last executing test programs: 3.815283664s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESOCT, @ANYRES32, @ANYRES16=r2, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRESDEC], 0x2, 0x1d4, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000001f00)={0x1f}) chown(&(0x7f00000080c0)='./file0\x00', 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r4, &(0x7f0000000040)) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001eeffff", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) 3.213579607s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x48) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.822982248s ago: executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x1}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x4, 0x1}, 0x4) 2.732142073s ago: executing program 0: rt_sigaction(0x5, &(0x7f0000000b00)={&(0x7f0000000a80)="400f1a2066400f2d40a7f043195e8dc481a5e43247ded7c4c139e9637ac4615f5c0a8611c46171e5fd660f3a0c7cbd84ba", 0x0, 0x0}, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000c40)) 2.726377614s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 2.564272249s ago: executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x200000a, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2bd, &(0x7f0000001500)="$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") mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x0, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x0, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x4, 0x31}}]}}}]}}]}}, 0x0) r2 = syz_usb_connect$uac1(0x5, 0xbe, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0x0, 0x10, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x5, 0x6, 0x31}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x0, 0x0, 0x5, 0x6, 0x40}, @selector_unit={0x5, 0x24, 0x5, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x1}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x0, 0x24, 0x0, "809148"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x0, 0x5}, @as_header={0x7, 0x24, 0x1, 0x2, 0x40, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x3f, 0x87, 0x3}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0xff00, 0x0, "e3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x6, 0x0, {0x7, 0x25, 0x1, 0x0, 0x44}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x20, 0x20, 0x0, 0x8, 0x6}, 0xf, &(0x7f00000004c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x40, 0xfff7}]}, 0x1, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000780)={0x14, &(0x7f0000000600)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0}, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x20, 0x11, 0x47, "ed93dea2941563a280f7a574a5baa7b053d70dffdad0a9a3b70ec5cd509c5efc1640e078858f5b258c0e566d7ab5e957d798dfdc96b1bbf6a539297124d78b47ea9a491475a618"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f00000008c0)={0x20, 0x81, 0x3, "8ca501"}, &(0x7f0000000900)={0x20, 0x82, 0x3, "449d40"}, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x85, 0x3, "d97f64"}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.268124105s ago: executing program 2: rt_sigaction(0x5, &(0x7f0000000b00)={&(0x7f0000000a80)="400f1a2066400f2d40a7f043195e8dc481a5e43247ded7c4c139e9637ac4615f5c0a8611c46171e5fd660f3a0c7cbd84ba", 0x0, 0x0}, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000c40)) 2.245895629s ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0x0, 0x0, "964d22c60f0865671a33b6253500"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x400, 0x0, 0x0, 0x0, 0x0, "4415264a88b82c522013fb235902af2556c6b6"}) 2.201439115s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff00000000ae0a020000000000be400300000000006504030001ed00007b130000000000002f44000000000000630a00fe000000007133000000000000b50300000000ed009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd829e6548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e0c6820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f133fe6b9fae9f0ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f20000000000000000870e6ae859f5b50e461fc136eefd2069e33d4262072facc3abcd7c566e4e4ce62332a4f69227f2655b44c2d15b598d8d7d3aec47cced75c1ab34b8c902a8b1afb6b3b05755a002955f4b638447273f6f5ef28d9254e558293ce123bfc8fb0250ec0252b9b7604bc71bd9f84be6f7c428d9092574ecfb5857c960905932bde917655db304efdcefe2849230c526139c41b40a697b426690c6cac60eed53"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) 1.318483914s ago: executing program 2: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x814, &(0x7f0000005800)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6163746976655f6c6f67733d362c6163746976655f6c6f67733d342c6a71666d743d76667376312c6163746976655f6c6f67733d3600000000615f666c7573682c6261636b67736f756e645f67633d6f6e2c6673796e635f6d6f64653d7374726963742c657874656e745fe3616368652c76c202748e327a69cd00f4f0d086ccccef7b6f05185fa7202d3de5fa04f8e54f6efc92b384d8740ade28b1d9b5877b8c6d4a206d0d0f202ceea69c9a567ef2a4b849ca4299ced7216150550b526fbbb003890381533d4e125766beb376faa027305d810d45cd14305e27081968"], 0x1, 0x5536, &(0x7f00000002c0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='./file1\x00') 976.423217ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESOCT, @ANYRES32, @ANYRES16=r2, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRESDEC], 0x2, 0x1d4, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000001f00)={0x1f}) chown(&(0x7f00000080c0)='./file0\x00', 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r4, &(0x7f0000000040)) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001eeffff", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) 947.112972ms ago: executing program 4: socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x74, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}, @srh={0x0, 0x0, 0x3}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 937.020724ms ago: executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}) 915.467077ms ago: executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) 859.687736ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x81}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x38}}, 0x4002) 843.792748ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @IFLA_MTU={0x8}]}, 0x50}}, 0x0) 829.12265ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 818.183442ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='./file1/file0\x00', 0x0, 0x0, 0x7, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) fchdir(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) sendto$packet(r5, &(0x7f0000000240)="3f030e00030000002b001e0089e9aaa911e0c2310f0086dd1327c9167c643c4a1b7880610cc96655", 0x28, 0x0, &(0x7f0000000040)={0x11, 0x0, r6, 0x4, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', r6, 0x4, 0x0, 0xb3, 0xffff, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x6, 0x2}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r4, @ANYBLOB="080029bd7000fcdbdf2515000000400001801400020069705f767469300000000000000000000800030002000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="480001801400020070696d726567310000000000000000001400020064766d727031000000000000000000001400020076657468315f766972745f776966690008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="3800018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08004aac2fbe5a47177574290100", @ANYRES32=r2, @ANYBLOB="0800030000000000140002006d6163766c616e30000000000000000064000180080003000100000014000200766972745f77696669300000000000000800030000000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000300020000000800030003000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB="44fe8ae22ba36e4e2050000000000000000831d3"], 0x144}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000059c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="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", 0xa81}], 0x1}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fb65000000000000001d85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) close(r8) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) 793.506736ms ago: executing program 4: unshare(0x20000600) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 780.900798ms ago: executing program 4: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a556420589c6685d4982a83b71b906769e737201ac6b7a780c454156569cbf3a5be811debc957b5831b89b59d7002008c7c00", 0x35}, 0x48, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ftruncate(r2, 0x975) 748.581593ms ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) poll(0x0, 0x0, 0x100) futex(0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r1 = eventfd2(0x0, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() r2 = dup2(r1, r1) write$P9_RSTATFS(r2, &(0x7f0000000640)={0x43}, 0x43) write$FUSE_OPEN(r2, &(0x7f0000002100)={0x20, 0xfffffffffffffffe}, 0x20) 686.752572ms ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5524, &(0x7f0000007200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4008f510, 0x0) 274.513147ms ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) 247.196761ms ago: executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x14, 0x15, 0x401, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) 236.656862ms ago: executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 226.831974ms ago: executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x11, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'lc\x00'}, 0x2c) 218.851846ms ago: executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0xd4, 0xa, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0xb8, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_FAMILY={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x70, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}]}, 0xd4}}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x331}, {&(0x7f0000000280)=""/85, 0x4}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x596}, {&(0x7f00000007c0)=""/154, 0x32}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 203.321918ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 136.532938ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='./file1/file0\x00', 0x0, 0x0, 0x7, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) fchdir(r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) sendto$packet(r5, &(0x7f0000000240)="3f030e00030000002b001e0089e9aaa911e0c2310f0086dd1327c9167c643c4a1b7880610cc96655", 0x28, 0x0, &(0x7f0000000040)={0x11, 0x0, r6, 0x4, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', r6, 0x4, 0x0, 0xb3, 0xffff, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x6, 0x2}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r4, @ANYBLOB="080029bd7000fcdbdf2515000000400001801400020069705f767469300000000000000000000800030002000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="480001801400020070696d726567310000000000000000001400020064766d727031000000000000000000001400020076657468315f766972745f776966690008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB="3800018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08004aac2fbe5a47177574290100", @ANYRES32=r2, @ANYBLOB="0800030000000000140002006d6163766c616e30000000000000000064000180080003000100000014000200766972745f77696669300000000000000800030000000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000300020000000800030003000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB="44fe8ae22ba36e4e2050000000000000000831d3"], 0x144}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000059c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="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", 0xa81}], 0x1}, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fb65000000000000001d85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) close(r8) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) 0s ago: executing program 1: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000001e40)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000000)='./file0\x00') r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a556420589c6685d4982a83b71b906769e737201ac6b7a780c454156569cbf3a5be811debc957b5831b89b59d7002008c7c00", 0x35}, 0x48, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) ftruncate(r2, 0x975) kernel console output (not intermixed with test programs): sadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 30.976527][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.013107][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 31.025738][ T13] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 31.034657][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.047071][ T13] usb 5-1: config 0 descriptor?? [ 31.072513][ T23] audit: type=1400 audit(1718651309.899:136): avc: denied { create } for pid=560 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.092565][ T13] usb 5-1: bad CDC descriptors [ 31.095881][ T23] audit: type=1400 audit(1718651309.909:137): avc: denied { setattr } for pid=560 comm="syz-executor.2" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.124080][ T23] audit: type=1400 audit(1718651309.949:138): avc: denied { unmount } for pid=376 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.166973][ T568] xt_TCPMSS: Only works on TCP SYN packets [ 31.237198][ T572] ====================================================== [ 31.237198][ T572] WARNING: the mand mount option is being deprecated and [ 31.237198][ T572] will be removed in v5.15! [ 31.237198][ T572] ====================================================== [ 31.301292][ T398] usb 5-1: USB disconnect, device number 2 [ 31.382761][ T572] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set [ 31.407591][ T572] Quota error (device loop2): write_blk: dquota write failed [ 31.414852][ T572] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 31.425303][ T572] EXT4-fs (loop2): 1 truncate cleaned up [ 31.445138][ T572] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noload,,errors=continue [ 31.466065][ T572] ext4 filesystem being mounted at /root/syzkaller-testdir1429807923/syzkaller.kGjswA/14/file0 supports timestamps until 2038 (0x7fffffff) [ 31.510032][ T23] audit: type=1400 audit(1718651310.339:139): avc: denied { remove_name } for pid=571 comm="syz-executor.2" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.544076][ T572] syz-executor.2 (572) used greatest stack depth: 18968 bytes left [ 31.553700][ T9] Quota error (device loop2): remove_tree: Getting block too big (0 >= 6) [ 31.555961][ T23] audit: type=1400 audit(1718651310.339:140): avc: denied { unlink } for pid=571 comm="syz-executor.2" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.585656][ T23] audit: type=1400 audit(1718651310.359:141): avc: denied { create } for pid=575 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.631938][ T587] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 31.641216][ T74] usb 2-1: USB disconnect, device number 2 [ 32.056369][ T398] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.116368][ T367] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.156399][ T74] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.396529][ T74] usb 2-1: Using ep0 maxpacket: 32 [ 32.416577][ T398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.429487][ T398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.439281][ T398] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.452152][ T398] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.461090][ T398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.469653][ T398] usb 4-1: config 0 descriptor?? [ 32.476443][ T367] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 32.485371][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.494429][ T367] usb 5-1: config 0 descriptor?? [ 32.506452][ T627] [ 32.508586][ T627] ********************************************************** [ 32.515838][ T627] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.516473][ T74] usb 2-1: config 0 has no interfaces? [ 32.523683][ T627] ** ** [ 32.535488][ T627] ** trace_printk() being used. Allocating extra memory. ** [ 32.542938][ T627] ** ** [ 32.550122][ T627] ** This means that this is a DEBUG kernel and it is ** [ 32.557316][ T627] ** unsafe for production use. ** [ 32.564514][ T627] ** ** [ 32.572017][ T627] ** If you see this message and you are not debugging ** [ 32.579406][ T627] ** the kernel, report this immediately to your vendor! ** [ 32.586602][ T627] ** ** [ 32.593801][ T627] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.601056][ T627] ********************************************************** [ 32.706458][ T74] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 32.715408][ T74] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.723510][ T74] usb 2-1: Product: syz [ 32.728038][ T74] usb 2-1: Manufacturer: syz [ 32.738730][ T74] usb 2-1: SerialNumber: syz [ 32.747201][ T74] usb 2-1: config 0 descriptor?? [ 32.869120][ T616] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 32.876722][ T616] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 32.888482][ T616] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.906419][ T18] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 32.916232][ T616] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 32.923222][ T616] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.947509][ T398] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 32.955330][ T398] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 32.965317][ T398] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 33.187176][ T609] EXT4-fs (loop1): Invalid want_extra_isize 8 [ 33.266425][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.277266][ T18] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 33.287997][ T18] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.300726][ T18] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.309514][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.318162][ T18] usb 3-1: config 0 descriptor?? [ 33.336420][ T630] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 33.456434][ T367] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 33.466417][ T367] asix: probe of 5-1:0.0 failed with error -71 [ 33.473797][ T367] usb 5-1: USB disconnect, device number 3 [ 33.787645][ T18] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.794903][ T18] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.802066][ T18] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.809546][ T18] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 33.818756][ T18] plantronics 0003:047F:FFFF.0003: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 34.026386][ T367] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 34.257279][ T647] usb 3-1: USB disconnect, device number 2 [ 34.266591][ T367] usb 5-1: Using ep0 maxpacket: 32 [ 34.386461][ T367] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.396406][ T367] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 34.409286][ T367] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 34.418265][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.426817][ T367] usb 5-1: config 0 descriptor?? [ 34.467103][ T367] usb 5-1: bad CDC descriptors [ 34.491080][ T659] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 34.537801][ T659] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 34.537801][ T659] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 34.537801][ T659] [ 34.556111][ T659] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 34.578693][ T659] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 34.586859][ T659] EXT4-fs (loop0): Remounting filesystem read-only [ 34.593402][ T659] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 34.601797][ T659] EXT4-fs (loop0): 1 truncate cleaned up [ 34.607279][ T659] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr, [ 34.617385][ T659] ext4 filesystem being mounted at /root/syzkaller-testdir2872750629/syzkaller.L2BWwc/25/file1 supports timestamps until 2038 (0x7fffffff) [ 34.670199][ T408] usb 5-1: USB disconnect, device number 4 [ 34.725838][ T647] usb 2-1: USB disconnect, device number 3 [ 34.791115][ T683] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure [ 34.821341][ T685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 34.972988][ T692] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.980044][ T692] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.988240][ T692] device bridge_slave_0 entered promiscuous mode [ 34.997243][ T692] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.004066][ T692] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.011491][ T692] device bridge_slave_1 entered promiscuous mode [ 35.080000][ T13] usb 4-1: USB disconnect, device number 3 [ 35.125621][ T708] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 35.144850][ T692] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.151710][ T692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.158820][ T692] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.165566][ T692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.226917][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.252779][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.260145][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.282944][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.291016][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.297873][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.369573][ T717] hub 6-0:1.0: USB hub found [ 35.374686][ T717] hub 6-0:1.0: 1 port detected [ 35.541918][ T647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.550330][ T647] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.557188][ T647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.565370][ T647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.573877][ T647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.605423][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.624801][ T709] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.631742][ T709] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.639229][ T709] device bridge_slave_0 entered promiscuous mode [ 35.646447][ T709] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.653288][ T709] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.660853][ T709] device bridge_slave_1 entered promiscuous mode [ 35.675536][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.685440][ T726] netlink: 41442 bytes leftover after parsing attributes in process `syz-executor.4'. [ 35.710875][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.732928][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.748006][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.817164][ T9] device bridge_slave_1 left promiscuous mode [ 35.824000][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.832921][ T9] device bridge_slave_0 left promiscuous mode [ 35.839200][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.944473][ T731] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 35.982398][ T731] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 36.049027][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.064041][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.074828][ T731] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.089242][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.109459][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.121254][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.160959][ T771] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 36.189336][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.196748][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.204336][ T731] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.204999][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.211782][ T731] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.236830][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.243664][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.245518][ T23] kauditd_printk_skb: 39 callbacks suppressed [ 36.245526][ T23] audit: type=1400 audit(1718651315.069:179): avc: denied { create } for pid=730 comm="syz-executor.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.250884][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.263123][ T23] audit: type=1400 audit(1718651315.089:180): avc: denied { mounton } for pid=730 comm="syz-executor.4" path="/root/syzkaller-testdir1131209714/syzkaller.18xypr/16/file0/bus" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.364535][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.426613][ T731] overlayfs: failed to resolve './file0': -2 [ 36.466628][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.473503][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.488847][ T23] audit: type=1400 audit(1718651315.089:181): avc: denied { write } for pid=730 comm="syz-executor.4" name="bus" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.518306][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.521442][ T23] audit: type=1400 audit(1718651315.249:182): avc: denied { add_name } for pid=730 comm="syz-executor.4" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.526644][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.562915][ T23] audit: type=1400 audit(1718651315.249:183): avc: denied { setattr } for pid=730 comm="syz-executor.4" name="work" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 36.617390][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.625507][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.634064][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.676908][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.735849][ T23] audit: type=1400 audit(1718651315.559:184): avc: denied { name_bind } for pid=793 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 36.784376][ T23] audit: type=1400 audit(1718651315.589:185): avc: denied { read } for pid=793 comm="syz-executor.2" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.903399][ T23] audit: type=1400 audit(1718651315.729:186): avc: denied { execute } for pid=802 comm="syz-executor.0" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=15093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.134597][ T817] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 37.224981][ T830] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 37.587614][ T23] audit: type=1400 audit(1718651316.419:187): avc: denied { mounton } for pid=829 comm="syz-executor.0" path="/root/syzkaller-testdir3786352810/syzkaller.nMd2gT/7/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 37.717939][ T9] device bridge_slave_1 left promiscuous mode [ 37.723860][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.731057][ T9] device bridge_slave_0 left promiscuous mode [ 37.736438][ T408] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.737177][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.777266][ T855] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 37.818091][ T855] EXT4-fs error (device loop3): ext4_clear_blocks:858: inode #14: comm syz-executor.3: attempt to clear invalid blocks 1886221359 len 1 [ 37.820567][ T23] audit: type=1400 audit(1718651316.639:188): avc: denied { setattr } for pid=853 comm="syz-executor.3" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 37.907691][ T870] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 38.046362][ T408] usb 2-1: Using ep0 maxpacket: 8 [ 38.132967][ T887] hub 6-0:1.0: USB hub found [ 38.138139][ T887] hub 6-0:1.0: 1 port detected [ 38.216628][ T408] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 38.267918][ T408] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 38.276296][ T408] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 38.286422][ T408] usb 2-1: config 250 has no interface number 0 [ 38.295004][ T408] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 38.306771][ T408] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 38.317259][ T408] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 38.328035][ T408] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 38.341647][ T408] usb 2-1: config 250 interface 228 has no altsetting 0 [ 38.396382][ T18] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.476468][ T408] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 38.485499][ T408] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 38.493562][ T408] usb 2-1: Product: syz [ 38.497536][ T408] usb 2-1: SerialNumber: syz [ 38.536847][ T408] hub 2-1:250.228: bad descriptor, ignoring hub [ 38.542985][ T408] hub: probe of 2-1:250.228 failed with error -5 [ 38.756580][ T18] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 38.758354][ T408] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 38.765835][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 146, changing to 11 [ 38.787291][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49663, setting to 1024 [ 38.800787][ T18] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.801085][ T895] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.2'. [ 38.813596][ T18] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.813608][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.814664][ T18] usb 1-1: config 0 descriptor?? [ 38.824251][ T895] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 38.949026][ T898] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 39.085336][ T909] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 39.098363][ T909] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,norecovery,,errors=continue [ 39.129059][ T909] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 39.215248][ T917] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 39.233309][ T917] EXT4-fs error (device loop3): ext4_clear_blocks:858: inode #14: comm syz-executor.3: attempt to clear invalid blocks 1886221359 len 1 [ 39.317218][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.324401][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.331665][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.338834][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.346032][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.365717][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.373400][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.380696][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.387863][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.395003][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.402219][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.409418][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.416642][ T18] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.424186][ T18] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 39.496161][ T931] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.2'. [ 39.505407][ T928] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.505466][ T931] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 39.553531][ T928] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 39.560128][ T928] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.610482][ T939] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 39.633890][ T471] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46 [ 39.644245][ T471] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 39.659597][ T471] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 39.886859][ T946] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 39.907268][ T414] usb 2-1: USB disconnect, device number 4 [ 39.914124][ T18] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 39.927185][ T414] usblp0: removed [ 39.933150][ T18] usb 1-1: USB disconnect, device number 2 [ 40.036464][ T955] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 40.051146][ T955] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 40.067939][ T955] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nombcache,jqfmt=vfsold,quota,,errors=continue [ 40.081081][ T955] ext4 filesystem being mounted at /root/syzkaller-testdir1131209714/syzkaller.18xypr/30/éq‰Y’3aK supports timestamps until 2038 (0x7fffffff) [ 40.207451][ T974] EXT4-fs error (device loop4): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.4: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 40.426507][ T379] attempt to access beyond end of device [ 40.426507][ T379] loop3: rw=2049, want=45104, limit=40427 [ 40.498451][ T976] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 40.545926][ T709] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 46 [ 40.584495][ T981] kvm: emulating exchange as write [ 40.615097][ T709] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 40.624592][ T709] erofs: (device loop0): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 41.001376][ T998] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 41.108807][ T1003] devtmpfs: Unknown parameter 'no' [ 41.128916][ T998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 41.159305][ T409] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.242501][ T1007] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 41.251788][ T1007] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 41.264063][ T1009] process 'syz-executor.3' launched './file0' with NULL argv: empty string added [ 41.273250][ T414] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.282432][ T1007] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nombcache,jqfmt=vfsold,quota,,errors=continue [ 41.294982][ T1007] ext4 filesystem being mounted at /root/syzkaller-testdir1429807923/syzkaller.kGjswA/48/éq‰Y’3aK supports timestamps until 2038 (0x7fffffff) [ 41.316811][ T1007] EXT4-fs error (device loop2): ext4_find_dest_de:2063: inode #2: block 3: comm syz-executor.2: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 41.446416][ T409] usb 1-1: Using ep0 maxpacket: 32 [ 41.542945][ T1013] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.566422][ T409] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.577117][ T409] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.581433][ T1013] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 41.593451][ T1013] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.696421][ T414] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 41.704479][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 146, changing to 11 [ 41.715711][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49663, setting to 1024 [ 41.722326][ T409] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 41.727143][ T414] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.979100][ T409] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 41.994578][ T414] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.003593][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.015930][ T414] usb 2-1: config 0 descriptor?? [ 42.023482][ T409] usb 1-1: Product: syz [ 42.027692][ T409] usb 1-1: Manufacturer: syz [ 42.066951][ T409] hub 1-1:4.0: USB hub found [ 42.072705][ T1032] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 42.091119][ T379] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 42.100654][ T379] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 42.109710][ T379] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 42.181769][ T1039] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 42.242258][ T376] attempt to access beyond end of device [ 42.242258][ T376] loop2: rw=2049, want=45104, limit=40427 [ 42.278276][ T409] hub 1-1:4.0: 2 ports detected [ 42.486432][ T409] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 42.492705][ T409] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 42.507698][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.536895][ T409] usb 1-1: USB disconnect, device number 3 [ 42.543044][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.550321][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.557789][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.565191][ T23] kauditd_printk_skb: 14 callbacks suppressed [ 42.565199][ T23] audit: type=1400 audit(1718651321.389:203): avc: denied { create } for pid=1054 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.591890][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.599108][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.606280][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.613549][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.620706][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.627937][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.635615][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.642849][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.650077][ T414] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.657977][ T414] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 42.667946][ T414] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 42.711263][ T1065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 42.787013][ T409] usb 2-1: USB disconnect, device number 5 [ 42.816376][ T124] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.867999][ T1067] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.892052][ T1067] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 42.898645][ T1067] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.300693][ T124] usb 3-1: device descriptor read/64, error 18 [ 43.370384][ T23] audit: type=1400 audit(1718651322.199:204): avc: denied { write } for pid=1086 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.507326][ T1087] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 43.507326][ T1087] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 43.507326][ T1087] [ 43.525728][ T1087] EXT4-fs (loop3): failed to initialize system zone (-117) [ 43.527675][ T1099] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 43.542239][ T1087] EXT4-fs (loop3): mount failed [ 43.548598][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.556990][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.568741][ T1101] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 43.577950][ T1101] ext4 filesystem being mounted at /root/syzkaller-testdir3786352810/syzkaller.nMd2gT/19/file0 supports timestamps until 2038 (0x7fffffff) [ 43.609844][ T471] attempt to access beyond end of device [ 43.609844][ T471] loop4: rw=2049, want=45104, limit=40427 [ 43.642994][ T23] audit: type=1400 audit(1718651322.469:205): avc: denied { mount } for pid=1100 comm="syz-executor.0" name="/" dev="tmpfs" ino=16031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.680269][ T23] audit: type=1400 audit(1718651322.499:206): avc: denied { create } for pid=1100 comm="syz-executor.0" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 43.696377][ T124] usb 3-1: device descriptor read/64, error 18 [ 43.719142][ T709] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 43.741250][ T23] audit: type=1400 audit(1718651322.549:207): avc: denied { rmdir } for pid=709 comm="syz-executor.0" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.764683][ T23] audit: type=1400 audit(1718651322.569:208): avc: denied { unmount } for pid=709 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.906388][ T408] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.995156][ T1114] cgroup: syz-executor.4 (1114) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 44.016396][ T124] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.016863][ T1114] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 44.118799][ T23] audit: type=1400 audit(1718651322.949:209): avc: denied { read } for pid=1119 comm="syz-executor.4" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.166424][ T408] usb 2-1: Using ep0 maxpacket: 8 [ 44.171415][ T23] audit: type=1400 audit(1718651322.979:210): avc: denied { open } for pid=1119 comm="syz-executor.4" path="/root/syzkaller-testdir1131209714/syzkaller.18xypr/43/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.251134][ T23] audit: type=1400 audit(1718651322.979:211): avc: denied { ioctl } for pid=1119 comm="syz-executor.4" path="/root/syzkaller-testdir1131209714/syzkaller.18xypr/43/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.286366][ T124] usb 3-1: device descriptor read/64, error 18 [ 44.313667][ T23] audit: type=1400 audit(1718651323.039:212): avc: denied { write } for pid=1111 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.336540][ T408] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 44.354503][ T408] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 44.365803][ T408] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 44.375335][ T408] usb 2-1: config 250 has no interface number 0 [ 44.381635][ T408] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 44.393222][ T408] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 44.403711][ T408] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 44.414087][ T408] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 44.427819][ T408] usb 2-1: config 250 interface 228 has no altsetting 0 [ 44.546559][ T408] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 44.555405][ T408] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 44.563776][ T408] usb 2-1: Product: syz [ 44.573644][ T408] usb 2-1: SerialNumber: syz [ 44.616940][ T408] hub 2-1:250.228: bad descriptor, ignoring hub [ 44.623021][ T408] hub: probe of 2-1:250.228 failed with error -5 [ 44.706371][ T124] usb 3-1: device descriptor read/64, error 18 [ 44.796566][ T1135] hub 6-0:1.0: USB hub found [ 44.801804][ T1135] hub 6-0:1.0: 1 port detected [ 44.935563][ T124] usb usb3-port1: attempt power cycle [ 44.967682][ T408] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 45.436396][ T124] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 45.626424][ T124] usb 3-1: device descriptor read/8, error -61 [ 45.812846][ T1155] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 45.822796][ T1155] ext4 filesystem being mounted at /root/syzkaller-testdir1131209714/syzkaller.18xypr/51/file0 supports timestamps until 2038 (0x7fffffff) [ 45.850286][ T471] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 45.966403][ T124] usb 3-1: device descriptor read/8, error -61 [ 46.108005][ T1166] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 46.236376][ T124] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 46.257175][ T18] usb 2-1: USB disconnect, device number 6 [ 46.267869][ T18] usblp0: removed [ 46.406460][ T124] usb 3-1: device descriptor read/8, error -61 [ 46.676451][ T124] usb 3-1: device descriptor read/8, error -61 [ 46.796451][ T124] usb usb3-port1: unable to enumerate USB device [ 46.826014][ T1169] overlayfs: statfs failed on './file0' [ 47.062055][ T1185] hub 6-0:1.0: USB hub found [ 47.067323][ T1185] hub 6-0:1.0: 1 port detected [ 47.158434][ T1182] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 47.158434][ T1182] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 47.158434][ T1182] [ 47.211113][ T1182] EXT4-fs (loop4): failed to initialize system zone (-117) [ 47.226416][ T1182] EXT4-fs (loop4): mount failed [ 47.508780][ T1191] sock: process `syz-executor.1' is using obsolete getsockopt SO_BSDCOMPAT [ 48.306438][ T124] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 48.542792][ T1205] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 48.556437][ T124] usb 1-1: Using ep0 maxpacket: 8 [ 48.676420][ T124] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 48.684486][ T124] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 48.706380][ T124] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 48.725347][ T124] usb 1-1: config 250 has no interface number 0 [ 48.730139][ T1207] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 48.733282][ T124] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 48.776367][ T124] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 48.794049][ T124] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 48.816488][ T124] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 48.846359][ T124] usb 1-1: config 250 interface 228 has no altsetting 0 [ 48.966449][ T124] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 48.975294][ T124] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 48.992591][ T124] usb 1-1: Product: syz [ 49.000449][ T124] usb 1-1: SerialNumber: syz [ 49.057003][ T124] hub 1-1:250.228: bad descriptor, ignoring hub [ 49.063084][ T124] hub: probe of 1-1:250.228 failed with error -5 [ 49.268359][ T124] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 49.442117][ T1208] overlayfs: statfs failed on './file0' [ 49.663082][ T367] usb 1-1: USB disconnect, device number 4 [ 49.666362][ C0] usblp0: nonzero read bulk status received: -71 [ 49.920077][ T1201] usblp0: removed [ 50.417812][ T121] cfg80211: failed to load regulatory.db [ 50.465658][ T23] kauditd_printk_skb: 9 callbacks suppressed [ 50.465666][ T23] audit: type=1400 audit(1718651329.289:222): avc: denied { write } for pid=1225 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.536364][ T23] audit: type=1326 audit(1718651329.349:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1229 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d58c94f29 code=0x0 [ 50.594987][ T1228] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.607245][ T1228] EXT4-fs error (device loop0): ext4_ext_check_inode:540: inode #4: comm syz-executor.0: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 50.645711][ T1228] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz-executor.0: Bad quota inode: 4, type: 1 [ 50.668250][ T1228] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.686506][ T1228] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 50.703116][ T1228] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 50.815282][ T23] audit: type=1400 audit(1718651329.639:224): avc: denied { create } for pid=1238 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.859182][ T23] audit: type=1400 audit(1718651329.669:225): avc: denied { connect } for pid=1238 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.901701][ T23] audit: type=1400 audit(1718651329.669:226): avc: denied { shutdown } for pid=1238 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.612456][ T1248] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 51.793778][ T1251] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 52.319793][ T1249] overlayfs: statfs failed on './file0' [ 52.626381][ T124] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 52.866377][ T124] usb 2-1: Using ep0 maxpacket: 8 [ 53.216424][ T124] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 53.234614][ T124] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 53.244690][ T124] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 53.264853][ T124] usb 2-1: config 250 has no interface number 0 [ 53.274958][ T124] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 53.287750][ T124] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 53.298360][ T124] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 53.310087][ T124] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 53.323655][ T124] usb 2-1: config 250 interface 228 has no altsetting 0 [ 53.446518][ T124] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 53.465493][ T124] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 53.485649][ T124] usb 2-1: Product: syz [ 53.490287][ T124] usb 2-1: SerialNumber: syz [ 53.536950][ T124] hub 2-1:250.228: bad descriptor, ignoring hub [ 53.546171][ T124] hub: probe of 2-1:250.228 failed with error -5 [ 53.760221][ T124] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 54.173655][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.197847][ T1275] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.205257][ T1275] device bridge_slave_0 entered promiscuous mode [ 54.236406][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.243246][ T1275] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.256917][ T1275] device bridge_slave_1 entered promiscuous mode [ 54.398944][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.405785][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.412928][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.419692][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.484128][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.500983][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.516845][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.540661][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.548783][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.555621][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.564250][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.572508][ T121] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.579364][ T121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.596454][ T732] device bridge_slave_1 left promiscuous mode [ 54.602461][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.610007][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.719952][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.732256][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.760792][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.771191][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.798619][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.815063][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.840802][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.851068][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.877525][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.885665][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.894837][ T124] usb 2-1: USB disconnect, device number 7 [ 54.904501][ T124] usblp0: removed [ 54.913113][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.921468][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.246368][ T367] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 55.686666][ T367] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 55.876528][ T367] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 55.885372][ T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.896486][ T409] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 55.916360][ T367] usb 1-1: Product: syz [ 55.920339][ T367] usb 1-1: Manufacturer: syz [ 55.924759][ T367] usb 1-1: SerialNumber: syz [ 56.179749][ T18] usb 1-1: USB disconnect, device number 5 [ 56.266518][ T409] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 56.287141][ T409] usb 2-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 56.306146][ T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.331215][ T409] usb 2-1: config 0 descriptor?? [ 56.367006][ T409] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 57.071281][ T367] usb 2-1: USB disconnect, device number 8 [ 57.194457][ T23] audit: type=1400 audit(1718651336.019:227): avc: denied { setopt } for pid=1293 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.760987][ T1314] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.770957][ T1314] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 58.797657][ T1314] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 58.811999][ T1314] System zones: 0-2, 18-18, 34-34 [ 58.826425][ T1314] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 58.862118][ T1314] EXT4-fs (loop0): 1 truncate cleaned up [ 58.873835][ T1314] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 59.636406][ T367] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 60.036525][ T367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 60.051639][ T23] audit: type=1400 audit(1718651338.889:228): avc: denied { mounton } for pid=1326 comm="syz-executor.1" path="/root/syzkaller-testdir1824805188/syzkaller.LIjLpH/37/file0" dev="sda1" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 60.089697][ T367] usb 1-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 60.106364][ T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.125140][ T367] usb 1-1: config 0 descriptor?? [ 60.139253][ T1328] JBD2: no valid journal superblock found [ 60.144808][ T1328] EXT4-fs (loop1): error loading journal [ 60.167084][ T367] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 60.872047][ T18] usb 1-1: USB disconnect, device number 6 [ 61.471383][ T1341] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 61.484092][ T1341] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 61.501593][ T1341] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.565281][ T1341] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 61.591506][ T1341] F2FS-fs (loop1): recover fsync data on readonly fs [ 61.608284][ T1341] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 61.615326][ T1341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 61.959635][ T1354] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 62.003583][ T1354] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 62.055686][ T1354] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 62.077022][ T1354] System zones: 1-12 [ 62.117366][ T1354] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 62.136547][ T1354] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 62.166567][ T1354] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue [ 62.816432][ T367] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 63.306431][ T367] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 63.327330][ T367] usb 1-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 63.345378][ T367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.364691][ T367] usb 1-1: config 0 descriptor?? [ 63.416982][ T367] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 63.565646][ T23] audit: type=1400 audit(1718651342.389:229): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=1009 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.607917][ T23] audit: type=1400 audit(1718651342.389:230): avc: denied { rename } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=1009 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.658260][ T23] audit: type=1400 audit(1718651342.389:231): avc: denied { create } for pid=144 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 63.837662][ T1387] FAT-fs (loop1): Directory bread(block 64) failed [ 63.846808][ T1387] FAT-fs (loop1): Directory bread(block 65) failed [ 63.856515][ T1387] FAT-fs (loop1): Directory bread(block 66) failed [ 63.862900][ T1387] FAT-fs (loop1): Directory bread(block 67) failed [ 63.886557][ T1387] FAT-fs (loop1): Directory bread(block 68) failed [ 63.896439][ T1387] FAT-fs (loop1): Directory bread(block 69) failed [ 63.902881][ T1387] FAT-fs (loop1): Directory bread(block 70) failed [ 63.916460][ T1387] FAT-fs (loop1): Directory bread(block 71) failed [ 63.922824][ T1387] FAT-fs (loop1): Directory bread(block 72) failed [ 63.945961][ T1387] FAT-fs (loop1): Directory bread(block 73) failed [ 64.149834][ T367] usb 1-1: USB disconnect, device number 7 [ 64.186850][ T1398] syz-executor.1 (1398): /proc/1395/oom_adj is deprecated, please use /proc/1395/oom_score_adj instead. [ 65.516365][ T367] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 65.886516][ T367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 65.908070][ T367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 65.929287][ T367] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.956384][ T367] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.975345][ T367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.001124][ T367] usb 2-1: config 0 descriptor?? [ 66.016488][ T1421] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 66.474165][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.485660][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.503884][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.519517][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.535068][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.550646][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.566204][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.581687][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.596392][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.612830][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.628435][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.643834][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.660270][ T367] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 66.676206][ T367] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 66.702938][ T367] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 66.722846][ T367] usb 2-1: USB disconnect, device number 9 [ 67.301567][ T1443] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 67.310905][ T1443] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 67.458322][ T1445] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 67.471968][ T1445] FAT-fs (loop1): Filesystem has been set read-only [ 67.577768][ T1448] FAT-fs (loop1): Directory bread(block 64) failed [ 67.593357][ T1448] FAT-fs (loop1): Directory bread(block 65) failed [ 67.613543][ T1448] FAT-fs (loop1): Directory bread(block 66) failed [ 67.640216][ T1448] FAT-fs (loop1): Directory bread(block 67) failed [ 67.670268][ T1448] FAT-fs (loop1): Directory bread(block 68) failed [ 67.683799][ T1448] FAT-fs (loop1): Directory bread(block 69) failed [ 67.703740][ T1448] FAT-fs (loop1): Directory bread(block 70) failed [ 67.725608][ T1448] FAT-fs (loop1): Directory bread(block 71) failed [ 67.736487][ T1448] FAT-fs (loop1): Directory bread(block 72) failed [ 67.747680][ T1448] FAT-fs (loop1): Directory bread(block 73) failed [ 67.814675][ T7] attempt to access beyond end of device [ 67.814675][ T7] loop1: rw=1, want=1236, limit=256 [ 67.958121][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.965004][ T1452] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.995157][ T1452] device bridge_slave_0 entered promiscuous mode [ 68.029412][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.036250][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.063319][ T1452] device bridge_slave_1 entered promiscuous mode [ 68.186031][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.192891][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.200052][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.206904][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.239714][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.260176][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.276002][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.292375][ T732] device bridge_slave_1 left promiscuous mode [ 68.298560][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.315240][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.469500][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.482057][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.488925][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.506428][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.514585][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.521447][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.567677][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.575618][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.619759][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.636803][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.666637][ T647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.678074][ T647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.694784][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.715125][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.735775][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.747614][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.765677][ T647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.774241][ T647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.914484][ T23] audit: type=1400 audit(1718651347.739:232): avc: denied { read } for pid=1474 comm="syz-executor.1" dev="nsfs" ino=4026532446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 68.942060][ T1475] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.958283][ T23] audit: type=1400 audit(1718651347.769:233): avc: denied { open } for pid=1474 comm="syz-executor.1" path="net:[4026532446]" dev="nsfs" ino=4026532446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.004120][ T1477] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 69.019214][ T1477] FAT-fs (loop2): Filesystem has been set read-only [ 69.026703][ T23] audit: type=1400 audit(1718651347.839:234): avc: denied { setopt } for pid=1480 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.059931][ T1481] input: syz1 as /devices/virtual/input/input4 [ 69.074520][ T23] audit: type=1400 audit(1718651347.879:235): avc: denied { write } for pid=1480 comm="syz-executor.1" name="uinput" dev="devtmpfs" ino=9245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.103999][ T23] audit: type=1400 audit(1718651347.899:236): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=18374 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.127088][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 69.134594][ T23] audit: type=1400 audit(1718651347.899:237): avc: denied { open } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=18374 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.158253][ T23] audit: type=1400 audit(1718651347.899:238): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=18374 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.193191][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.204613][ T1479] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.218180][ T1479] device bridge_slave_0 entered promiscuous mode [ 69.246006][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.261502][ T1479] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.270765][ T1479] device bridge_slave_1 entered promiscuous mode [ 69.291703][ T23] audit: type=1400 audit(1718651348.119:239): avc: denied { bind } for pid=1493 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.316485][ T1495] Bluetooth: hci0: sending frame failed (-49) [ 69.349295][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.356149][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.363279][ T1479] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.370050][ T1479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.402615][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.410857][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.418166][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.441094][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.450016][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.456860][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.464677][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.473776][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.480619][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.487821][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.506516][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.517971][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.526712][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.534425][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.547360][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.559553][ T13] usb 1-1: config 0 descriptor?? [ 69.579846][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.588404][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.611447][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.619780][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.628490][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.637174][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.645341][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.653653][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.808146][ T732] device bridge_slave_1 left promiscuous mode [ 69.814100][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.822578][ T732] device bridge_slave_0 left promiscuous mode [ 69.828994][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.047684][ T13] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x2 [ 70.057488][ T13] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 70.064674][ T13] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 70.071947][ T13] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 70.087176][ T13] plantronics 0003:047F:FFFF.0007: unbalanced collection at end of report description [ 70.102970][ T13] plantronics 0003:047F:FFFF.0007: parse failed [ 70.126387][ T13] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22 [ 70.265158][ T414] usb 1-1: USB disconnect, device number 8 [ 70.651670][ T23] audit: type=1400 audit(1718651349.479:240): avc: denied { unmount } for pid=1479 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 70.836233][ T1524] FAT-fs (loop3): Directory bread(block 64) failed [ 70.845014][ T1524] FAT-fs (loop3): Directory bread(block 65) failed [ 70.853770][ T1524] FAT-fs (loop3): Directory bread(block 66) failed [ 70.863082][ T1524] FAT-fs (loop3): Directory bread(block 67) failed [ 70.873200][ T1524] FAT-fs (loop3): Directory bread(block 68) failed [ 70.879615][ T1524] FAT-fs (loop3): Directory bread(block 69) failed [ 70.886229][ T1524] FAT-fs (loop3): Directory bread(block 70) failed [ 70.892735][ T1524] FAT-fs (loop3): Directory bread(block 71) failed [ 70.899412][ T1524] FAT-fs (loop3): Directory bread(block 72) failed [ 70.905854][ T1524] FAT-fs (loop3): Directory bread(block 73) failed [ 71.111564][ T732] attempt to access beyond end of device [ 71.111564][ T732] loop3: rw=1, want=1236, limit=256 [ 71.182061][ T1533] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) [ 71.302511][ T1540] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.366596][ T367] Bluetooth: hci0: command 0x1003 tx timeout [ 71.372432][ T1495] Bluetooth: hci0: sending frame failed (-49) [ 71.455977][ T1544] input: syz1 as /devices/virtual/input/input5 [ 71.462246][ T1546] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.600290][ T1554] FAT-fs (loop1): Directory bread(block 64) failed [ 71.607021][ T1554] FAT-fs (loop1): Directory bread(block 65) failed [ 71.613529][ T1554] FAT-fs (loop1): Directory bread(block 66) failed [ 71.620600][ T1554] FAT-fs (loop1): Directory bread(block 67) failed [ 71.627173][ T1554] FAT-fs (loop1): Directory bread(block 68) failed [ 71.634455][ T1554] FAT-fs (loop1): Directory bread(block 69) failed [ 71.641125][ T1554] FAT-fs (loop1): Directory bread(block 70) failed [ 71.662103][ T1554] FAT-fs (loop1): Directory bread(block 71) failed [ 71.668626][ T1554] FAT-fs (loop1): Directory bread(block 72) failed [ 71.677059][ T1554] FAT-fs (loop1): Directory bread(block 73) failed [ 71.712071][ T1568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.778145][ T732] attempt to access beyond end of device [ 71.778145][ T732] loop1: rw=1, want=1236, limit=256 [ 72.774122][ T1592] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.781093][ T1592] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.788576][ T1592] device bridge_slave_0 entered promiscuous mode [ 72.805604][ T1592] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.812936][ T1592] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.880556][ T1609] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 72.889914][ T1609] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 72.909941][ T1592] device bridge_slave_1 entered promiscuous mode [ 73.045075][ T1592] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.051932][ T1592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.059101][ T1592] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.065922][ T1592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.098694][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.106098][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.117546][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.124900][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.136289][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.144621][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.151461][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.159352][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.167877][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.174724][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.191761][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.212237][ T23] audit: type=1400 audit(1718651352.039:241): avc: denied { write } for pid=1613 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.216138][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.271626][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.287502][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.302857][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.326217][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.345125][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.416638][ T732] device bridge_slave_1 left promiscuous mode [ 73.422626][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.439082][ T732] device bridge_slave_0 left promiscuous mode [ 73.446235][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.448774][ T18] Bluetooth: hci0: command 0x1001 tx timeout [ 73.460865][ T1495] Bluetooth: hci0: sending frame failed (-49) [ 73.716467][ T124] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.930283][ T23] audit: type=1400 audit(1718651352.759:242): avc: denied { lock } for pid=1666 comm="syz-executor.1" path="socket:[21220]" dev="sockfs" ino=21220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 73.954671][ T23] audit: type=1400 audit(1718651352.789:243): avc: denied { relabelfrom } for pid=1667 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.975184][ T23] audit: type=1400 audit(1718651352.789:244): avc: denied { relabelto } for pid=1667 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 74.002198][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 74.010313][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 74.018150][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 74.025999][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 74.033965][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 74.041862][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 74.049760][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 74.074321][ T23] audit: type=1400 audit(1718651352.899:245): avc: denied { getopt } for pid=1671 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.106472][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.117213][ T124] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.132206][ T124] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.141195][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.150080][ T124] usb 5-1: config 0 descriptor?? [ 74.197977][ T23] audit: type=1400 audit(1718651353.029:246): avc: denied { setopt } for pid=1676 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.280458][ T1682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.676444][ T124] usbhid 5-1:0.0: can't add hid device: -71 [ 74.682186][ T124] usbhid: probe of 5-1:0.0 failed with error -71 [ 74.689033][ T124] usb 5-1: USB disconnect, device number 5 [ 74.721801][ T1687] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 74.996431][ T409] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.064748][ T23] audit: type=1400 audit(1718651353.889:247): avc: denied { read } for pid=1708 comm="syz-executor.4" name="rtc0" dev="devtmpfs" ino=9246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.088460][ T23] audit: type=1400 audit(1718651353.889:248): avc: denied { open } for pid=1708 comm="syz-executor.4" path="/dev/rtc0" dev="devtmpfs" ino=9246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.112411][ T23] audit: type=1400 audit(1718651353.889:249): avc: denied { ioctl } for pid=1708 comm="syz-executor.4" path="/dev/rtc0" dev="devtmpfs" ino=9246 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.138269][ T23] audit: type=1400 audit(1718651353.919:250): avc: denied { audit_write } for pid=1711 comm="syz-executor.4" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.211877][ T1715] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.334584][ T23] audit: type=1400 audit(1718651354.159:251): avc: denied { read } for pid=1719 comm="syz-executor.0" name="usbmon0" dev="devtmpfs" ino=860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.396445][ T409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 75.405937][ T409] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 75.526513][ T414] Bluetooth: hci0: command 0x1009 tx timeout [ 75.566448][ T409] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 75.575338][ T409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.583150][ T409] usb 4-1: Product: syz [ 75.587131][ T409] usb 4-1: Manufacturer: syz [ 75.591501][ T409] usb 4-1: SerialNumber: syz [ 75.596624][ T409] usb 4-1: config 0 descriptor?? [ 75.856916][ T409] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 75.864724][ T409] usb 4-1: USB disconnect, device number 4 [ 76.156373][ T398] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 76.307885][ T1742] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,i_version,,errors=continue [ 76.318023][ T1742] ext4 filesystem being mounted at /root/syzkaller-testdir1336173622/syzkaller.uk50Cn/52/file0 supports timestamps until 2038 (0x7fffffff) [ 76.387698][ T1747] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 76.419010][ T1747] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2930: inode #16: comm syz-executor.0: corrupted xattr block 8 [ 76.431385][ T1747] EXT4-fs (loop0): Remounting filesystem read-only [ 76.437917][ T1747] EXT4-fs warning (device loop0): ext4_evict_inode:321: xattr delete (err -117) [ 76.446986][ T1747] EXT4-fs (loop0): 1 orphan inode deleted [ 76.456578][ T1747] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,noquota,nouid32,auto_da_alloc=0x0000000000000000,nomblk_io_submit,journal_dev=0x0000000000000003,barrier,delalloc,usrquota, [ 76.476445][ T1747] ext4 filesystem being mounted at /root/syzkaller-testdir1336173622/syzkaller.uk50Cn/53/file1 supports timestamps until 2038 (0x7fffffff) [ 76.526498][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.537437][ T398] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.550309][ T398] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.559263][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.570446][ T398] usb 2-1: config 0 descriptor?? [ 77.202803][ T409] Bluetooth: hci1: command 0x1003 tx timeout [ 77.208704][ T1713] Bluetooth: hci1: sending frame failed (-49) [ 77.346495][ T398] usbhid 2-1:0.0: can't add hid device: -71 [ 77.352310][ T398] usbhid: probe of 2-1:0.0 failed with error -71 [ 77.360967][ T398] usb 2-1: USB disconnect, device number 10 [ 77.897766][ T1779] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,i_version,,errors=continue [ 77.907947][ T1779] ext4 filesystem being mounted at /root/syzkaller-testdir1824805188/syzkaller.LIjLpH/108/file0 supports timestamps until 2038 (0x7fffffff) [ 79.003417][ T1813] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.028023][ T1813] EXT4-fs error (device loop1): ext4_orphan_get:1236: inode #17: comm syz-executor.1: iget: bad i_size value: -6917529027641081756 [ 79.041520][ T1813] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz-executor.1: couldn't read orphan inode 17 (err -117) [ 79.054120][ T1813] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 79.065378][ T1813] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz-executor.1: bg 0: block 65: padding at end of block bitmap is not set [ 79.080252][ T1813] __quota_error: 6 callbacks suppressed [ 79.080299][ T1813] Quota error (device loop1): write_blk: dquota write failed [ 79.093148][ T1813] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 79.103821][ T1813] Quota error (device loop1): find_tree_dqentry: Getting block too big (16777216 >= 8) [ 79.113412][ T1813] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 184549898 [ 79.124754][ T23] audit: type=1400 audit(1718651357.949:258): avc: denied { read } for pid=1820 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.176623][ T1824] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.365214][ T18] Bluetooth: hci1: command 0x1001 tx timeout [ 79.371558][ T1713] Bluetooth: hci1: sending frame failed (-49) [ 79.536434][ T18] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 79.544520][ T23] audit: type=1326 audit(1718651358.369:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9076183f29 code=0x7ffc0000 [ 79.568537][ T23] audit: type=1326 audit(1718651358.379:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9076183f29 code=0x7ffc0000 [ 79.592273][ T23] audit: type=1326 audit(1718651358.379:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9076183f29 code=0x7ffc0000 [ 79.615939][ T23] audit: type=1326 audit(1718651358.379:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9076183f29 code=0x7ffc0000 [ 79.616727][ T1836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pid=1836 comm=syz-executor.3 [ 79.639812][ T23] audit: type=1326 audit(1718651358.379:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1834 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9076183f29 code=0x7ffc0000 [ 79.715276][ T1835] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 79.956626][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.967735][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.978952][ T18] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 79.988761][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.014808][ T18] usb 2-1: config 0 descriptor?? [ 80.050750][ T1848] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.228093][ T1867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pid=1867 comm=syz-executor.2 [ 80.308286][ T1866] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 80.508050][ T18] elecom 0003:056E:010C.0008: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 80.528284][ T1877] erofs: (device loop2): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 80.715525][ T414] usb 2-1: USB disconnect, device number 11 [ 81.014825][ T1885] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.146415][ T124] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 81.446403][ T414] Bluetooth: hci1: command 0x1009 tx timeout [ 81.726720][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 81.736391][ T124] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 81.906611][ T124] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 81.925421][ T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.933465][ T124] usb 3-1: Product: syz [ 81.937582][ T124] usb 3-1: Manufacturer: syz [ 81.941997][ T124] usb 3-1: SerialNumber: syz [ 82.166001][ T124] usb 3-1: config 0 descriptor?? [ 82.527246][ T124] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 82.534976][ T124] usb 3-1: USB disconnect, device number 7 [ 82.806424][ T398] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.986377][ T414] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 83.073919][ T1932] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.076700][ T398] usb 4-1: Using ep0 maxpacket: 8 [ 83.198024][ T398] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.286546][ T398] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.295561][ T398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 83.303402][ T398] usb 4-1: SerialNumber: syz [ 83.347476][ T398] cdc_ether 4-1:1.0: skipping garbage [ 83.352722][ T398] cdc_ether 4-1:1.0: invalid descriptor buffer length [ 83.359346][ T398] usb 4-1: bad CDC descriptors [ 83.366612][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.378179][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.387810][ T414] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 83.396643][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.405449][ T414] usb 2-1: config 0 descriptor?? [ 83.406380][ T124] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 83.549399][ T409] usb 4-1: USB disconnect, device number 5 [ 83.776418][ T124] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.786468][ T124] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.797459][ T124] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 83.888722][ T414] elecom 0003:056E:010C.0009: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.1-1/input0 [ 83.966403][ T124] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.975233][ T124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.981733][ T1951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.996387][ T124] usb 1-1: Product: syz [ 84.000356][ T124] usb 1-1: Manufacturer: syz [ 84.016352][ T124] usb 1-1: SerialNumber: syz [ 84.050784][ T1951] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 84.057036][ T124] usb 1-1: selecting invalid altsetting 1 [ 84.059812][ T1951] ext4 filesystem being mounted at /root/syzkaller-testdir4253773954/syzkaller.2PusuZ/21/file0 supports timestamps until 2038 (0x7fffffff) [ 84.508315][ T124] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 84.514143][ T124] cdc_ncm 1-1:1.0: bind() failure [ 84.527600][ T124] cdc_ncm 1-1:1.1: bind() failure [ 84.539669][ T124] usb 1-1: USB disconnect, device number 9 [ 84.714034][ T23] kauditd_printk_skb: 104 callbacks suppressed [ 84.714042][ T23] audit: type=1326 audit(1718651363.539:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d58c94f29 code=0x7ffc0000 [ 84.746067][ T23] audit: type=1326 audit(1718651363.569:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d58c94f29 code=0x7ffc0000 [ 84.770183][ T409] usb 2-1: USB disconnect, device number 12 [ 84.776360][ T23] audit: type=1326 audit(1718651363.569:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d58c94f29 code=0x7ffc0000 [ 84.802071][ T1966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pid=1966 comm=syz-executor.1 [ 84.805266][ T23] audit: type=1326 audit(1718651363.569:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4d58c94f29 code=0x7ffc0000 [ 84.840041][ T23] audit: type=1326 audit(1718651363.569:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d58c94f29 code=0x7ffc0000 [ 84.864705][ T23] audit: type=1326 audit(1718651363.569:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1964 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4d58c94f29 code=0x7ffc0000 [ 84.893244][ T1966] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 85.032559][ T1968] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 85.036096][ T23] audit: type=1400 audit(1718651363.859:374): avc: denied { connect } for pid=1970 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.077645][ T1973] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.079669][ T23] audit: type=1400 audit(1718651363.899:375): avc: denied { write } for pid=1970 comm="syz-executor.3" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 85.087745][ T1973] tipc: Enabling of bearer rejected, failed to enable media [ 85.291299][ T23] audit: type=1400 audit(1718651364.099:376): avc: denied { mount } for pid=1977 comm="syz-executor.0" name="/" dev="configfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 85.349794][ T1975] FAT-fs (loop3): Directory bread(block 64) failed [ 85.388000][ T1975] FAT-fs (loop3): Directory bread(block 65) failed [ 85.396955][ T1975] FAT-fs (loop3): Directory bread(block 66) failed [ 85.401223][ T23] audit: type=1400 audit(1718651364.119:377): avc: denied { write } for pid=1977 comm="syz-executor.0" name="/" dev="configfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.403901][ T1975] FAT-fs (loop3): Directory bread(block 67) failed [ 85.432023][ T1975] FAT-fs (loop3): Directory bread(block 68) failed [ 85.438664][ T1975] FAT-fs (loop3): Directory bread(block 69) failed [ 85.445006][ T1975] FAT-fs (loop3): Directory bread(block 70) failed [ 85.451376][ T1975] FAT-fs (loop3): Directory bread(block 71) failed [ 85.457856][ T1975] FAT-fs (loop3): Directory bread(block 72) failed [ 85.464162][ T1975] FAT-fs (loop3): Directory bread(block 73) failed [ 85.983198][ T2010] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.992378][ T2010] tipc: Enabling of bearer rejected, failed to enable media [ 86.101503][ T2015] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 86.214375][ T2015] erofs: (device loop4): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 86.224103][ T2015] erofs: (device loop4): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 86.905001][ T2018] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.926743][ T74] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 86.985109][ T1997] F2FS-fs (loop3): invalid crc value [ 86.999369][ T1997] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.108823][ T1997] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 87.140327][ T1479] attempt to access beyond end of device [ 87.140327][ T1479] loop3: rw=2049, want=45104, limit=40427 [ 87.169561][ T2030] FAT-fs (loop2): Directory bread(block 64) failed [ 87.175883][ T2030] FAT-fs (loop2): Directory bread(block 65) failed [ 87.190302][ T2030] FAT-fs (loop2): Directory bread(block 66) failed [ 87.196694][ T2030] FAT-fs (loop2): Directory bread(block 67) failed [ 87.203174][ T2030] FAT-fs (loop2): Directory bread(block 68) failed [ 87.209673][ T2030] FAT-fs (loop2): Directory bread(block 69) failed [ 87.216026][ T2030] FAT-fs (loop2): Directory bread(block 70) failed [ 87.222564][ T2030] FAT-fs (loop2): Directory bread(block 71) failed [ 87.229169][ T2030] FAT-fs (loop2): Directory bread(block 72) failed [ 87.235470][ T2030] FAT-fs (loop2): Directory bread(block 73) failed [ 87.326451][ T74] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.336471][ T74] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.347349][ T74] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 87.386407][ T367] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 87.536443][ T74] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.545381][ T74] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.553212][ T74] usb 2-1: Product: syz [ 87.557249][ T74] usb 2-1: Manufacturer: syz [ 87.561662][ T74] usb 2-1: SerialNumber: syz [ 87.744484][ T409] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 87.766918][ T74] usb 2-1: selecting invalid altsetting 1 [ 87.786480][ T367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.797187][ T367] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.806741][ T367] usb 5-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 87.815553][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.824261][ T367] usb 5-1: config 0 descriptor?? [ 88.116442][ T409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 88.125946][ T409] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 88.196501][ T74] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 88.202382][ T74] cdc_ncm 2-1:1.0: bind() failure [ 88.208126][ T74] cdc_ncm 2-1:1.1: bind() failure [ 88.213936][ T74] usb 2-1: USB disconnect, device number 13 [ 88.286484][ T409] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 88.301156][ T409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.309287][ T367] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0 [ 88.316126][ T367] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0 [ 88.317067][ T409] usb 1-1: Product: syz [ 88.324021][ T367] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0 [ 88.333904][ T367] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0 [ 88.340704][ T367] hid-rmi 0003:17EF:6085.000A: unknown main item tag 0x0 [ 88.349424][ T367] hid-rmi 0003:17EF:6085.000A: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.4-1/input0 [ 88.364567][ T409] usb 1-1: Manufacturer: syz [ 88.369010][ T409] usb 1-1: SerialNumber: syz [ 88.373942][ T409] usb 1-1: config 0 descriptor?? [ 88.457459][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.499890][ T2058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2058 comm=syz-executor.2 [ 88.511365][ T124] usb 5-1: USB disconnect, device number 6 [ 88.627498][ T2063] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.636909][ T409] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 88.648520][ T2063] EXT4-fs error (device loop2): ext4_orphan_get:1236: inode #17: comm syz-executor.2: iget: bad i_size value: -6917529027641081756 [ 88.650005][ T409] usb 1-1: USB disconnect, device number 10 [ 88.667860][ T2063] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 17 (err -117) [ 88.680073][ T2063] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 88.695245][ T2063] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 65: padding at end of block bitmap is not set [ 88.819238][ T2068] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 88.881707][ T2068] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 88.891409][ T2068] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 89.008468][ T2075] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.247424][ T2099] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.258005][ T2099] EXT4-fs error (device loop2): __ext4_iget:5217: inode #15: block 1627517706: comm syz-executor.2: invalid block [ 90.270103][ T2099] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 90.286516][ T2099] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 90.305059][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 90.305068][ T23] audit: type=1400 audit(1718651369.129:379): avc: denied { view } for pid=2098 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.543521][ T409] Bluetooth: hci0: command 0x1003 tx timeout [ 90.549484][ T96] Bluetooth: hci0: sending frame failed (-49) [ 90.604808][ T23] audit: type=1400 audit(1718651369.429:380): avc: denied { create } for pid=2110 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 90.856436][ T647] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.866395][ T409] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 91.222877][ T2125] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 91.436465][ T409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.447182][ T409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.456733][ T409] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 91.465545][ T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.474062][ T409] usb 1-1: config 0 descriptor?? [ 91.476423][ T647] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.488768][ T647] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.499417][ T647] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 91.622718][ T121] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 91.676441][ T647] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.685279][ T647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.693358][ T647] usb 3-1: Product: syz [ 91.697470][ T647] usb 3-1: Manufacturer: syz [ 91.701869][ T647] usb 3-1: SerialNumber: syz [ 91.746907][ T647] usb 3-1: selecting invalid altsetting 1 [ 91.754092][ T2131] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.777989][ T2131] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.850104][ T1592] attempt to access beyond end of device [ 91.850104][ T1592] loop4: rw=2049, want=45104, limit=40427 [ 91.967663][ T409] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 91.974525][ T409] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 91.981529][ T409] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 91.988479][ T409] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 91.995214][ T409] hid-rmi 0003:17EF:6085.000B: unknown main item tag 0x0 [ 92.003205][ T409] hid-rmi 0003:17EF:6085.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.0-1/input0 [ 92.016903][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 92.026371][ T121] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 92.170812][ T18] usb 1-1: USB disconnect, device number 11 [ 92.186492][ T647] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 92.186501][ T121] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 92.186514][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.192425][ T647] cdc_ncm 3-1:1.0: bind() failure [ 92.202661][ T121] usb 2-1: Product: syz [ 92.213694][ T647] cdc_ncm 3-1:1.1: bind() failure [ 92.214592][ T121] usb 2-1: Manufacturer: syz [ 92.228733][ T121] usb 2-1: SerialNumber: syz [ 92.231283][ T647] usb 3-1: USB disconnect, device number 8 [ 92.234633][ T121] usb 2-1: config 0 descriptor?? [ 92.279190][ T23] audit: type=1400 audit(1718651371.109:381): avc: denied { write } for pid=2152 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.341715][ T23] audit: type=1400 audit(1718651371.169:382): avc: denied { execmem } for pid=2156 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 92.647646][ T124] Bluetooth: hci0: command 0x1001 tx timeout [ 92.653737][ T121] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 92.660539][ T96] Bluetooth: hci0: sending frame failed (-49) [ 92.661769][ T121] usb 2-1: USB disconnect, device number 14 [ 92.917386][ T2163] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 93.171699][ T23] audit: type=1400 audit(1718651371.999:383): avc: denied { create } for pid=2162 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 93.192354][ T2163] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 198) [ 93.245608][ T23] audit: type=1400 audit(1718651372.069:384): avc: denied { relabelfrom } for pid=2173 comm="syz-executor.4" name="NFC_RAW" dev="sockfs" ino=24705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.245658][ T2174] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 93.279259][ T23] audit: type=1400 audit(1718651372.109:385): avc: denied { relabelto } for pid=2173 comm="syz-executor.4" name="NFC_RAW" dev="sockfs" ino=24705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=nfc_socket permissive=1 trawcon="system_u:object_r:ssh_keysign_exec_t:s0" [ 93.464131][ T2189] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.486365][ T398] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 93.796396][ T647] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 93.814782][ T23] audit: type=1400 audit(1718651372.639:386): avc: denied { create } for pid=2201 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.835150][ T23] audit: type=1400 audit(1718651372.649:387): avc: denied { write } for pid=2201 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.855928][ T23] audit: type=1400 audit(1718651372.649:388): avc: denied { nlmsg_write } for pid=2201 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 93.996504][ T398] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 94.006432][ T398] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.166460][ T398] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.175315][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.183144][ T647] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.193046][ T647] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.203689][ T398] usb 3-1: Product: syz [ 94.207669][ T398] usb 3-1: Manufacturer: syz [ 94.212071][ T398] usb 3-1: SerialNumber: syz [ 94.216540][ T647] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 94.277457][ T2217] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 94.334712][ T2217] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 94.344434][ T2217] erofs: (device loop1): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 94.396428][ T647] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.405392][ T647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.413277][ T647] usb 5-1: Product: syz [ 94.417304][ T647] usb 5-1: Manufacturer: syz [ 94.421719][ T647] usb 5-1: SerialNumber: syz [ 94.460252][ T2220] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.567029][ T647] usb 5-1: selecting invalid altsetting 1 [ 94.726609][ T74] Bluetooth: hci0: command 0x1009 tx timeout [ 94.806579][ T398] usb 3-1: 0:2 : does not exist [ 94.818052][ T398] usb 3-1: USB disconnect, device number 9 [ 95.006568][ T647] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 95.012417][ T647] cdc_ncm 5-1:1.0: bind() failure [ 95.018665][ T647] cdc_ncm 5-1:1.1: bind() failure [ 95.031055][ T647] usb 5-1: USB disconnect, device number 7 [ 95.321379][ T2265] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 95.331279][ T2265] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.342809][ T2265] F2FS-fs (loop1): invalid crc value [ 95.349589][ T2265] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.391925][ T2265] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 95.400244][ T2265] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.433417][ T732] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 95.442150][ T732] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 95.506668][ T2287] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 95.598655][ T2287] erofs: (device loop2): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 95.608284][ T2287] erofs: (device loop2): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 95.724531][ T2297] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.579753][ T2321] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 96.709331][ T2319] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.717096][ T2319] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.737018][ T2319] F2FS-fs (loop2): invalid crc value [ 96.761626][ T2319] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.872968][ T2319] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.879890][ T2319] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.902268][ T406] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 96.911123][ T406] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 96.926410][ T380] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 97.159704][ T2340] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 97.168511][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 97.168519][ T23] audit: type=1400 audit(1718651375.999:391): avc: denied { mounton } for pid=2342 comm="syz-executor.2" path="/proc/2342/task" dev="proc" ino=24283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 97.197144][ T23] audit: type=1400 audit(1718651375.999:392): avc: denied { mount } for pid=2342 comm="syz-executor.2" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 97.274637][ T2340] erofs: (device loop4): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 97.284270][ T2340] erofs: (device loop4): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 97.346502][ T380] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.356792][ T380] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 97.401415][ T2351] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.556494][ T380] usb 2-1: Dual-Role OTG device on HNP port [ 97.576399][ T380] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.585299][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.593424][ T380] usb 2-1: Product: syz [ 97.597589][ T380] usb 2-1: Manufacturer: syz [ 97.602007][ T380] usb 2-1: SerialNumber: syz [ 97.646953][ T380] cdc_ether 2-1:1.0: skipping garbage [ 97.652168][ T380] usb 2-1: bad CDC descriptors [ 97.849846][ T2300] usb 2-1: USB disconnect, device number 15 [ 98.313463][ T2373] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue [ 98.325759][ T2373] ext4 filesystem being mounted at /root/syzkaller-testdir4253773954/syzkaller.2PusuZ/49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 98.436556][ T2386] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 98.557201][ T2395] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,discard,max_batch_time=0x0000000004000000,block_validity,i_version,bsddf,min_batch_time=0x0000000000000008,max_batch_time=0x0000000000000006,noquota,stripe=0x00000000000000ff,discard,errors=continue [ 98.769109][ T2406] overlayfs: missing 'lowerdir' [ 98.916398][ T647] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 98.967811][ T2413] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 99.046761][ T2419] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 99.065654][ T2409] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.078981][ T2409] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.093857][ T2409] device bridge_slave_0 entered promiscuous mode [ 99.109132][ T2409] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.123502][ T2409] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.132318][ T2409] device bridge_slave_1 entered promiscuous mode [ 99.179401][ T2419] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 198) [ 99.234120][ T2409] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.240992][ T2409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.248099][ T2409] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.254838][ T2409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.276418][ T647] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.284944][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.297588][ T647] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 99.310400][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.317959][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.337435][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.345344][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.352084][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.359749][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.367590][ T398] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.375080][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.381925][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.389583][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.397684][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.415468][ T2300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.426011][ T2300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.452918][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.463084][ T732] device bridge_slave_1 left promiscuous mode [ 99.470334][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.478662][ T732] device bridge_slave_0 left promiscuous mode [ 99.484568][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.486442][ T647] usb 3-1: Dual-Role OTG device on HNP port [ 99.516379][ T647] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.525262][ T647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.533051][ T647] usb 3-1: Product: syz [ 99.537168][ T647] usb 3-1: Manufacturer: syz [ 99.541585][ T647] usb 3-1: SerialNumber: syz [ 99.586849][ T647] cdc_ether 3-1:1.0: skipping garbage [ 99.592069][ T647] usb 3-1: bad CDC descriptors [ 99.605255][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.624766][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.729863][ T23] audit: type=1400 audit(1718651378.559:393): avc: denied { write } for pid=2454 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 99.750463][ T398] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 99.751125][ T23] audit: type=1400 audit(1718651378.559:394): avc: denied { nlmsg_read } for pid=2454 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 99.760437][ T647] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 99.793504][ T23] audit: type=1400 audit(1718651378.619:395): avc: denied { read } for pid=2457 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.800275][ T398] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.859793][ T367] usb 3-1: USB disconnect, device number 10 [ 99.869753][ T23] audit: type=1400 audit(1718651378.679:396): avc: denied { read } for pid=2457 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 100.006501][ T2478] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue [ 100.018686][ T2478] ext4 filesystem being mounted at /root/syzkaller-testdir207888887/syzkaller.hrsqeq/5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 100.036428][ T398] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.062844][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.073917][ T398] usb 5-1: Product: syz [ 100.086565][ T398] usb 5-1: Manufacturer: syz [ 100.090950][ T398] usb 5-1: SerialNumber: syz [ 100.236484][ T647] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.247485][ T647] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.257415][ T647] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 100.266415][ T647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.274867][ T647] usb 2-1: config 0 descriptor?? [ 100.346449][ T23] audit: type=1400 audit(1718651379.179:397): avc: denied { create } for pid=2506 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 100.616494][ T398] usb 5-1: 0:2 : does not exist [ 100.633525][ T398] usb 5-1: USB disconnect, device number 8 [ 100.737081][ T2520] overlayfs: missing 'lowerdir' [ 100.756631][ T647] hid (null): bogus close delimiter [ 100.800961][ T2565] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 100.976422][ T647] usb 2-1: language id specifier not provided by device, defaulting to English [ 100.990609][ T2574] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.277830][ T2584] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.284666][ T2584] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.292479][ T2584] device bridge_slave_0 entered promiscuous mode [ 101.303932][ T2584] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.310890][ T2584] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.318417][ T2584] device bridge_slave_1 entered promiscuous mode [ 101.330946][ T2583] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 101.344320][ T2583] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 101.355678][ T2583] F2FS-fs (loop3): invalid crc value [ 101.362458][ T2583] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.421083][ T2583] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 101.422092][ T2584] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.428250][ T2583] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.434766][ T2584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.434873][ T2584] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.455950][ T2584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.466487][ T647] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 101.481275][ T647] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 101.497443][ T647] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 101.513538][ T647] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 101.524988][ T647] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 101.538875][ T647] usb 2-1: USB disconnect, device number 16 [ 101.556883][ T2582] attempt to access beyond end of device [ 101.556883][ T2582] loop3: rw=2049, want=78592, limit=40427 [ 101.582440][ T2300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.584039][ T2583] attempt to access beyond end of device [ 101.584039][ T2583] loop3: rw=2049, want=81920, limit=40427 [ 101.601095][ T2300] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.608899][ T2300] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.809440][ T2603] attempt to access beyond end of device [ 101.809440][ T2603] loop3: rw=2049, want=52200, limit=40427 [ 101.862855][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.871122][ T2607] overlayfs: missing 'lowerdir' [ 101.874118][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.882657][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.892052][ T2583] attempt to access beyond end of device [ 101.892052][ T2583] loop3: rw=2049, want=53248, limit=40427 [ 101.903208][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.907144][ T2583] attempt to access beyond end of device [ 101.907144][ T2583] loop3: rw=2049, want=58016, limit=40427 [ 101.912804][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.923121][ T2600] attempt to access beyond end of device [ 101.923121][ T2600] loop3: rw=2049, want=77832, limit=40427 [ 101.928875][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.960130][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.968439][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.976680][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.984584][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.008899][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.017163][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.021344][ T406] attempt to access beyond end of device [ 102.021344][ T406] loop3: rw=1, want=77832, limit=40427 [ 102.038037][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.046170][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.060937][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.069205][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.089118][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.102471][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.123179][ T2617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.139609][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.148046][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.241731][ T2617] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.276493][ T732] device bridge_slave_1 left promiscuous mode [ 102.282441][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.308947][ T732] device bridge_slave_0 left promiscuous mode [ 102.320464][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.406580][ T2300] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 102.505984][ T23] audit: type=1400 audit(1718651381.329:398): avc: denied { setopt } for pid=2645 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 103.001283][ T2300] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 103.020730][ T2300] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.115309][ T2680] device ip6erspan0 entered promiscuous mode [ 103.196429][ T2300] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.205292][ T2300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.213421][ T2300] usb 1-1: Product: syz [ 103.217877][ T2300] usb 1-1: Manufacturer: syz [ 103.222303][ T2300] usb 1-1: SerialNumber: syz [ 103.507121][ T2700] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 103.520217][ T2700] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 103.534028][ T2700] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.596569][ T2700] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 103.604530][ T2700] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.630123][ T2728] attempt to access beyond end of device [ 103.630123][ T2728] loop2: rw=2049, want=45104, limit=40427 [ 103.647440][ T23] audit: type=1400 audit(1718651382.479:399): avc: denied { link } for pid=2699 comm="syz-executor.2" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.726592][ T2300] usb 1-1: 0:2 : does not exist [ 103.733642][ T2300] usb 1-1: USB disconnect, device number 12 [ 103.742696][ T581] udevd[581]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.867085][ T2765] syz-executor.4 (pid 2765) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 103.891846][ T2765] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 103.959685][ T2776] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 104.059257][ T2776] erofs: (device loop2): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 104.069004][ T2776] erofs: (device loop2): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 104.185739][ T2790] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.357135][ T2775] F2FS-fs (loop4): invalid crc value [ 104.368878][ T2775] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.388150][ T23] audit: type=1400 audit(1718651383.219:400): avc: denied { nlmsg_write } for pid=2798 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 104.442329][ T2775] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 104.469304][ T2807] EXT4-fs (loop1): Ignoring removed orlov option [ 104.478597][ T2807] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 104.491603][ T2584] attempt to access beyond end of device [ 104.491603][ T2584] loop4: rw=2049, want=45104, limit=40427 [ 104.505875][ T2807] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 104.530505][ T23] audit: type=1400 audit(1718651383.359:401): avc: denied { mounton } for pid=2806 comm="syz-executor.1" path="/root/syzkaller-testdir1824805188/syzkaller.LIjLpH/170/file1/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.535063][ T2807] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 104.564095][ T23] audit: type=1400 audit(1718651383.359:402): avc: denied { map } for pid=2806 comm="syz-executor.1" path="/root/syzkaller-testdir1824805188/syzkaller.LIjLpH/170/file1/file0/bus" dev="devtmpfs" ino=9191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.571576][ T2807] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 104.623509][ T692] ================================================================== [ 104.628678][ T23] audit: type=1400 audit(1718651383.449:403): avc: denied { unlink } for pid=692 comm="syz-executor.1" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.631381][ T692] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc1f/0xc30 [ 104.631389][ T692] Read of size 4 at addr ffff8881d5b43000 by task syz-executor.1/692 [ 104.631390][ T692] [ 104.631414][ T692] CPU: 0 PID: 692 Comm: syz-executor.1 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 104.680840][ T692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 2024/06/17 19:09:43 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 104.690732][ T692] Call Trace: [ 104.693867][ T692] dump_stack+0x1d8/0x241 [ 104.698039][ T692] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 104.703676][ T692] ? printk+0xd1/0x111 [ 104.707582][ T692] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 104.713047][ T692] print_address_description+0x8c/0x600 [ 104.718436][ T692] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 104.723896][ T692] __kasan_report+0xf3/0x120 [ 104.728323][ T692] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 104.733790][ T692] kasan_report+0x30/0x60 [ 104.737961][ T692] ext4_xattr_delete_inode+0xc1f/0xc30 [ 104.743253][ T692] ? check_preemption_disabled+0x9f/0x320 [ 104.748808][ T692] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 104.754708][ T692] ? __ext4_journal_start_sb+0x295/0x460 [ 104.760177][ T692] ext4_evict_inode+0x1378/0x1ac0 [ 104.765042][ T692] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 104.770682][ T692] ? wb_io_lists_depopulated+0x85/0x170 [ 104.776058][ T692] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 104.781700][ T692] evict+0x29b/0x6a0 [ 104.785434][ T692] vfs_rmdir+0x24b/0x3c0 [ 104.789510][ T692] do_rmdir+0x2c1/0x580 [ 104