ 834.942587][T12472] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 834.962853][T18658] loop0: detected capacity change from 0 to 512 [ 834.969830][T12472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.987093][T18660] loop2: detected capacity change from 0 to 16 [ 834.993862][T12472] usb 5-1: Product: syz [ 835.002720][T18658] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7082: bg 0: block 248: padding at end of block bitmap is not set [ 835.007100][T12472] usb 5-1: Manufacturer: syz [ 835.020451][T18660] erofs: (device loop2): mounted with root inode @ nid 36. [ 835.021668][T12472] usb 5-1: SerialNumber: syz [ 835.052951][T18658] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.7082: Failed to acquire dquot type 1 [ 835.074554][T18658] EXT4-fs (loop0): 1 truncate cleaned up [ 835.080558][T18658] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 835.104514][T18658] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.134992][T18658] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.7082: Failed to acquire dquot type 1 [ 835.146568][ T4136] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 835.173933][T15699] EXT4-fs (loop0): unmounting filesystem. [ 835.189914][ T4136] usb 6-1: device descriptor read/8, error -71 [ 835.299629][T18677] binder: 18676:18677 unknown command 0 [ 835.305547][T18677] binder: 18676:18677 ioctl c0306201 200000000080 returned -22 [ 835.346724][ T4136] usb 6-1: device descriptor read/8, error -71 [ 835.465841][ T291] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 835.473591][ T4136] usb usb6-port1: unable to enumerate USB device [ 835.508153][T18686] overlayfs: unrecognized mount option "uuid=null" or missing value [ 835.676701][ T291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 835.692227][ T291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 835.703033][ T291] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 835.712873][ T291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.719685][T18715] loop0: detected capacity change from 0 to 256 [ 835.721151][ T291] usb 3-1: Product: syz [ 835.731524][ T291] usb 3-1: Manufacturer: syz [ 835.736278][ T291] usb 3-1: SerialNumber: syz [ 835.742636][T18715] FAT-fs (loop0): Directory bread(block 64) failed [ 835.749353][T18715] FAT-fs (loop0): Directory bread(block 65) failed [ 835.756020][T18715] FAT-fs (loop0): Directory bread(block 66) failed [ 835.762582][T18715] FAT-fs (loop0): Directory bread(block 67) failed [ 835.769197][T18715] FAT-fs (loop0): Directory bread(block 68) failed [ 835.775755][T18715] FAT-fs (loop0): Directory bread(block 69) failed [ 835.782476][T18715] FAT-fs (loop0): Directory bread(block 70) failed [ 835.789040][T18715] FAT-fs (loop0): Directory bread(block 71) failed [ 835.795744][T18715] FAT-fs (loop0): Directory bread(block 72) failed [ 835.802293][T18715] FAT-fs (loop0): Directory bread(block 73) failed [ 835.815371][T18715] syz.0.7107: attempt to access beyond end of device [ 835.815371][T18715] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 835.995726][ T4136] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 836.144305][ T291] usb 3-1: cannot find UAC_HEADER [ 836.149549][ T4136] usb 6-1: device descriptor read/64, error -71 [ 836.159193][ T291] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 836.190036][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 836.354328][T12472] usb 3-1: USB disconnect, device number 47 [ 836.435636][ T4136] usb 6-1: device descriptor read/64, error -71 [ 836.705689][ T4136] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 836.855678][ T4136] usb 6-1: device descriptor read/64, error -71 [ 836.935680][ T19] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 837.035526][T18787] binder: 18786:18787 unknown command 0 [ 837.041213][T18787] binder: 18786:18787 ioctl c0306201 200000000080 returned -22 [ 837.050054][T18787] binder: 18786:18787 ioctl c0306201 200000000300 returned -11 [ 837.135667][ T4136] usb 6-1: device descriptor read/64, error -71 [ 837.143044][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.153363][ T19] usb 2-1: config 1 interface 0 altsetting 113 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 837.166540][ T19] usb 2-1: config 1 interface 0 has no altsetting 0 [ 837.175146][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.184283][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.192477][ T19] usb 2-1: Product: syz [ 837.196727][ T19] usb 2-1: Manufacturer: syz [ 837.201340][ T19] usb 2-1: SerialNumber: syz [ 837.255744][ T4136] usb usb6-port1: attempt power cycle [ 837.329225][ T800] usb 5-1: USB disconnect, device number 45 [ 837.396341][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7149'. [ 837.414711][ T19] cdc_ether 2-1:1.0: skipping garbage [ 837.424486][ T19] usb 2-1: bad CDC descriptors [ 837.432232][ T19] usb 2-1: USB disconnect, device number 32 [ 837.465753][T18816] loop4: detected capacity change from 0 to 128 [ 837.472494][T18816] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 837.623974][T18818] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7154'. [ 837.665660][ T4136] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 837.706708][ T4136] usb 6-1: device descriptor read/8, error -71 [ 837.856811][ T4136] usb 6-1: device descriptor read/8, error -71 [ 838.125659][ T4136] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 838.178558][ T4136] usb 6-1: device descriptor read/8, error -71 [ 838.336711][ T4136] usb 6-1: device descriptor read/8, error -71 [ 838.455713][ T4136] usb usb6-port1: unable to enumerate USB device [ 838.568563][T18868] loop1: detected capacity change from 0 to 512 [ 838.582495][T18868] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 838.601136][ T8] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 838.741545][T18885] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7183'. [ 838.886577][T18897] loop5: detected capacity change from 0 to 256 [ 838.924700][T18897] FAT-fs (loop5): Directory bread(block 64) failed [ 838.932302][T18897] FAT-fs (loop5): Directory bread(block 65) failed [ 838.939384][T18897] FAT-fs (loop5): Directory bread(block 66) failed [ 838.946528][T18897] FAT-fs (loop5): Directory bread(block 67) failed [ 838.953333][T18897] FAT-fs (loop5): Directory bread(block 68) failed [ 838.960260][T18897] FAT-fs (loop5): Directory bread(block 69) failed [ 838.967244][T18897] FAT-fs (loop5): Directory bread(block 70) failed [ 838.973937][T18897] FAT-fs (loop5): Directory bread(block 71) failed [ 838.980992][T18897] FAT-fs (loop5): Directory bread(block 72) failed [ 838.987736][T18897] FAT-fs (loop5): Directory bread(block 73) failed [ 839.095670][ T800] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 839.145643][ T4136] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 839.195521][T18909] netlink: 'syz.5.7195': attribute type 4 has an invalid length. [ 839.286725][ T800] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.305650][ T4136] usb 1-1: device descriptor read/64, error -71 [ 839.305651][ T800] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.307317][ T800] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 839.347988][ T800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.356864][ T800] usb 5-1: Product: syz [ 839.361227][ T800] usb 5-1: Manufacturer: syz [ 839.366608][ T800] usb 5-1: SerialNumber: syz [ 839.471771][T18918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18918 comm=syz.1.7196 [ 839.575736][ T4136] usb 1-1: device descriptor read/64, error -71 [ 839.976208][T18939] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7208'. [ 840.021862][T18943] loop5: detected capacity change from 0 to 256 [ 840.055643][ T4136] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 840.225643][ T4136] usb 1-1: device descriptor read/64, error -71 [ 840.491211][ T800] cdc_ncm 5-1:1.0: bind() failure [ 840.495768][ T4136] usb 1-1: device descriptor read/64, error -71 [ 840.500478][ T800] usb 5-1: USB disconnect, device number 46 [ 840.625750][ T4136] usb usb1-port1: attempt power cycle [ 840.646882][T18963] loop2: detected capacity change from 0 to 16 [ 840.656199][T18963] erofs: dax options not supported [ 840.714764][T18967] loop1: detected capacity change from 0 to 2048 [ 840.799891][T18967] loop1: p4 < > [ 840.930752][T18984] netlink: 'syz.5.7229': attribute type 4 has an invalid length. [ 840.980303][T18987] device vlan0 entered promiscuous mode [ 841.035653][ T4136] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 841.043567][T18990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7231'. [ 841.076687][ T4136] usb 1-1: device descriptor read/8, error -71 [ 841.236722][ T4136] usb 1-1: device descriptor read/8, error -71 [ 841.505659][ T4136] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 841.546775][ T4136] usb 1-1: device descriptor read/8, error -71 [ 841.696709][ T4136] usb 1-1: device descriptor read/8, error -71 [ 841.798704][T19004] overlayfs: missing 'lowerdir' [ 841.815853][ T4136] usb usb1-port1: unable to enumerate USB device [ 841.940747][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 841.940764][ T28] audit: type=1400 audit(1763337435.437:1316): avc: denied { setopt } for pid=19013 comm="syz.1.7242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 842.137866][T19037] loop5: detected capacity change from 0 to 512 [ 842.168996][T19040] loop0: detected capacity change from 0 to 512 [ 842.192914][T19040] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.7253: casefold flag without casefold feature [ 842.207389][T19037] EXT4-fs (loop5): 1 orphan inode deleted [ 842.213155][T19037] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 842.222545][T19040] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.7253: couldn't read orphan inode 15 (err -117) [ 842.234662][T19037] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.246273][T19040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 842.292982][T17785] EXT4-fs (loop5): unmounting filesystem. [ 842.324948][T19046] netlink: 'syz.5.7254': attribute type 4 has an invalid length. [ 842.332852][T15699] EXT4-fs (loop0): unmounting filesystem. [ 842.415642][ T19] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 842.443326][T19055] overlayfs: unrecognized mount option "uuid=null" or missing value [ 842.478236][T19057] loop0: detected capacity change from 0 to 16 [ 842.504722][T19057] erofs: (device loop0): mounted with root inode @ nid 36. [ 842.575727][ T19] usb 3-1: device descriptor read/64, error -71 [ 842.846010][ T19] usb 3-1: device descriptor read/64, error -71 [ 843.135701][ T19] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 843.143310][T19082] overlayfs: './file0' not a directory [ 843.149081][ T4136] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 843.305783][ T19] usb 3-1: device descriptor read/64, error -71 [ 843.335642][ T4136] usb 5-1: Using ep0 maxpacket: 16 [ 843.342608][ T4136] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 843.355964][ T4136] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 843.376914][ T4136] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 843.398301][ T4136] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 843.408383][ T4136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.417008][ T4136] usb 5-1: Product: syz [ 843.421426][ T4136] usb 5-1: Manufacturer: syz [ 843.427293][ T4136] usb 5-1: SerialNumber: syz [ 843.459455][ T4136] usb 5-1: config 0 descriptor?? [ 843.467918][ T4136] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 843.512786][T19107] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7281'. [ 843.586692][ T19] usb 3-1: device descriptor read/64, error -71 [ 843.620734][T19111] netlink: 'syz.1.7283': attribute type 4 has an invalid length. [ 843.674356][ T4136] usb 5-1: USB disconnect, device number 47 [ 843.705932][ T19] usb usb3-port1: attempt power cycle [ 843.730111][T19118] loop1: detected capacity change from 0 to 2048 [ 843.783494][T19118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 843.822249][T15332] EXT4-fs (loop1): unmounting filesystem. [ 843.868811][T19124] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7287'. [ 844.115686][ T19] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 844.156685][ T19] usb 3-1: device descriptor read/8, error -71 [ 844.172362][ T28] audit: type=1400 audit(1763337437.667:1317): avc: denied { accept } for pid=19131 comm="syz.1.7291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 844.306712][ T19] usb 3-1: device descriptor read/8, error -71 [ 844.424194][T19139] loop4: detected capacity change from 0 to 40427 [ 844.437095][T19139] F2FS-fs (loop4): fault_injection options not supported [ 844.445092][T19139] F2FS-fs (loop4): invalid crc value [ 844.450999][T19139] F2FS-fs (loop4): Ignore s_resuid=60928, s_resgid=0 w/o reserve_root and reserve_node [ 844.495790][T19139] F2FS-fs (loop4): Found nat_bits in checkpoint [ 844.534209][T19139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 844.565111][T19155] binder: 19154:19155 unknown command 0 [ 844.571450][T19155] binder: 19154:19155 ioctl c0306201 200000000080 returned -22 [ 844.575712][ T19] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 844.582324][T19155] binder: 19154:19155 ioctl c0306201 200000000300 returned -11 [ 844.623855][T19163] loop1: detected capacity change from 0 to 256 [ 844.653001][ T19] usb 3-1: device descriptor read/8, error -71 [ 844.674081][T19167] netlink: 'syz.0.7306': attribute type 4 has an invalid length. [ 844.781937][T19180] binder: 19178:19180 unknown command 0 [ 844.787598][T19180] binder: 19178:19180 ioctl c0306201 200000000080 returned -22 [ 844.797302][T19180] binder: 19178:19180 ioctl c0306201 200000000300 returned -11 [ 844.804076][T19182] loop4: detected capacity change from 0 to 128 [ 844.816739][ T19] usb 3-1: device descriptor read/8, error -71 [ 844.825414][T19184] binder: 19183:19184 unknown command 0 [ 844.831570][T19184] binder: 19183:19184 ioctl c0306201 200000000080 returned -22 [ 844.840615][T19184] binder: 19183:19184 ioctl c0306201 200000000300 returned -11 [ 844.911708][T19194] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7316'. [ 844.946596][ T19] usb usb3-port1: unable to enumerate USB device [ 845.013493][T19206] binder: 19205:19206 unknown command 0 [ 845.019271][T19206] binder: 19205:19206 ioctl c0306201 200000000080 returned -22 [ 845.028345][T19206] binder: 19205:19206 ioctl c0306201 200000000300 returned -11 [ 845.115415][T19213] binder: 19212:19213 unknown command 0 [ 845.121958][T19213] binder: 19212:19213 ioctl c0306201 200000000080 returned -22 [ 845.131401][T19214] loop4: detected capacity change from 0 to 256 [ 845.150913][T19213] binder: 19212:19213 ioctl c0306201 200000000300 returned -11 [ 845.172589][T19214] FAT-fs (loop4): Directory bread(block 64) failed [ 845.185411][T19214] FAT-fs (loop4): Directory bread(block 65) failed [ 845.205254][T19214] FAT-fs (loop4): Directory bread(block 66) failed [ 845.212008][T19214] FAT-fs (loop4): Directory bread(block 67) failed [ 845.235406][T19214] FAT-fs (loop4): Directory bread(block 68) failed [ 845.242656][T19214] FAT-fs (loop4): Directory bread(block 69) failed [ 845.250806][T19214] FAT-fs (loop4): Directory bread(block 70) failed [ 845.258292][T19214] FAT-fs (loop4): Directory bread(block 71) failed [ 845.265488][T19214] FAT-fs (loop4): Directory bread(block 72) failed [ 845.276924][T19220] netlink: 'syz.2.7329': attribute type 4 has an invalid length. [ 845.299833][T19214] FAT-fs (loop4): Directory bread(block 73) failed [ 845.714453][T19253] binder: 19252:19253 unknown command 0 [ 845.721378][T19253] binder: 19252:19253 ioctl c0306201 200000000080 returned -22 [ 845.754785][T19253] binder: 19252:19253 ioctl c0306201 200000000300 returned -11 [ 845.899390][T19272] binder: 19270:19272 unknown command 0 [ 845.908351][T19273] 9pnet_fd: Insufficient options for proto=fd [ 845.910556][T19272] binder: 19270:19272 ioctl c0306201 200000000080 returned -22 [ 845.937749][T19272] binder: 19270:19272 ioctl c0306201 200000000300 returned -11 [ 846.024881][T19281] netlink: 388 bytes leftover after parsing attributes in process `syz.4.7358'. [ 846.692477][ T28] audit: type=1400 audit(1763337440.187:1318): avc: denied { create } for pid=19304 comm="syz.2.7369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 846.870219][T19322] netlink: 'syz.4.7377': attribute type 4 has an invalid length. [ 846.884926][T19320] netlink: 'syz.0.7376': attribute type 4 has an invalid length. [ 846.937020][T19329] binder: 19327:19329 ioctl 4018620d 0 returned -22 [ 846.947713][T19329] binder: 19327:19329 unknown command 0 [ 846.953302][T19329] binder: 19327:19329 ioctl c0306201 200000000080 returned -22 [ 847.039802][T19329] binder: 19327:19329 ioctl c0306201 200000000300 returned -11 [ 847.446536][T19360] loop0: detected capacity change from 0 to 128 [ 847.476058][T19364] loop4: detected capacity change from 0 to 512 [ 847.485160][T19364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 847.515458][T19364] EXT4-fs (loop4): 1 truncate cleaned up [ 847.521672][T19364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 847.528676][T19369] loop0: detected capacity change from 0 to 256 [ 847.550574][T19369] FAT-fs (loop0): Directory bread(block 64) failed [ 847.557245][T19369] FAT-fs (loop0): Directory bread(block 65) failed [ 847.563856][T19369] FAT-fs (loop0): Directory bread(block 66) failed [ 847.570496][T19369] FAT-fs (loop0): Directory bread(block 67) failed [ 847.577131][T19369] FAT-fs (loop0): Directory bread(block 68) failed [ 847.583726][T19369] FAT-fs (loop0): Directory bread(block 69) failed [ 847.590785][T19369] FAT-fs (loop0): Directory bread(block 70) failed [ 847.597492][T19369] FAT-fs (loop0): Directory bread(block 71) failed [ 847.604108][T19369] FAT-fs (loop0): Directory bread(block 72) failed [ 847.610712][T19369] FAT-fs (loop0): Directory bread(block 73) failed [ 847.643720][ T28] audit: type=1400 audit(1763337441.137:1319): avc: denied { module_load } for pid=19368 comm="syz.0.7396" path="/328/file1/bus" dev="loop0" ino=1048738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 847.643855][T19369] syz.0.7396: attempt to access beyond end of device [ 847.643855][T19369] loop0: rw=2049, sector=1800, nr_sectors = 76 limit=256 [ 847.825777][ T19] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 848.031032][ T19] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 848.039299][ T4136] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 848.048925][ T19] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 183 [ 848.062099][ T19] usb 5-1: config 0 has no interface number 1 [ 848.068949][ T19] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 848.078572][T19402] fuse: Unknown parameter '00000000000000000000' [ 848.083011][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 848.112522][ T19] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 848.285696][ T28] audit: type=1400 audit(1763337441.777:1320): avc: denied { bind } for pid=19417 comm="syz.5.7419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 848.293355][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.313120][ T19] usb 5-1: Product: syz [ 848.317394][ T19] usb 5-1: Manufacturer: syz [ 848.322038][ T19] usb 5-1: SerialNumber: syz [ 848.327356][ T28] audit: type=1400 audit(1763337441.777:1321): avc: denied { write } for pid=19417 comm="syz.5.7419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 848.347037][ T19] usb 5-1: config 0 descriptor?? [ 848.355662][ T19] usb-storage 5-1:0.127: USB Mass Storage device detected [ 848.365726][ T19] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 848.405665][ T4136] usb 2-1: Using ep0 maxpacket: 32 [ 848.412082][ T4136] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 848.424177][ T4136] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 848.438711][ T19] usb-storage 5-1:0.0: USB Mass Storage device detected [ 848.447040][ T19] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 848.455733][ T4136] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 848.478259][ T4136] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 848.488155][ T4136] usb 2-1: Product: syz [ 848.492407][ T4136] usb 2-1: Manufacturer: syz [ 848.497338][ T4136] usb 2-1: SerialNumber: syz [ 848.506638][T19381] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 848.517140][ T4136] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 848.554151][T19444] netlink: 'syz.5.7428': attribute type 4 has an invalid length. [ 848.582197][T19447] loop5: detected capacity change from 0 to 128 [ 848.582528][ T800] usb 5-1: USB disconnect, device number 48 [ 848.615949][T19449] loop5: detected capacity change from 0 to 512 [ 848.630563][T19449] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 848.640217][T19449] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 848.654464][ T28] audit: type=1400 audit(1763337442.157:1322): avc: denied { read } for pid=19448 comm="syz.5.7430" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 848.683941][T17785] EXT4-fs (loop5): unmounting filesystem. [ 848.717131][ T19] usb 2-1: USB disconnect, device number 33 [ 848.812596][T19463] loop2: detected capacity change from 0 to 512 [ 848.819567][T19463] EXT4-fs: Ignoring removed mblk_io_submit option [ 848.826157][T19463] EXT4-fs: Ignoring removed mblk_io_submit option [ 848.832933][T19463] EXT4-fs (loop2): Test dummy encryption mode enabled [ 848.839773][T19463] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 848.850967][T19463] EXT4-fs (loop2): 1 truncate cleaned up [ 848.856675][T19463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 848.878425][T16464] EXT4-fs (loop2): unmounting filesystem. [ 848.946707][T19474] loop2: detected capacity change from 0 to 128 [ 849.106869][T16766] EXT4-fs (loop4): unmounting filesystem. [ 849.260463][T19505] loop1: detected capacity change from 0 to 256 [ 849.285139][T19505] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 849.368534][T19516] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7459'. [ 849.385642][ T19] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 849.410509][ T28] audit: type=1326 audit(1763337442.907:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19519 comm="syz.0.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bad78f6c9 code=0x7ffc0000 [ 849.434687][ T28] audit: type=1326 audit(1763337442.907:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19519 comm="syz.0.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bad78f6c9 code=0x7ffc0000 [ 849.461700][ T28] audit: type=1326 audit(1763337442.907:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19519 comm="syz.0.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1bad78f6c9 code=0x7ffc0000 [ 849.604171][ T28] audit: type=1326 audit(1763337443.097:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19519 comm="syz.0.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bad78f6c9 code=0x7ffc0000 [ 849.655090][ T28] audit: type=1326 audit(1763337443.097:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19519 comm="syz.0.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bad78f6c9 code=0x7ffc0000 [ 849.678817][ T28] audit: type=1326 audit(1763337443.097:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19522 comm="syz.0.7461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1bad7c1f85 code=0x7ffc0000 [ 849.746918][ T19] usb 3-1: config 0 has no interfaces? [ 849.759081][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 849.773191][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.781726][ T19] usb 3-1: Product: syz [ 849.791036][ T19] usb 3-1: Manufacturer: syz [ 849.795956][ T291] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 849.805188][T19533] binder: 19532:19533 ioctl 4018620d 0 returned -22 [ 849.809306][ T19] usb 3-1: SerialNumber: syz [ 849.812729][T19533] binder: 19532:19533 unknown command 0 [ 849.822214][T19533] binder: 19532:19533 ioctl c0306201 200000000080 returned -22 [ 849.823973][ T19] usb 3-1: config 0 descriptor?? [ 849.831959][T19533] binder: 19532:19533 ioctl c0306201 200000000300 returned -11 [ 849.954851][T19549] binder: 19548:19549 ioctl c0306201 0 returned -14 [ 849.962870][T19549] binder: 19548:19549 ioctl c0306201 200000000300 returned -11 [ 850.007200][ T291] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 850.015069][T19559] netlink: 'syz.5.7479': attribute type 4 has an invalid length. [ 850.018079][ T291] usb 2-1: can't read configurations, error -61 [ 850.040149][T19561] loop5: detected capacity change from 0 to 128 [ 850.071111][T19565] netlink: 380 bytes leftover after parsing attributes in process `syz.5.7482'. [ 850.099240][T19567] loop5: detected capacity change from 0 to 256 [ 850.129986][T19567] FAT-fs (loop5): Directory bread(block 64) failed [ 850.136919][T19567] FAT-fs (loop5): Directory bread(block 65) failed [ 850.138761][T19571] loop0: detected capacity change from 0 to 256 [ 850.143811][T19567] FAT-fs (loop5): Directory bread(block 66) failed [ 850.156390][T19567] FAT-fs (loop5): Directory bread(block 67) failed [ 850.162943][T19567] FAT-fs (loop5): Directory bread(block 68) failed [ 850.169951][T19567] FAT-fs (loop5): Directory bread(block 69) failed [ 850.176561][T19567] FAT-fs (loop5): Directory bread(block 70) failed [ 850.183130][T19567] FAT-fs (loop5): Directory bread(block 71) failed [ 850.189700][T19567] FAT-fs (loop5): Directory bread(block 72) failed [ 850.203002][T19567] FAT-fs (loop5): Directory bread(block 73) failed [ 850.238172][T19571] FAT-fs (loop0): Directory bread(block 64) failed [ 850.244841][T19571] FAT-fs (loop0): Directory bread(block 65) failed [ 850.251695][T19571] FAT-fs (loop0): Directory bread(block 66) failed [ 850.258424][ T291] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 850.278793][T19571] FAT-fs (loop0): Directory bread(block 67) failed [ 850.285981][T19571] FAT-fs (loop0): Directory bread(block 68) failed [ 850.286248][ T8] kworker/u4:0: attempt to access beyond end of device [ 850.286248][ T8] loop5: rw=1, sector=1800, nr_sectors = 76 limit=256 [ 850.292639][T19571] FAT-fs (loop0): Directory bread(block 69) failed [ 850.312860][T19571] FAT-fs (loop0): Directory bread(block 70) failed [ 850.324421][T19571] FAT-fs (loop0): Directory bread(block 71) failed [ 850.332557][T19571] FAT-fs (loop0): Directory bread(block 72) failed [ 850.347145][T19571] FAT-fs (loop0): Directory bread(block 73) failed [ 850.458904][ T291] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 850.466658][ T291] usb 2-1: can't read configurations, error -61 [ 850.473081][ T291] usb usb2-port1: attempt power cycle [ 850.562026][ T19] usb 3-1: USB disconnect, device number 52 [ 850.705719][ T800] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 850.895686][ T291] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 850.897107][ T800] usb 1-1: not running at top speed; connect to a high speed hub [ 850.927377][ T291] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 850.927377][ T800] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 850.927416][ T800] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 850.937186][ T291] usb 2-1: can't read configurations, error -61 [ 850.983595][ T800] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.037026][ T800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.052805][ T800] usb 1-1: Product: syz [ 851.066136][ T800] usb 1-1: Manufacturer: syz [ 851.071231][ T800] usb 1-1: SerialNumber: syz [ 851.137113][ T291] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 851.177676][ T291] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 851.185291][ T291] usb 2-1: can't read configurations, error -61 [ 851.191969][ T291] usb usb2-port1: unable to enumerate USB device [ 851.247424][T19607] binder: 19606:19607 ioctl c0306201 200000000300 returned -11 [ 851.285255][ T800] cdc_ncm 1-1:1.0: bind() failure [ 851.292019][ T800] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 851.299024][ T800] cdc_ncm 1-1:1.1: bind() failure [ 851.305548][ T800] usb 1-1: USB disconnect, device number 39 [ 851.457980][ T585] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 851.479818][T19616] netlink: 388 bytes leftover after parsing attributes in process `syz.5.7506'. [ 851.563388][T19622] loop2: detected capacity change from 0 to 256 [ 851.590486][T19622] FAT-fs (loop2): Directory bread(block 64) failed [ 851.597485][T19622] FAT-fs (loop2): Directory bread(block 65) failed [ 851.604128][T19622] FAT-fs (loop2): Directory bread(block 66) failed [ 851.610731][T19622] FAT-fs (loop2): Directory bread(block 67) failed [ 851.618364][T19622] FAT-fs (loop2): Directory bread(block 68) failed [ 851.624915][T19622] FAT-fs (loop2): Directory bread(block 69) failed [ 851.631645][T19622] FAT-fs (loop2): Directory bread(block 70) failed [ 851.638991][T19622] FAT-fs (loop2): Directory bread(block 71) failed [ 851.645703][T19622] FAT-fs (loop2): Directory bread(block 72) failed [ 851.645795][ T585] usb 5-1: Using ep0 maxpacket: 16 [ 851.657635][T19622] FAT-fs (loop2): Directory bread(block 73) failed [ 851.665938][ T585] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.694960][ T585] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 851.709697][ T585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.718880][ T585] usb 5-1: Product: syz [ 851.723135][ T585] usb 5-1: Manufacturer: syz [ 851.788751][ T585] usb 5-1: SerialNumber: syz [ 851.808152][ T585] usb 5-1: config 0 descriptor?? [ 851.849018][T19629] netlink: 'syz.0.7512': attribute type 4 has an invalid length. [ 851.937221][T19633] binder: 19632:19633 ioctl c0306201 200000000300 returned -11 [ 852.018168][ T585] usb 5-1: USB disconnect, device number 49 [ 852.048461][T19636] loop0: detected capacity change from 0 to 128 [ 852.232300][T19642] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7519'. [ 852.284594][T19644] loop0: detected capacity change from 0 to 256 [ 852.321808][T19644] FAT-fs (loop0): Directory bread(block 64) failed [ 852.359418][T19644] FAT-fs (loop0): Directory bread(block 65) failed [ 852.377049][T19644] FAT-fs (loop0): Directory bread(block 66) failed [ 852.378407][T19646] loop1: detected capacity change from 0 to 128 [ 852.386446][T19644] FAT-fs (loop0): Directory bread(block 67) failed [ 852.414954][T19644] FAT-fs (loop0): Directory bread(block 68) failed [ 852.435287][T19644] FAT-fs (loop0): Directory bread(block 69) failed [ 852.442042][T19644] FAT-fs (loop0): Directory bread(block 70) failed [ 852.449965][T19644] FAT-fs (loop0): Directory bread(block 71) failed [ 852.462803][T19644] FAT-fs (loop0): Directory bread(block 72) failed [ 852.470246][T19644] FAT-fs (loop0): Directory bread(block 73) failed [ 852.549813][T19656] netlink: 'syz.4.7524': attribute type 4 has an invalid length. [ 852.726399][T19667] loop2: detected capacity change from 0 to 512 [ 852.737970][T19667] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 852.749536][T19666] loop5: detected capacity change from 0 to 128 [ 852.792379][T19667] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 852.807385][T19667] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.7529: bg 0: block 248: padding at end of block bitmap is not set [ 852.824669][T19667] __quota_error: 8 callbacks suppressed [ 852.824688][T19667] Quota error (device loop2): write_blk: dquota write failed [ 852.855826][T19667] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 852.875680][T19667] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.7529: Failed to acquire dquot type 1 [ 852.915154][T19667] EXT4-fs (loop2): 1 truncate cleaned up [ 852.934637][T19667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 853.279513][ T28] audit: type=1400 audit(1763337446.777:1337): avc: denied { ioctl } for pid=19665 comm="syz.2.7529" path="/245/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 853.319606][T16464] EXT4-fs (loop2): unmounting filesystem. [ 853.328010][ T3771] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 853.349362][ T3771] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:7: Failed to release dquot type 1 [ 853.415149][ T28] audit: type=1400 audit(1763337446.907:1338): avc: denied { write } for pid=19683 comm="syz.1.7535" path="socket:[97613]" dev="sockfs" ino=97613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 853.613051][T19693] fuse: Unknown parameter '00000000000000000000' [ 853.765327][ T28] audit: type=1326 audit(1763337447.257:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.2.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c318f6c9 code=0x7ffc0000 [ 853.845801][ T28] audit: type=1326 audit(1763337447.257:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.2.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c318f6c9 code=0x7ffc0000 [ 853.876362][ T291] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 853.908186][T19706] loop2: detected capacity change from 0 to 256 [ 853.947091][ T28] audit: type=1326 audit(1763337447.297:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.2.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44c318f6c9 code=0x7ffc0000 [ 853.976642][T19706] FAT-fs (loop2): Directory bread(block 64) failed [ 853.993411][T19706] FAT-fs (loop2): Directory bread(block 65) failed [ 854.003532][T19706] FAT-fs (loop2): Directory bread(block 66) failed [ 854.020801][T19706] FAT-fs (loop2): Directory bread(block 67) failed [ 854.025793][ T28] audit: type=1326 audit(1763337447.297:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.2.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c318f6c9 code=0x7ffc0000 [ 854.035663][T19706] FAT-fs (loop2): Directory bread(block 68) failed [ 854.075664][T19706] FAT-fs (loop2): Directory bread(block 69) failed [ 854.085783][ T291] usb 2-1: Using ep0 maxpacket: 16 [ 854.092034][ T291] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 854.101610][T19706] FAT-fs (loop2): Directory bread(block 70) failed [ 854.115655][ T28] audit: type=1326 audit(1763337447.297:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19696 comm="syz.2.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c318f6c9 code=0x7ffc0000 [ 854.139401][ T291] usb 2-1: config 0 has no interface number 0 [ 854.145557][T19706] FAT-fs (loop2): Directory bread(block 71) failed [ 854.155638][ T291] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 854.167997][T19706] FAT-fs (loop2): Directory bread(block 72) failed [ 854.174615][T19706] FAT-fs (loop2): Directory bread(block 73) failed [ 854.181470][ T291] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 854.190323][T19713] loop0: detected capacity change from 0 to 128 [ 854.213529][ T291] usb 2-1: config 0 interface 41 has no altsetting 0 [ 854.223489][ T291] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 854.236865][T19713] EXT4-fs (loop0): Test dummy encryption mode enabled [ 854.261291][T19713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 854.282714][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.292976][T19713] ext4 filesystem being mounted at /368/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 854.323818][ T291] usb 2-1: Product: syz [ 854.344032][ T291] usb 2-1: Manufacturer: syz [ 854.354138][ T291] usb 2-1: SerialNumber: syz [ 854.369648][ T291] usb 2-1: config 0 descriptor?? [ 854.385097][T19692] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 854.394947][T19692] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 854.437355][T15699] EXT4-fs (loop0): unmounting filesystem. [ 854.781474][T19692] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 854.808617][T19692] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 855.268424][ T291] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 855.521174][T19746] overlayfs: unrecognized mount option "uuid=null" or missing value [ 855.756056][T17532] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 855.872744][ T291] dm9601 2-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 855.890417][ T291] dm9601 2-1:0.41 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 5a:78:fa:36:78:8a [ 855.943753][ T291] usb 2-1: USB disconnect, device number 38 [ 855.963155][ T291] dm9601 2-1:0.41 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 855.975520][T17532] usb 1-1: unable to get BOS descriptor or descriptor too short [ 855.989168][T17532] usb 1-1: not running at top speed; connect to a high speed hub [ 856.014125][T17532] usb 1-1: config 3 has an invalid interface number: 8 but max is 0 [ 856.042628][T17532] usb 1-1: config 3 has no interface number 0 [ 856.065120][T17532] usb 1-1: config 3 interface 8 altsetting 128 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 856.105127][T17532] usb 1-1: config 3 interface 8 altsetting 128 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 856.138924][T17532] usb 1-1: config 3 interface 8 altsetting 128 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 856.173947][T17532] usb 1-1: config 3 interface 8 has no altsetting 0 [ 856.193737][ T4136] ================================================================== [ 856.201849][ T4136] BUG: KASAN: use-after-free in worker_thread+0x9ff/0x11f0 [ 856.209080][ T4136] Read of size 8 at addr ffff88811ba20ce0 by task kworker/0:6/4136 [ 856.216989][ T4136] [ 856.219326][ T4136] CPU: 0 PID: 4136 Comm: kworker/0:6 Not tainted syzkaller #0 [ 856.226799][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 856.236873][ T4136] Workqueue: 0x0 (events) [ 856.241360][ T4136] Call Trace: [ 856.244655][ T4136] [ 856.247603][ T4136] __dump_stack+0x21/0x24 [ 856.252074][ T4136] dump_stack_lvl+0xee/0x150 [ 856.256693][ T4136] ? __cfi_dump_stack_lvl+0x8/0x8 [ 856.261745][ T4136] ? __cfi__printk+0x8/0x8 [ 856.266303][ T4136] ? __schedule+0xb8f/0x14e0 [ 856.270946][ T4136] ? worker_thread+0x9ff/0x11f0 [ 856.275819][ T4136] print_address_description+0x71/0x200 [ 856.281389][ T4136] print_report+0x4a/0x60 [ 856.285741][ T4136] kasan_report+0x122/0x150 [ 856.290341][ T4136] ? worker_thread+0x9ff/0x11f0 [ 856.295217][ T4136] __asan_report_load8_noabort+0x14/0x20 [ 856.300953][ T4136] worker_thread+0x9ff/0x11f0 [ 856.305650][ T4136] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 856.311203][ T4136] kthread+0x281/0x320 [ 856.315303][ T4136] ? __cfi_worker_thread+0x10/0x10 [ 856.320435][ T4136] ? __cfi_kthread+0x10/0x10 [ 856.325049][ T4136] ret_from_fork+0x1f/0x30 [ 856.329508][ T4136] [ 856.332544][ T4136] [ 856.334895][ T4136] Allocated by task 291: [ 856.339146][ T4136] kasan_set_track+0x4b/0x70 [ 856.343754][ T4136] kasan_save_alloc_info+0x25/0x30 [ 856.348918][ T4136] __kasan_kmalloc+0x95/0xb0 [ 856.353651][ T4136] __kmalloc_node+0xb2/0x1e0 [ 856.358383][ T4136] kvmalloc_node+0x294/0x480 [ 856.363084][ T4136] alloc_netdev_mqs+0x8d/0xf90 [ 856.367939][ T4136] alloc_etherdev_mqs+0x37/0x40 [ 856.372870][ T4136] usbnet_probe+0x20c/0x2780 [ 856.377572][ T4136] usb_probe_interface+0x610/0xaf0 [ 856.382751][ T4136] really_probe+0x2cb/0x960 [ 856.387336][ T4136] __driver_probe_device+0x198/0x280 [ 856.392644][ T4136] driver_probe_device+0x54/0x3e0 [ 856.397695][ T4136] __device_attach_driver+0x2e9/0x4a0 [ 856.403094][ T4136] bus_for_each_drv+0x183/0x210 [ 856.408042][ T4136] __device_attach+0x2a2/0x400 [ 856.412826][ T4136] device_initial_probe+0x1a/0x20 [ 856.417871][ T4136] bus_probe_device+0xc0/0x1f0 [ 856.422670][ T4136] device_add+0xb4d/0xef0 [ 856.427106][ T4136] usb_set_configuration+0x19c2/0x1f10 [ 856.432649][ T4136] usb_generic_driver_probe+0x91/0x150 [ 856.438146][ T4136] usb_probe_device+0x159/0x270 [ 856.442985][ T4136] really_probe+0x2cb/0x960 [ 856.447481][ T4136] __driver_probe_device+0x198/0x280 [ 856.452760][ T4136] driver_probe_device+0x54/0x3e0 [ 856.457777][ T4136] __device_attach_driver+0x2e9/0x4a0 [ 856.463139][ T4136] bus_for_each_drv+0x183/0x210 [ 856.468010][ T4136] __device_attach+0x2a2/0x400 [ 856.472769][ T4136] device_initial_probe+0x1a/0x20 [ 856.477782][ T4136] bus_probe_device+0xc0/0x1f0 [ 856.482539][ T4136] device_add+0xb4d/0xef0 [ 856.486863][ T4136] usb_new_device+0xa70/0x1520 [ 856.491697][ T4136] hub_event+0x2850/0x4350 [ 856.496109][ T4136] process_one_work+0x71f/0xc40 [ 856.500955][ T4136] worker_thread+0xa29/0x11f0 [ 856.505646][ T4136] kthread+0x281/0x320 [ 856.509706][ T4136] ret_from_fork+0x1f/0x30 [ 856.514117][ T4136] [ 856.516428][ T4136] Freed by task 291: [ 856.520316][ T4136] kasan_set_track+0x4b/0x70 [ 856.524902][ T4136] kasan_save_free_info+0x31/0x50 [ 856.529946][ T4136] ____kasan_slab_free+0x132/0x180 [ 856.535054][ T4136] __kasan_slab_free+0x11/0x20 [ 856.539824][ T4136] slab_free_freelist_hook+0xc2/0x190 [ 856.545239][ T4136] __kmem_cache_free+0xb7/0x1b0 [ 856.550093][ T4136] kfree+0x6f/0xf0 [ 856.553938][ T4136] kvfree+0x35/0x40 [ 856.557779][ T4136] netdev_freemem+0x3f/0x60 [ 856.562284][ T4136] netdev_release+0x7f/0xb0 [ 856.566843][ T4136] device_release+0xa4/0x1d0 [ 856.571442][ T4136] kobject_put+0x19d/0x280 [ 856.575919][ T4136] put_device+0x1f/0x30 [ 856.580161][ T4136] free_netdev+0x392/0x490 [ 856.584579][ T4136] usbnet_disconnect+0x25a/0x3b0 [ 856.589539][ T4136] usb_unbind_interface+0x223/0x8d0 [ 856.594746][ T4136] device_release_driver_internal+0x508/0x820 [ 856.600802][ T4136] device_release_driver+0x19/0x20 [ 856.605902][ T4136] bus_remove_device+0x2ee/0x350 [ 856.610831][ T4136] device_del+0x6a4/0xeb0 [ 856.615178][ T4136] usb_disable_device+0x3a8/0x750 [ 856.620205][ T4136] usb_disconnect+0x31e/0x860 [ 856.624886][ T4136] hub_event+0x1a78/0x4350 [ 856.629297][ T4136] process_one_work+0x71f/0xc40 [ 856.634141][ T4136] worker_thread+0xd2e/0x11f0 [ 856.638807][ T4136] kthread+0x281/0x320 [ 856.642869][ T4136] ret_from_fork+0x1f/0x30 [ 856.647310][ T4136] [ 856.649624][ T4136] Last potentially related work creation: [ 856.655326][ T4136] kasan_save_stack+0x3a/0x60 [ 856.660010][ T4136] __kasan_record_aux_stack+0xb6/0xc0 [ 856.665380][ T4136] kasan_record_aux_stack_noalloc+0xb/0x10 [ 856.671192][ T4136] insert_work+0x51/0x300 [ 856.675526][ T4136] __queue_work+0x9b1/0xd30 [ 856.680023][ T4136] queue_work_on+0xd2/0x140 [ 856.684520][ T4136] usbnet_link_change+0x189/0x1b0 [ 856.689545][ T4136] usbnet_probe+0x1d55/0x2780 [ 856.694222][ T4136] usb_probe_interface+0x610/0xaf0 [ 856.699409][ T4136] really_probe+0x2cb/0x960 [ 856.703901][ T4136] __driver_probe_device+0x198/0x280 [ 856.709176][ T4136] driver_probe_device+0x54/0x3e0 [ 856.714186][ T4136] __device_attach_driver+0x2e9/0x4a0 [ 856.719548][ T4136] bus_for_each_drv+0x183/0x210 [ 856.724411][ T4136] __device_attach+0x2a2/0x400 [ 856.729164][ T4136] device_initial_probe+0x1a/0x20 [ 856.734177][ T4136] bus_probe_device+0xc0/0x1f0 [ 856.738942][ T4136] device_add+0xb4d/0xef0 [ 856.743269][ T4136] usb_set_configuration+0x19c2/0x1f10 [ 856.748737][ T4136] usb_generic_driver_probe+0x91/0x150 [ 856.754207][ T4136] usb_probe_device+0x159/0x270 [ 856.759044][ T4136] really_probe+0x2cb/0x960 [ 856.763531][ T4136] __driver_probe_device+0x198/0x280 [ 856.768823][ T4136] driver_probe_device+0x54/0x3e0 [ 856.773840][ T4136] __device_attach_driver+0x2e9/0x4a0 [ 856.779219][ T4136] bus_for_each_drv+0x183/0x210 [ 856.784065][ T4136] __device_attach+0x2a2/0x400 [ 856.788816][ T4136] device_initial_probe+0x1a/0x20 [ 856.793847][ T4136] bus_probe_device+0xc0/0x1f0 [ 856.798611][ T4136] device_add+0xb4d/0xef0 [ 856.802944][ T4136] usb_new_device+0xa70/0x1520 [ 856.807702][ T4136] hub_event+0x2850/0x4350 [ 856.812128][ T4136] process_one_work+0x71f/0xc40 [ 856.816968][ T4136] worker_thread+0xa29/0x11f0 [ 856.821634][ T4136] kthread+0x281/0x320 [ 856.825690][ T4136] ret_from_fork+0x1f/0x30 [ 856.830096][ T4136] [ 856.832427][ T4136] The buggy address belongs to the object at ffff88811ba20000 [ 856.832427][ T4136] which belongs to the cache kmalloc-4k of size 4096 [ 856.846555][ T4136] The buggy address is located 3296 bytes inside of [ 856.846555][ T4136] 4096-byte region [ffff88811ba20000, ffff88811ba21000) [ 856.859988][ T4136] [ 856.862297][ T4136] The buggy address belongs to the physical page: [ 856.868692][ T4136] page:ffffea00046e8800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ba20 [ 856.878916][ T4136] head:ffffea00046e8800 order:3 compound_mapcount:0 compound_pincount:0 [ 856.887234][ T4136] flags: 0x4000000000010200(slab|head|zone=1) [ 856.893308][ T4136] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 856.901894][ T4136] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 856.910478][ T4136] page dumped because: kasan: bad access detected [ 856.916879][ T4136] page_owner tracks the page as allocated [ 856.922582][ T4136] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1917, tgid 1912 (syz.2.613), ts 82933773153, free_ts 82904640129 [ 856.946904][ T4136] post_alloc_hook+0x1f5/0x210 [ 856.951755][ T4136] prep_new_page+0x1c/0x110 [ 856.956249][ T4136] get_page_from_freelist+0x2c7b/0x2cf0 [ 856.961875][ T4136] __alloc_pages+0x1c3/0x450 [ 856.966473][ T4136] alloc_slab_page+0x6e/0xf0 [ 856.971068][ T4136] new_slab+0x98/0x3d0 [ 856.975131][ T4136] ___slab_alloc+0x6bd/0xb20 [ 856.979714][ T4136] __slab_alloc+0x5e/0xa0 [ 856.984036][ T4136] __kmem_cache_alloc_node+0x203/0x2c0 [ 856.989489][ T4136] __kmalloc_node+0xa1/0x1e0 [ 856.994160][ T4136] kvmalloc_node+0x294/0x480 [ 856.998736][ T4136] alloc_netdev_mqs+0x8d/0xf90 [ 857.003495][ T4136] __ip_tunnel_create+0x285/0x440 [ 857.008582][ T4136] ip_tunnel_init_net+0x2f2/0x7d0 [ 857.013602][ T4136] ipip_init_net+0x29/0x30 [ 857.018037][ T4136] ops_init+0x1c8/0x4a0 [ 857.022219][ T4136] page last free stack trace: [ 857.026886][ T4136] free_unref_page_prepare+0x742/0x750 [ 857.032371][ T4136] free_unref_page+0x8f/0x530 [ 857.037091][ T4136] __free_pages+0x67/0x100 [ 857.041506][ T4136] __free_slab+0xca/0x1a0 [ 857.045854][ T4136] __unfreeze_partials+0x160/0x190 [ 857.051001][ T4136] put_cpu_partial+0xa9/0x100 [ 857.055676][ T4136] __slab_free+0x1c4/0x280 [ 857.060094][ T4136] ___cache_free+0xbf/0xd0 [ 857.064510][ T4136] qlist_free_all+0xc6/0x140 [ 857.069097][ T4136] kasan_quarantine_reduce+0x14a/0x170 [ 857.074572][ T4136] __kasan_slab_alloc+0x24/0x80 [ 857.079419][ T4136] slab_post_alloc_hook+0x4f/0x2d0 [ 857.084524][ T4136] __kmem_cache_alloc_node+0x192/0x2c0 [ 857.089980][ T4136] __kmalloc+0xa1/0x1e0 [ 857.094158][ T4136] kernfs_fop_read_iter+0x160/0x4e0 [ 857.099428][ T4136] vfs_read+0x41e/0x8c0 [ 857.103628][ T4136] [ 857.105941][ T4136] Memory state around the buggy address: [ 857.111553][ T4136] ffff88811ba20b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 857.119612][ T4136] ffff88811ba20c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 857.127673][ T4136] >ffff88811ba20c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 857.135730][ T4136] ^ [ 857.142922][ T4136] ffff88811ba20d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 857.150980][ T4136] ffff88811ba20d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 857.159036][ T4136] ================================================================== [ 857.167083][ T4136] Disabling lock debugging due to kernel taint [ 857.175345][T17532] usb 1-1: New USB device found, idVendor=1199, idProduct=6856, bcdDevice=e6.42 [ 857.215727][T17532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.223783][T17532] usb 1-1: Product: syz [ 857.241055][T17532] usb 1-1: Manufacturer: syz [ 857.254535][T17532] usb 1-1: SerialNumber: syz [ 857.484964][T17532] usb 1-1: USB disconnect, device number 40