last executing test programs: 6.792419039s ago: executing program 2 (id=2717): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x42, 0x0) write$selinux_attr(r0, &(0x7f00000006c0)='system_u:object_r:etc_runtime_t:s0\x00', 0x23) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000003007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 3.946741898s ago: executing program 2 (id=2742): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000280)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/41, 0x29}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/177, 0xb1}], 0x5, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000380)=""/50, 0x32}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x23}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 3.074189202s ago: executing program 2 (id=2753): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x42, 0x0) write$selinux_attr(r0, &(0x7f00000006c0)='system_u:object_r:etc_runtime_t:s0\x00', 0x23) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000003007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 1.813943731s ago: executing program 1 (id=2761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) 1.797853251s ago: executing program 1 (id=2762): unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @private}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800ffff000000000000000002"], 0x1c}}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.702944745s ago: executing program 1 (id=2763): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000340)={0x0, 0xb00, 0x0, 0x14, 0x0, 0x10f6}) 1.702553115s ago: executing program 1 (id=2764): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="0301140380dc180600000000ad0001140000002f0600ac141418e0"], 0xdd12}], 0x1}, 0x0) 1.702322135s ago: executing program 3 (id=2765): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x38}}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000080)="ee4b5ec99f4dc9a45d57ec1bddea9f7a2e0ab7d3e28738f3336b70f207228f697b940f30c1e4811cc48ab90882efb11bd06a0617b81196bf59ef321ca4c88fd7") r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 1.695867965s ago: executing program 1 (id=2766): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}}, 0x0) 1.683316976s ago: executing program 3 (id=2767): unshare(0x42000000) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x120) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xf7, 0xbd, &(0x7f0000000340)="fa3b28185e05aa7a7d22d2b0c750d12c1f0fac4d2a3c35cb612c603d147e87cac8da710c1a0215bff054e842cea46f0883e69858fb2a3ea7137d89394ccc53b823221aa6a29fcf4229ae7d71f6f5de2b0c24b9d454d594346d803df6102125d5863f817844783cbd12d855dd5f6a6e47eb4488906942fa2bec9619dc2c0b48db95a014c1394f06aef12dce6a0b276f43feffa89caa4551e74be16cf5cc7165c95f14c147aed36f65bfd4c4ae053cc812bf1ebee876a47be99ccfb6d576220bb6f3447884526be5ae17232ffb8c914e8fd3766a1afcc41964fe32251faf083d3c6d5ff71d2ef1cabf96799b5f5bc7fc5d362e0e2c7d8c14", &(0x7f0000000440)=""/189, 0x9, 0x0, 0x4, 0x40, &(0x7f00000001c0)="477f56d8", &(0x7f0000000500)="e5d46af3e7fe13cbb40e262dfc5eb1d958992fd05d75e4c760f8d9e32c5bebc6e14898097c57c361bb4e7e81b608a74dd6fde53460f7623993070d9731db3584"}, 0x50) dup(r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000340)={[0xfffffffffffffffe]}, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000480)={[{@sysvgroups}, {@noquota}, {@noload}, {@errors_remount}, {@nogrpid}, {@usrjquota}, {@minixdf}, {@journal_checksum}, {@stripe={'stripe', 0x3d, 0x7ff}, 0x0}, {@jqfmt_vfsold}, {@noauto_da_alloc}, {@mblk_io_submit}], [{@audit}, {@mask={'mask', 0x3d, 'MAY_READ'}}], 0x2c}, 0x2, 0x509, &(0x7f00000022c0)="$eJzs3M1rHVUbAPBnbr7fNm/y9v3sB2+jVQyKTZN+Lly0RaEbQVCk7oxJWmrTVpoIbQkmFWnBhdK/wI+d4NqFK92IigvFrcWtCEWyaXUhI3Pv3NubTG6+epO0ze8HN5wzc2bmPDNzcueck0kAm1Zf9iOJ2BoRP0VETyV716uVQlm5O7NTI7/PTo0kkaYv/paUy92enRqpFq1utyXP9JciSu8ksbN42I6Jy1fODo+Pj13MFwxMlvLUueHTY6fHzg8dOXJgf9fhQ0MHmxJnVqfbO966sGv7iVduPD9y8sZr33ya1TfN19fHUdFb/tneYH+lwpKWwpK+6Jt7Lus8vrLq3/e669JJayx4hrj/ZHdtdrnayu2/J1rKuYqeeO7tDa0csKbSNE07Cktr32Uzab0kqWyQpldT4CGQtMdGVwHYENUv+tuzWU91aqTYD3643ToW5R5QFved/FNZ01ruwfb1VvpGbWt0/H9FxMmZPz7IPrHgOAQAQHN9cSzi+vHKc0f1U1lTiv/Ulft7PjfUGxH/iIhtEfHP/Pnl3xHlsv+NiP/VbdO9jFmAvnn54vPPD115ov5xtWmy579n8rmtuc9/tZr3tuS57nL8bcmpM+Nj+/Jz0h9tHVl+sLjr2rDal8/++H6j4/fVPf9ln+z41WfBvB6/ts4boBsdnhy+17irbl0tn9jpYvxJtCbVVMT2iNixiv1n5+zMk5/sarR+TvxZnIX432u889ZVVGie9KOIJyrXfybmxR/5/F9Snp8898bAxOUrT5+pn58cPHxo6OBAZ4yP7Ruo3hVF335/7YU8WehGLHL9q01jTSfSsuv/twXv/9rMZW+Wqs3XTqz8GNduXm/Yp1nt/d+evFROV+dnLw1PTl4cjGhPZorLh+5ue2m4a075LP7+PXfjT6drx81+x/35YZ7bGRHZTfxZRPw/InbndX8kIh6NiD2LxP/18cdeb9SFXDr+tZXFP7qi698ocfS7iIVXtZz96vPCgd/tK8TfFo2u/4Fyqj9fMjo82blUXIvVtD5xzycQAAAAHgC7I2JrJKW9+UDT1iiV9u6N2FIbQZmYfOrUhTfPj1beEeiNtlJ1pKunbjx0MB8bzvLZVkN1+Wz9/vK4cZqmaVeWz/rv490bGzpselsatP/ML8VXWoCHzYrm0Rq90QY8kOa3/5vL3rL5f5ABrK9lfP8nTfhbG+A+pG3D5rXs9r9Wb8EBG2ah9j8dcWcDqgKss4Xa/8uFJUfXpS7A+tL/h81r9e3fHwPAg873P2xKy3pJfhWJbScWKZO0VhKdsUZHLyRKsfh/AeiNqC6pPtMsvsOfS9Gkyrc0NdKuOde0tGCZzmjGsaK0ZJnWFfwjhvVNlJZzJ6xXfToiYom7t3azTVcTV9a6YuVG8PHG/nYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4d38FAAD//5CAz/0=") r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 1.676644976s ago: executing program 1 (id=2768): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15}]}}}]}}]}}, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0x0) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) r2 = accept$unix(r1, 0x0, &(0x7f0000000080)) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000002c0)={0x471, 0x4}) sendmmsg(r2, 0x0, 0x0, 0x0) 1.528577782s ago: executing program 3 (id=2769): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 926.638935ms ago: executing program 0 (id=2780): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 886.421166ms ago: executing program 0 (id=2782): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @dev}}]}, 0x110) close(r2) 878.316396ms ago: executing program 0 (id=2784): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f050000100e00000000000000030000000700000000000000000000000000002e000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={0x60, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) open_tree(r2, &(0x7f0000000280)='\x00', 0x89901) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 854.879667ms ago: executing program 3 (id=2785): unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @private}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800ffff000000000000000002"], 0x1c}}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 812.452739ms ago: executing program 0 (id=2786): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fsync(0xffffffffffffffff) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 784.15579ms ago: executing program 3 (id=2788): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000340)={0x0, 0xb00, 0x0, 0x14, 0x0, 0x10f6}) 768.095701ms ago: executing program 3 (id=2789): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "7f9ede4c549d91f2957b81b93acee296248268a1cb558b7f01af902fffecca0d539d79cda09e9448bf9c23c6f89d4bac454cfc802077de3c"}}, 0x0, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3d}}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, 0x0, 0x0, 0x0}, 0x0) 486.458972ms ago: executing program 2 (id=2792): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x1f}}) 433.801834ms ago: executing program 2 (id=2793): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = gettid() timer_create(0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800081, 0x881d}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) 433.223694ms ago: executing program 2 (id=2794): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r1, &(0x7f00000001c0)="99", 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) dup3(r2, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8) write$cgroup_int(r2, &(0x7f0000000040), 0x12) 386.924695ms ago: executing program 4 (id=2795): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c000280060011"], 0x50}}, 0x0) 287.884139ms ago: executing program 4 (id=2796): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000f050000100e00000000000000030000000700000000000000000000000000002e000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)={0x60, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) open_tree(r2, &(0x7f0000000280)='\x00', 0x89901) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 287.594329ms ago: executing program 4 (id=2797): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) ftruncate(r0, 0x8000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_buf(r1, 0x1, 0x31, 0x0, &(0x7f00000000c0)) 201.112343ms ago: executing program 4 (id=2798): unshare(0x42000000) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @private}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001800ffff000000000000000002"], 0x1c}}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 101.957196ms ago: executing program 4 (id=2799): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000340)={0x0, 0xb00, 0x0, 0x14, 0x0, 0x10f6}) 86.622907ms ago: executing program 0 (id=2800): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) 48.207098ms ago: executing program 4 (id=2801): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x10) write$9p(r0, &(0x7f0000001400)="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", 0x480) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}, @ptr, @ptr, @restrict]}}, &(0x7f0000000580)=""/163, 0x56, 0xa3, 0x1}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x15, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x45}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 0 (id=2802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0x5c}}, 0x1c1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) kernel console output (not intermixed with test programs): T4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 129.926296][ T370] usb 3-1: Using ep0 maxpacket: 16 [ 129.988546][ T4938] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 130.009974][ T23] audit: type=1400 audit(129.978:447): avc: denied { setattr } for pid=4937 comm="syz.1.1633" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 130.031601][ T23] audit: type=1400 audit(129.988:448): avc: denied { ioctl } for pid=4937 comm="syz.1.1633" path="/root/syzkaller.SxxGkU/69/file1/bus/file0" dev="overlay" ino=13 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 130.056337][ T370] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.064457][ T4340] EXT4-fs error (device loop1): ext4_empty_dir:2990: inode #11: comm syz-executor: invalid size [ 130.074675][ T370] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.097748][ T4340] EXT4-fs warning (device loop1): ext4_rmdir:3274: inode #11: comm syz-executor: empty directory 'file1' has too many links (0) [ 130.097805][ T370] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.120543][ T370] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.131052][ T370] usb 3-1: config 0 descriptor?? [ 130.246560][ T4950] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 130.319541][ T4957] hub 6-0:1.0: USB hub found [ 130.324638][ T4957] hub 6-0:1.0: 1 port detected [ 130.548225][ T4950] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 130.617400][ T370] microsoft 0003:045E:07DA.001C: report is too long [ 130.623866][ T370] microsoft 0003:045E:07DA.001C: item 0 4 0 8 parsing failed [ 130.631354][ T370] microsoft 0003:045E:07DA.001C: parse failed [ 130.637434][ T370] microsoft: probe of 0003:045E:07DA.001C failed with error -22 [ 130.716266][ T74] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 130.845348][ T370] usb 3-1: USB disconnect, device number 15 [ 130.956253][ T74] usb 2-1: Using ep0 maxpacket: 16 [ 131.349545][ T23] audit: type=1400 audit(131.318:449): avc: denied { bind } for pid=4980 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.373293][ T23] audit: type=1400 audit(131.338:450): avc: denied { write } for pid=4982 comm="syz.0.1646" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 131.426423][ T74] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 131.435327][ T74] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.443275][ T74] usb 2-1: Product: syz [ 131.447285][ T74] usb 2-1: Manufacturer: syz [ 131.451680][ T74] usb 2-1: SerialNumber: syz [ 131.456877][ T74] usb 2-1: config 0 descriptor?? [ 131.570209][ T23] audit: type=1400 audit(131.538:451): avc: denied { write } for pid=4989 comm="syz.2.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.598036][ T23] audit: type=1400 audit(131.548:452): avc: denied { ioctl } for pid=4989 comm="syz.2.1649" path="socket:[43089]" dev="sockfs" ino=43089 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.599793][ T4992] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 131.799979][ T4999] hub 6-0:1.0: USB hub found [ 131.805353][ T4999] hub 6-0:1.0: 1 port detected [ 131.970068][ T4992] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 131.971481][ T5002] fuse: Unknown parameter 'f®KÁçy.'׫trB³N' [ 131.997562][ T23] audit: type=1326 audit(131.968:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5001 comm="syz.3.1652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebf41b99 code=0x0 [ 132.238011][ T5014] EXT4-fs error (device loop4): ext4_quota_enable:6052: comm syz.4.1656: Bad quota inum: 2, type: 2 [ 132.249045][ T5014] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 132.263774][ T5014] EXT4-fs (loop4): mount failed [ 132.316613][ T371] usb 2-1: USB disconnect, device number 12 [ 133.126272][ T370] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 133.267703][ T5036] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 133.275354][ T5036] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 133.286837][ T5036] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.308999][ T5036] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 133.320957][ T5036] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 133.327959][ T5036] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.383024][ T370] usb 4-1: Using ep0 maxpacket: 16 [ 133.393675][ T5056] fuse: Unknown parameter 'f®KÁçy.'׫trB³N' [ 133.402087][ T23] audit: type=1326 audit(133.368:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5055 comm="syz.2.1669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff015d0ab99 code=0x0 [ 133.516362][ T370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.527128][ T370] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.539671][ T370] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.548472][ T370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.557040][ T370] usb 4-1: config 0 descriptor?? [ 133.950674][ T23] audit: type=1326 audit(133.918:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5059 comm="syz.1.1671" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f736c20cb99 code=0x0 [ 134.037474][ T370] microsoft 0003:045E:07DA.001D: report is too long [ 134.043968][ T370] microsoft 0003:045E:07DA.001D: item 0 4 0 8 parsing failed [ 134.064435][ T370] microsoft 0003:045E:07DA.001D: parse failed [ 134.070797][ T370] microsoft: probe of 0003:045E:07DA.001D failed with error -22 [ 134.147791][ T5066] EXT4-fs error (device loop4): ext4_quota_enable:6052: comm syz.4.1672: Bad quota inum: 2, type: 2 [ 134.158822][ T5066] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 134.173476][ T5066] EXT4-fs (loop4): mount failed [ 134.287803][ T370] usb 4-1: USB disconnect, device number 14 [ 134.509378][ T5086] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 134.640037][ T5086] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 135.201769][ T5115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'. [ 135.203323][ T5112] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 135.274149][ T23] audit: type=1326 audit(135.238:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5121 comm="syz.2.1692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff015d0ab99 code=0x0 [ 135.507725][ T5134] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 135.515332][ T5134] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.526780][ T5134] F2FS-fs (loop3): Found nat_bits in checkpoint [ 135.548927][ T5134] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 135.560797][ T5134] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 135.567776][ T5134] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.606288][ T18] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 135.889469][ T18] usb 5-1: Using ep0 maxpacket: 16 [ 136.006360][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.017227][ T18] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.029835][ T18] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.038629][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.047289][ T18] usb 5-1: config 0 descriptor?? [ 136.163412][ T23] audit: type=1400 audit(136.128:457): avc: denied { write } for pid=5151 comm="syz.0.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.260042][ T5157] hub 6-0:1.0: USB hub found [ 136.265047][ T5157] hub 6-0:1.0: 1 port detected [ 137.191517][ T18] microsoft 0003:045E:07DA.001E: report is too long [ 137.212107][ T18] microsoft 0003:045E:07DA.001E: item 0 4 0 8 parsing failed [ 137.264262][ T18] microsoft 0003:045E:07DA.001E: parse failed [ 137.271750][ T18] microsoft: probe of 0003:045E:07DA.001E failed with error -22 [ 137.311822][ T5168] EXT4-fs (loop2): Unrecognized mount option "obj_type=T/…" or missing value [ 137.321970][ T23] audit: type=1400 audit(137.288:458): avc: denied { name_bind } for pid=5173 comm="syz.3.1703" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 137.654212][ T371] usb 5-1: USB disconnect, device number 12 [ 137.679125][ T5181] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 137.719301][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.726123][ T5186] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.733731][ T5186] device bridge_slave_0 entered promiscuous mode [ 137.742935][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.750045][ T5186] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.757659][ T5186] device bridge_slave_1 entered promiscuous mode [ 137.820758][ T5195] EXT4-fs (loop3): Ignoring removed nobh option [ 137.827326][ T5195] EXT4-fs (loop3): Test dummy encryption mode enabled [ 137.837184][ T5195] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 137.855100][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.861960][ T5186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.869087][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.875816][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.915228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.942472][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.953277][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.027087][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.038264][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.045136][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.055830][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.064086][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.070929][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.084431][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.095296][ T5193] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 138.102966][ T5193] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.351915][ T5193] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.369322][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.390556][ T5193] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 138.396547][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.404495][ T5193] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 138.414162][ T5193] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 138.421606][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.539308][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.649437][ T9] device bridge_slave_1 left promiscuous mode [ 138.664775][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.682702][ T9] device bridge_slave_0 left promiscuous mode [ 138.688776][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.784376][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.858740][ T5215] hub 6-0:1.0: USB hub found [ 138.864182][ T5215] hub 6-0:1.0: 1 port detected [ 139.046998][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.061173][ T23] audit: type=1400 audit(139.028:459): avc: denied { listen } for pid=5217 comm="syz.3.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.062735][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.088881][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.101695][ T5221] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1720'. [ 139.155746][ T23] audit: type=1400 audit(139.118:460): avc: denied { getopt } for pid=5230 comm="syz.0.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.308109][ T5238] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 139.308109][ T5238] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 139.308109][ T5238] [ 139.472831][ T5238] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 139.498491][ T5238] EXT4-fs (loop3): 1 truncate cleaned up [ 139.504529][ T5238] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noacl,noload,data_err=ignore,data_err=ignore,,errors=continue [ 139.542459][ T23] audit: type=1400 audit(139.508:461): avc: denied { setopt } for pid=5250 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.604759][ T23] audit: type=1400 audit(139.558:462): avc: denied { setopt } for pid=5250 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.693408][ T23] audit: type=1400 audit(139.658:463): avc: denied { getopt } for pid=5269 comm="syz.2.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.851077][ T5286] fuse: Unknown parameter 'f®KÁçy.'׫trB³N' [ 139.860973][ T23] audit: type=1326 audit(139.828:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.1747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f736c20cb99 code=0x0 [ 139.999279][ T5294] hub 6-0:1.0: USB hub found [ 140.004540][ T5294] hub 6-0:1.0: 1 port detected [ 140.551975][ T23] audit: type=1326 audit(140.518:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5319 comm="syz.4.1759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0f0dab99 code=0x0 [ 141.049371][ T5342] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 141.313014][ T5351] F2FS-fs (loop3): invalid crc value [ 141.319491][ T5351] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.326413][ T371] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 141.347725][ T5351] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.374341][ T5351] attempt to access beyond end of device [ 141.374341][ T5351] loop3: rw=2049, want=45104, limit=40427 [ 141.388902][ T4181] attempt to access beyond end of device [ 141.388902][ T4181] loop3: rw=2049, want=45112, limit=40427 [ 141.490798][ T5362] fuse: Unknown parameter 'f®KÁçy.'׫trB³N' [ 141.499018][ T23] audit: type=1326 audit(141.468:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.2.1774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff015d0ab99 code=0x0 [ 141.706409][ T371] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 141.715328][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.723919][ T371] usb 2-1: config 0 descriptor?? [ 141.796698][ T5367] hub 6-0:1.0: USB hub found [ 141.801838][ T5367] hub 6-0:1.0: 1 port detected [ 141.971095][ T23] audit: type=1326 audit(141.938:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5376 comm="syz.3.1778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebf41b99 code=0x0 [ 142.146593][ T5349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 142.206367][ T18] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.226382][ T371] usb 2-1: Cannot read MAC address [ 142.231433][ T371] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 142.240592][ T371] usb 2-1: USB disconnect, device number 13 [ 142.482100][ T18] usb 5-1: Using ep0 maxpacket: 16 [ 142.650261][ T5388] F2FS-fs (loop2): invalid crc value [ 142.656956][ T5388] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.682929][ T5388] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.708727][ T5388] attempt to access beyond end of device [ 142.708727][ T5388] loop2: rw=2049, want=45104, limit=40427 [ 142.723284][ T3432] attempt to access beyond end of device [ 142.723284][ T3432] loop2: rw=2049, want=45112, limit=40427 [ 142.776349][ T18] usb 5-1: New USB device found, idVendor=0e8d, idProduct=3329, bcdDevice=9c.d5 [ 142.786588][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.794962][ T18] usb 5-1: Product: syz [ 142.799660][ T18] usb 5-1: Manufacturer: syz [ 142.804274][ T18] usb 5-1: SerialNumber: syz [ 142.813171][ T18] usb 5-1: config 0 descriptor?? [ 142.868207][ T5399] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 143.059806][ T74] usb 5-1: USB disconnect, device number 13 [ 143.200871][ T5410] hub 6-0:1.0: USB hub found [ 143.206353][ T5410] hub 6-0:1.0: 1 port detected [ 143.397651][ T5422] netlink: 'syz.0.1791': attribute type 5 has an invalid length. [ 143.429009][ T5422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5422 comm=syz.0.1791 [ 143.445956][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 143.495902][ T5429] device pim6reg1 entered promiscuous mode [ 143.614961][ T5437] netlink: 'syz.2.1799': attribute type 3 has an invalid length. [ 143.635828][ T5441] bridge: RTM_NEWNEIGH with invalid ether address [ 143.761254][ T5441] netlink: 'syz.2.1800': attribute type 5 has an invalid length. [ 143.790295][ T5451] netlink: 'syz.4.1804': attribute type 5 has an invalid length. [ 143.798731][ T5451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5451 comm=syz.4.1804 [ 143.812697][ T5441] EXT4-fs (loop2): Value of option "test_dummy_encryption=test_dummy_encryption" is unrecognized [ 143.822361][ T5451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 143.940640][ T5462] device pim6reg1 entered promiscuous mode [ 143.952296][ T5467] netlink: 'syz.4.1810': attribute type 3 has an invalid length. [ 144.028518][ T5471] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 144.192243][ T5480] netlink: 'syz.3.1816': attribute type 5 has an invalid length. [ 144.200467][ T5480] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5480 comm=syz.3.1816 [ 144.213319][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 144.962316][ T23] audit: type=1400 audit(144.928:468): avc: denied { unlink } for pid=5533 comm="syz.4.1837" name="#b" dev="tmpfs" ino=46338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 145.010470][ T23] audit: type=1400 audit(144.948:469): avc: denied { rename } for pid=5533 comm="syz.4.1837" name="#b" dev="tmpfs" ino=46338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 145.076797][ T5544] device pim6reg1 entered promiscuous mode [ 145.276701][ T5557] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.287445][ T5559] netlink: 'syz.4.1847': attribute type 5 has an invalid length. [ 145.289991][ T5557] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 145.295716][ T5559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5559 comm=syz.4.1847 [ 145.322264][ T5] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 145.339297][ T23] audit: type=1400 audit(145.308:470): avc: denied { read } for pid=5556 comm="syz.3.1848" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 145.343589][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'. [ 145.804396][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 145.826470][ T5583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1857'. [ 145.835382][ T5583] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1857'. [ 145.845631][ T5583] netlink: 'syz.3.1857': attribute type 6 has an invalid length. [ 145.860146][ T5583] netlink: 'syz.3.1857': attribute type 5 has an invalid length. [ 145.870680][ T5583] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1857'. [ 145.892737][ T5587] EXT4-fs (loop1): Test dummy encryption mode enabled [ 145.900868][ T5587] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,stripe=0x0000000000010000,dioread_nolock,,errors=continue [ 145.926344][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 145.941616][ T5] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 145.954043][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.963544][ T5] usb 3-1: config 0 descriptor?? [ 146.059481][ T23] audit: type=1400 audit(146.028:471): avc: denied { create } for pid=5607 comm="syz.1.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 146.217026][ T5541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.224346][ T23] audit: type=1400 audit(146.188:472): avc: denied { write } for pid=5617 comm="syz.3.1872" path="socket:[46634]" dev="sockfs" ino=46634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 146.248464][ T23] audit: type=1400 audit(146.188:473): avc: denied { nlmsg_read } for pid=5617 comm="syz.3.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 146.269928][ T23] audit: type=1400 audit(146.238:474): avc: denied { write } for pid=5619 comm="syz.3.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 146.468631][ T5641] netlink: 'syz.3.1882': attribute type 5 has an invalid length. [ 146.477551][ T5641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5641 comm=syz.3.1882 [ 146.490190][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1882'. [ 146.520393][ T23] audit: type=1400 audit(146.488:475): avc: denied { create } for pid=5644 comm="syz.4.1884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 146.527505][ T5541] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.626835][ T5] hid (null): invalid report_count 983040256 [ 146.646785][ T5] hid-generic 0003:0158:0100.001F: unknown main item tag 0x0 [ 146.654266][ T5] hid-generic 0003:0158:0100.001F: invalid report_count 983040256 [ 146.662952][ T5] hid-generic 0003:0158:0100.001F: item 0 4 1 9 parsing failed [ 146.670772][ T5] hid-generic: probe of 0003:0158:0100.001F failed with error -22 [ 146.698491][ T23] audit: type=1326 audit(146.668:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.3.1894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebf41b99 code=0x0 [ 146.882431][ T5] usb 3-1: USB disconnect, device number 16 [ 146.973348][ T23] audit: type=1400 audit(146.938:477): avc: denied { ioctl } for pid=5685 comm="syz.0.1902" path="/root/syzkaller.JANE8I/17/file0" dev="sda1" ino=2039 ioctlcmd=0x1265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 147.006450][ T74] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 147.376354][ T74] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 147.385248][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.393757][ T74] usb 5-1: config 0 descriptor?? [ 147.423123][ T5709] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512) [ 147.431359][ T5709] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 147.442833][ T5709] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 147.452609][ T5709] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.496713][ T5709] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 147.506109][ T5709] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.544343][ T5709] attempt to access beyond end of device [ 147.544343][ T5709] loop1: rw=2049, want=45104, limit=40427 [ 147.555552][ T5709] attempt to access beyond end of device [ 147.555552][ T5709] loop1: rw=2049, want=45112, limit=40427 [ 147.567217][ T23] audit: type=1400 audit(147.538:478): avc: denied { mount } for pid=5721 comm="syz.3.1915" name="/" dev="ramfs" ino=47580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 147.585426][ T5722] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=47583 [ 147.598384][ T5722] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=47583 [ 147.609628][ T5722] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=47583 [ 147.616531][ T23] audit: type=1400 audit(147.578:479): avc: denied { write } for pid=5721 comm="syz.3.1915" name="file0" dev="overlay" ino=47583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.653168][ T23] audit: type=1400 audit(147.588:480): avc: denied { setattr } for pid=5721 comm="syz.3.1915" name="file0" dev="overlay" ino=47583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.681535][ T5674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 147.746390][ T74] usb 5-1: Cannot read MAC address [ 147.751436][ T74] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 147.762614][ T74] usb 5-1: USB disconnect, device number 14 [ 148.046266][ T5] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 148.240230][ T5748] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512) [ 148.256400][ T5748] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 148.269717][ T5748] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 148.291956][ T5748] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.325676][ T5766] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1932'. [ 148.344796][ T5766] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1932'. [ 148.373668][ T5748] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 148.380725][ T5748] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 148.419891][ T5748] attempt to access beyond end of device [ 148.419891][ T5748] loop2: rw=2049, want=45104, limit=40427 [ 148.431213][ T5] usb 4-1: descriptor type invalid, skip [ 148.440130][ T5748] attempt to access beyond end of device [ 148.440130][ T5748] loop2: rw=2049, want=45112, limit=40427 [ 148.476384][ T5] usb 4-1: not running at top speed; connect to a high speed hub [ 148.556355][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.966345][ T5] usb 4-1: language id specifier not provided by device, defaulting to English [ 148.987561][ T5785] FAT-fs (loop2): Directory bread(block 64) failed [ 148.993952][ T5785] FAT-fs (loop2): Directory bread(block 65) failed [ 149.000438][ T5785] FAT-fs (loop2): Directory bread(block 66) failed [ 149.007035][ T5785] FAT-fs (loop2): Directory bread(block 67) failed [ 149.013479][ T5785] FAT-fs (loop2): Directory bread(block 68) failed [ 149.021274][ T5785] FAT-fs (loop2): Directory bread(block 69) failed [ 149.029032][ T5785] FAT-fs (loop2): Directory bread(block 70) failed [ 149.035380][ T5785] FAT-fs (loop2): Directory bread(block 71) failed [ 149.041926][ T5785] FAT-fs (loop2): Directory bread(block 72) failed [ 149.048451][ T5785] FAT-fs (loop2): Directory bread(block 73) failed [ 149.296330][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 149.310996][ T5802] ------------[ cut here ]------------ [ 149.315377][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.316451][ T5802] General protection fault in user access. Non-canonical address? [ 149.316518][ T5802] WARNING: CPU: 1 PID: 5802 at arch/x86/mm/extable.c:77 ex_handler_uaccess+0x9b/0xc0 [ 149.324093][ T5] usb 4-1: Manufacturer: ࣆ௭惚뛿á¼ê²ºâ—±å¢«ì©ƒç›¦ã—œä“ªÝ¤ê†µëœ’鴼㒧墬樴標敕将ä¼ãš­äƒ‘á—áž à²Ì禒䶪咀ç§ê™’蟗㙥藪ꗖ䯨餚䞯è½ä¹‹çš³ì¶Â•ë‡¥è¬âŒ—魛㹉ᢙ뤣峞x憀柱⟿â¼ì—‹é‰”ãŠéƒæŠˆë”¦í’衚옄ꖺ爪í”ê’¼ëŽì“—ï–㨌ᘹ᧻㶙∇긜哺绦臙ᇔ㖎৬é¼ñ®¼˜ê–Šá‡‹â¼„ï•âž [ 149.331814][ T5802] Modules linked in: [ 149.331838][ T5802] CPU: 1 PID: 5802 Comm: syz.2.1946 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 149.331843][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 149.331866][ T5802] RIP: 0010:ex_handler_uaccess+0x9b/0xc0 [ 149.331875][ T5802] Code: f7 e8 09 a4 63 00 49 89 2e b0 01 5b 41 5e 41 5f 5d c3 e8 58 be 33 00 c6 05 82 1e 19 05 01 48 c7 c7 e0 d1 a6 84 e8 75 72 0a 00 <0f> 0b eb 9a 89 d9 80 e1 07 80 c1 03 38 c1 7c ac 48 89 df e8 3d a3 [ 149.331880][ T5802] RSP: 0018:ffff8881eebcf5f0 EFLAGS: 00010246 [ 149.341186][ T5] usb 4-1: SerialNumber: syz [ 149.372024][ T5802] RAX: 2e7d583b3e5da100 RBX: ffffffff84806c5c RCX: 0000000000040000 [ 149.372030][ T5802] RDX: ffffc90001d4c000 RSI: 0000000000000b7c RDI: 0000000000000b7d [ 149.372035][ T5802] RBP: 000000000000000d R08: ffffffff814d4702 R09: fffffbfff0dd7a10 [ 149.372040][ T5802] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 149.372046][ T5802] R13: ffff8881eebcf728 R14: ffff8881eebcf728 R15: ffffffff84806c64 [ 149.372054][ T5802] FS: 00007ff014f8c6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 149.372059][ T5802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.372064][ T5802] CR2: 000000110c25c7fe CR3: 00000001ded25000 CR4: 00000000003406a0 [ 149.372071][ T5802] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.372076][ T5802] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.372079][ T5802] Call Trace: [ 149.372097][ T5802] ? __warn+0x162/0x250 [ 149.372113][ T5802] ? report_bug+0x3a1/0x4e0 [ 149.396374][ T5732] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 149.400762][ T5802] ? ex_handler_uaccess+0x9b/0xc0 [ 149.531209][ T5802] ? ex_handler_uaccess+0x9b/0xc0 [ 149.536061][ T5802] ? do_invalid_op+0x6e/0x110 [ 149.540575][ T5802] ? invalid_op+0x1e/0x30 [ 149.544737][ T5802] ? __start___ex_table+0x4c34/0x5ebc [ 149.549946][ T5802] ? __start___ex_table+0x4c2c/0x5ebc [ 149.555150][ T5802] ? vprintk_emit+0x192/0x3f0 [ 149.559840][ T5802] ? ex_handler_uaccess+0x9b/0xc0 [ 149.564698][ T5802] ? ex_handler_fprestore+0xe0/0xe0 [ 149.569733][ T5802] ? __start___ex_table+0x4c34/0x5ebc [ 149.574937][ T5802] ? __start___ex_table+0x4c2c/0x5ebc [ 149.580146][ T5802] fixup_exception+0x93/0xd0 [ 149.584577][ T5802] do_general_protection+0x1a3/0x3c0 [ 149.589693][ T5802] ? do_trap+0x340/0x340 [ 149.593779][ T5802] ? __find_get_block+0xcb9/0x10f0 [ 149.598726][ T5802] general_protection+0x28/0x30 [ 149.603412][ T5802] RIP: 0010:strncpy_from_unsafe+0xeb/0x270 [ 149.609058][ T5802] Code: 0f b6 04 38 84 c0 0f 85 47 01 00 00 4c 89 74 24 10 48 89 6c 24 38 ff 45 00 45 31 ed 0f 01 cb 0f ae e8 45 31 f6 48 8b 44 24 48 <42> 8a 1c 28 0f 01 ca 48 8b 6c 24 08 4a 8d 4c 2d 00 49 89 cc 49 c1 [ 149.628575][ T5802] RSP: 0018:ffff8881eebcf7d0 EFLAGS: 00050246 [ 149.634564][ T5802] RAX: 001e000000000000 RBX: ffff8881e5bcaf40 RCX: ffffffff8180c613 [ 149.642491][ T5802] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff8881e5bcaf40 [ 149.650279][ T5802] RBP: ffff8881e5bcb998 R08: dffffc0000000000 R09: ffffed103cb795e9 [ 149.658085][ T5802] R10: 0000000000000000 R11: dffffc0000000001 R12: 00007ffffffff000 [ 149.665896][ T5802] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 149.673804][ T5802] ? strncpy_from_unsafe+0xa3/0x270 [ 149.679029][ T5802] ? trace_ext4_load_inode+0x180/0x180 [ 149.684346][ T5802] bpf_probe_read_str+0x3f/0x80 [ 149.689095][ T5802] bpf_prog_10db6962ca5175b4+0xfb9/0x1000 [ 149.694649][ T5802] bpf_trace_run3+0x128/0x2f0 [ 149.699164][ T5802] ? __ext4_handle_dirty_metadata+0x1ce/0x610 [ 149.705061][ T5802] ? bpf_trace_run2+0x2d0/0x2d0 [ 149.709767][ T5802] ? memset+0x1f/0x40 [ 149.713575][ T5802] ? ext4_discard_preallocations+0x522/0xb90 [ 149.719386][ T5802] ? __dquot_initialize+0x212/0xd50 [ 149.724418][ T5802] ? __bpf_trace_ext4__es_extent+0x30/0x30 [ 149.730060][ T5802] ext4_es_remove_extent+0x37a/0x420 [ 149.735181][ T5802] ? _raw_spin_lock_irqsave+0x210/0x210 [ 149.740561][ T5802] ? ext4_es_lookup_extent+0x9d0/0x9d0 [ 149.745950][ T5802] ? _raw_spin_unlock_irq+0x4a/0x60 [ 149.750977][ T5802] ext4_clear_inode+0x44/0x170 [ 149.755577][ T5802] ext4_free_inode+0x2d7/0xe80 [ 149.760175][ T5802] ? ext4_blocks_for_truncate+0x210/0x210 [ 149.765815][ T5802] ? ext4_orphan_add+0x8e0/0x8e0 [ 149.770591][ T5802] ? ext4_end_bitmap_read+0xb0/0xb0 [ 149.775627][ T5802] ? kmem_cache_alloc+0xd9/0x250 [ 149.780401][ T5802] ? jbd2__journal_start+0x341/0x6c0 [ 149.785521][ T5802] ext4_evict_inode+0x1431/0x1ac0 [ 149.790472][ T5802] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 149.796110][ T5802] ? asan.module_dtor+0x20/0x20 [ 149.800795][ T5802] ? up_write+0xa6/0x270 [ 149.804873][ T5802] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 149.810518][ T5802] evict+0x29b/0x6a0 [ 149.814248][ T5802] do_unlinkat+0x48e/0x8b0 [ 149.818520][ T5802] ? fsnotify_link_count+0x80/0x80 [ 149.823549][ T5802] ? getname_flags+0x1ec/0x4e0 [ 149.828140][ T5802] do_syscall_64+0xca/0x1c0 [ 149.832479][ T5802] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 149.838205][ T5802] RIP: 0033:0x7ff015d0ab99 [ 149.842467][ T5802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.861903][ T5802] RSP: 002b:00007ff014f8c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 149.870140][ T5802] RAX: ffffffffffffffda RBX: 00007ff015e98fa0 RCX: 00007ff015d0ab99 [ 149.877952][ T5802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 149.885761][ T5802] RBP: 00007ff015d8b77e R08: 0000000000000000 R09: 0000000000000000 [ 149.893574][ T5802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.901387][ T5802] R13: 000000000000000b R14: 00007ff015e98fa0 R15: 00007ffc1df26888 [ 149.909203][ T5802] ---[ end trace 173acc7c99060299 ]--- [ 150.087352][ T5] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 150.111255][ T5] usb 4-1: USB disconnect, device number 15 [ 150.119469][ T5] usblp0: removed [ 150.264991][ T5809] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.306802][ T5809] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 150.855494][ T1682] attempt to access beyond end of device [ 150.855494][ T1682] loop4: rw=2049, want=45104, limit=40427 [ 153.658993][ T5862] __nla_validate_parse: 1 callbacks suppressed [ 153.659000][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1965'. [ 153.680394][ T5865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1968'. [ 153.739234][ T5875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1972'. [ 153.751286][ T23] kauditd_printk_skb: 11 callbacks suppressed [ 153.751295][ T23] audit: type=1326 audit(153.718:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5874 comm="syz.4.1971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e0f0dab99 code=0x0 [ 153.899644][ T5881] device syzkaller0 entered promiscuous mode [ 153.936236][ T74] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 154.296315][ T74] usb 4-1: descriptor type invalid, skip [ 154.336316][ T74] usb 4-1: not running at top speed; connect to a high speed hub [ 154.399196][ T5902] fuse: Bad value for 'fd' [ 154.416302][ T74] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.447523][ T23] audit: type=1400 audit(154.418:493): avc: denied { mounton } for pid=5911 comm="syz.1.1987" path="/root/syzkaller.SxxGkU/133/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 154.666355][ T74] usb 4-1: language id specifier not provided by device, defaulting to English [ 154.734421][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.741831][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.751643][ T5916] device bridge_slave_0 entered promiscuous mode [ 154.759947][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.767693][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.775159][ T5916] device bridge_slave_1 entered promiscuous mode [ 154.878411][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.885267][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.892392][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.899139][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.939264][ T23] audit: type=1400 audit(154.908:494): avc: denied { connect } for pid=5943 comm="syz.4.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 154.959040][ T5942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 154.970854][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.981709][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.989290][ T5944] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 154.990258][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.998855][ T74] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.998866][ T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.998882][ T74] usb 4-1: Manufacturer: ࣆ௭惚뛿á¼ê²ºâ—±å¢«ì©ƒç›¦ã—œä“ªÝ¤ê†µëœ’鴼㒧墬樴標敕将ä¼ãš­äƒ‘á—áž à²Ì禒䶪咀ç§ê™’蟗㙥藪ꗖ䯨餚䞯è½ä¹‹çš³ì¶Â•ë‡¥è¬âŒ—魛㹉ᢙ뤣峞x憀柱⟿â¼ì—‹é‰”ãŠéƒæŠˆë”¦í’衚옄ꖺ爪í”ê’¼ëŽì“—ï–㨌ᘹ᧻㶙∇긜哺绦臙ᇔ㖎৬é¼ñ®¼˜ê–Šá‡‹â¼„ï•âž [ 154.998890][ T74] usb 4-1: SerialNumber: syz [ 155.018229][ T5944] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,delalloc,,errors=continue [ 155.054696][ T5863] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 155.078776][ T23] audit: type=1400 audit(155.048:495): avc: denied { read } for pid=5943 comm="syz.4.2002" laddr=fe80::11 lport=9 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.101883][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.113869][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.133360][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2003'. [ 155.147503][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.165591][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.186158][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.204814][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.213644][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.300556][ T796] device bridge_slave_1 left promiscuous mode [ 155.306692][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.330478][ T796] device bridge_slave_0 left promiscuous mode [ 155.337114][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.427525][ T74] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 155.445756][ T74] usb 4-1: USB disconnect, device number 16 [ 155.454457][ T74] usblp0: removed [ 155.497961][ T5971] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2011'. [ 155.506822][ T5971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.521900][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2013'. [ 155.547370][ T5979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2014'. [ 155.766389][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2026'. [ 155.863618][ T6012] device syzkaller0 entered promiscuous mode [ 155.975929][ T6028] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 155.998550][ T6028] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,delalloc,,errors=continue [ 156.615274][ T6057] netlink: 57 bytes leftover after parsing attributes in process `syz.2.2049'. [ 156.999859][ T6088] device syzkaller0 entered promiscuous mode [ 157.038273][ T6070] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 157.045948][ T6070] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 157.060280][ T6070] F2FS-fs (loop2): invalid crc value [ 157.067072][ T6070] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.107543][ T6070] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 157.114525][ T6070] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 157.130280][ T23] audit: type=1400 audit(157.098:496): avc: denied { read } for pid=6069 comm="syz.2.2055" path="/root/syzkaller.9ijNiY/228/file0/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 157.656234][ T74] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 158.136440][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.157834][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.193291][ T74] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 158.223555][ T74] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.245895][ T23] audit: type=1400 audit(158.208:497): avc: denied { setopt } for pid=6129 comm="syz.1.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 158.273838][ T74] usb 5-1: config 0 descriptor?? [ 158.921514][ T74] sony 0003:054C:0268.0020: unknown main item tag 0x0 [ 158.948779][ T74] sony 0003:054C:0268.0020: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 158.997005][ T74] sony 0003:054C:0268.0020: failed to claim input [ 159.119444][ T891] usb 5-1: USB disconnect, device number 15 [ 159.148742][ T6153] device syzkaller0 entered promiscuous mode [ 159.736263][ T371] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 159.934703][ T6187] FAT-fs (loop2): Directory bread(block 64) failed [ 159.941161][ T6187] FAT-fs (loop2): Directory bread(block 65) failed [ 159.947718][ T6187] FAT-fs (loop2): Directory bread(block 66) failed [ 159.954198][ T6187] FAT-fs (loop2): Directory bread(block 67) failed [ 159.960825][ T6187] FAT-fs (loop2): Directory bread(block 68) failed [ 159.967767][ T6187] FAT-fs (loop2): Directory bread(block 69) failed [ 159.974171][ T6187] FAT-fs (loop2): Directory bread(block 70) failed [ 159.980521][ T6187] FAT-fs (loop2): Directory bread(block 71) failed [ 159.987005][ T6187] FAT-fs (loop2): Directory bread(block 72) failed [ 159.993291][ T6187] FAT-fs (loop2): Directory bread(block 73) failed [ 160.106351][ T371] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.116637][ T371] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.436310][ T371] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.448538][ T371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.465880][ T371] usb 4-1: Product: syz [ 160.474665][ T371] usb 4-1: Manufacturer: syz [ 160.484236][ T371] usb 4-1: SerialNumber: syz [ 160.527290][ T371] usb-storage 4-1:1.0: USB Mass Storage device detected [ 160.746575][ T1576] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 160.754244][ T121] usb 4-1: USB disconnect, device number 17 [ 161.216347][ T1576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.249815][ T1576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.252121][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 161.279234][ T1576] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 161.306810][ T1576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.316393][ T6243] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2120'. [ 161.336154][ T1576] usb 2-1: config 0 descriptor?? [ 161.993627][ T6255] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 162.078155][ T1576] sony 0003:054C:0268.0021: unknown main item tag 0x0 [ 162.103498][ T1576] sony 0003:054C:0268.0021: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 162.222046][ T6255] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 162.230321][ T6255] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 162.252361][ T23] audit: type=1400 audit(162.208:498): avc: denied { append } for pid=6252 comm="syz.2.2125" path="/root/syzkaller.9ijNiY/241/file1/blkio.bfq.io_service_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 162.491836][ T1576] sony 0003:054C:0268.0021: failed to claim input [ 162.537213][ T1576] usb 2-1: USB disconnect, device number 14 [ 162.552846][ T6254] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 162.566557][ T6254] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 162.579073][ T6254] F2FS-fs (loop4): invalid crc value [ 162.585859][ T6254] F2FS-fs (loop4): Found nat_bits in checkpoint [ 162.623074][ T6254] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 162.629994][ T6254] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 162.652827][ T23] audit: type=1400 audit(162.618:499): avc: denied { ioctl } for pid=6250 comm="syz.4.2124" path="/root/syzkaller.usW2Rg/361/bus/file0" dev="loop4" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 162.700870][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'. [ 162.710379][ T6290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2136'. [ 162.796018][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2134'. [ 163.017353][ T23] audit: type=1326 audit(162.988:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.0.2139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaf0468b99 code=0x0 [ 163.087195][ T6299] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 163.696466][ T6323] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 163.706388][ T6323] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 163.875579][ T23] audit: type=1400 audit(163.808:501): avc: denied { accept } for pid=6319 comm="syz.0.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 163.967408][ T6333] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=50944 [ 163.976795][ T6333] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=50944 [ 164.247201][ T23] audit: type=1400 audit(164.218:502): avc: denied { link } for pid=6332 comm="syz.4.2138" name="file1" dev="overlay" ino=50944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 164.270407][ T23] audit: type=1400 audit(164.238:503): avc: denied { create } for pid=6332 comm="syz.4.2138" name="#c" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 164.290344][ T23] audit: type=1400 audit(164.238:504): avc: denied { setattr } for pid=6332 comm="syz.4.2138" name="#c" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 164.313114][ T23] audit: type=1400 audit(164.238:505): avc: denied { rename } for pid=6332 comm="syz.4.2138" name="#c" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 164.334978][ T23] audit: type=1400 audit(164.238:506): avc: denied { rename } for pid=6332 comm="syz.4.2138" name="file0" dev="overlay" ino=51289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 164.357395][ T23] audit: type=1400 audit(164.238:507): avc: denied { unlink } for pid=6332 comm="syz.4.2138" name="file1" dev="overlay" ino=50944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 164.403591][ T6346] input: syz1 as /devices/virtual/input/input20 [ 164.566323][ T6353] loop_set_status: loop2 () has still dirty pages (nrpages=1) [ 164.706247][ T371] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 165.235058][ T3432] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 165.287763][ T3432] FAT-fs (loop2): Filesystem has been set read-only [ 165.305344][ T3432] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 165.313073][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.347414][ T6371] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=51027 [ 165.366334][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.366393][ T6371] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=51027 [ 165.396340][ T371] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 165.436265][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.458154][ T371] usb 2-1: config 0 descriptor?? [ 165.721738][ T6374] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 165.937729][ T371] sony 0003:054C:0268.0022: unknown main item tag 0x0 [ 165.968538][ T371] sony 0003:054C:0268.0022: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 166.108787][ T371] sony 0003:054C:0268.0022: failed to claim input [ 166.143633][ T371] usb 2-1: USB disconnect, device number 15 [ 166.185424][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.211335][ T6403] overlayfs: './file0' not a directory [ 166.219093][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.227588][ T6383] device bridge_slave_0 entered promiscuous mode [ 166.234618][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.241718][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.249392][ T6383] device bridge_slave_1 entered promiscuous mode [ 166.425638][ T796] device bridge_slave_1 left promiscuous mode [ 166.433185][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.575393][ T6411] incfs_lookup_dentry err:-14 [ 166.579920][ T6411] incfs: Can't find or create .index dir in ./file0 [ 166.586725][ T6411] incfs: mount failed -14 [ 166.610773][ T796] device bridge_slave_0 left promiscuous mode [ 166.617008][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.624127][ T6409] EXT4-fs (loop3): unsupported inode size: 264 [ 166.635132][ T6409] EXT4-fs (loop3): blocksize: 1024 [ 166.852105][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.869513][ T6422] fuse: Bad value for 'fd' [ 166.877198][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.888673][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.897967][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.911654][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.913963][ T6428] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.918524][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.919128][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.943477][ T6428] FAT-fs (loop1): unable to read boot sector [ 166.960245][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.968578][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.977035][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.983899][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.997023][ T6431] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=52275 [ 166.999456][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.006887][ T6431] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=52275 [ 167.015721][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.032528][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.089558][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.103679][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.112403][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.139446][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.272275][ T23] kauditd_printk_skb: 7 callbacks suppressed [ 167.272291][ T23] audit: type=1400 audit(167.238:515): avc: denied { unlink } for pid=5186 comm="syz-executor" name="file0" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="$" [ 167.322468][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.365880][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.374640][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.389577][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.401620][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.418826][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.428141][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.566488][ T6459] EXT4-fs (loop2): unsupported inode size: 264 [ 167.575800][ T6459] EXT4-fs (loop2): blocksize: 1024 [ 167.661076][ T6461] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.668112][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.675802][ T23] audit: type=1326 audit(167.638:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6458 comm="syz.2.2200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdddd566b99 code=0x0 [ 167.884916][ T6461] device bridge_slave_0 entered promiscuous mode [ 167.892483][ T6461] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.899408][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.907307][ T6461] device bridge_slave_1 entered promiscuous mode [ 168.000452][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.030661][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.055657][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.064520][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.073082][ T891] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.079943][ T891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.098417][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.106729][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.115065][ T891] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.121933][ T891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.131143][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.165112][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.181057][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.216374][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.229717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.246531][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.282206][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.297200][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.467627][ T18] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 168.482738][ T6489] incfs_lookup_dentry err:-14 [ 168.487251][ T6489] incfs: Can't find or create .index dir in ./file0 [ 168.493759][ T6489] incfs: mount failed -14 [ 168.566229][ T121] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 168.728884][ T6511] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=52784 [ 168.776571][ T796] device bridge_slave_1 left promiscuous mode [ 168.782549][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.806313][ T6511] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=52784 [ 168.831934][ T796] device bridge_slave_0 left promiscuous mode [ 168.846543][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.886399][ T18] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.908124][ T18] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.946368][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.976349][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.016348][ T121] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 169.025203][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.056600][ T121] usb 5-1: config 0 descriptor?? [ 169.160118][ T18] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 169.176306][ T18] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.206241][ T18] usb 2-1: Product: syz [ 169.235685][ T18] usb 2-1: Manufacturer: syz [ 169.291183][ T18] usb 2-1: SerialNumber: syz [ 169.302113][ T6522] incfs_lookup_dentry err:-14 [ 169.306615][ T6522] incfs: Can't find or create .index dir in ./file0 [ 169.313120][ T6522] incfs: mount failed -14 [ 169.399771][ T18] usb-storage 2-1:1.0: USB Mass Storage device detected [ 169.569753][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.596219][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.601401][ T370] usb 2-1: USB disconnect, device number 16 [ 169.603567][ T6516] device bridge_slave_0 entered promiscuous mode [ 169.610299][ T121] sony 0003:054C:0268.0023: unknown main item tag 0x0 [ 169.627494][ T6534] EXT4-fs (loop2): unsupported inode size: 264 [ 169.628140][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.656227][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.663832][ T6516] device bridge_slave_1 entered promiscuous mode [ 169.677146][ T6534] EXT4-fs (loop2): blocksize: 1024 [ 169.694556][ T121] sony 0003:054C:0268.0023: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 169.736236][ T121] sony 0003:054C:0268.0023: failed to claim input [ 169.800556][ T23] audit: type=1326 audit(169.768:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6533 comm="syz.2.2228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdddd566b99 code=0x0 [ 169.866368][ T18] usb 5-1: USB disconnect, device number 16 [ 169.930052][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.936917][ T6516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.944036][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.950799][ T6516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.995199][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.002889][ T891] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.010312][ T891] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.019552][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.028120][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.034947][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.118734][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.128501][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.135351][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.235715][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 170.271335][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 170.286240][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.294389][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 170.316298][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.324394][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.333246][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.366744][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.380897][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.406863][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.438993][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.447715][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.456169][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.464996][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.575048][ T6561] request_module fs-aio succeeded, but still no fs? [ 170.630263][ T6567] EXT4-fs (loop2): unsupported inode size: 264 [ 170.650129][ T6567] EXT4-fs (loop2): blocksize: 1024 [ 170.713697][ T891] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 170.747371][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.754283][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.761678][ T6565] device bridge_slave_0 entered promiscuous mode [ 170.768991][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.775855][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.959025][ T6565] device bridge_slave_1 entered promiscuous mode [ 170.965464][ T23] audit: type=1326 audit(170.928:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6566 comm="syz.2.2243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdddd566b99 code=0x0 [ 170.966978][ T796] device bridge_slave_1 left promiscuous mode [ 170.997874][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.016287][ T796] device bridge_slave_0 left promiscuous mode [ 171.022395][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.113345][ T6595] input: syz0 as /devices/virtual/input/input21 [ 171.211070][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.217932][ T6565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.225056][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.231819][ T6565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.268347][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.276402][ T891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.287854][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.296461][ T891] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.319419][ T891] usb 2-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 171.339584][ T891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.345286][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.355093][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.362776][ T891] usb 2-1: config 0 descriptor?? [ 171.378763][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.387531][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.395678][ T855] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.402547][ T855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.410111][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.418124][ T18] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 171.426020][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.450634][ T855] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.457509][ T855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.506817][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.516541][ T545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.596674][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.617391][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.621970][ T855] usb 2-1: USB disconnect, device number 17 [ 171.659169][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.676813][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.726669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.734462][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.794914][ T6611] validate_nla: 2 callbacks suppressed [ 171.794921][ T6611] netlink: 'syz.3.2259': attribute type 4 has an invalid length. [ 171.816371][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.836633][ T18] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.866265][ T18] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 171.886053][ T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.905907][ T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.918612][ T6618] input: syz0 as /devices/virtual/input/input22 [ 171.925171][ T18] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.933578][ T735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.968168][ T18] usb 5-1: config 0 descriptor?? [ 171.993845][ T735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.028731][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.046601][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.067905][ T23] audit: type=1400 audit(172.038:519): avc: denied { setattr } for pid=6623 comm="syz.3.2266" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 172.498690][ T23] audit: type=1326 audit(172.468:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6627 comm="syz.0.2239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee9ef99b99 code=0x0 [ 172.537691][ T18] sony 0003:054C:0268.0024: unknown main item tag 0x0 [ 172.563306][ T18] sony 0003:054C:0268.0024: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 172.596856][ T23] audit: type=1400 audit(172.518:521): avc: denied { create } for pid=6627 comm="syz.0.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 172.642264][ T18] sony 0003:054C:0268.0024: failed to claim input [ 172.748667][ T18] usb 5-1: USB disconnect, device number 17 [ 173.026458][ T6625] loop3: p1 p2 p3 [ 173.082374][ T6646] EXT4-fs (loop1): inodes count not valid: 0 vs 32 [ 173.160580][ T6653] input: syz0 as /devices/virtual/input/input23 [ 173.202229][ T6657] netlink: 'syz.1.2276': attribute type 4 has an invalid length. [ 173.256330][ T796] device bridge_slave_1 left promiscuous mode [ 173.267565][ T796] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.268820][ T3241] udevd[3241]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 173.281390][ T3242] udevd[3242]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 173.285483][ T348] udevd[348]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 173.308806][ T796] device bridge_slave_0 left promiscuous mode [ 173.309442][ T23] audit: type=1400 audit(173.278:522): avc: denied { map } for pid=6654 comm="syz.3.2273" path="socket:[54551]" dev="sockfs" ino=54551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.320481][ T796] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.387634][ T6665] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.436128][ T23] audit: type=1400 audit(173.378:523): avc: denied { create } for pid=6668 comm="syz.2.2279" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 173.475196][ T6665] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 173.483370][ T23] audit: type=1400 audit(173.378:524): avc: denied { link } for pid=6668 comm="syz.2.2279" name="file1" dev="sda1" ino=2035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 173.632808][ T6665] EXT4-fs error (device loop3): ext4_orphan_get:1236: inode #15: comm syz.3.2273: iget: bad extended attribute block 19 [ 173.642828][ T6679] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 173.657014][ T6679] EXT4-fs (loop1): Test dummy encryption mode enabled [ 173.657285][ T6665] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.2273: couldn't read orphan inode 15 (err -117) [ 173.880248][ T6675] loop2: p1 p2 p3 [ 173.893595][ T23] audit: type=1326 audit(173.858:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6671 comm="syz.0.2282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee9ef99b99 code=0x0 [ 173.917621][ T6665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 173.959046][ T6679] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 173.973912][ T6679] EXT4-fs (loop1): Remounting filesystem read-only [ 173.980777][ T6679] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 173.989145][ T6679] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 173.997322][ T6679] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 174.005633][ T6679] EXT4-fs error (device loop1): ext4_evict_inode:312: comm syz.1.2284: couldn't truncate inode 16 (err -27) [ 174.018008][ T6679] EXT4-fs (loop1): 1 orphan inode deleted [ 174.023569][ T6679] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv1,dioread_nolock,test_dummy_encryption,delalloc,nolazytime, [ 174.096554][ T6679] EXT4-fs error (device loop1): ext4_lookup:1818: inode #2: comm syz.1.2284: deleted inode referenced: 16 [ 174.111580][ T6679] EXT4-fs (loop1): Remounting filesystem read-only [ 174.408075][ T3242] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 174.408118][ T348] blk_update_request: I/O error, dev loop2, sector 4097 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.420579][ T3241] blk_update_request: I/O error, dev loop2, sector 4118 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 174.434955][ T23] audit: type=1400 audit(174.398:526): avc: denied { read write } for pid=6692 comm="syz.4.2289" name="raw-gadget" dev="devtmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.446327][ T6383] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 174.478923][ T3242] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.492326][ T3241] blk_update_request: I/O error, dev loop2, sector 4118 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.503704][ T3242] Buffer I/O error on dev loop2p1, logical block 8, async page read [ 174.512290][ T3242] blk_update_request: I/O error, dev loop2, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.515734][ T348] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 174.523435][ T3241] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 174.536219][ T23] audit: type=1400 audit(174.448:527): avc: denied { open } for pid=6692 comm="syz.4.2289" path="/dev/raw-gadget" dev="devtmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.539116][ T3242] Buffer I/O error on dev loop2p1, logical block 9, async page read [ 174.569429][ T3241] blk_update_request: I/O error, dev loop2, sector 4119 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.581689][ T23] audit: type=1400 audit(174.448:528): avc: denied { ioctl } for pid=6692 comm="syz.4.2289" path="/dev/raw-gadget" dev="devtmpfs" ino=880 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.581821][ T3241] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 174.613840][ T3242] blk_update_request: I/O error, dev loop2, sector 2058 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.618226][ T3241] blk_update_request: I/O error, dev loop2, sector 4120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.635913][ T3241] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 174.652333][ T23] audit: type=1400 audit(174.618:529): avc: denied { mount } for pid=6694 comm="syz.1.2286" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 174.690102][ T3242] Buffer I/O error on dev loop2p1, logical block 10, async page read [ 174.707495][ T3242] blk_update_request: I/O error, dev loop2, sector 2059 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 174.718857][ T3241] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 174.734020][ T3241] Buffer I/O error on dev loop2p2, logical block 12, async page read [ 174.739274][ T3242] Buffer I/O error on dev loop2p1, logical block 11, async page read [ 174.750960][ T545] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 174.779648][ T6703] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 174.802280][ T6703] EXT4-fs (loop3): group descriptors corrupted! [ 175.156337][ T545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.170416][ T545] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.184231][ T545] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 175.196154][ T545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.205152][ T545] usb 5-1: config 0 descriptor?? [ 175.312712][ T6712] F2FS-fs (loop2): invalid crc value [ 175.570904][ T6712] F2FS-fs (loop2): Found nat_bits in checkpoint [ 175.610365][ T6712] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 176.027824][ T6737] EXT4-fs (loop3): Ignoring removed bh option [ 176.064805][ T6737] EXT4-fs (loop3): Ignoring removed nobh option [ 176.447011][ T6383] attempt to access beyond end of device [ 176.447011][ T6383] loop2: rw=2049, want=45104, limit=40427 [ 176.459420][ T6737] EXT4-fs (loop3): 1 orphan inode deleted [ 176.464962][ T6737] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noquota,resuid=0x0000000000000000,bh,nobh,data_err=abort,delalloc,resgid=0x0000000000000000, [ 176.495450][ T6737] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 176.532765][ T545] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0025/input/input24 [ 176.567403][ T545] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0025/input/input25 [ 176.586877][ T545] uclogic 0003:256C:006D.0025: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 176.728627][ T18] usb 5-1: USB disconnect, device number 18 [ 176.984889][ T6770] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 176.994773][ T6770] EXT4-fs (loop3): Test dummy encryption mode enabled [ 177.008549][ T6767] loop2: p1 p2 p3 p4 [ 177.012580][ T6767] loop2: p1 size 108922248 extends beyond EOD, truncated [ 177.020831][ T6767] loop2: p2 start 861536256 is beyond EOD, truncated [ 177.027905][ T6767] loop2: p3 start 851968 is beyond EOD, truncated [ 177.034306][ T6767] loop2: p4 size 65536 extends beyond EOD, truncated [ 177.049322][ T6770] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 177.058855][ T6770] EXT4-fs (loop3): Remounting filesystem read-only [ 177.065378][ T6770] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 177.076376][ T6770] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 177.085350][ T6770] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 177.203951][ T6770] EXT4-fs error (device loop3): ext4_evict_inode:312: comm syz.3.2308: couldn't truncate inode 16 (err -27) [ 177.215750][ T6770] EXT4-fs (loop3): 1 orphan inode deleted [ 177.221523][ T6770] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv1,dioread_nolock,test_dummy_encryption,delalloc,nolazytime, [ 177.249392][ T6770] EXT4-fs error (device loop3): ext4_lookup:1818: inode #2: comm syz.3.2308: deleted inode referenced: 16 [ 177.261100][ T6770] EXT4-fs (loop3): Remounting filesystem read-only [ 177.352851][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'. [ 177.419119][ T3241] udevd[3241]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 177.433108][ T3242] udevd[3242]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 177.609742][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 177.609768][ T23] audit: type=1326 audit(177.578:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.0.2323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee9ef99b99 code=0x0 [ 177.693260][ T6811] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 177.703044][ T6811] EXT4-fs (loop4): Test dummy encryption mode enabled [ 177.786483][ T6819] EXT4-fs (loop3): Ignoring removed bh option [ 177.794192][ T6811] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 177.805504][ T6819] EXT4-fs (loop3): Ignoring removed nobh option [ 177.820500][ T6811] EXT4-fs (loop4): Remounting filesystem read-only [ 177.835373][ T6811] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 177.852460][ T6819] EXT4-fs (loop3): 1 orphan inode deleted [ 177.859223][ T6819] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noquota,resuid=0x0000000000000000,bh,nobh,data_err=abort,delalloc,resgid=0x0000000000000000, [ 177.880245][ T6811] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 177.914344][ T6811] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 177.929253][ T6811] EXT4-fs error (device loop4): ext4_evict_inode:312: comm syz.4.2330: couldn't truncate inode 16 (err -27) [ 177.941367][ T6811] EXT4-fs (loop4): 1 orphan inode deleted [ 177.947811][ T6811] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv1,dioread_nolock,test_dummy_encryption,delalloc,nolazytime, [ 178.012945][ T6811] EXT4-fs error (device loop4): ext4_lookup:1818: inode #2: comm syz.4.2330: deleted inode referenced: 16 [ 178.026663][ T6811] EXT4-fs (loop4): Remounting filesystem read-only [ 178.071753][ T6821] loop2: p1 p2 p3 p4 [ 178.078047][ T6821] loop2: p1 size 108922248 extends beyond EOD, truncated [ 178.115763][ T6821] loop2: p2 start 861536256 is beyond EOD, truncated [ 178.122294][ T6821] loop2: p3 start 851968 is beyond EOD, truncated [ 178.128572][ T6821] loop2: p4 size 65536 extends beyond EOD, truncated [ 178.130473][ T6835] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 178.137423][ T23] audit: type=1400 audit(178.108:537): avc: denied { create } for pid=6834 comm="syz.1.2336" name="cpuacct.usage_percpu_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 178.388209][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2333'. [ 178.609009][ T6851] EXT4-fs (loop3): Ignoring removed bh option [ 178.614895][ T6851] EXT4-fs (loop3): Ignoring removed nobh option [ 178.693872][ T6851] EXT4-fs (loop3): 1 orphan inode deleted [ 178.703825][ T6851] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noquota,resuid=0x0000000000000000,bh,nobh,data_err=abort,delalloc,resgid=0x0000000000000000, [ 178.816254][ T891] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 178.842046][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'. [ 178.885748][ T23] audit: type=1326 audit(178.848:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.0.2350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee9ef99b99 code=0x0 [ 179.206391][ T891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.227353][ T891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.243741][ T891] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 179.252932][ T891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.265620][ T891] usb 3-1: config 0 descriptor?? [ 179.287287][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2363'. [ 179.571683][ T6914] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue [ 179.605155][ T23] audit: type=1400 audit(179.568:539): avc: denied { map } for pid=6913 comm="syz.1.2368" path="/root/syzkaller.QvLmYt/68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 179.650434][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'. [ 179.669927][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2372'. [ 179.725694][ T23] audit: type=1400 audit(179.628:540): avc: denied { execute } for pid=6913 comm="syz.1.2368" path="/root/syzkaller.QvLmYt/68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 179.779068][ T23] audit: type=1400 audit(179.678:541): avc: denied { open } for pid=6921 comm="syz.3.2372" path="/root/syzkaller.CUNeww/33/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.808031][ T6927] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 180.412318][ T6945] fuse: Bad value for 'fd' [ 180.418323][ T891] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0026/input/input26 [ 180.433715][ T891] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0026/input/input27 [ 180.448557][ T891] uclogic 0003:256C:006D.0026: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 180.545724][ T6956] PF_BRIDGE: br_mdb_parse() with invalid attr [ 180.590799][ T23] audit: type=1400 audit(180.558:542): avc: denied { ioctl } for pid=6948 comm="syz.0.2383" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9176 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 180.630667][ T891] usb 3-1: USB disconnect, device number 17 [ 180.656541][ T121] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 180.663043][ T6966] EXT4-fs warning (device sda1): verify_group_input:171: Bad blocks count 0 [ 180.861323][ T6984] EXT4-fs (loop1): Ignoring removed nobh option [ 180.880318][ T6984] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,data_err=abort,block_validity,init_itable=0x0000000000000006,block_validity,max_dir_size_kb=0x00000000000007b1,nobh,block_validity,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue [ 181.063539][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.074618][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.084303][ T121] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 181.093499][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.108582][ T121] usb 5-1: config 0 descriptor?? [ 181.109770][ T7013] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue [ 181.692575][ T121] hid (null): bogus close delimiter [ 181.777679][ T23] audit: type=1400 audit(181.748:543): avc: denied { remount } for pid=7032 comm="syz.3.2413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 181.831233][ T7034] PF_BRIDGE: br_mdb_parse() with invalid attr [ 181.990322][ T7044] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 182.069532][ T23] audit: type=1400 audit(182.038:544): avc: denied { link } for pid=7043 comm="syz.3.2417" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.116353][ T121] uclogic 0003:256C:006D.0027: failed retrieving Huion firmware version: -71 [ 182.130242][ T121] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 182.152398][ T121] uclogic: probe of 0003:256C:006D.0027 failed with error -71 [ 182.167331][ T121] usb 5-1: USB disconnect, device number 19 [ 182.290637][ T7074] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 182.298055][ T7074] EXT4-fs (loop1): Mount option "dioread_nolock" incompatible with ext3 [ 182.879454][ T7099] PF_BRIDGE: br_mdb_parse() with invalid attr [ 183.643688][ T7113] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 183.886443][ T23] audit: type=1400 audit(183.848:545): avc: denied { bind } for pid=7141 comm="syz.4.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 183.924762][ T7140] PF_BRIDGE: br_mdb_parse() with invalid attr [ 183.926283][ T891] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 183.940441][ T23] audit: type=1400 audit(183.908:546): avc: denied { ioctl } for pid=7143 comm="syz.4.2452" path="socket:[55989]" dev="sockfs" ino=55989 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 184.171713][ T7152] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 184.187391][ T7152] EXT4-fs (loop4): 1 truncate cleaned up [ 184.193024][ T7152] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 184.259562][ T7152] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 4: comm syz.4.2455: path /root/syzkaller.usW2Rg/419/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 184.281329][ T7152] EXT4-fs (loop4): Remounting filesystem read-only [ 184.336390][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.349001][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.366044][ T891] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 184.385942][ T891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.396134][ T891] usb 4-1: config 0 descriptor?? [ 184.576019][ T7191] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 184.589961][ T7191] EXT4-fs (loop2): 1 truncate cleaned up [ 184.595818][ T7191] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity, [ 184.626600][ T7191] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 4: comm syz.2.2471: path /root/syzkaller.2D6odR/59/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 184.648381][ T7191] EXT4-fs (loop2): Remounting filesystem read-only [ 184.686354][ T5] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 184.824155][ T7197] PF_BRIDGE: br_mdb_parse() with invalid attr [ 184.876647][ T891] hid (null): bogus close delimiter [ 184.927022][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 185.057090][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.072593][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.088433][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.098626][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.108540][ T5] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.118161][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 185.523174][ T23] audit: type=1400 audit(185.488:547): avc: denied { write } for pid=7223 comm="syz.2.2481" name="usbmon0" dev="devtmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 185.545817][ T891] uclogic 0003:256C:006D.0028: failed retrieving Huion firmware version: -71 [ 185.554448][ T891] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 185.562018][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.571763][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.579462][ T891] uclogic: probe of 0003:256C:006D.0028 failed with error -71 [ 185.596134][ T5] usb 2-1: Product: syz [ 185.601169][ T5] usb 2-1: Manufacturer: syz [ 185.825102][ T891] usb 4-1: USB disconnect, device number 18 [ 185.831887][ T5] usb 2-1: SerialNumber: syz [ 186.166323][ T5] cdc_ncm 2-1:1.0: bind() failure [ 186.173969][ T5] cdc_ncm 2-1:1.1: bind() failure [ 186.188934][ T5] usb 2-1: USB disconnect, device number 18 [ 186.246392][ T891] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 186.766350][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.777290][ T891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.799354][ T891] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 186.821280][ T891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.837903][ T891] usb 4-1: config 0 descriptor?? [ 187.026246][ T13] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 187.275630][ T545] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 187.456331][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.467193][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.477026][ T13] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 187.486007][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.495209][ T13] usb 2-1: config 0 descriptor?? [ 187.556314][ T545] usb 3-1: Using ep0 maxpacket: 8 [ 187.676393][ T545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.687124][ T545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.696645][ T545] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 187.705580][ T545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.714092][ T545] usb 3-1: config 0 descriptor?? [ 187.972986][ T891] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0029/input/input28 [ 187.985004][ T13] hid (null): bogus close delimiter [ 188.004704][ T891] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0029/input/input29 [ 188.029772][ T891] uclogic 0003:256C:006D.0029: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 188.183513][ T121] usb 4-1: USB disconnect, device number 19 [ 188.211636][ T545] saitek 0003:06A3:0CCD.002B: hidraw1: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.2-1/input0 [ 188.434257][ T545] usb 3-1: USB disconnect, device number 18 [ 188.466360][ T13] uclogic 0003:256C:006D.002A: failed retrieving Huion firmware version: -71 [ 188.475024][ T13] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 188.482502][ T13] uclogic: probe of 0003:256C:006D.002A failed with error -71 [ 188.495189][ T13] usb 2-1: USB disconnect, device number 19 [ 189.121729][ T7353] FAT-fs (loop2): Directory bread(block 64) failed [ 189.143665][ T7353] FAT-fs (loop2): Directory bread(block 65) failed [ 189.161935][ T7353] FAT-fs (loop2): Directory bread(block 66) failed [ 189.171242][ T7353] FAT-fs (loop2): Directory bread(block 67) failed [ 189.178063][ T7353] FAT-fs (loop2): Directory bread(block 68) failed [ 189.185286][ T7353] FAT-fs (loop2): Directory bread(block 69) failed [ 189.191684][ T7353] FAT-fs (loop2): Directory bread(block 70) failed [ 189.199149][ T7353] FAT-fs (loop2): Directory bread(block 71) failed [ 189.205944][ T7353] FAT-fs (loop2): Directory bread(block 72) failed [ 189.213195][ T7353] FAT-fs (loop2): Directory bread(block 73) failed [ 189.386400][ T385] attempt to access beyond end of device [ 189.386400][ T385] loop2: rw=1, want=1236, limit=256 [ 189.476492][ T7374] device syzkaller0 entered promiscuous mode [ 189.491593][ T7369] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.680067][ T23] audit: type=1400 audit(189.648:548): avc: denied { read append } for pid=7384 comm="syz.1.2544" name="memory.events" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 189.705069][ T23] audit: type=1400 audit(189.648:549): avc: denied { open } for pid=7384 comm="syz.1.2544" path="/root/syzkaller.QvLmYt/98/file0/memory.events" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 189.706315][ T545] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 189.996254][ T545] usb 3-1: Using ep0 maxpacket: 8 [ 190.136657][ T545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.165367][ T7398] FAT-fs (loop3): Directory bread(block 64) failed [ 190.172303][ T545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.182043][ T7398] FAT-fs (loop3): Directory bread(block 65) failed [ 190.188527][ T545] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 190.197540][ T7398] FAT-fs (loop3): Directory bread(block 66) failed [ 190.204034][ T7398] FAT-fs (loop3): Directory bread(block 67) failed [ 190.210394][ T545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.211313][ T7398] FAT-fs (loop3): Directory bread(block 68) failed [ 190.224579][ T7398] FAT-fs (loop3): Directory bread(block 69) failed [ 190.231246][ T545] usb 3-1: config 0 descriptor?? [ 190.234777][ T7398] FAT-fs (loop3): Directory bread(block 70) failed [ 190.242654][ T7398] FAT-fs (loop3): Directory bread(block 71) failed [ 190.249095][ T7398] FAT-fs (loop3): Directory bread(block 72) failed [ 190.255477][ T7398] FAT-fs (loop3): Directory bread(block 73) failed [ 190.298354][ T9] attempt to access beyond end of device [ 190.298354][ T9] loop3: rw=1, want=1236, limit=256 [ 190.616248][ T735] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 190.709023][ T545] saitek 0003:06A3:0CCD.002C: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.2-1/input0 [ 190.856307][ T735] usb 4-1: Using ep0 maxpacket: 16 [ 190.933923][ T371] usb 3-1: USB disconnect, device number 19 [ 190.986290][ T735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.997202][ T735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.010369][ T735] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.019308][ T735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.029108][ T735] usb 4-1: config 0 descriptor?? [ 191.066613][ T735] hub 4-1:0.0: USB hub found [ 191.076540][ T13] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 191.316223][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 191.436294][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 191.447241][ T13] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 191.456053][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.468319][ T13] usb 2-1: config 0 descriptor?? [ 191.700303][ T7430] FAT-fs (loop2): Directory bread(block 64) failed [ 191.707187][ T7430] FAT-fs (loop2): Directory bread(block 65) failed [ 191.713622][ T7430] FAT-fs (loop2): Directory bread(block 66) failed [ 191.723692][ T7430] FAT-fs (loop2): Directory bread(block 67) failed [ 191.730123][ T7430] FAT-fs (loop2): Directory bread(block 68) failed [ 191.736496][ T7430] FAT-fs (loop2): Directory bread(block 69) failed [ 191.743402][ T7430] FAT-fs (loop2): Directory bread(block 70) failed [ 191.749864][ T7430] FAT-fs (loop2): Directory bread(block 71) failed [ 191.756579][ T7430] FAT-fs (loop2): Directory bread(block 72) failed [ 191.762952][ T7430] FAT-fs (loop2): Directory bread(block 73) failed [ 191.801889][ T385] attempt to access beyond end of device [ 191.801889][ T385] loop2: rw=1, want=1236, limit=256 [ 191.917122][ T7409] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 192.009328][ T13] hid (null): usage index exceeded [ 192.015119][ T13] hid (null): invalid report_count 314507804 [ 192.020992][ T13] hid (null): invalid report_count -219404038 [ 192.026972][ T13] hid (null): unknown global tag 0x83 [ 192.032154][ T13] hid (null): unknown global tag 0xc [ 192.038742][ T13] hid-generic 0003:0158:0100.002D: unknown main item tag 0x1 [ 192.046246][ T13] hid-generic 0003:0158:0100.002D: unexpected long global item [ 192.053901][ T13] hid-generic: probe of 0003:0158:0100.002D failed with error -22 [ 192.140535][ T545] usb 2-1: USB disconnect, device number 20 [ 192.716793][ T7459] overlayfs: "xino" feature enabled using 32 upper inode bits. [ 192.812590][ T23] audit: type=1400 audit(192.738:550): avc: denied { append } for pid=7453 comm="syz.2.2567" name="cgroup.controllers" dev="overlay" ino=4294967300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.842844][ T7456] FAT-fs (loop4): Directory bread(block 64) failed [ 192.849586][ T7456] FAT-fs (loop4): Directory bread(block 65) failed [ 192.856038][ T7456] FAT-fs (loop4): Directory bread(block 66) failed [ 192.862688][ T7456] FAT-fs (loop4): Directory bread(block 67) failed [ 192.869194][ T7456] FAT-fs (loop4): Directory bread(block 68) failed [ 192.876005][ T7456] FAT-fs (loop4): Directory bread(block 69) failed [ 192.882793][ T7456] FAT-fs (loop4): Directory bread(block 70) failed [ 192.889238][ T7456] FAT-fs (loop4): Directory bread(block 71) failed [ 192.895591][ T7456] FAT-fs (loop4): Directory bread(block 72) failed [ 192.902011][ T7456] FAT-fs (loop4): Directory bread(block 73) failed [ 193.035474][ T23] audit: type=1400 audit(192.998:551): avc: denied { read } for pid=7474 comm="syz.4.2573" name="file2" dev="sda1" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 193.856377][ T735] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 193.987043][ T735] usbhid 4-1:0.0: can't add hid device: -71 [ 193.992883][ T735] usbhid: probe of 4-1:0.0 failed with error -71 [ 194.277895][ T7501] FAT-fs (loop2): Directory bread(block 64) failed [ 194.284359][ T7501] FAT-fs (loop2): Directory bread(block 65) failed [ 194.290809][ T7501] FAT-fs (loop2): Directory bread(block 66) failed [ 194.297807][ T7501] FAT-fs (loop2): Directory bread(block 67) failed [ 194.304374][ T7501] FAT-fs (loop2): Directory bread(block 68) failed [ 194.311227][ T7501] FAT-fs (loop2): Directory bread(block 69) failed [ 194.318251][ T7501] FAT-fs (loop2): Directory bread(block 70) failed [ 194.325940][ T7501] FAT-fs (loop2): Directory bread(block 71) failed [ 194.326370][ T735] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 194.340064][ T7501] FAT-fs (loop2): Directory bread(block 72) failed [ 194.348367][ T7501] FAT-fs (loop2): Directory bread(block 73) failed [ 194.586273][ T735] usb 4-1: Using ep0 maxpacket: 16 [ 194.626329][ T735] usb 4-1: device firmware changed [ 194.631389][ T735] usb 4-1: USB disconnect, device number 20 [ 194.648913][ T7510] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 194.656536][ T7510] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 194.667808][ T7510] F2FS-fs (loop4): invalid crc value [ 194.678743][ T7510] F2FS-fs (loop4): Found nat_bits in checkpoint [ 194.736594][ T7510] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 194.743529][ T7510] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 194.768194][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 194.786393][ T9] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 194.923130][ T7525] overlayfs: "xino" feature enabled using 32 upper inode bits. [ 195.242057][ T735] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 195.486238][ T735] usb 4-1: Using ep0 maxpacket: 16 [ 195.606330][ T735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 195.617832][ T735] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 195.626784][ T735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.635465][ T735] usb 4-1: config 0 descriptor?? [ 195.640345][ T121] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 196.106240][ T121] usb 5-1: Using ep0 maxpacket: 16 [ 196.286585][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.330406][ T7489] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 196.336970][ T121] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 196.351014][ T121] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 196.360127][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.369547][ T121] usb 5-1: config 0 descriptor?? [ 196.407785][ T121] hub 5-1:0.0: USB hub found [ 196.415349][ T735] hid (null): usage index exceeded [ 196.422114][ T735] hid (null): invalid report_count 314507804 [ 196.428315][ T735] hid (null): invalid report_count -219404038 [ 196.434361][ T735] hid (null): unknown global tag 0x83 [ 196.439934][ T735] hid (null): unknown global tag 0xc [ 196.450007][ T735] hid-generic 0003:0158:0100.002E: unknown main item tag 0x1 [ 196.457354][ T735] hid-generic 0003:0158:0100.002E: unexpected long global item [ 196.465043][ T735] hid-generic: probe of 0003:0158:0100.002E failed with error -22 [ 196.549213][ T23] audit: type=1400 audit(196.518:552): avc: denied { ioctl } for pid=7566 comm="syz.1.2604" path="/dev/rtc0" dev="devtmpfs" ino=885 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 196.642419][ T891] usb 4-1: USB disconnect, device number 21 [ 198.409566][ T7628] overlayfs: "xino" feature enabled using 32 upper inode bits. [ 198.496282][ T121] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 198.503959][ T855] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 198.590292][ T7650] FAT-fs (loop1): Directory bread(block 64) failed [ 198.597019][ T7650] FAT-fs (loop1): Directory bread(block 65) failed [ 198.603370][ T7650] FAT-fs (loop1): Directory bread(block 66) failed [ 198.609813][ T7650] FAT-fs (loop1): Directory bread(block 67) failed [ 198.616278][ T7650] FAT-fs (loop1): Directory bread(block 68) failed [ 198.616283][ T121] usbhid 5-1:0.0: can't add hid device: -71 [ 198.616351][ T121] usbhid: probe of 5-1:0.0 failed with error -71 [ 198.622685][ T7650] FAT-fs (loop1): Directory bread(block 69) failed [ 198.640907][ T7650] FAT-fs (loop1): Directory bread(block 70) failed [ 198.647215][ T7650] FAT-fs (loop1): Directory bread(block 71) failed [ 198.653548][ T7650] FAT-fs (loop1): Directory bread(block 72) failed [ 198.660416][ T7650] FAT-fs (loop1): Directory bread(block 73) failed [ 198.756234][ T855] usb 3-1: Using ep0 maxpacket: 16 [ 198.853784][ T7670] netlink: 'syz.1.2649': attribute type 4 has an invalid length. [ 198.856323][ T121] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 198.866534][ T7670] netlink: 'syz.1.2649': attribute type 4 has an invalid length. [ 198.876439][ T855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.876451][ T855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.876471][ T855] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.906734][ T855] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 198.916957][ T855] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.926582][ T855] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 199.096353][ T855] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.114462][ T855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.126312][ T855] usb 3-1: Product: syz [ 199.130281][ T855] usb 3-1: Manufacturer: syz [ 199.146284][ T121] usb 5-1: device firmware changed [ 199.151392][ T121] usb 5-1: USB disconnect, device number 20 [ 199.157358][ T855] usb 3-1: SerialNumber: syz [ 199.512290][ T7686] F2FS-fs (loop1): invalid crc value [ 199.520098][ T7686] F2FS-fs (loop1): Found nat_bits in checkpoint [ 199.564782][ T7686] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 199.576263][ T121] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 199.619688][ T855] cdc_ncm 3-1:1.0: bind() failure [ 199.627132][ T855] cdc_ncm 3-1:1.1: bind() failure [ 199.633222][ T855] usb 3-1: USB disconnect, device number 20 [ 199.908238][ T5916] attempt to access beyond end of device [ 199.908238][ T5916] loop1: rw=2049, want=45104, limit=40427 [ 199.986327][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.997142][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.006710][ T121] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 200.016213][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.024616][ T121] usb 5-1: config 0 descriptor?? [ 200.167017][ T7715] netlink: 'syz.1.2661': attribute type 4 has an invalid length. [ 200.195820][ T7715] netlink: 'syz.1.2661': attribute type 4 has an invalid length. [ 201.046257][ T891] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 201.159118][ T7747] netlink: 'syz.2.2676': attribute type 4 has an invalid length. [ 201.187616][ T7747] netlink: 'syz.2.2676': attribute type 4 has an invalid length. [ 201.296240][ T891] usb 2-1: Using ep0 maxpacket: 8 [ 201.537078][ T7761] FAT-fs (loop2): Directory bread(block 64) failed [ 201.543510][ T7761] FAT-fs (loop2): Directory bread(block 65) failed [ 201.549897][ T891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.551247][ T7761] FAT-fs (loop2): Directory bread(block 66) failed [ 201.560600][ T891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.560626][ T891] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 201.567948][ T7761] FAT-fs (loop2): Directory bread(block 67) failed [ 201.579556][ T891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.591349][ T7761] FAT-fs (loop2): Directory bread(block 68) failed [ 201.593710][ T891] usb 2-1: config 0 descriptor?? [ 201.603885][ T7761] FAT-fs (loop2): Directory bread(block 69) failed [ 201.617401][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2683'. [ 201.617508][ T7761] FAT-fs (loop2): Directory bread(block 70) failed [ 201.632562][ T7761] FAT-fs (loop2): Directory bread(block 71) failed [ 201.639456][ T7761] FAT-fs (loop2): Directory bread(block 72) failed [ 201.646366][ T7761] FAT-fs (loop2): Directory bread(block 73) failed [ 202.396956][ T121] uclogic 0003:256C:006D.002F: failed retrieving string descriptor #100: -71 [ 202.420348][ T121] uclogic 0003:256C:006D.002F: failed retrieving pen parameters: -71 [ 202.442813][ T121] uclogic 0003:256C:006D.002F: failed probing pen v1 parameters: -71 [ 202.460174][ T121] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 202.470374][ T121] uclogic: probe of 0003:256C:006D.002F failed with error -71 [ 202.478246][ T7787] netlink: 'syz.3.2691': attribute type 4 has an invalid length. [ 202.486131][ T7787] netlink: 'syz.3.2691': attribute type 4 has an invalid length. [ 202.534589][ T121] usb 5-1: USB disconnect, device number 21 [ 202.559879][ T891] saitek 0003:06A3:0CCD.0030: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.1-1/input0 [ 202.699317][ T7801] FAT-fs (loop2): Directory bread(block 64) failed [ 202.705896][ T7801] FAT-fs (loop2): Directory bread(block 65) failed [ 202.712535][ T7801] FAT-fs (loop2): Directory bread(block 66) failed [ 202.719634][ T7801] FAT-fs (loop2): Directory bread(block 67) failed [ 202.726071][ T7801] FAT-fs (loop2): Directory bread(block 68) failed [ 202.732576][ T7801] FAT-fs (loop2): Directory bread(block 69) failed [ 202.742686][ T7801] FAT-fs (loop2): Directory bread(block 70) failed [ 202.749290][ T7801] FAT-fs (loop2): Directory bread(block 71) failed [ 202.755697][ T7801] FAT-fs (loop2): Directory bread(block 72) failed [ 202.762272][ T7801] FAT-fs (loop2): Directory bread(block 73) failed [ 202.769316][ T18] usb 2-1: USB disconnect, device number 21 [ 203.052815][ T7816] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 203.074336][ T7816] netlink: 'syz.2.2703': attribute type 4 has an invalid length. [ 203.094017][ T7818] cgroup1: noprefix used incorrectly [ 203.324986][ T7829] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 38 (only 8 groups) [ 203.646091][ T7835] FAT-fs (loop2): Directory bread(block 64) failed [ 203.662541][ T7835] FAT-fs (loop2): Directory bread(block 65) failed [ 203.672524][ T7835] FAT-fs (loop2): Directory bread(block 66) failed [ 203.679146][ T7835] FAT-fs (loop2): Directory bread(block 67) failed [ 203.685706][ T7835] FAT-fs (loop2): Directory bread(block 68) failed [ 203.693033][ T7835] FAT-fs (loop2): Directory bread(block 69) failed [ 203.699404][ T7835] FAT-fs (loop2): Directory bread(block 70) failed [ 203.705755][ T7835] FAT-fs (loop2): Directory bread(block 71) failed [ 203.712090][ T7835] FAT-fs (loop2): Directory bread(block 72) failed [ 203.718390][ T7835] FAT-fs (loop2): Directory bread(block 73) failed [ 203.768011][ T7844] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 203.787309][ T7844] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a802c09c, mo2=0000] [ 203.794962][ T7844] System zones: 0-2, 18-18, 34-34 [ 203.803372][ T7844] EXT4-fs (loop4): 1 orphan inode deleted [ 203.816253][ T7844] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,lazytime,nolazytime,noquota,jqfmt=vfsold,minixdf,init_itable=0x0000000000000002,grpid,debug,,errors=continue [ 203.837772][ T7851] cgroup1: noprefix used incorrectly [ 204.136208][ T7866] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 38 (only 8 groups) [ 204.146931][ T121] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 204.156079][ T7863] EXT4-fs (loop1): #blocks per group too big: 24576 [ 204.316248][ T891] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 204.588877][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.600193][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.611603][ T121] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 204.621747][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.635048][ T121] usb 3-1: config 0 descriptor?? [ 204.676282][ T891] usb 4-1: Using ep0 maxpacket: 16 [ 204.776326][ T13] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 204.796340][ T891] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 204.886389][ T891] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.895299][ T891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.903266][ T891] usb 4-1: SerialNumber: syz [ 204.946680][ T891] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 204.954356][ T891] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 204.960629][ T891] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 205.016227][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 205.136363][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.147183][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.156808][ T13] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 205.165700][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.175165][ T13] usb 2-1: config 0 descriptor?? [ 205.365132][ T5] usb 4-1: USB disconnect, device number 22 [ 205.774341][ T13] saitek 0003:06A3:0CCD.0032: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.1-1/input0 [ 206.030920][ T18] usb 2-1: USB disconnect, device number 22 [ 206.062980][ T121] uclogic 0003:256C:006D.0031: failed retrieving string descriptor #100: -71 [ 206.073740][ T121] uclogic 0003:256C:006D.0031: failed retrieving pen parameters: -71 [ 206.082468][ T121] uclogic 0003:256C:006D.0031: failed probing pen v1 parameters: -71 [ 206.090413][ T121] uclogic 0003:256C:006D.0031: failed probing parameters: -71 [ 206.097748][ T121] uclogic: probe of 0003:256C:006D.0031 failed with error -71 [ 206.106151][ T121] usb 3-1: USB disconnect, device number 21 [ 206.322724][ T7898] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 206.439046][ T7902] EXT4-fs (loop3): #blocks per group too big: 24576 [ 206.627566][ T23] audit: type=1400 audit(206.598:553): avc: denied { setopt } for pid=7916 comm="syz.1.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.647707][ T23] audit: type=1400 audit(206.618:554): avc: denied { bind } for pid=7916 comm="syz.1.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 206.931828][ T7927] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 207.076257][ T735] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 207.091913][ T7931] EXT4-fs (loop4): #blocks per group too big: 24576 [ 207.259949][ T7933] F2FS-fs (loop1): invalid crc value [ 207.289891][ T7933] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.316315][ T735] usb 4-1: Using ep0 maxpacket: 16 [ 207.346274][ T7933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 207.486345][ T735] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 207.616701][ T735] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.626049][ T735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 207.636697][ T735] usb 4-1: SerialNumber: syz [ 207.696286][ T855] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 207.707065][ T735] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 207.714746][ T735] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 207.721179][ T735] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 207.796236][ T121] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 207.846920][ T5916] attempt to access beyond end of device [ 207.846920][ T5916] loop1: rw=2049, want=45104, limit=40427 [ 207.936260][ T855] usb 5-1: Using ep0 maxpacket: 8 [ 208.066434][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.083226][ T855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.103224][ T855] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 208.123208][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.132687][ T855] usb 5-1: config 0 descriptor?? [ 208.141475][ T74] usb 4-1: USB disconnect, device number 23 [ 208.166336][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.180776][ T121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.190598][ T121] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 208.199576][ T121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.208290][ T121] usb 3-1: config 0 descriptor?? [ 208.618980][ T855] saitek 0003:06A3:0CCD.0033: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.4-1/input0 [ 208.700195][ T7962] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 208.826040][ T855] usb 5-1: USB disconnect, device number 22 [ 208.959629][ T7984] EXT4-fs (loop3): #blocks per group too big: 24576 [ 209.166276][ T74] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 209.408540][ T74] usb 2-1: Using ep0 maxpacket: 16 [ 209.526279][ T74] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 209.566313][ T121] uclogic 0003:256C:006D.0034: failed retrieving string descriptor #100: -71 [ 209.575018][ T121] uclogic 0003:256C:006D.0034: failed retrieving pen parameters: -71 [ 209.588899][ T121] uclogic 0003:256C:006D.0034: failed probing pen v1 parameters: -71 [ 209.598579][ T121] uclogic 0003:256C:006D.0034: failed probing parameters: -71 [ 209.606424][ T121] uclogic: probe of 0003:256C:006D.0034 failed with error -71 [ 209.617447][ T74] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.636887][ T121] usb 3-1: USB disconnect, device number 22 [ 209.646945][ T74] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 209.665783][ T74] usb 2-1: SerialNumber: syz [ 209.706807][ T74] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 209.717156][ T74] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 209.726134][ T74] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 209.745363][ T8028] kernel profiling enabled (shift: 0) [ 210.087348][ T13] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 210.218611][ T8052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2795'. [ 210.446616][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.457491][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.472030][ T13] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 210.483820][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.495406][ T13] usb 4-1: config 0 descriptor?? [ 210.498644][ T8050] F2FS-fs (loop2): invalid crc value [ 210.517810][ T8050] F2FS-fs (loop2): Found nat_bits in checkpoint [ 210.611123][ T8050] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 210.636536][ T8050] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 210.676178][ C0] ================================================================== [ 210.684055][ C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xa4/0xe0 [ 210.690991][ C0] Read of size 8 at addr ffff8881bf94f800 by task syz.2.2794/8050 [ 210.698621][ C0] [ 210.700795][ C0] CPU: 0 PID: 8050 Comm: syz.2.2794 Tainted: G W 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 210.711813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 210.721708][ C0] Call Trace: [ 210.724836][ C0] [ 210.727532][ C0] dump_stack+0x1d8/0x241 [ 210.731696][ C0] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 210.737337][ C0] ? printk+0xd1/0x111 [ 210.741238][ C0] ? profile_pc+0xa4/0xe0 [ 210.745406][ C0] ? wake_up_klogd+0xb2/0xf0 [ 210.749831][ C0] ? profile_pc+0xa4/0xe0 [ 210.753995][ C0] print_address_description+0x8c/0x600 [ 210.759381][ C0] ? panic+0x89d/0x89d [ 210.763284][ C0] ? profile_pc+0xa4/0xe0 [ 210.767452][ C0] __kasan_report+0xf3/0x120 [ 210.771880][ C0] ? profile_pc+0xa4/0xe0 [ 210.776044][ C0] ? _raw_spin_lock+0xc0/0x1b0 [ 210.780647][ C0] kasan_report+0x30/0x60 [ 210.784809][ C0] profile_pc+0xa4/0xe0 [ 210.788805][ C0] profile_tick+0xb9/0x100 [ 210.793056][ C0] tick_sched_timer+0x237/0x3c0 [ 210.797741][ C0] ? tick_setup_sched_timer+0x460/0x460 [ 210.803123][ C0] __hrtimer_run_queues+0x3e9/0xb90 [ 210.808156][ C0] ? _raw_spin_unlock_irq+0x4a/0x60 [ 210.813193][ C0] ? hrtimer_interrupt+0x890/0x890 [ 210.818140][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 210.823175][ C0] ? sched_clock+0x36/0x40 [ 210.827424][ C0] ? ktime_get+0xf9/0x130 [ 210.831591][ C0] ? ktime_get_update_offsets_now+0x26c/0x280 [ 210.837495][ C0] hrtimer_interrupt+0x38a/0x890 [ 210.842273][ C0] smp_apic_timer_interrupt+0x110/0x460 [ 210.847652][ C0] apic_timer_interrupt+0xf/0x20 [ 210.852505][ C0] [ 210.855297][ C0] RIP: 0010:_raw_spin_lock+0xc0/0x1b0 [ 210.860496][ C0] Code: fd 4c 89 ff be 04 00 00 00 e8 2c dc 42 fd 43 0f b6 04 26 84 c0 0f 85 aa 00 00 00 8b 44 24 20 b9 01 00 00 00 f0 41 0f b1 4d 00 <75> 33 48 c7 04 24 0e 36 e0 45 49 c7 04 1c 00 00 00 00 65 48 8b 04 [ 210.879937][ C0] RSP: 0018:ffff8881bf94f800 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 210.888188][ C0] RAX: 0000000000000000 RBX: 1ffff11037f29f00 RCX: 0000000000000001 [ 210.895989][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881bf94f820 [ 210.903803][ C0] RBP: ffff8881bf94f8a0 R08: dffffc0000000000 R09: 0000000000000003 [ 210.911611][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 210.919424][ C0] R13: ffff8881f1cdfd04 R14: 1ffff11037f29f04 R15: ffff8881bf94f820 [ 210.927246][ C0] ? _raw_spin_trylock_bh+0x190/0x190 [ 210.932446][ C0] ? ttwu_do_wakeup+0x41d/0x480 [ 210.937133][ C0] futex_wait_setup+0x24a/0x6c0 [ 210.941907][ C0] futex_wait+0x2b8/0x890 [ 210.946069][ C0] ? cpus_share_cache+0x110/0x110 [ 210.950937][ C0] ? do_futex+0x19f0/0x19f0 [ 210.955274][ C0] do_futex+0x13c1/0x19f0 [ 210.959440][ C0] ? __kasan_slab_free+0x233/0x270 [ 210.964382][ C0] ? __kasan_slab_free+0x1b5/0x270 [ 210.969340][ C0] ? futex_exit_release+0x1e0/0x1e0 [ 210.974366][ C0] ? debug_smp_processor_id+0x20/0x20 [ 210.979576][ C0] ? blkcg_maybe_throttle_current+0x181/0xa90 [ 210.985475][ C0] __se_sys_futex+0x355/0x470 [ 210.990018][ C0] ? __blkcg_punt_bio_submit+0x170/0x170 [ 210.995458][ C0] ? __x64_sys_futex+0xf0/0xf0 [ 211.000065][ C0] ? _raw_spin_unlock_irq+0x4a/0x60 [ 211.005096][ C0] ? __x64_sys_futex+0x1d/0xf0 [ 211.009816][ C0] do_syscall_64+0xca/0x1c0 [ 211.014156][ C0] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 211.019879][ C0] RIP: 0033:0x7fdddd566b99 [ 211.024134][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.043658][ C0] RSP: 002b:00007fdddc7e80f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 211.051904][ C0] RAX: ffffffffffffffda RBX: 00007fdddd6f4fa8 RCX: 00007fdddd566b99 [ 211.059711][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdddd6f4fa8 [ 211.067516][ C0] RBP: 00007fdddd6f4fa0 R08: 00007fdddc7e86c0 R09: 00007fdddc7e86c0 [ 211.075328][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdddd6f4fac [ 211.083241][ C0] R13: 000000000000000b R14: 00007ffda1c14200 R15: 00007ffda1c142e8 [ 211.091045][ C0] [ 211.093204][ C0] The buggy address belongs to the page: [ 211.098692][ C0] page:ffffea0006fe53c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 211.107617][ C0] flags: 0x8000000000000000() [ 211.112138][ C0] raw: 8000000000000000 ffffea0006fe53c8 ffffea0006fe53c8 0000000000000000 [ 211.120652][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 211.129071][ C0] page dumped because: kasan: bad access detected [ 211.135394][ C0] page_owner tracks the page as allocated [ 211.140875][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT) [ 211.152428][ C0] prep_new_page+0x18f/0x370 [ 211.156843][ C0] get_page_from_freelist+0x2d13/0x2d90 [ 211.162223][ C0] __alloc_pages_nodemask+0x393/0x840 [ 211.167433][ C0] dup_task_struct+0x85/0x600 [ 211.172046][ C0] copy_process+0x56d/0x3230 [ 211.176463][ C0] _do_fork+0x197/0x900 [ 211.180455][ C0] __x64_sys_clone3+0x2da/0x300 [ 211.185154][ C0] do_syscall_64+0xca/0x1c0 [ 211.189484][ C0] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 211.195205][ C0] page_owner free stack trace missing [ 211.200409][ C0] [ 211.202581][ C0] addr ffff8881bf94f800 is located in stack of task syz.2.2794/8050 at offset 0 in frame: [ 211.212305][ C0] _raw_spin_lock+0x0/0x1b0 [ 211.216649][ C0] [ 211.218812][ C0] this frame has 1 object: [ 211.223063][ C0] [32, 36) 'val.i.i.i' [ 211.223064][ C0] [ 211.229222][ C0] Memory state around the buggy address: [ 211.234697][ C0] ffff8881bf94f700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 211.242594][ C0] ffff8881bf94f780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 211.250523][ C0] >ffff8881bf94f800: f1 f1 f1 f1 04 f3 f3 f3 00 00 00 00 00 00 00 00 [ 211.258389][ C0] ^ [ 211.262295][ C0] ffff8881bf94f880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 211.270193][ C0] ffff8881bf94f900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 211.278089][ C0] ================================================================== [ 211.285987][ C0] Disabling lock debugging due to kernel taint [ 211.299281][ T121] usb 2-1: USB disconnect, device number 23 [ 211.401836][ T6383] attempt to access beyond end of device [ 211.401836][ T6383] loop2: rw=2049, want=45112, limit=40427 [ 211.459491][ T8070] F2FS-fs (loop4): invalid crc value [ 211.470043][ T8070] F2FS-fs (loop4): Found nat_bits in checkpoint [ 211.501137][ T8070] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 211.526626][ T13] hid (null): bogus close delimiter [ 211.884459][ T13] usb 4-1: language id specifier not provided by device, defaulting to English [ 211.950186][ T1682] attempt to access beyond end of device [ 211.950186][ T1682] loop4: rw=2049, want=45104, limit=40427 [ 212.467762][ T13] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0035/input/input31 [ 212.481244][ T13] uclogic 0003:256C:006D.0035: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 212.669408][ T13] usb 4-1: USB disconnect, device number 24