last executing test programs: 5.720819002s ago: executing program 1 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x8444a8, &(0x7f0000000740)=ANY=[], 0x5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa3aa86dd6001010000641100fe8000000000000001000000000000bbfe8000000000000000000000000000aa4e200e2200649078020000000100000004001000628e0960f6d6d3f6ee6dad84b345dccac643e7df3e526ff07833b291322d4a"], 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100033887462023010100fe4a0102030109021b0001000000000904000001937234"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.639712796s ago: executing program 1 (id=465): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x11) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000680)=""/102400, 0x19000) timer_settime(0x0, 0x0, 0x0, 0x0) 2.887459271s ago: executing program 2 (id=475): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 2.833297352s ago: executing program 2 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002140)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x3, 0xffffffff, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0) 2.831878972s ago: executing program 1 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0xe) 2.796845452s ago: executing program 2 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}]}]}, 0x2c}}, 0x10) 2.753567672s ago: executing program 1 (id=482): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2.753473452s ago: executing program 2 (id=483): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setresuid(0x0, 0xee00, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001200130626bd7000fddbdf2506ff01fc4e244e2b04000000faffffff06000000070000000700400008000000610000002ca160db", @ANYRES32=0x0, @ANYBLOB="01000000040000000100000005800000080001000d"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.716866272s ago: executing program 2 (id=485): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 2.657775413s ago: executing program 1 (id=486): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r1, r3, 0xffffffffffffffff, 0x0) 2.618919353s ago: executing program 2 (id=489): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000b00)="ab", 0x1}], 0x1) 2.612901493s ago: executing program 0 (id=490): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) recvmmsg(r0, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1}, 0x7}], 0x20, 0x40, 0x0) 2.501805634s ago: executing program 0 (id=493): getpid() prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000e00)=""/153, 0x99}], 0x1, 0x4, 0x3) sendfile(r2, r2, 0x0, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x4000800, 0x0, 0x0) sendto$inet(r4, 0x0, 0xffffffffffffffbd, 0x40040, 0x0, 0xfffffffffffffe7f) 1.800249758s ago: executing program 1 (id=495): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400701000000ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.745763339s ago: executing program 0 (id=496): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x58) fallocate(r2, 0x0, 0x9, 0x2000403) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x2, 0xfffefffffdffffff}) write$uinput_user_dev(r1, &(0x7f0000000540)={'syz1\x00', {0x36cb, 0x4, 0x2, 0x4}, 0x20, [0x35, 0x1, 0x1, 0x10000, 0x2, 0xfffffff7, 0x4, 0x7, 0x9949, 0x4, 0x5, 0x0, 0x1, 0x1ff, 0xa3, 0x7, 0x0, 0x1, 0x52, 0x0, 0x6d6, 0x7, 0x0, 0x10000, 0xffffffff, 0x9c, 0xff, 0x4, 0x7, 0x8920, 0x2b, 0x3, 0xfffffffe, 0x0, 0x1, 0x8, 0x4, 0x4, 0x8, 0xfffff78b, 0x9, 0xffff, 0x5, 0x1, 0x5, 0x7fff, 0x7f, 0x5, 0x2, 0x3, 0x6, 0x6, 0x3, 0x5, 0x18e0, 0x330, 0x6, 0xe016, 0x8169, 0x1, 0x18, 0xfffffffd, 0x7, 0x5], [0x6, 0x2, 0x3, 0x9d, 0xb, 0x6, 0x6, 0x6, 0x3, 0x2, 0xd83, 0x3, 0x9, 0x7, 0x0, 0xb0b2, 0x7, 0x0, 0xfffffffe, 0x2, 0x7ff, 0x53, 0x7, 0x8, 0x1, 0x2, 0xffffffa3, 0x7, 0x2, 0x3, 0x8000, 0x2, 0xa, 0x1ff, 0x3e, 0x200, 0x12, 0x2, 0x1, 0x10001, 0xe, 0x6, 0xe1e, 0x1, 0x400, 0x6, 0x93, 0x8001, 0xe, 0x3, 0x10, 0x3ea9, 0x1e, 0x3, 0x7fff, 0xf, 0x5, 0xfffffffb, 0x4, 0x8, 0x9, 0xffffffff, 0x7, 0x5], [0x7, 0x9, 0x8, 0x2, 0x7, 0x9b, 0x2, 0x6414, 0x9, 0x9, 0x7, 0x9, 0x400, 0x7, 0x81, 0x9, 0x0, 0x1, 0x10, 0x7, 0x24a, 0xbb0, 0x7, 0x0, 0x9, 0x4, 0xd, 0x3, 0x4, 0xe12, 0x2, 0x5, 0x9, 0x0, 0x8, 0x8, 0x0, 0x7, 0xffff, 0xfe00000, 0x9, 0x9, 0x3d3, 0x6, 0xd, 0x5, 0x3, 0x4, 0x93f, 0x4, 0x7, 0x10, 0x6fa, 0x0, 0x101, 0x80000001, 0x1, 0x7ff, 0x2, 0x8, 0xff, 0x9, 0xfffff800, 0x9], [0x9, 0x9, 0x6a9da578, 0x2, 0x5, 0x16, 0x1, 0x693, 0x8, 0x8, 0x1, 0x7fffffff, 0xfffffffe, 0x1, 0x6, 0x4, 0x4, 0x9, 0x4, 0xfffffeff, 0x40, 0x3ff, 0x739b, 0x5e, 0x3, 0x9, 0x3, 0xa, 0x1, 0x776, 0x8, 0x0, 0x10001, 0x8, 0xd, 0x10000, 0x3023, 0x5, 0x7, 0xfffff7c4, 0x10000, 0xc, 0xdcc, 0x5, 0xd9e, 0x5, 0x10000, 0x0, 0x8, 0xc, 0xe1, 0x9, 0x4a7, 0x4, 0x8, 0x5, 0x6, 0x5, 0x8, 0x8, 0x0, 0xa, 0x1ae, 0xd2]}, 0x45c) 1.268419932s ago: executing program 4 (id=501): symlink(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x402, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, 0x0, 0x0, 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.174329763s ago: executing program 0 (id=503): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, 0x0, 0xee01) 1.050650323s ago: executing program 0 (id=504): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800001, &(0x7f0000000100)={[{@segment_mode}, {@checkpoint_diasble}, {@noinline_xattr}, {@acl}, {@two_active_logs}, {@alloc_mode_def}, {@disable_ext_identify}]}, 0x1, 0x5531, &(0x7f0000005740)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 909.819504ms ago: executing program 4 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 858.495095ms ago: executing program 4 (id=506): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6, 0x9, 0x0, 0x1, 0xfffa0000}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 216.447759ms ago: executing program 4 (id=507): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) 145.791599ms ago: executing program 4 (id=508): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}]}]}]}, 0x54}}, 0x0) 133.471859ms ago: executing program 4 (id=510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000200)=0xffff261c) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 125.97651ms ago: executing program 0 (id=511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) fchmodat(r2, &(0x7f0000000000)='.\x00', 0xe0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 81.26623ms ago: executing program 3 (id=512): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x12, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 29.48256ms ago: executing program 3 (id=513): r0 = socket(0x15, 0x5, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 29.39889ms ago: executing program 3 (id=514): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/88, 0x58, 0x1) 29.34555ms ago: executing program 3 (id=515): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x5c, 0x14, 0xf0b, 0x1, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb}, {0x4, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}}, 0x0) 11.96023ms ago: executing program 3 (id=516): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 0s ago: executing program 3 (id=517): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_delete(0x0) kernel console output (not intermixed with test programs): t may corrupt user memory! [ 32.475505][ T393] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 32.510801][ T393] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 32.520134][ T393] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 32.528545][ T393] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.611892][ T393] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 32.619401][ T393] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.188147][ T279] usb 1-1: USB disconnect, device number 2 [ 33.215881][ T431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 33.233186][ T421] overlayfs: './file1' not a directory [ 33.810444][ T445] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 33.838918][ T445] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.33: corrupted in-inode xattr [ 33.851107][ T445] EXT4-fs (loop3): Remounting filesystem read-only [ 33.867010][ T445] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.33: couldn't read orphan inode 15 (err -117) [ 33.879740][ T445] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000000,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,nodiscard, [ 33.902355][ T445] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop3, type ext3) errno=-22 [ 33.915256][ T460] Zero length message leads to an empty skb [ 33.921884][ T460] futex_wake_op: syz.2.34 tries to shift op by -1; fix this program [ 33.930718][ T460] overlayfs: failed to resolve './bus': -2 [ 33.937155][ T25] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 34.053853][ T465] FAT-fs (loop3): Directory bread(block 64) failed [ 34.062396][ T465] FAT-fs (loop3): Directory bread(block 65) failed [ 34.069562][ T465] FAT-fs (loop3): Directory bread(block 66) failed [ 34.076470][ T465] FAT-fs (loop3): Directory bread(block 67) failed [ 34.083394][ T465] FAT-fs (loop3): Directory bread(block 68) failed [ 34.090437][ T465] FAT-fs (loop3): Directory bread(block 69) failed [ 34.097203][ T465] FAT-fs (loop3): Directory bread(block 70) failed [ 34.103860][ T465] FAT-fs (loop3): Directory bread(block 71) failed [ 34.110843][ T465] FAT-fs (loop3): Directory bread(block 72) failed [ 34.117786][ T465] FAT-fs (loop3): Directory bread(block 73) failed [ 34.407998][ T471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.39'. [ 34.417259][ T471] netlink: 32 bytes leftover after parsing attributes in process `syz.0.39'. [ 34.490887][ T25] usb 2-1: device descriptor read/64, error -71 [ 34.851357][ T474] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 34.872108][ T474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 34.885201][ T473] process 'syz.4.40' launched './file0' with NULL argv: empty string added [ 34.946294][ T487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 34.957483][ T487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.42'. [ 34.987066][ T25] usb 2-1: device descriptor read/64, error -71 [ 35.042922][ T24] kauditd_printk_skb: 61 callbacks suppressed [ 35.042934][ T24] audit: type=1400 audit(1762132679.880:177): avc: denied { create } for pid=499 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.174388][ T24] audit: type=1400 audit(1762132680.010:178): avc: denied { read write } for pid=508 comm="syz.3.47" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.197926][ T24] audit: type=1400 audit(1762132680.010:179): avc: denied { open } for pid=508 comm="syz.3.47" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 35.217081][ T279] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.277110][ T25] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 35.303359][ T24] audit: type=1400 audit(1762132680.140:180): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.422549][ T521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 35.501083][ T24] audit: type=1400 audit(1762132680.340:181): avc: denied { append } for pid=524 comm="syz.2.50" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.547051][ T25] usb 2-1: device descriptor read/64, error -71 [ 35.549601][ T24] audit: type=1400 audit(1762132680.380:182): avc: denied { setopt } for pid=527 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.573104][ T24] audit: type=1400 audit(1762132680.380:183): avc: denied { write } for pid=527 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.592926][ T24] audit: type=1400 audit(1762132680.380:184): avc: denied { write } for pid=527 comm="syz.2.51" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.615929][ T279] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 35.624381][ T279] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 35.633707][ T279] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 35.644335][ T279] usb 5-1: config 220 has no interface number 2 [ 35.650842][ T279] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 35.664202][ T279] usb 5-1: config 220 interface 0 has no altsetting 0 [ 35.671158][ T279] usb 5-1: config 220 interface 76 has no altsetting 0 [ 35.678249][ T279] usb 5-1: config 220 interface 1 has no altsetting 0 [ 35.837146][ T279] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 35.846351][ T279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.854646][ T279] usb 5-1: Product: syz [ 35.859082][ T279] usb 5-1: Manufacturer: syz [ 35.863753][ T279] usb 5-1: SerialNumber: syz [ 35.947074][ T25] usb 2-1: device descriptor read/64, error -71 [ 36.071341][ T25] usb usb2-port1: attempt power cycle [ 36.151166][ T540] udc-core: couldn't find an available UDC or it's busy [ 36.158328][ T540] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.237234][ T279] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 36.243713][ T279] uvcvideo: No valid video chain found. [ 36.249388][ T279] usb 5-1: selecting invalid altsetting 0 [ 36.267789][ T536] loop3: p3 < p5 p6 > p4 < p7 > [ 36.273960][ T536] loop3: p5 start 8391680 is beyond EOD, truncated [ 36.280566][ T536] loop3: p6 size 33554432 extends beyond EOD, truncated [ 36.290012][ T536] loop3: p7 start 8391680 is beyond EOD, truncated [ 36.329519][ T279] usb 5-1: USB disconnect, device number 2 [ 36.381693][ T388] udevd[388]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 36.382882][ T306] udevd[306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 36.393001][ T298] udevd[298]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 36.437084][ T296] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.468254][ T544] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3579765865 (7159531730 ns) > initial count (3404131020 ns). Using initial count to start timer. [ 36.486738][ T544] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.507079][ T25] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 36.660192][ T25] usb 2-1: device descriptor read/8, error -71 [ 36.678937][ T24] audit: type=1400 audit(1762132681.510:185): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 36.771770][ T550] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 36.787966][ T550] EXT4-fs (loop1): Test dummy encryption mode enabled [ 36.794954][ T550] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 36.804849][ T24] audit: type=1400 audit(1762132681.640:186): avc: denied { create } for pid=558 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.808141][ T550] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.837464][ T550] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.837658][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.859856][ T550] EXT4-fs (loop1): 1 truncate cleaned up [ 36.860626][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.865603][ T550] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 36.877098][ T25] usb 2-1: device descriptor read/8, error -71 [ 36.911457][ T296] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 36.922560][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.934768][ T296] usb 1-1: config 0 descriptor?? [ 37.217087][ T279] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 37.277307][ T296] usbhid 1-1:0.0: can't add hid device: -71 [ 37.283336][ T296] usbhid: probe of 1-1:0.0 failed with error -71 [ 37.302888][ T296] usb 1-1: USB disconnect, device number 3 [ 37.375287][ T584] netlink: 'syz.3.64': attribute type 12 has an invalid length. [ 37.524243][ T586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 37.676143][ T588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=588 comm=syz.3.66 [ 37.736523][ T589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 37.749421][ T589] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 37.759073][ T588] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 37.857186][ T279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.876890][ T279] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 37.894377][ T279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.914176][ T616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.72'. [ 37.918561][ T279] usb 5-1: config 0 descriptor?? [ 37.927539][ T616] netlink: 32 bytes leftover after parsing attributes in process `syz.0.72'. [ 38.026361][ T624] 9pnet: Insufficient options for proto=fd [ 38.413577][ T626] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.566814][ T645] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 38.608851][ T279] elo 0003:04E7:0030.0001: unknown main item tag 0x0 [ 38.615636][ T279] elo 0003:04E7:0030.0001: unknown main item tag 0x0 [ 38.622512][ T279] elo 0003:04E7:0030.0001: item fetching failed at offset 2/7 [ 38.630282][ T279] elo 0003:04E7:0030.0001: parse failed [ 38.635963][ T279] elo: probe of 0003:04E7:0030.0001 failed with error -22 [ 38.810367][ T279] usb 5-1: USB disconnect, device number 3 [ 38.837073][ T583] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.843232][ T648] syz.3.79[648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.844675][ T648] syz.3.79[648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.857717][ T648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.79'. [ 38.882911][ T648] netlink: 45 bytes leftover after parsing attributes in process `syz.3.79'. [ 38.892510][ T648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 39.077126][ T583] usb 2-1: Using ep0 maxpacket: 8 [ 39.197130][ T583] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 39.205316][ T583] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.215496][ T583] usb 2-1: config 0 has no interface number 0 [ 39.377143][ T583] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 39.386399][ T583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.394633][ T583] usb 2-1: Product: syz [ 39.398895][ T583] usb 2-1: Manufacturer: syz [ 39.403525][ T583] usb 2-1: SerialNumber: syz [ 39.419137][ T583] usb 2-1: config 0 descriptor?? [ 39.457605][ T583] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 39.464142][ T583] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 39.472906][ T583] uvcvideo: Failed to create links for entity 6 [ 39.479305][ T583] uvcvideo: Failed to register entities (-22). [ 39.660624][ T681] kvm [672]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 39.671933][ T636] usb 2-1: USB disconnect, device number 6 [ 39.678361][ T681] kvm [672]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 39.709002][ T684] EXT4-fs (loop0): Ignoring removed bh option [ 39.723595][ T684] EXT4-fs (loop0): Ignoring removed oldalloc option [ 39.730497][ T684] EXT4-fs (loop0): Ignoring removed bh option [ 39.736656][ T684] EXT4-fs (loop0): Unrecognized mount option "uid<00000000000000000000" or missing value [ 39.815149][ T683] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 40.049296][ T688] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12 [ 40.066823][ T688] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.068087][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 40.068105][ T24] audit: type=1400 audit(1762132684.910:217): avc: denied { watch watch_reads } for pid=694 comm="syz.0.91" path="/16/bus" dev="overlay" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.086369][ T688] F2FS-fs (loop3): invalid crc value [ 40.118127][ T688] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 40.159476][ T688] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 40.166199][ T688] F2FS-fs (loop3): Start checkpoint disabled! [ 40.173199][ T688] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.180307][ T688] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 40.197071][ T24] audit: type=1400 audit(1762132685.030:218): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 40.229544][ T706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.93'. [ 40.247670][ T24] audit: type=1400 audit(1762132685.090:219): avc: denied { bind } for pid=705 comm="syz.4.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.967090][ T24] audit: type=1400 audit(1762132685.800:220): avc: denied { connect } for pid=712 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.026223][ T24] audit: type=1400 audit(1762132685.830:221): avc: denied { setopt } for pid=712 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.091079][ T717] capability: warning: `syz.1.97' uses deprecated v2 capabilities in a way that may be insecure [ 41.120548][ T719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 41.125943][ T24] audit: type=1400 audit(1762132685.960:222): avc: denied { read } for pid=718 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.160461][ T24] audit: type=1400 audit(1762132686.000:223): avc: denied { wake_alarm } for pid=714 comm="syz.0.96" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.198369][ T717] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 41.344518][ T719] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 41.407281][ T24] audit: type=1400 audit(1762132686.240:224): avc: denied { ioctl } for pid=716 comm="syz.1.97" path="/14/file1/file1" dev="loop1" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.432704][ T717] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 41.490418][ T719] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.497296][ T719] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 41.499893][ T725] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 41.518403][ T725] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.553261][ T719] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 41.587126][ T723] EXT4-fs (loop0): Ignoring removed nobh option [ 41.593515][ T723] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.617335][ T723] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.624016][ T723] Quota error (device loop0): v2_read_file_info: Block with free entry too big (5 >= 5). [ 41.633982][ T723] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.649165][ T723] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 41.656103][ T723] EXT4-fs (loop0): 1 truncate cleaned up [ 41.665060][ T723] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012 [ 41.665590][ T24] audit: type=1400 audit(1762132686.510:225): avc: denied { create } for pid=718 comm="syz.2.98" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.711191][ T740] syz.1.100[740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.711252][ T740] syz.1.100[740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.736230][ T719] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 41.886058][ T737] netlink: 'syz.4.99': attribute type 15 has an invalid length. [ 41.907640][ T749] netlink: 'syz.4.99': attribute type 15 has an invalid length. [ 42.189999][ T765] netlink: 'syz.0.101': attribute type 15 has an invalid length. [ 42.197958][ T765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.101'. [ 42.209968][ T766] netlink: 'syz.0.101': attribute type 15 has an invalid length. [ 42.225656][ T767] device ip6gre1 entered promiscuous mode [ 42.558061][ T52] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.817057][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 42.923786][ T801] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 42.933098][ T801] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.007502][ T52] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 43.088329][ T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.147212][ T443] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.206694][ T52] usb 5-1: config 0 has no interface number 0 [ 43.507165][ T52] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 43.526386][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.544613][ T52] usb 5-1: Product: syz [ 43.559014][ T52] usb 5-1: Manufacturer: syz [ 43.568669][ T805] bridge: RTM_NEWNEIGH with invalid ether address [ 43.585336][ T52] usb 5-1: SerialNumber: syz [ 43.590215][ T443] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 43.602950][ T52] usb 5-1: config 0 descriptor?? [ 43.613684][ T443] usb 2-1: config 0 has no interface number 0 [ 43.637094][ T443] usb 2-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid maxpacket 58888, setting to 1024 [ 43.725142][ T52] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 43.732367][ T443] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 43.742793][ T52] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 43.751495][ T52] uvcvideo: Failed to create links for entity 6 [ 43.758065][ T52] uvcvideo: Failed to register entities (-22). [ 43.816691][ T769] F2FS-fs (loop2): invalid crc value [ 43.824748][ T769] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.861770][ T769] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 43.870700][ T813] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 43.878290][ T813] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.885216][ T813] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 43.897657][ T813] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 43.921491][ T443] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 43.934106][ T443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.942330][ T443] usb 2-1: Product: syz [ 43.946511][ T443] usb 2-1: Manufacturer: syz [ 43.951419][ T443] usb 2-1: SerialNumber: syz [ 43.957241][ T443] usb 2-1: config 0 descriptor?? [ 43.962654][ T52] usb 5-1: USB disconnect, device number 4 [ 43.978024][ T800] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 44.156322][ T826] F2FS-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 44.522966][ T52] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 44.707348][ T834] exfat: Deprecated parameter 'namecase' [ 44.713073][ T834] exfat: Bad value for 'allow_utime' [ 44.997146][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.008109][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.097263][ T52] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 45.106410][ T52] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 45.114450][ T52] usb 3-1: Manufacturer: syz [ 45.119961][ T52] usb 3-1: config 0 descriptor?? [ 45.310371][ T851] F2FS-fs (loop3): fault_injection options not supported [ 45.317590][ T851] F2FS-fs (loop3): fault_type options not supported [ 45.325287][ T851] F2FS-fs (loop3): invalid crc value [ 45.332184][ T851] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.362399][ T851] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.394307][ T278] attempt to access beyond end of device [ 45.394307][ T278] loop3: rw=2049, want=45104, limit=40427 [ 45.477171][ T443] usb 2-1: MIDIStreaming interface descriptor not found [ 45.488905][ T443] usb 2-1: USB disconnect, device number 7 [ 45.509056][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.568335][ T865] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 45.571698][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 45.571712][ T24] audit: type=1400 audit(1762132690.410:233): avc: denied { remount } for pid=828 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.706656][ T24] audit: type=1400 audit(1762132690.500:234): avc: denied { bind } for pid=872 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.733809][ T875] syz.1.131 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.745067][ T24] audit: type=1400 audit(1762132690.500:235): avc: denied { setopt } for pid=872 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.797738][ T24] audit: type=1400 audit(1762132690.640:236): avc: denied { setopt } for pid=886 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.825708][ T887] __nla_validate_parse: 1 callbacks suppressed [ 45.825717][ T887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.133'. [ 45.842911][ T24] audit: type=1400 audit(1762132690.660:237): avc: denied { map } for pid=886 comm="syz.1.133" path="socket:[17274]" dev="sockfs" ino=17274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.900386][ T24] audit: type=1400 audit(1762132690.660:238): avc: denied { read accept } for pid=886 comm="syz.1.133" path="socket:[17274]" dev="sockfs" ino=17274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.966316][ T890] EXT4-fs (loop4): Test dummy encryption mode enabled [ 45.985146][ T892] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 46.003343][ T24] audit: type=1326 audit(1762132690.720:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=889 comm="syz.4.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d12fdfc9 code=0x7ffc0000 [ 46.028391][ T24] audit: type=1326 audit(1762132690.720:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=889 comm="syz.4.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d12fdfc9 code=0x7ffc0000 [ 46.030996][ T890] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 46.073006][ T24] audit: type=1326 audit(1762132690.730:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=889 comm="syz.4.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30d12fc810 code=0x7ffc0000 [ 46.111669][ T24] audit: type=1326 audit(1762132690.730:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=889 comm="syz.4.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d12fdfc9 code=0x7ffc0000 [ 46.167138][ T52] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 46.175960][ T52] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 46.207057][ T52] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 46.215187][ T52] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 46.223324][ T52] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 46.234427][ T52] usb 3-1: USB disconnect, device number 2 [ 46.252305][ T900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 46.297107][ T519] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 46.467098][ T583] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 46.527139][ T20] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 46.667438][ T519] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.674768][ T905] Unknown ioctl 35315 [ 46.683186][ T519] usb 2-1: config 0 interface 0 has no altsetting 0 [ 46.747102][ T583] usb 5-1: device descriptor read/64, error -71 [ 46.750869][ T909] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.142: casefold flag without casefold feature [ 46.766109][ T909] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.142: couldn't read orphan inode 15 (err -117) [ 46.778057][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 46.778879][ T909] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 46.807172][ T519] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice=c4.67 [ 46.816614][ T519] usb 2-1: New USB device strings: Mfr=154, Product=39, SerialNumber=0 [ 46.825145][ T519] usb 2-1: Product: syz [ 46.829702][ T519] usb 2-1: Manufacturer: syz [ 46.840696][ T519] usb 2-1: config 0 descriptor?? [ 46.867091][ T279] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 46.878335][ T519] usbhid 2-1:0.0: can't add hid device: -22 [ 46.884285][ T519] usbhid: probe of 2-1:0.0 failed with error -22 [ 46.910252][ T912] overlayfs: missing 'lowerdir' [ 47.079140][ T892] kvm [891]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 47.088388][ T892] kvm [891]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 47.101031][ T892] APIC base relocation is unsupported by KVM [ 47.127134][ T20] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 47.142241][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.150553][ T20] usb 1-1: Product: syz [ 47.154724][ T20] usb 1-1: Manufacturer: syz [ 47.157194][ T583] usb 5-1: device descriptor read/64, error -71 [ 47.159629][ T20] usb 1-1: SerialNumber: syz [ 47.171173][ T20] usb 1-1: config 0 descriptor?? [ 47.237147][ T279] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 47.248510][ T279] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 47.259809][ T279] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 47.268894][ T279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.297157][ T903] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 47.437159][ T583] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.717096][ T583] usb 5-1: device descriptor read/64, error -71 [ 48.249605][ T922] serio: Serial port ptm0 [ 48.507073][ T583] usb 5-1: device descriptor read/64, error -71 [ 48.627127][ T583] usb usb5-port1: attempt power cycle [ 48.697108][ T279] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 48.706958][ T279] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input5 [ 48.972354][ T279] usb 2-1: USB disconnect, device number 8 [ 49.037092][ T583] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 49.207115][ T583] usb 5-1: device descriptor read/8, error -71 [ 49.254578][ T20] usb 1-1: USB disconnect, device number 4 [ 49.263642][ T928] netlink: 'syz.2.146': attribute type 4 has an invalid length. [ 49.271528][ T928] netlink: 17 bytes leftover after parsing attributes in process `syz.2.146'. [ 49.319258][ T930] EXT4-fs (loop4): Unrecognized mount option "mask=MAY_WRITE" or missing value [ 49.363950][ T942] xt_limit: Overflow, try lower: 65536/2147483648 [ 49.372325][ T934] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,errors=remount-ro,noinit_itable,jqfmt=vfsv1,quota,dioread_lock, [ 49.386533][ T934] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.397178][ T279] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 49.437172][ T583] usb 5-1: device descriptor read/8, error -71 [ 49.535834][ T946] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.148: bg 0: block 345: padding at end of block bitmap is not set [ 49.550414][ T946] EXT4-fs (loop0): Remounting filesystem read-only [ 49.567831][ T942] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 49.581142][ T942] EXT4-fs (loop2): quotafile must be on filesystem root [ 49.756574][ T954] FAT-fs (loop2): Directory bread(block 64) failed [ 49.763264][ T279] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 49.771668][ T954] FAT-fs (loop2): Directory bread(block 65) failed [ 49.778592][ T279] usb 2-1: config 1 has no interface number 0 [ 49.784798][ T954] FAT-fs (loop2): Directory bread(block 66) failed [ 49.791987][ T279] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 49.802067][ T954] FAT-fs (loop2): Directory bread(block 67) failed [ 49.808952][ T279] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 16 [ 49.818907][ T954] FAT-fs (loop2): Directory bread(block 68) failed [ 49.825446][ T954] FAT-fs (loop2): Directory bread(block 69) failed [ 49.832438][ T279] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 49.843183][ T954] FAT-fs (loop2): Directory bread(block 70) failed [ 49.850175][ T954] FAT-fs (loop2): Directory bread(block 71) failed [ 49.856891][ T954] FAT-fs (loop2): Directory bread(block 72) failed [ 49.863670][ T954] FAT-fs (loop2): Directory bread(block 73) failed [ 49.886346][ T954] attempt to access beyond end of device [ 49.886346][ T954] loop2: rw=2051, want=1256, limit=256 [ 49.899797][ T954] attempt to access beyond end of device [ 49.899797][ T954] loop2: rw=2051, want=1288, limit=256 [ 49.920019][ T519] usb 4-1: USB disconnect, device number 2 [ 49.927074][ T583] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 49.937048][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 50.017242][ T279] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 50.049183][ T986] netlink: 96 bytes leftover after parsing attributes in process `syz.3.159'. [ 50.058769][ T987] netlink: 96 bytes leftover after parsing attributes in process `syz.3.159'. [ 50.066392][ T279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.078762][ T279] usb 2-1: Product: syz [ 50.082950][ T279] usb 2-1: Manufacturer: syz [ 50.092715][ T986] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 50.100611][ T992] syz.0.162[992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.103124][ T279] usb 2-1: SerialNumber: syz [ 50.115124][ T992] syz.0.162[992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.137325][ T926] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 50.156322][ T926] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 50.166512][ T583] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 50.182864][ T583] usb 5-1: config 0 has no interface number 0 [ 50.189256][ T583] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 50.206432][ T583] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 50.217801][ T583] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.230974][ T583] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 50.240357][ T583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.249172][ T583] usb 5-1: config 0 descriptor?? [ 50.267133][ T930] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 50.292049][ T997] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.163: casefold flag without casefold feature [ 50.304831][ T997] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.163: couldn't read orphan inode 15 (err -117) [ 50.317043][ T997] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 50.347134][ T638] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 50.710643][ T1012] IPv4: Oversized IP packet from 127.202.26.0 [ 50.717105][ T638] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 50.726414][ T638] usb 3-1: config 0 has no interface number 0 [ 50.735296][ T638] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.746482][ T638] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.759183][ T1013] udc-core: couldn't find an available UDC or it's busy [ 50.770901][ T638] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 50.780236][ T1013] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 50.789205][ T638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.801689][ T638] usb 3-1: config 0 descriptor?? [ 51.047120][ T279] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 51.139716][ T24] kauditd_printk_skb: 148 callbacks suppressed [ 51.139776][ T24] audit: type=1400 audit(1762132695.970:391): avc: denied { name_bind } for pid=1016 comm="syz.0.168" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 51.316724][ T24] audit: type=1400 audit(1762132696.150:392): avc: denied { connect } for pid=929 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.357203][ T583] uclogic 0003:28BD:0042.0003: failed retrieving string descriptor #100: -71 [ 51.366184][ T583] uclogic 0003:28BD:0042.0003: failed retrieving pen parameters: -71 [ 51.374464][ T583] uclogic 0003:28BD:0042.0003: pen probing failed: -71 [ 51.381380][ T583] uclogic 0003:28BD:0042.0003: failed probing parameters: -71 [ 51.389059][ T583] uclogic: probe of 0003:28BD:0042.0003 failed with error -71 [ 51.398280][ T583] usb 5-1: USB disconnect, device number 8 [ 51.507092][ T279] usb 4-1: Using ep0 maxpacket: 32 [ 51.607197][ T638] usbhid 3-1:0.1: can't add hid device: -71 [ 51.613246][ T638] usbhid: probe of 3-1:0.1 failed with error -71 [ 51.621162][ T638] usb 3-1: USB disconnect, device number 3 [ 51.627143][ T279] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 51.635311][ T279] usb 4-1: config 0 has no interface number 0 [ 51.641446][ T279] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 51.651511][ T279] usb 4-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 51.817141][ T279] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 51.826351][ T279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.834541][ T279] usb 4-1: Product: syz [ 51.838821][ T279] usb 4-1: Manufacturer: syz [ 51.843460][ T279] usb 4-1: SerialNumber: syz [ 51.858288][ T279] usb 4-1: config 0 descriptor?? [ 51.931005][ T1015] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 51.938374][ T1015] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 51.948080][ T279] usb-storage 4-1:0.20: USB Mass Storage device detected [ 51.962581][ T279] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 51.995012][ T638] usb 2-1: USB disconnect, device number 9 [ 52.260412][ T279] scsi host1: usb-storage 4-1:0.20 [ 52.314090][ T279] usb 4-1: USB disconnect, device number 3 [ 52.337250][ T1035] fuse: Bad value for 'fd' [ 52.599480][ T1036] F2FS-fs (loop0): Found nat_bits in checkpoint [ 52.697850][ T1036] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 52.716629][ T24] audit: type=1326 audit(1762132697.550:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14a6fc9 code=0x7ffc0000 [ 52.965711][ T24] audit: type=1326 audit(1762132697.550:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14a6fc9 code=0x7ffc0000 [ 53.009261][ T24] audit: type=1326 audit(1762132697.550:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14a6fc9 code=0x7ffc0000 [ 53.116382][ T638] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 53.124157][ T24] audit: type=1326 audit(1762132697.550:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14a6fc9 code=0x7ffc0000 [ 53.167489][ T24] audit: type=1326 audit(1762132697.550:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14a6fc9 code=0x7ffc0000 [ 53.217081][ T24] audit: type=1326 audit(1762132697.550:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ba14a6fc9 code=0x7ffc0000 [ 53.240674][ T24] audit: type=1326 audit(1762132697.550:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14a6fc9 code=0x7ffc0000 [ 53.264303][ T24] audit: type=1326 audit(1762132697.550:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1028 comm="syz.0.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba14a6fc9 code=0x7ffc0000 [ 53.479291][ T279] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 53.487228][ T638] usb 2-1: Using ep0 maxpacket: 16 [ 53.607125][ T638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.618196][ T638] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.628260][ T638] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 53.640147][ T638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.653359][ T638] usb 2-1: config 0 descriptor?? [ 53.707204][ T20] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 53.813192][ T1068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 53.860133][ T1068] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 53.949442][ T1071] EXT4-fs (loop3): Mount option "dioread_lock" incompatible with ext3 [ 53.957222][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 54.017139][ T279] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.027349][ T279] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.059214][ T1071] incfs: Options parsing error. -22 [ 54.064544][ T1071] incfs: mount failed -22 [ 54.077202][ T20] usb 5-1: config 7 has an invalid interface number: 163 but max is 0 [ 54.085463][ T20] usb 5-1: config 7 has no interface number 0 [ 54.117217][ T279] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 54.126624][ T279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.134903][ T279] usb 3-1: SerialNumber: syz [ 54.138262][ T638] ntrig 0003:1B96:0008.0004: unknown main item tag 0x0 [ 54.146606][ T638] ntrig 0003:1B96:0008.0004: unknown main item tag 0x0 [ 54.153643][ T638] ntrig 0003:1B96:0008.0004: item fetching failed at offset 2/7 [ 54.161938][ T638] ntrig 0003:1B96:0008.0004: parse failed [ 54.167976][ T638] ntrig: probe of 0003:1B96:0008.0004 failed with error -22 [ 54.236677][ T1079] binfmt_misc: register: failed to install interpreter file ./file2 [ 54.267188][ T20] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ce.47 [ 54.276257][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.285040][ T20] usb 5-1: Product: syz [ 54.289256][ T20] usb 5-1: Manufacturer: syz [ 54.293857][ T20] usb 5-1: SerialNumber: syz [ 54.352462][ T297] usb 2-1: USB disconnect, device number 10 [ 54.407801][ T279] usb 3-1: 0:2 : does not exist [ 54.411755][ T1081] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 54.430295][ T1084] exFAT-fs (loop0): bogus number of FAT structure [ 54.438294][ T1084] exFAT-fs (loop0): failed to read boot sector [ 54.447056][ T1084] exFAT-fs (loop0): failed to recognize exfat type [ 54.462050][ T279] usb 3-1: USB disconnect, device number 4 [ 54.561154][ T1090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 54.622965][ T1092] SELinux: policydb magic number 0x7a79733a does not match expected magic number 0xf97cff8c [ 54.633293][ T1092] SELinux: failed to load policy [ 54.639005][ T20] usb_ehset_test: probe of 5-1:7.163 failed with error -32 [ 54.647206][ T20] usb 5-1: USB disconnect, device number 9 [ 54.667942][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.235352][ T1114] Unknown ioctl 37381 [ 55.239781][ T1114] Unknown ioctl -2139024127 [ 55.266242][ T1114] Unknown ioctl -1072125377 [ 55.391869][ T1118] xt_bpf: check failed: parse error [ 55.429034][ T1120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47296 sclass=netlink_route_socket pid=1120 comm=syz.3.194 [ 56.151354][ T1146] loop1: p4 < > [ 56.172831][ T1150] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 56.187895][ T1150] EXT4-fs (loop4): invalid journal inode [ 56.196270][ T1150] EXT4-fs (loop4): can't get journal size [ 56.204146][ T1150] EXT4-fs (loop4): 1 truncate cleaned up [ 56.210249][ T1150] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 56.229326][ T1150] EXT4-fs warning (device loop4): ext4_group_add:1682: No reserved GDT blocks, can't resize [ 56.375084][ T24] kauditd_printk_skb: 115 callbacks suppressed [ 56.517589][ T24] audit: type=1400 audit(1762132701.170:516): avc: denied { mount } for pid=1153 comm="syz.2.203" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.692704][ T24] audit: type=1400 audit(1762132701.530:517): avc: denied { read } for pid=1164 comm="syz.0.207" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.715535][ T24] audit: type=1400 audit(1762132701.530:518): avc: denied { open } for pid=1164 comm="syz.0.207" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 56.784619][ T1162] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 56.795275][ T1162] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.833944][ T1171] EXT4-fs (loop4): Ignoring removed orlov option [ 56.878018][ T24] audit: type=1400 audit(1762132701.720:519): avc: denied { mounton } for pid=1182 comm="syz.1.210" path="/33/file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 56.878203][ T1171] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 56.938444][ T24] audit: type=1400 audit(1762132701.770:520): avc: denied { unlink } for pid=1168 comm="syz.4.206" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.014484][ T24] audit: type=1400 audit(1762132701.850:521): avc: denied { getopt } for pid=1168 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.175073][ T24] audit: type=1400 audit(1762132702.010:522): avc: denied { read } for pid=1161 comm="syz.3.204" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.257581][ T24] audit: type=1400 audit(1762132702.040:523): avc: denied { open } for pid=1161 comm="syz.3.204" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.351111][ T24] audit: type=1400 audit(1762132702.040:524): avc: denied { ioctl } for pid=1161 comm="syz.3.204" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.806469][ T1197] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,errors=remount-ro,noquota,noauto_da_alloc,auto_da_alloc,nodioread_nolock, [ 57.829874][ T1197] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.857183][ T24] audit: type=1400 audit(1762132702.700:525): avc: denied { rename } for pid=1196 comm="syz.2.213" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.857495][ T1197] EXT4-fs error (device loop2): ext4_get_first_dir_block:3730: inode #12: comm syz.2.213: directory missing '..' [ 57.892052][ T1197] EXT4-fs (loop2): Remounting filesystem read-only [ 58.802128][ T1214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1214 comm=syz.2.216 [ 59.118475][ T1241] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,errors=remount-ro,noinit_itable,bsdgroups,bsdgroups,dioread_lock, [ 59.132920][ T1241] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.271740][ T1248] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue [ 59.284164][ T1248] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.757085][ T52] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.848656][ T1260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 59.857650][ T1260] device bridge_slave_1 left promiscuous mode [ 59.864147][ T1260] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.874887][ T1260] device bridge_slave_0 left promiscuous mode [ 59.881387][ T1260] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.140376][ T1267] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.168432][ T1267] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,dioread_nolock,,errors=continue [ 60.183236][ T1267] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.194632][ T1278] EXT4-fs (loop1): Ignoring removed orlov option [ 60.201031][ T1278] EXT4-fs (loop1): Unrecognized mount option "subj_type=#&*]*-)[" or missing value [ 60.230209][ T1267] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 60.245055][ T1267] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 1 with error 28 [ 60.257578][ T1267] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.257578][ T1267] [ 60.257587][ T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.258045][ T52] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 60.267849][ T1267] EXT4-fs (loop4): Total free blocks count 0 [ 60.289968][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.294407][ T1285] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: comm syz.4.229: lblock 0 mapped to illegal pblock 0 (length 4) [ 60.301274][ T1267] EXT4-fs (loop4): Free/Dirty block details [ 60.314673][ T1285] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 60.320137][ T52] usb 1-1: config 0 descriptor?? [ 60.338264][ T1285] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.338264][ T1285] [ 60.343203][ T1267] EXT4-fs (loop4): free_blocks=4293918720 [ 60.354592][ T1267] EXT4-fs (loop4): dirty_blocks=16 [ 60.360065][ T1267] EXT4-fs (loop4): Block reservation details [ 60.366124][ T1267] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 60.377652][ T52] usb 1-1: unsupported MDLM descriptors [ 60.410081][ T1288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.234'. [ 60.432122][ T1284] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 60.441133][ T1284] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.561450][ T1296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.235'. [ 60.578925][ T1296] netlink: 'syz.4.235': attribute type 13 has an invalid length. [ 60.594059][ T1296] gretap0: refused to change device tx_queue_len [ 60.601002][ T1296] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 60.690575][ T636] usb 1-1: USB disconnect, device number 5 [ 61.548335][ T1307] xt_hashlimit: size too large, truncated to 1048576 [ 61.602743][ T24] kauditd_printk_skb: 85 callbacks suppressed [ 61.602756][ T24] audit: type=1400 audit(1762132706.440:611): avc: denied { create } for pid=1306 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 61.633593][ T1313] device bridge2 entered promiscuous mode [ 61.642929][ T24] audit: type=1400 audit(1762132706.440:612): avc: denied { write } for pid=1306 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 61.677095][ T52] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 61.688155][ T24] audit: type=1400 audit(1762132706.530:613): avc: denied { bind } for pid=1318 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.763155][ T24] audit: type=1400 audit(1762132706.600:614): avc: denied { read } for pid=1328 comm="syz.0.245" name="usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.787751][ T24] audit: type=1400 audit(1762132706.620:615): avc: denied { open } for pid=1328 comm="syz.0.245" path="/dev/usbmon0" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.917191][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 61.947076][ T520] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 62.037131][ T52] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.048663][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 62.055605][ T52] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 62.064780][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.087334][ T52] usb 4-1: config 0 descriptor?? [ 62.197083][ T520] usb 5-1: Using ep0 maxpacket: 32 [ 62.317195][ T520] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 62.317209][ T520] usb 5-1: config 0 has no interface number 0 [ 62.317235][ T520] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 62.317258][ T520] usb 5-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 62.487782][ T24] audit: type=1400 audit(1762132707.250:616): avc: denied { audit_write } for pid=1354 comm="syz.0.252" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.513708][ T24] audit: type=1107 audit(1762132707.250:617): pid=1354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 62.605057][ T52] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 62.612034][ T52] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 62.623734][ T52] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 62.630803][ T52] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 62.637842][ T52] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 62.645607][ T52] acrux 0003:1A34:0802.0005: hidraw0: USB HID v0.05 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 62.656862][ T52] acrux 0003:1A34:0802.0005: no inputs found [ 62.663018][ T52] acrux 0003:1A34:0802.0005: Failed to enable force feedback support, error: -19 [ 62.675943][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.675962][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.675979][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.675997][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676013][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676029][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676046][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676063][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676080][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676097][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676113][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676130][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676146][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676164][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.676181][ T638] hid-generic 000C:1000:0008.0006: unknown main item tag 0x0 [ 62.677145][ T520] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 62.677161][ T520] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.677173][ T520] usb 5-1: Product: syz [ 62.677185][ T520] usb 5-1: Manufacturer: syz [ 62.677198][ T520] usb 5-1: SerialNumber: syz [ 62.679682][ T520] usb 5-1: config 0 descriptor?? [ 62.707897][ T1313] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 62.709667][ T638] hid-generic 000C:1000:0008.0006: hidraw1: HID v0.01 Device [syz1] on syz1 [ 62.717674][ T1313] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 62.724536][ T24] audit: type=1400 audit(1762132707.570:618): avc: denied { map } for pid=1367 comm="syz.2.255" path="pipe:[14626]" dev="pipefs" ino=14626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 62.757655][ T520] usb-storage 5-1:0.20: USB Mass Storage device detected [ 62.777645][ T638] usb 4-1: USB disconnect, device number 4 [ 62.797383][ T520] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 62.902964][ T1374] fido_id[1374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 63.478063][ T1412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 63.526408][ T1409] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 63.543382][ T1409] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 63.553858][ T1409] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 63.584117][ T1409] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.610743][ T1409] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 63.621170][ T1409] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.728692][ T1409] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.261: bg 0: block 34: padding at end of block bitmap is not set [ 63.762890][ T520] scsi host1: usb-storage 5-1:0.20 [ 63.787192][ T520] usb 5-1: USB disconnect, device number 10 [ 63.789714][ T1409] Quota error (device loop1): write_blk: dquota write failed [ 63.800837][ T1409] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 63.810987][ T1409] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.261: Failed to acquire dquot type 1 [ 63.822634][ T1419] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 63.822931][ T1409] EXT4-fs (loop1): 1 truncate cleaned up [ 63.838158][ T1409] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue [ 64.160695][ T1419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.467466][ T1429] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 64.467466][ T1429] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 64.467466][ T1429] [ 64.485725][ T1429] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 64.493665][ T1429] EXT4-fs (loop4): write access will be enabled during recovery [ 64.501319][ T1429] EXT4-fs (loop4): barriers disabled [ 64.506765][ T1429] JBD2: no valid journal superblock found [ 64.512659][ T1429] EXT4-fs (loop4): error loading journal [ 64.570602][ T1451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 64.579036][ T1451] System zones: 1-12 [ 64.598832][ T1451] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.269: corrupted in-inode xattr [ 64.611978][ T1451] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.269: couldn't read orphan inode 15 (err -117) [ 64.625472][ T1451] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,minixdf,debug,lazytime,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue [ 65.537908][ T1464] device wg2 entered promiscuous mode [ 65.587526][ T1475] netlink: 276 bytes leftover after parsing attributes in process `syz.3.275'. [ 66.149809][ T1509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.282'. [ 66.367362][ T1513] exfat: Deprecated parameter 'utf8' [ 66.372701][ T1513] exfat: Deprecated parameter 'utf8' [ 66.421697][ T1513] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 66.471590][ T1516] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.486362][ T1516] EXT4-fs (loop0): Ignoring removed bh option [ 66.492744][ T583] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 66.497264][ T1516] EXT4-fs (loop0): Ignoring removed orlov option [ 66.507232][ T1516] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.518469][ T1516] EXT4-fs (loop0): 1 truncate cleaned up [ 66.524210][ T1516] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,jqfmt=vfsold,orlov,user_xattr,nodelalloc,quota,,errors=continue [ 66.645190][ T1521] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 66.655693][ T1521] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.747032][ T583] usb 3-1: Using ep0 maxpacket: 32 [ 66.827889][ T1524] F2FS-fs (loop4): Invalid segment/section count (24 != 2 * 1) [ 66.837693][ T1524] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 66.852674][ T1524] F2FS-fs (loop4): fault_injection options not supported [ 66.860939][ T1524] F2FS-fs (loop4): invalid crc value [ 66.867238][ T583] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 66.877883][ T583] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.891846][ T1524] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 66.917212][ T583] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.00 [ 66.933449][ T583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.937576][ T1524] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 66.942681][ T583] usb 3-1: config 0 descriptor?? [ 66.948753][ T1524] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.978737][ T277] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 66.988505][ T277] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 66.997819][ T277] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 67.123665][ T24] kauditd_printk_skb: 62 callbacks suppressed [ 67.123679][ T24] audit: type=1326 audit(1762132711.960:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1537 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d12fdfc9 code=0x7ffc0000 [ 67.154260][ T24] audit: type=1326 audit(1762132711.990:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1537 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30d12fdfc9 code=0x7ffc0000 [ 67.177903][ T24] audit: type=1326 audit(1762132711.990:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1537 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d12fdfc9 code=0x7ffc0000 [ 67.204611][ T24] audit: type=1326 audit(1762132711.990:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1537 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d12fdfc9 code=0x7ffc0000 [ 67.266885][ T1543] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,bsdgroups, [ 67.277809][ T1543] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.537368][ T24] audit: type=1400 audit(1762132712.320:685): avc: denied { write } for pid=1545 comm="syz.0.292" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.738492][ T5] usb 3-1: USB disconnect, device number 5 [ 67.970815][ T1560] F2FS-fs (loop2): invalid crc value [ 67.977816][ T1560] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 68.003755][ T1560] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 68.010602][ T1560] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.217499][ T1579] erofs: Unknown parameter '01777777777777777777777000000000000000000000000000000000000000000000000000000000000000000' [ 68.232994][ T24] audit: type=1400 audit(1762132713.070:686): avc: denied { ioctl } for pid=1586 comm="syz.4.300" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19543 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.354989][ T24] audit: type=1400 audit(1762132713.190:687): avc: denied { name_bind } for pid=1588 comm="syz.2.299" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 68.711007][ T1594] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.301: casefold flag without casefold feature [ 68.723826][ T1594] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.301: couldn't read orphan inode 15 (err -117) [ 68.735836][ T1594] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 68.908489][ T1604] input: syz1 as /devices/virtual/input/input7 [ 69.047119][ T20] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 69.128341][ T1611] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 69.140670][ T1609] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 69.164244][ T1609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e119, mo2=0002] [ 69.173432][ T1609] EXT4-fs (loop0): orphan cleanup on readonly fs [ 69.180376][ T1609] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.306: bg 0: block 361: padding at end of block bitmap is not set [ 69.195368][ T1609] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 69.204392][ T1609] EXT4-fs error (device loop0): ext4_clear_blocks:880: inode #11: comm syz.0.306: attempt to clear invalid blocks 33619980 len 1 [ 69.218254][ T1609] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.306: invalid indirect mapped block 1811939328 (level 0) [ 69.232482][ T1609] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.306: invalid indirect mapped block 2185560079 (level 1) [ 69.247834][ T1609] EXT4-fs (loop0): 1 truncate cleaned up [ 69.253629][ T1609] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,discard,nombcache,nogrpid,errors=continue [ 69.326779][ T1623] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 69.336243][ T1623] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.408323][ T20] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 69.436513][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.456809][ T20] usb 4-1: config 0 has no interface number 0 [ 69.497465][ T638] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 69.657231][ T20] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 69.666289][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.680347][ T20] usb 4-1: Product: syz [ 69.684554][ T20] usb 4-1: Manufacturer: syz [ 69.689402][ T20] usb 4-1: SerialNumber: syz [ 69.694788][ T20] usb 4-1: config 0 descriptor?? [ 69.801390][ T1640] device sit0 entered promiscuous mode [ 69.808610][ T1640] netlink: 1 bytes leftover after parsing attributes in process `syz.0.313'. [ 70.057139][ T638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 70.437056][ T279] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 70.497144][ T638] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 70.506390][ T638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.514462][ T638] usb 5-1: Product: syz [ 70.518889][ T638] usb 5-1: Manufacturer: syz [ 70.523551][ T638] usb 5-1: SerialNumber: syz [ 70.532646][ T638] usb 5-1: config 0 descriptor?? [ 70.708655][ T1657] EXT4-fs (loop1): dax option not supported [ 70.723045][ T1652] F2FS-fs (loop0): invalid crc value [ 70.730576][ T1652] F2FS-fs (loop0): Found nat_bits in checkpoint [ 70.759271][ T1652] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 70.769823][ T1652] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 70.807132][ T279] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 70.813403][ T24] audit: type=1400 audit(1762132715.650:688): avc: denied { create } for pid=1651 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.815780][ T279] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 70.850584][ T279] usb 3-1: config 0 has no interface number 0 [ 70.896639][ T1652] ------------[ cut here ]------------ [ 70.902483][ T1652] WARNING: CPU: 1 PID: 1652 at fs/iomap/direct-io.c:391 iomap_dio_actor+0x559/0x5f0 [ 70.912141][ T1652] Modules linked in: [ 70.916189][ T1652] CPU: 1 PID: 1652 Comm: syz.0.316 Not tainted syzkaller #0 [ 70.923728][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.934164][ T1652] RIP: 0010:iomap_dio_actor+0x559/0x5f0 [ 70.935303][ T279] usb 3-1: config 0 interface 32 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.952805][ T279] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 70.961915][ T279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.970546][ T1652] Code: 7e 48 81 c2 98 07 00 00 48 c7 c7 00 df 09 85 e8 ed 5a b0 02 e9 07 fe ff ff e8 23 99 a4 ff 0f 0b e9 fb fd ff ff e8 17 99 a4 ff <0f> 0b e9 ef fd ff ff e8 0b 99 a4 ff 0f 0b e9 1e ff ff ff e8 ff 98 [ 70.991108][ T279] usb 3-1: config 0 descriptor?? [ 70.997333][ T1652] RSP: 0018:ffffc900012b6ee0 EFLAGS: 00010283 [ 71.003563][ T1652] RAX: ffffffff81bf0c89 RBX: ffff88810d90dc00 RCX: 0000000000080000 [ 71.011796][ T1652] RDX: ffffc9000195c000 RSI: 0000000000067901 RDI: 0000000000067902 [ 71.029308][ T297] usb 5-1: USB disconnect, device number 11 [ 71.044559][ T1652] RBP: ffffc900012b6f50 R08: ffff88811391a780 R09: 0000000000000005 [ 71.052697][ T1652] R10: 0000000000000004 R11: 0000000000000002 R12: dffffc0000000000 [ 71.060935][ T1652] R13: ffffc900012b6fc0 R14: 0000000000360000 R15: 0000000040000000 [ 71.069307][ T1652] FS: 00007f3b9ff0f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 71.078573][ T1652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.078820][ T1677] udc-core: couldn't find an available UDC or it's busy [ 71.092500][ T1677] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.100218][ T1652] CR2: 00007f6fe5f2ff98 CR3: 00000001150ce000 CR4: 00000000003506a0 [ 71.108377][ T1652] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.116416][ T1652] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.124576][ T1652] Call Trace: [ 71.128081][ T1652] ? invalidate_mapping_pagevec+0x40/0x40 [ 71.134021][ T1652] iomap_apply+0x251/0x6a0 [ 71.138592][ T1652] ? trace_raw_output_iomap_apply+0x260/0x260 [ 71.144837][ T1652] ? __kasan_check_read+0x11/0x20 [ 71.151090][ T1652] __iomap_dio_rw+0x7ad/0x1110 [ 71.153239][ T1680] incfs: Can't find or create .index dir in ./file0 [ 71.155911][ T1652] ? __iomap_dio_rw+0x1110/0x1110 [ 71.162745][ T1680] incfs: mount failed -5 [ 71.168019][ T1652] ? iomap_dio_complete+0x6a0/0x6a0 [ 71.177273][ T1652] ? __init_rwsem+0x1c0/0x1c0 [ 71.182235][ T1652] ? f2fs_should_use_dio+0x5e3/0x7a0 [ 71.187981][ T1652] f2fs_file_write_iter+0x12ad/0x2580 [ 71.193675][ T1652] ? f2fs_file_read_iter+0xb10/0xb10 [ 71.199283][ T1652] ? is_bpf_text_address+0x177/0x190 [ 71.204759][ T1652] ? iter_file_splice_write+0x17c/0xc30 [ 71.210458][ T1652] ? __kernel_text_address+0xa0/0x100 [ 71.215957][ T1652] ? unwind_get_return_address+0x4d/0x90 [ 71.221785][ T1652] ? stack_trace_save+0xe0/0xe0 [ 71.226690][ T1652] ? arch_stack_walk+0xee/0x140 [ 71.231646][ T1652] ? stack_trace_save+0x98/0xe0 [ 71.236618][ T1652] ? stack_trace_snprint+0xf0/0xf0 [ 71.242771][ T1645] udc-core: couldn't find an available UDC or it's busy [ 71.250138][ T1652] ? __kasan_slab_alloc+0x69/0xf0 [ 71.255524][ T1645] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.263208][ T1652] ? __kasan_kmalloc+0xda/0x110 [ 71.269452][ T24] audit: type=1326 audit(1762132716.110:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4fe64fc9 code=0x7ffc0000 [ 71.270081][ T1652] ? __kmalloc+0x1a7/0x330 [ 71.297617][ T1652] ? iter_file_splice_write+0x17c/0xc30 [ 71.304083][ T1652] ? direct_splice_actor+0xe9/0x120 [ 71.309414][ T1652] ? splice_direct_to_actor+0x4c0/0xb10 [ 71.315833][ T1652] ? do_splice_direct+0x1b3/0x2c0 [ 71.320979][ T1652] ? __x64_sys_sendfile64+0x18f/0x1f0 [ 71.326464][ T1652] do_iter_readv_writev+0x491/0x600 [ 71.331869][ T24] audit: type=1326 audit(1762132716.110:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f4fe64fc9 code=0x7ffc0000 [ 71.355229][ T1652] ? avc_policy_seqno+0x1b/0x70 [ 71.360284][ T1652] ? generic_file_rw_checks+0x2a0/0x2a0 [ 71.365935][ T1652] ? security_file_permission+0x83/0xa0 [ 71.371588][ T519] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 71.379367][ T1652] ? rw_verify_area+0x1c0/0x360 [ 71.384330][ T1652] do_iter_write+0x189/0x630 [ 71.389002][ T1652] vfs_iter_write+0x7d/0xa0 [ 71.393668][ T1652] iter_file_splice_write+0x650/0xc30 [ 71.399193][ T1652] ? splice_from_pipe+0x150/0x150 [ 71.404357][ T1652] ? generic_file_splice_read+0x43c/0x590 [ 71.410155][ T1652] ? splice_shrink_spd+0xb0/0xb0 [ 71.415221][ T1652] ? fsnotify_perm+0x2fa/0x4b0 [ 71.420276][ T1652] ? splice_from_pipe+0x150/0x150 [ 71.425445][ T1652] direct_splice_actor+0xe9/0x120 [ 71.430589][ T1652] splice_direct_to_actor+0x4c0/0xb10 [ 71.436086][ T1652] ? do_splice_direct+0x2c0/0x2c0 [ 71.441544][ T1652] ? pipe_to_sendpage+0x310/0x310 [ 71.446901][ T1652] ? rw_verify_area+0x1c0/0x360 [ 71.451866][ T1652] do_splice_direct+0x1b3/0x2c0 [ 71.456825][ T1652] ? do_splice_to+0x180/0x180 [ 71.461606][ T1652] ? fsnotify_perm+0x66/0x4b0 [ 71.466384][ T1652] ? security_file_permission+0x83/0xa0 [ 71.472125][ T1652] do_sendfile+0x8ca/0xf90 [ 71.476920][ T1652] ? security_file_free+0xc7/0xe0 [ 71.482112][ T1652] ? do_preadv+0x330/0x330 [ 71.487374][ T1652] ? bpf_trace_run2+0xb8/0x200 [ 71.492828][ T1652] ? bpf_trace_run1+0x200/0x200 [ 71.503484][ T1652] ? switch_fpu_return+0x197/0x340 [ 71.508900][ T1652] __x64_sys_sendfile64+0x18f/0x1f0 [ 71.514785][ T1652] ? __ia32_sys_sendfile+0x190/0x190 [ 71.523029][ T1652] ? syscall_trace_enter+0x108/0x170 [ 71.528685][ T1652] do_syscall_64+0x31/0x40 [ 71.533726][ T1652] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 71.540203][ T1652] RIP: 0033:0x7f3ba14a6fc9 [ 71.545265][ T1652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.565163][ T1652] RSP: 002b:00007f3b9ff0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 71.573798][ T1652] RAX: ffffffffffffffda RBX: 00007f3ba16fdfa0 RCX: 00007f3ba14a6fc9 [ 71.581977][ T1652] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 71.590366][ T1652] RBP: 00007f3ba1529f91 R08: 0000000000000000 R09: 0000000000000000 [ 71.593592][ T1696] EXT4-fs (loop4): Test dummy encryption mode enabled [ 71.598461][ T1652] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000000 [ 71.614003][ T1652] R13: 00007f3ba16fe038 R14: 00007f3ba16fdfa0 R15: 00007ffc93629158 [ 71.622268][ T519] usb 2-1: Using ep0 maxpacket: 16 [ 71.627754][ T1652] ---[ end trace 99fa10011f239560 ]--- [ 71.630632][ T1696] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 71.641904][ T1696] System zones: 0-5 [ 71.646494][ T1696] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 71.667179][ T519] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 71.736889][ T638] usb 4-1: USB disconnect, device number 5 [ 71.797116][ T519] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 71.808048][ T519] usb 2-1: can't read configurations, error -61 [ 71.957067][ T519] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 72.077074][ T20] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 72.132493][ T24] kauditd_printk_skb: 263 callbacks suppressed [ 72.132511][ T24] audit: type=1326 audit(1762132716.970:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f4fe5be67 code=0x7ffc0000 [ 72.163280][ T24] audit: type=1326 audit(1762132717.000:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f4fe01099 code=0x7ffc0000 [ 72.187646][ T24] audit: type=1326 audit(1762132717.000:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f4fe5be67 code=0x7ffc0000 [ 72.197060][ T519] usb 2-1: Using ep0 maxpacket: 16 [ 72.211411][ T24] audit: type=1326 audit(1762132717.000:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f4fe01099 code=0x7ffc0000 [ 72.240202][ T24] audit: type=1326 audit(1762132717.000:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f6f4fe64fc9 code=0x7ffc0000 [ 72.264267][ T24] audit: type=1326 audit(1762132717.020:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f4fe5be67 code=0x7ffc0000 [ 72.267255][ T519] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 72.287822][ T24] audit: type=1326 audit(1762132717.020:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f4fe01099 code=0x7ffc0000 [ 72.319101][ T24] audit: type=1326 audit(1762132717.030:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f6f4fe64fc9 code=0x7ffc0000 [ 72.343132][ T24] audit: type=1326 audit(1762132717.060:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6f4fe5be67 code=0x7ffc0000 [ 72.366782][ T24] audit: type=1326 audit(1762132717.060:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1644 comm="syz.2.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6f4fe01099 code=0x7ffc0000 [ 72.390197][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 72.448007][ T519] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 72.456324][ T519] usb 2-1: can't read configurations, error -61 [ 72.463357][ T519] usb usb2-port1: attempt power cycle [ 72.517119][ T20] usb 5-1: config 0 interface 0 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 72.532036][ T20] usb 5-1: config 0 interface 0 has no altsetting 0 [ 72.544208][ T20] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 72.562129][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.580633][ T20] usb 5-1: config 0 descriptor?? [ 72.627657][ T20] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 72.726285][ T1713] x_tables: duplicate underflow at hook 2 [ 72.732161][ T1713] x_tables: duplicate underflow at hook 2 [ 72.853967][ T20] usb 5-1: USB disconnect, device number 12 [ 72.887121][ T279] usb 3-1: string descriptor 0 read error: -71 [ 72.893539][ T519] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 72.901931][ T279] usbhid 3-1:0.32: couldn't find an input interrupt endpoint [ 72.913231][ T279] usb 3-1: USB disconnect, device number 6 [ 72.916583][ T1718] F2FS-fs (loop0): fault_injection options not supported [ 72.953077][ T1718] F2FS-fs (loop0): fault_type options not supported [ 72.967123][ T583] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 72.983284][ T1718] F2FS-fs (loop0): invalid crc value [ 72.991439][ T1718] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.007082][ T519] usb 2-1: Using ep0 maxpacket: 16 [ 73.047253][ T519] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 73.064901][ T1718] F2FS-fs (loop0): Start checkpoint disabled! [ 73.088291][ T1718] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 73.177099][ T519] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 73.187265][ T519] usb 2-1: can't read configurations, error -61 [ 73.545122][ T1739] F2FS-fs (loop2): invalid crc value [ 73.551691][ T1739] F2FS-fs (loop2): Found nat_bits in checkpoint [ 73.583270][ T1739] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 73.607048][ T519] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 73.617127][ T583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.628346][ T583] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.638398][ T583] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 73.649789][ T583] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.659993][ T583] usb 4-1: config 0 descriptor?? [ 73.697112][ T519] usb 2-1: Using ep0 maxpacket: 16 [ 73.737119][ T519] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 73.857147][ T519] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 74.208441][ T519] usb 2-1: can't read configurations, error -61 [ 74.216147][ T519] usb usb2-port1: unable to enumerate USB device [ 74.308328][ T1769] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.316383][ T1769] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 74.324563][ T1769] System zones: 0-1, 15-15, 18-18, 34-34 [ 74.331489][ T1769] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.338201][ T1769] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 74.352903][ T1769] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 74.360586][ T1769] EXT4-fs (loop1): 1 truncate cleaned up [ 74.366385][ T1769] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,,errors=continue [ 74.367273][ T297] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 74.386420][ T1769] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 74.397878][ T1769] EXT4-fs error (device loop1): ext4_lookup:1830: inode #15: comm syz.1.344: iget: bad i_size value: 360287970189639690 [ 74.411040][ T1769] EXT4-fs error (device loop1): ext4_lookup:1830: inode #15: comm syz.1.344: iget: bad i_size value: 360287970189639690 [ 74.487122][ T583] usbhid 4-1:0.0: can't add hid device: -71 [ 74.493352][ T583] usbhid: probe of 4-1:0.0 failed with error -71 [ 74.503052][ T583] usb 4-1: USB disconnect, device number 6 [ 74.687133][ T443] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 74.695339][ T1804] EXT4-fs (loop1): Mount option "data_err=abort" incompatible with ext2 [ 74.747131][ T297] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 74.756600][ T297] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 74.766760][ T297] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.783856][ T1807] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.951395][ T1815] netlink: 'syz.3.353': attribute type 3 has an invalid length. [ 75.017141][ T443] usb 5-1: Invalid ep0 maxpacket: 32 [ 75.167186][ T443] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 75.287236][ T297] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.296449][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.308696][ T1814] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 75.308696][ T1814] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 75.308696][ T1814] [ 75.327123][ T297] usb 1-1: Product: syz [ 75.331670][ T297] usb 1-1: Manufacturer: syz [ 75.337962][ T1814] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.354: bg 0: block 131: padding at end of block bitmap is not set [ 75.352185][ T297] usb 1-1: SerialNumber: syz [ 75.357952][ T1814] EXT4-fs (loop1): Remounting filesystem read-only [ 75.364709][ T1814] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 75.376270][ T1814] EXT4-fs (loop1): 1 truncate cleaned up [ 75.382062][ T1814] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,grpquota,noacl,acl,resgid=0x0000000000000000,dioread_lock, [ 75.399130][ T1814] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.354: corrupted in-inode xattr [ 75.411480][ T1814] EXT4-fs (loop1): Remounting filesystem read-only [ 75.418171][ T443] usb 5-1: Invalid ep0 maxpacket: 32 [ 75.423608][ T443] usb usb5-port1: attempt power cycle [ 75.490655][ T1834] device wg2 left promiscuous mode [ 75.506592][ T1834] device wg2 entered promiscuous mode [ 75.602587][ T1848] syz.2.364[1848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.602644][ T1848] syz.2.364[1848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.628339][ T1848] binder: 1847:1848 ioctl c0306201 200000000540 returned -14 [ 75.727171][ T297] usb 1-1: 0:2 : does not exist [ 75.734641][ T297] usb 1-1: USB disconnect, device number 6 [ 75.797456][ T1848] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12 [ 75.805163][ T1848] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.818981][ T1848] F2FS-fs (loop2): invalid crc value [ 75.826766][ T1848] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 75.856692][ T1848] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 75.863361][ T1848] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 75.869900][ T443] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 75.897388][ T1848] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 75.904587][ T1848] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 75.957171][ T519] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 75.967238][ T443] usb 5-1: Invalid ep0 maxpacket: 32 [ 75.976540][ T1867] netlink: 224 bytes leftover after parsing attributes in process `syz.3.368'. [ 75.987220][ T1868] netlink: 224 bytes leftover after parsing attributes in process `syz.3.368'. [ 75.997265][ T298] udevd[298]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.054066][ T1874] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 76.063174][ T1874] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.117181][ T443] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 76.156749][ T1889] netlink: 'syz.2.373': attribute type 27 has an invalid length. [ 76.217100][ T519] usb 2-1: Using ep0 maxpacket: 16 [ 76.218455][ T443] usb 5-1: Invalid ep0 maxpacket: 32 [ 76.230373][ T1889] device veth0_vlan left promiscuous mode [ 76.236362][ T1889] device veth0_vlan entered promiscuous mode [ 76.244075][ T443] usb usb5-port1: unable to enumerate USB device [ 76.252330][ T1889] device veth1_macvtap left promiscuous mode [ 76.254294][ T1891] FAT-fs (loop3): Directory bread(block 64) failed [ 76.258656][ T519] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 76.265624][ T1891] FAT-fs (loop3): Directory bread(block 65) failed [ 76.279555][ T1891] FAT-fs (loop3): Directory bread(block 66) failed [ 76.280235][ T1889] device veth1_macvtap entered promiscuous mode [ 76.286084][ T1891] FAT-fs (loop3): Directory bread(block 67) failed [ 76.286133][ T1891] FAT-fs (loop3): Directory bread(block 68) failed [ 76.305752][ T1891] FAT-fs (loop3): Directory bread(block 69) failed [ 76.312394][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.317142][ T1891] FAT-fs (loop3): Directory bread(block 70) failed [ 76.326288][ T1891] FAT-fs (loop3): Directory bread(block 71) failed [ 76.326580][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.332895][ T1891] FAT-fs (loop3): Directory bread(block 72) failed [ 76.332910][ T1891] FAT-fs (loop3): Directory bread(block 73) failed [ 76.384317][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.404640][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.423367][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 76.431152][ T519] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 76.438901][ T519] usb 2-1: can't read configurations, error -61 [ 76.445688][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.454523][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.463074][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 76.471275][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.479566][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 76.487730][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.495958][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.554185][ T1900] attempt to access beyond end of device [ 76.554185][ T1900] loop3: rw=2051, want=1256, limit=256 [ 76.607969][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.640480][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.665921][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.683574][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.692825][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.707929][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.716210][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.724978][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.733393][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.741842][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.750345][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.753475][ T1903] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 76.767736][ T519] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 76.768099][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.784352][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.792779][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.800849][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.808778][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.816170][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.823818][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.832062][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.840291][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.848013][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 76.855740][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 76.889085][ T1903] netlink: 96 bytes leftover after parsing attributes in process `syz.0.375'. [ 76.943564][ T1908] input: syz1 as /devices/virtual/input/input8 [ 77.027042][ T519] usb 2-1: Using ep0 maxpacket: 16 [ 77.067187][ T519] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 77.167130][ T583] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 77.187178][ T519] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 77.194783][ T519] usb 2-1: can't read configurations, error -61 [ 77.201724][ T1910] device bridge0 entered promiscuous mode [ 77.207798][ T519] usb usb2-port1: attempt power cycle [ 77.214040][ T24] kauditd_printk_skb: 271 callbacks suppressed [ 77.214053][ T24] audit: type=1400 audit(1762132722.050:1234): avc: denied { bind } for pid=1909 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.234613][ T1910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 77.335329][ T1914] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 77.365927][ T24] audit: type=1400 audit(1762132722.200:1235): avc: denied { load_policy } for pid=1913 comm="syz.4.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 77.391675][ T1914] SELinux: unknown common [ 77.397971][ T1914] SELinux: failed to load policy [ 77.407133][ T583] usb 3-1: Using ep0 maxpacket: 32 [ 77.477656][ T1920] netlink: 1300 bytes leftover after parsing attributes in process `syz.3.381'. [ 77.488084][ T1920] device veth1_macvtap left promiscuous mode [ 77.607080][ T583] usb 3-1: config 250 has an invalid interface number: 8 but max is 0 [ 77.615332][ T583] usb 3-1: config 250 has no interface number 0 [ 77.622323][ T583] usb 3-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9 [ 77.657071][ T519] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 77.665014][ T583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.767107][ T519] usb 2-1: Using ep0 maxpacket: 16 [ 77.817641][ T519] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 77.957093][ T583] usb 3-1: string descriptor 0 read error: -71 [ 77.963574][ T519] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 77.976375][ T583] usb 3-1: USB disconnect, device number 7 [ 77.982544][ T519] usb 2-1: can't read configurations, error -61 [ 78.008832][ T1934] EXT4-fs (loop3): Test dummy encryption mode enabled [ 78.027270][ T1934] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 78.138959][ T519] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 78.147658][ T1946] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.237134][ T519] usb 2-1: Using ep0 maxpacket: 16 [ 78.277137][ T519] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 78.384901][ T1958] overlayfs: unrecognized mount option "obj_type=^$" or missing value [ 78.657070][ T519] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 78.665120][ T519] usb 2-1: can't read configurations, error -71 [ 78.671716][ T519] usb usb2-port1: unable to enumerate USB device [ 78.917041][ T279] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 79.252560][ T24] audit: type=1400 audit(1762132724.090:1236): avc: granted { setsecparam } for pid=1972 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 79.477084][ T279] usb 5-1: not running at top speed; connect to a high speed hub [ 79.578170][ T279] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 79.587863][ T24] audit: type=1400 audit(1762132724.430:1237): avc: denied { ioctl } for pid=1983 comm="syz.2.397" path="socket:[20278]" dev="sockfs" ino=20278 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.623963][ T279] usb 5-1: config 1 has no interface number 1 [ 79.640592][ T1988] EXT4-fs (loop2): Ignoring removed bh option [ 79.646824][ T1988] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 79.671418][ T279] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 79.672872][ T1988] EXT4-fs (loop2): 1 truncate cleaned up [ 79.694321][ T1988] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000005,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 79.740694][ T1993] SELinux: ebitmap: truncated map [ 79.749961][ T1993] SELinux: failed to load policy [ 79.849530][ T279] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.858899][ T279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.866968][ T279] usb 5-1: Product: syz [ 79.872100][ T279] usb 5-1: Manufacturer: syz [ 79.876723][ T279] usb 5-1: SerialNumber: syz [ 79.901921][ T1998] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.399: Invalid block bitmap block 0 in block_group 0 [ 79.915681][ T1998] Quota error (device loop3): write_blk: dquota write failed [ 79.923243][ T1998] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 79.933405][ T1998] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.399: Failed to acquire dquot type 0 [ 79.947223][ T1998] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.399: Freeing blocks not in datazone - block = 0, count = 4096 [ 79.961866][ T1998] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.399: Invalid inode bitmap blk 0 in block_group 0 [ 79.976525][ T1998] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 79.982418][ T9] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 79.996990][ T1998] EXT4-fs (loop3): 1 orphan inode deleted [ 79.998590][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 80.002801][ T1998] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 80.030466][ T1998] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.399: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 80.036481][ T2005] input: syz0 as /devices/virtual/input/input9 [ 80.055489][ T1998] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.399: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 80.076911][ T2005] tipc: Started in network mode [ 80.082299][ T2005] tipc: Own node identity ac14140f, cluster identity 4711 [ 80.089937][ T2005] tipc: New replicast peer: 255.255.255.255 [ 80.096112][ T2005] tipc: Enabled bearer , priority 10 [ 80.195416][ T24] audit: type=1326 audit(1762132725.030:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2007 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4fe64fc9 code=0x7ffc0000 [ 80.239045][ T24] audit: type=1326 audit(1762132725.030:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2007 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f6f4fe64fc9 code=0x7ffc0000 [ 80.270405][ T24] audit: type=1326 audit(1762132725.030:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2007 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4fe64fc9 code=0x7ffc0000 [ 80.274053][ T279] usb 5-1: USB disconnect, device number 17 [ 80.305954][ T2014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 80.449784][ T2019] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.404: casefold flag without casefold feature [ 80.465037][ T2019] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.404: couldn't read orphan inode 15 (err -117) [ 80.477115][ T2019] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 80.707861][ T2030] mmap: syz.1.407 (2030) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 80.820957][ T2030] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 80.831630][ T2030] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.838599][ T2030] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 80.845851][ T2030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 80.864183][ T2030] EXT4-fs (loop1): 1 truncate cleaned up [ 80.872126][ T2030] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 80.937133][ T279] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 81.037864][ T2050] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.059690][ T2050] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000006,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000 [ 81.197087][ T279] usb 4-1: Using ep0 maxpacket: 32 [ 81.207085][ T636] tipc: 32-bit node address hash set to f1414ac [ 81.317324][ T279] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.368473][ T2056] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 81.377533][ T2056] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.507172][ T279] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 81.516325][ T279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.524544][ T279] usb 4-1: Product: syz [ 81.528859][ T279] usb 4-1: Manufacturer: syz [ 81.533530][ T279] usb 4-1: SerialNumber: syz [ 81.539275][ T279] usb 4-1: config 0 descriptor?? [ 81.577986][ T279] usb 4-1: bad CDC descriptors [ 81.582942][ T279] usb 4-1: unsupported MDLM descriptors [ 81.657743][ T640] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 81.779553][ T52] usb 4-1: USB disconnect, device number 7 [ 82.197028][ T640] usb 1-1: Using ep0 maxpacket: 16 [ 82.321970][ T2074] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.337825][ T640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.377072][ T640] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.396583][ T640] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 82.410047][ T640] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 82.419322][ T640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.431254][ T640] usb 1-1: config 0 descriptor?? [ 82.532723][ T2072] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 82.540830][ T2072] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 82.555014][ T2072] F2FS-fs (loop1): Unrecognized mount option "factboot" or missing value [ 82.608773][ T2078] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 82.618146][ T2078] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.680117][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 82.680131][ T24] audit: type=1400 audit(1762132727.520:1276): avc: denied { remount } for pid=2085 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 82.796862][ T2093] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 82.796862][ T2093] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 82.796862][ T2093] [ 82.821533][ T2093] EXT4-fs (loop4): Ignoring removed orlov option [ 82.838660][ T2093] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,nodioread_nolock,noquota,dioread_lock,noload,orlov,,errors=continue [ 82.852840][ T2093] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.915881][ T640] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0007/input/input10 [ 83.087964][ T2093] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 8: comm syz.4.420: lblock 8 mapped to illegal pblock 8 (length 4) [ 83.228478][ T640] appleir 0003:05AC:8241.0007: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 83.309673][ T2093] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 83.392031][ T2093] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.392031][ T2093] [ 83.407227][ T2093] EXT4-fs error (device loop4): ext4_ext_remove_space:2924: inode #15: comm syz.4.420: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 83.427209][ T2108] netlink: 'syz.1.422': attribute type 5 has an invalid length. [ 83.442692][ T2104] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #15: block 8: comm syz.4.420: lblock 8 mapped to illegal pblock 8 (length 4) [ 83.468530][ T7] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 83.509115][ T2111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.518018][ T24] audit: type=1400 audit(1762132728.350:1277): avc: denied { read } for pid=79 comm="acpid" name="mouse6" dev="devtmpfs" ino=767 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 83.557064][ T7] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 83.572088][ T7] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.572088][ T7] [ 83.586511][ T24] audit: type=1400 audit(1762132728.360:1278): avc: denied { open } for pid=79 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=767 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 83.611128][ T24] audit: type=1400 audit(1762132728.360:1279): avc: denied { ioctl } for pid=79 comm="acpid" path="/dev/input/mouse6" dev="devtmpfs" ino=767 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 83.636098][ T7] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 83.662386][ T7] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 8 with error 28 [ 83.686574][ T7] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.686574][ T7] [ 83.696678][ T7] EXT4-fs (loop4): Total free blocks count 0 [ 83.703034][ T7] EXT4-fs (loop4): Free/Dirty block details [ 83.780589][ T7] EXT4-fs (loop4): free_blocks=4293918720 [ 83.786494][ T7] EXT4-fs (loop4): dirty_blocks=16 [ 83.878839][ T2121] /dev/nullb0: Can't open blockdev [ 85.097197][ T52] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 85.600894][ T2156] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 85.610557][ T2156] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.442: bg 0: block 104: invalid block bitmap [ 85.623520][ T2156] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 85.632597][ T2156] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #11: comm syz.1.442: invalid indirect mapped block 1 (level 1) [ 85.637112][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 85.646204][ T2156] EXT4-fs (loop1): 1 truncate cleaned up [ 85.660023][ T2145] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(12288) [ 85.668613][ T2156] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 85.685211][ T2145] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 85.693623][ T2145] F2FS-fs (loop4): fault_injection options not supported [ 85.701570][ T2145] F2FS-fs (loop4): invalid crc value [ 85.708122][ T2145] F2FS-fs (loop4): Mismatch valid blocks 0 vs. 54 [ 85.714557][ T2145] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 85.722650][ T636] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 86.017186][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.028552][ T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.037775][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.060008][ T25] usb 4-1: config 0 descriptor?? [ 86.107225][ T636] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 86.119011][ T636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.130079][ T636] usb 3-1: config 0 descriptor?? [ 86.208479][ T640] usb 1-1: USB disconnect, device number 7 [ 86.397567][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 86.404626][ T25] usbhid: probe of 4-1:0.0 failed with error -71 [ 86.420543][ T25] usb 4-1: USB disconnect, device number 8 [ 86.664317][ T2176] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 86.667582][ T24] audit: type=1400 audit(1762132731.510:1280): avc: denied { remount } for pid=2180 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 86.747279][ T24] audit: type=1400 audit(1762132731.540:1281): avc: denied { mounton } for pid=2180 comm="syz.1.449" path="/80/file0" dev="ramfs" ino=21544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 86.772008][ T2176] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3342: comm syz.0.448: Allocating blocks 385-513 which overlap fs metadata [ 86.787175][ T2176] EXT4-fs (loop0): shut down requested (1) [ 86.793187][ T2175] EXT4-fs (loop0): pa ffff88810ffd73f0: logic 16, phys. 129, len 24 [ 86.802555][ T24] audit: type=1400 audit(1762132731.640:1282): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 86.824649][ T24] audit: type=1400 audit(1762132731.640:1283): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.853457][ T24] audit: type=1400 audit(1762132731.640:1284): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.880839][ T24] audit: type=1400 audit(1762132731.640:1285): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.917120][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 87.047187][ T279] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 87.167466][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 87.277378][ T640] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 87.288486][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.299595][ T25] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 87.308730][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.326783][ T25] usb 4-1: config 0 descriptor?? [ 87.337122][ T279] usb 2-1: Using ep0 maxpacket: 32 [ 87.497150][ T279] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.569363][ T583] usb 4-1: USB disconnect, device number 9 [ 87.587188][ T279] usb 2-1: config 0 has an invalid descriptor of length 178, skipping remainder of the config [ 87.597527][ T279] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.798428][ T640] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 87.807639][ T640] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.811051][ T279] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 87.815818][ T640] usb 5-1: Product: syz [ 87.825695][ T279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.829244][ T640] usb 5-1: Manufacturer: syz [ 87.837586][ T279] usb 2-1: Product: syz [ 87.841739][ T640] usb 5-1: SerialNumber: syz [ 87.845992][ T279] usb 2-1: Manufacturer: syz [ 87.855908][ T279] usb 2-1: SerialNumber: syz [ 87.857827][ T640] usb 5-1: config 0 descriptor?? [ 87.874316][ T279] usb 2-1: config 0 descriptor?? [ 88.128239][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 88.128252][ T24] audit: type=1400 audit(1762132732.970:1289): avc: denied { unmount } for pid=2180 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.142681][ T2206] 9pnet: Could not find request transport: xen [ 88.154347][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 88.198454][ T279] usb 2-1: USB disconnect, device number 19 [ 88.433462][ T20] usb 3-1: USB disconnect, device number 8 [ 88.487166][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 88.607183][ T25] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 88.615352][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.625594][ T25] usb 1-1: config 0 has no interface number 0 [ 88.787419][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 88.796585][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.813571][ T25] usb 1-1: Product: syz [ 88.835345][ T25] usb 1-1: Manufacturer: syz [ 88.858115][ T25] usb 1-1: SerialNumber: syz [ 88.871018][ T25] usb 1-1: config 0 descriptor?? [ 88.910551][ T25] uvcvideo: Found UVC 0.00 device syz (046d:08c3) [ 88.928651][ T25] uvcvideo: No valid video chain found. [ 89.007258][ T24] audit: type=1400 audit(1762132733.850:1290): avc: denied { remount } for pid=2230 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 89.126638][ T279] usb 1-1: USB disconnect, device number 8 [ 89.197724][ T297] usb 5-1: USB disconnect, device number 18 [ 89.413555][ T24] audit: type=1400 audit(1762132734.250:1291): avc: denied { search } for pid=2244 comm="syz.4.474" name="/" dev="configfs" ino=13276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.446485][ T24] audit: type=1400 audit(1762132734.250:1292): avc: denied { read } for pid=2244 comm="syz.4.474" name="/" dev="configfs" ino=13276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.468591][ T24] audit: type=1400 audit(1762132734.250:1293): avc: denied { open } for pid=2244 comm="syz.4.474" path="/" dev="configfs" ino=13276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 89.499766][ T2233] F2FS-fs (loop3): fault_injection options not supported [ 89.519933][ T2233] F2FS-fs (loop3): fault_type options not supported [ 89.537391][ T2233] F2FS-fs (loop3): invalid crc value [ 89.561373][ T2233] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.610147][ T2233] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.629667][ T24] audit: type=1400 audit(1762132734.470:1294): avc: denied { create } for pid=2232 comm="syz.3.471" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.658696][ T2233] attempt to access beyond end of device [ 89.658696][ T2233] loop3: rw=10241, want=45104, limit=40427 [ 89.680289][ T24] audit: type=1400 audit(1762132734.500:1295): avc: denied { read write open } for pid=2232 comm="syz.3.471" path="/100/file0/file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.721570][ T278] attempt to access beyond end of device [ 89.721570][ T278] loop3: rw=2049, want=45112, limit=40427 [ 90.032258][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 90.533212][ T2294] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 90.547661][ T2294] EXT4-fs (loop3): Ignoring removed bh option [ 90.688688][ T2294] EXT4-fs (loop3): Test dummy encryption mode enabled [ 90.695544][ T2294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.723335][ T2294] EXT4-fs (loop3): 1 truncate cleaned up [ 90.729348][ T2294] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,usrquota,nolazytime,bh,errors=remount-ro,minixdf,test_dummy_encryption=v1,nogrpid,inode_readahead_blks=0x0000000000010000,resgid=0x0000000000000000, [ 90.767134][ T25] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.775770][ T25] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 90.786461][ T24] audit: type=1400 audit(1762132735.620:1296): avc: denied { ioctl } for pid=2291 comm="syz.3.494" path=2F3130322F66696C65312F66696C65302F233138202864656C6574656429 dev="loop3" ino=18 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.819507][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.828729][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 90.840365][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 90.967186][ T2302] EXT4-fs (loop0): Ignoring removed bh option [ 90.979541][ T25] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.980701][ T2308] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 90.989970][ T519] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 91.006183][ T25] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.006193][ T25] usb 3-1: Product: syz [ 91.006203][ T25] usb 3-1: Manufacturer: syz [ 91.012554][ T2308] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.024715][ T2302] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,usrquota,bh,,errors=continue [ 91.044452][ T2302] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.070874][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 91.076405][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 91.091990][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 91.122406][ T2317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 91.186839][ T2319] FAT-fs (loop3): Directory bread(block 64) failed [ 91.193469][ T2319] FAT-fs (loop3): Directory bread(block 65) failed [ 91.200813][ T2319] FAT-fs (loop3): Directory bread(block 66) failed [ 91.207589][ T2319] FAT-fs (loop3): Directory bread(block 67) failed [ 91.266664][ T2319] FAT-fs (loop3): Directory bread(block 68) failed [ 91.274191][ T2319] FAT-fs (loop3): Directory bread(block 69) failed [ 91.282398][ T2319] FAT-fs (loop3): Directory bread(block 70) failed [ 91.289158][ T2319] FAT-fs (loop3): Directory bread(block 71) failed [ 91.295811][ T2319] FAT-fs (loop3): Directory bread(block 72) failed [ 91.302927][ T2319] FAT-fs (loop3): Directory bread(block 73) failed [ 91.437115][ T519] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.447381][ T519] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 91.456421][ T519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.468375][ T519] usb 2-1: config 0 descriptor?? [ 91.689453][ T2324] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 91.698689][ T2324] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 91.711078][ T2324] F2FS-fs (loop0): invalid crc value [ 91.721904][ T2324] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 91.819005][ T2324] F2FS-fs (loop0): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 91.831273][ T2324] F2FS-fs (loop0): Failed to read root inode [ 92.247528][ T24] audit: type=1400 audit(1762132737.090:1297): avc: denied { setopt } for pid=2346 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.269708][ T24] audit: type=1400 audit(1762132737.100:1298): avc: denied { create } for pid=2348 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.296382][ T2347] ================================================================== [ 92.304579][ T2347] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 92.313788][ T2347] Read of size 1 at addr ffff88810d1713d8 by task syz.4.510/2347 [ 92.321508][ T2347] [ 92.323855][ T2347] CPU: 1 PID: 2347 Comm: syz.4.510 Tainted: G W syzkaller #0 [ 92.332584][ T2347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.342653][ T2347] Call Trace: [ 92.345968][ T2347] __dump_stack+0x21/0x24 [ 92.350320][ T2347] dump_stack_lvl+0x169/0x1d8 [ 92.355008][ T2347] ? show_regs_print_info+0x18/0x18 [ 92.360245][ T2347] ? thaw_kernel_threads+0x220/0x220 [ 92.365522][ T2347] print_address_description+0x7f/0x2c0 [ 92.371062][ T2347] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 92.377567][ T2347] kasan_report+0xe2/0x130 [ 92.381974][ T2347] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 92.388466][ T2347] __asan_report_load1_noabort+0x14/0x20 [ 92.394093][ T2347] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 92.400447][ T2347] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 92.406604][ T2347] ? finish_task_switch+0x12e/0x5a0 [ 92.411812][ T2347] ? switch_mm_irqs_off+0x763/0x9a0 [ 92.417005][ T2347] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 92.423156][ T2347] xfrm_policy_inexact_insert+0x70/0x1130 [ 92.428865][ T2347] ? preempt_schedule_notrace+0x110/0x110 [ 92.434578][ T2347] ? __get_hash_thresh+0x10c/0x420 [ 92.439681][ T2347] ? policy_hash_bysel+0x110/0x4f0 [ 92.444783][ T2347] xfrm_policy_insert+0x126/0x9a0 [ 92.449801][ T2347] xfrm_add_policy+0x4d1/0x830 [ 92.454557][ T2347] ? xfrm_dump_sa_done+0xc0/0xc0 [ 92.459490][ T2347] xfrm_user_rcv_msg+0x450/0x6d0 [ 92.464426][ T2347] ? compat_start_thread+0x80/0x80 [ 92.469614][ T2347] ? xfrm_netlink_rcv+0x90/0x90 [ 92.474464][ T2347] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 92.480274][ T2347] ? rcu_preempt_deferred_qs_irqrestore+0x65d/0x950 [ 92.486863][ T2347] ? selinux_nlmsg_lookup+0x219/0x4a0 [ 92.492235][ T2347] netlink_rcv_skb+0x1e0/0x430 [ 92.497000][ T2347] ? xfrm_netlink_rcv+0x90/0x90 [ 92.501854][ T2347] ? netlink_ack+0xb80/0xb80 [ 92.506443][ T2347] ? mutex_trylock+0xa0/0xa0 [ 92.511035][ T2347] xfrm_netlink_rcv+0x72/0x90 [ 92.515707][ T2347] netlink_unicast+0x876/0xa40 [ 92.520492][ T2347] netlink_sendmsg+0x88d/0xb30 [ 92.525250][ T2347] ? netlink_getsockopt+0x530/0x530 [ 92.530445][ T2347] ? security_socket_sendmsg+0x82/0xa0 [ 92.535902][ T2347] ? netlink_getsockopt+0x530/0x530 [ 92.541112][ T2347] ____sys_sendmsg+0x5a2/0x8c0 [ 92.545957][ T2347] ? __sys_sendmsg_sock+0x40/0x40 [ 92.550981][ T2347] ? import_iovec+0x7c/0xb0 [ 92.555490][ T2347] ___sys_sendmsg+0x1f0/0x260 [ 92.560159][ T2347] ? __sys_sendmsg+0x250/0x250 [ 92.565134][ T2347] ? __fdget+0x1a1/0x230 [ 92.569370][ T2347] __x64_sys_sendmsg+0x1e2/0x2a0 [ 92.574343][ T2347] ? __kasan_check_write+0x14/0x20 [ 92.579459][ T2347] ? ___sys_sendmsg+0x260/0x260 [ 92.584328][ T2347] ? __kasan_check_read+0x11/0x20 [ 92.589363][ T2347] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 92.595001][ T2347] do_syscall_64+0x31/0x40 [ 92.599505][ T2347] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.605402][ T2347] RIP: 0033:0x7f30d12fdfc9 [ 92.609834][ T2347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.629440][ T2347] RSP: 002b:00007f30cfd66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.637848][ T2347] RAX: ffffffffffffffda RBX: 00007f30d1554fa0 RCX: 00007f30d12fdfc9 [ 92.645817][ T2347] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 92.653785][ T2347] RBP: 00007f30d1380f91 R08: 0000000000000000 R09: 0000000000000000 [ 92.661755][ T2347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.669722][ T2347] R13: 00007f30d1555038 R14: 00007f30d1554fa0 R15: 00007ffdd0cfb568 [ 92.677690][ T2347] [ 92.680017][ T2347] Allocated by task 2347: [ 92.684361][ T2347] __kasan_kmalloc+0xda/0x110 [ 92.689034][ T2347] __kmalloc+0x1a7/0x330 [ 92.693277][ T2347] sk_prot_alloc+0xb2/0x340 [ 92.697774][ T2347] sk_alloc+0x38/0x4e0 [ 92.701834][ T2347] pfkey_create+0x12a/0x660 [ 92.706343][ T2347] __sock_create+0x38d/0x770 [ 92.710931][ T2347] __sys_socket+0xec/0x190 [ 92.715343][ T2347] __x64_sys_socket+0x7a/0x90 [ 92.720020][ T2347] do_syscall_64+0x31/0x40 [ 92.724438][ T2347] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.730320][ T2347] [ 92.732655][ T2347] The buggy address belongs to the object at ffff88810d171000 [ 92.732655][ T2347] which belongs to the cache kmalloc-1k of size 1024 [ 92.746714][ T2347] The buggy address is located 984 bytes inside of [ 92.746714][ T2347] 1024-byte region [ffff88810d171000, ffff88810d171400) [ 92.760177][ T2347] The buggy address belongs to the page: [ 92.765823][ T2347] page:ffffea0004345c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810d174800 pfn:0x10d170 [ 92.777363][ T2347] head:ffffea0004345c00 order:3 compound_mapcount:0 compound_pincount:0 [ 92.785710][ T2347] flags: 0x4000000000010200(slab|head) [ 92.791173][ T2347] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042f00 [ 92.799863][ T2347] raw: ffff88810d174800 0000000080100008 00000001ffffffff 0000000000000000 [ 92.808444][ T2347] page dumped because: kasan: bad access detected [ 92.814852][ T2347] page_owner tracks the page as allocated [ 92.820567][ T2347] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 277, ts 28768483912, free_ts 28734913965 [ 92.840669][ T2347] prep_new_page+0x179/0x180 [ 92.845290][ T2347] get_page_from_freelist+0x2235/0x23d0 [ 92.850836][ T2347] __alloc_pages_nodemask+0x268/0x5f0 [ 92.856202][ T2347] new_slab+0x84/0x3f0 [ 92.860278][ T2347] ___slab_alloc+0x2a6/0x450 [ 92.864873][ T2347] __slab_alloc+0x63/0xa0 [ 92.869222][ T2347] __kmalloc_track_caller+0x1ef/0x320 [ 92.874604][ T2347] __alloc_skb+0xdc/0x520 [ 92.878949][ T2347] inet6_rt_notify+0x287/0x470 [ 92.883712][ T2347] fib6_add+0x214b/0x3bf0 [ 92.888041][ T2347] ip6_route_add+0x89/0x130 [ 92.892558][ T2347] addrconf_add_dev+0x329/0x430 [ 92.897872][ T2347] addrconf_dev_config+0x1bd/0x510 [ 92.902980][ T2347] addrconf_notify+0x9d8/0xe90 [ 92.907742][ T2347] raw_notifier_call_chain+0x90/0x100 [ 92.913136][ T2347] __dev_notify_flags+0x28f/0x500 [ 92.918151][ T2347] page last free stack trace: [ 92.922831][ T2347] __free_pages_ok+0x7fc/0x820 [ 92.927594][ T2347] __free_pages+0xdd/0x380 [ 92.932008][ T2347] __free_slab+0xcf/0x190 [ 92.936336][ T2347] unfreeze_partials+0x15f/0x190 [ 92.941372][ T2347] put_cpu_partial+0xc1/0x180 [ 92.946042][ T2347] __slab_free+0x2c9/0x3a0 [ 92.950457][ T2347] ___cache_free+0x111/0x130 [ 92.955061][ T2347] qlink_free+0x50/0x90 [ 92.959218][ T2347] qlist_free_all+0x5f/0xb0 [ 92.963721][ T2347] kasan_quarantine_reduce+0x14a/0x160 [ 92.969176][ T2347] __kasan_slab_alloc+0x2f/0xf0 [ 92.974037][ T2347] slab_post_alloc_hook+0x5d/0x2f0 [ 92.979148][ T2347] kmem_cache_alloc+0x165/0x2e0 [ 92.983997][ T2347] __alloc_skb+0x9e/0x520 [ 92.988330][ T2347] rtmsg_ifinfo_build_skb+0x7c/0x180 [ 92.993634][ T2347] rtmsg_ifinfo+0x7a/0x130 [ 92.998041][ T2347] [ 93.000367][ T2347] Memory state around the buggy address: [ 93.006000][ T2347] ffff88810d171280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.014056][ T2347] ffff88810d171300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.022116][ T2347] >ffff88810d171380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 93.030171][ T2347] ^ [ 93.037099][ T2347] ffff88810d171400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.045158][ T2347] ffff88810d171480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.053212][ T2347] ================================================================== [ 93.061265][ T2347] Disabling lock debugging due to kernel taint [ 93.156101][ T640] usb 3-1: USB disconnect, device number 9 [ 93.492700][ T297] usb 2-1: USB disconnect, device number 20