last executing test programs: 6.307432943s ago: executing program 0 (id=537): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$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") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000400)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x2e) socket(0x28, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001400010b00e29a1bc29228bf28"], 0x4c}}, 0x0) r8 = dup3(r0, r1, 0x0) recvmmsg(r8, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) write$cgroup_devices(r8, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5.080057905s ago: executing program 0 (id=541): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getsa={0x28, 0x12, 0x401, 0x0, 0x0, {@in=@dev, 0x0, 0xa, 0xff}}, 0x28}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB='fscontext=']) 4.950228956s ago: executing program 0 (id=542): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0xb701, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) symlink(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000059c0)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') prlimit64(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x145142, 0x1bd) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404f0453b600000000000109022400010000000009040000ff0300000009c758187601220700090581030000000000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) unshare(0x400) r4 = socket$unix(0x1, 0x2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0xa, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x2, 0x3, @remote, 0x4}, 0x14) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x20000000) ftruncate(r2, 0x2007ffb) sendfile(r1, r2, 0x0, 0x1000000201005) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000100)=0x7631) 2.250900051s ago: executing program 2 (id=560): getpid() bind$netlink(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10123, 0x0) 2.171871998s ago: executing program 2 (id=561): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="ff00000000000000140012800b000100626174616476"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 2.15454554s ago: executing program 2 (id=563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0"], 0x3c}}, 0x0) 2.14439644s ago: executing program 2 (id=564): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000100)={0x0, "743fedd3add15c65712ea4c5a112f60f8377ba5089b34f08204569381985d16e9cfd3974fb09fa9fa4ff42a688e0302b715f37ed8ab4cc1e5f75db3bb5cfb510"}) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) socket(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.836149056s ago: executing program 0 (id=566): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="3310", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x0) 1.584357447s ago: executing program 3 (id=572): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 1.547399471s ago: executing program 3 (id=573): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000019c0)={[{@usrjquota}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff"]) 1.54718334s ago: executing program 0 (id=574): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000012c0)='cgroup.procs\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x4) sendfile(r1, r2, 0x0, 0x3) 1.450560349s ago: executing program 0 (id=575): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.450307829s ago: executing program 3 (id=576): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000400)={0x0, 0x8000000000000001}) 1.3150539s ago: executing program 3 (id=578): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000011000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 739.826778ms ago: executing program 4 (id=579): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x62, 0x2}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x56}, 0x20) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020b0000000000000001000000020013009a0000002bbd7000073500000200010000000000000003000000000000000300220000000500000000000000f8ffffffffffffff0100080000000000"], 0x58}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) listen(r7, 0x0) connect$unix(r6, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1}, 0x6e) r8 = fcntl$dupfd(r7, 0x0, r6) listen(r8, 0xa0f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) 709.812361ms ago: executing program 1 (id=581): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x62, 0x2}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) 639.839436ms ago: executing program 1 (id=582): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f00000006c0)='./file0\x00', &(0x7f00000006c0)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001140)={0x50, 0x0, r1, {0x7, 0x26, 0x2, 0x14, 0xfffe}}, 0x50) utime(&(0x7f0000000e00)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000c680)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x24}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) socket(0x1d, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 475.80128ms ago: executing program 4 (id=583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="1400000010"], 0x64}}, 0x0) 467.727231ms ago: executing program 4 (id=584): prctl$PR_SET_MM_EXE_FILE(0x41, 0xd, 0xffffffffffffffff) 414.882495ms ago: executing program 4 (id=585): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000002d00), 0x10001, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000002d40)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "89def7234fd9b5f4e5ebc6bb9a233faa043a82782fe18bd0d4b0bc9572eda550205b867d0c8a11448c0e2606d01ef8f8f6d8de7e361baa13b8efd4243947bf40", "9b32b402f1a48b078e6a2f3371478831e9d1a3be7a2094c27b688eefe1c179bcbd422d9fad72b07331fc5452a6eccbf0dd10000866d5784d1b991208faeb648c", "73a6f2fda0a4aec2a67aa15b1afc05d11b554d88857cb6cd62f572e9b0863621"}}) 414.427855ms ago: executing program 4 (id=586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 414.052285ms ago: executing program 4 (id=587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/68, &(0x7f0000000180)=0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x175}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81044e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000", 0x40}], 0x1) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000002c0)=@nullb, 0xee01, &(0x7f0000000380)) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0/file0\x00', 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 374.418608ms ago: executing program 3 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x86\xdd'}]}]}, 0x24}}, 0x0) 364.943909ms ago: executing program 1 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 304.065254ms ago: executing program 1 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 303.664784ms ago: executing program 3 (id=591): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000300)=0xfffd, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x100000135) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000100), &(0x7f0000000140)={0x0, 0x1000, 0x0, 0x20000003}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) brk(0x7) 303.450004ms ago: executing program 1 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc8734c295cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f244a3c307145452ce64dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070020d7df0abc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) 77.779493ms ago: executing program 2 (id=593): r0 = socket(0x1, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x20000000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000240)=0x9, 0x8) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private}, @address_request}}}}, 0x0) 68.004614ms ago: executing program 1 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 2 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) kernel console output (not intermixed with test programs): 603218][ T1815] WARNING: CPU: 0 PID: 1815 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 95.613002][ T1815] Modules linked in: [ 95.616742][ T1815] CPU: 0 PID: 1815 Comm: syz.1.333 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 95.627667][ T1815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 95.637582][ T1815] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 95.643033][ T1815] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 95.662575][ T1815] RSP: 0018:ffff8881d943fa48 EFLAGS: 00010287 [ 95.668472][ T1815] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 95.676279][ T1815] RDX: ffffc90000b8b000 RSI: 0000000000003f2f RDI: 0000000000003f30 [ 95.684091][ T1815] RBP: ffff8881d8361aa0 R08: ffffffff81e5e076 R09: ffffed103b074756 [ 95.691904][ T1815] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 95.699716][ T1815] R13: ffff8881d83a3a08 R14: ffff8881d83a3a58 R15: ffff8881d8361ad0 [ 95.707529][ T1815] FS: 00007f731561e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 95.716291][ T1815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.722713][ T1815] CR2: 00007f3874600000 CR3: 00000001eb893000 CR4: 00000000003406b0 [ 95.730527][ T1815] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.738364][ T1815] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.746142][ T1815] Call Trace: [ 95.749280][ T1815] ? __warn+0x162/0x250 [ 95.753269][ T1815] ? report_bug+0x3a1/0x4e0 [ 95.757609][ T1815] ? ovl_dir_modified+0x45c/0x570 [ 95.762470][ T1815] ? ovl_dir_modified+0x45c/0x570 [ 95.767332][ T1815] ? do_invalid_op+0x6e/0x110 [ 95.771843][ T1815] ? invalid_op+0x1e/0x30 [ 95.776010][ T1815] ? ovl_dir_modified+0x1e6/0x570 [ 95.780869][ T1815] ? ovl_dir_modified+0x45c/0x570 [ 95.785730][ T1815] ? ovl_dir_modified+0x45c/0x570 [ 95.790590][ T1815] ? ovl_dir_modified+0x45c/0x570 [ 95.795451][ T1815] ? ovl_path_type+0x18e/0x2f0 [ 95.800054][ T1815] ovl_do_remove+0x6f0/0xc80 [ 95.804492][ T1815] ? ovl_set_redirect+0x5f0/0x5f0 [ 95.809340][ T1815] ? security_inode_rmdir+0xca/0x110 [ 95.814456][ T1815] vfs_rmdir+0x285/0x3c0 [ 95.818540][ T1815] incfs_kill_sb+0x105/0x200 [ 95.822967][ T1815] deactivate_locked_super+0xa8/0x110 [ 95.828177][ T1815] vfs_get_tree+0x1b9/0x260 [ 95.832597][ T1815] do_new_mount+0x292/0x570 [ 95.836937][ T1815] ? do_move_mount_old+0x160/0x160 [ 95.841886][ T1815] ? security_capable+0x86/0xb0 [ 95.846574][ T1815] do_mount+0x688/0xe10 [ 95.850564][ T1815] ? copy_mount_string+0x30/0x30 [ 95.855343][ T1815] ? copy_mount_options+0x29a/0x300 [ 95.860374][ T1815] ksys_mount+0xc2/0xf0 [ 95.864369][ T1815] __x64_sys_mount+0xb1/0xc0 [ 95.868800][ T1815] do_syscall_64+0xca/0x1c0 [ 95.873140][ T1815] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 95.876567][ T74] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.878864][ T1815] RIP: 0033:0x7f731639cb99 [ 95.893009][ T1815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.896472][ T74] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.912449][ T1815] RSP: 002b:00007f731561e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 95.912459][ T1815] RAX: ffffffffffffffda RBX: 00007f731652af60 RCX: 00007f731639cb99 [ 95.912464][ T1815] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 95.912470][ T1815] RBP: 00007f731640ba7a R08: 0000000020000dc0 R09: 0000000000000000 [ 95.912474][ T1815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.912480][ T1815] R13: 000000000000000b R14: 00007f731652af60 R15: 00007ffc392589f8 [ 95.912488][ T1815] ---[ end trace 5af93ed8bc9148e8 ]--- [ 95.914586][ T1815] ------------[ cut here ]------------ [ 95.981392][ T1815] WARNING: CPU: 0 PID: 1815 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 95.990573][ T1815] Modules linked in: [ 95.994312][ T1815] CPU: 0 PID: 1815 Comm: syz.1.333 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 96.005240][ T1815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 96.015141][ T1815] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 96.020621][ T1815] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 96.040161][ T1815] RSP: 0018:ffff8881d943fa48 EFLAGS: 00010246 [ 96.046070][ T1815] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 96.053865][ T1815] RDX: ffffc90000b8b000 RSI: 000000000003ffff RDI: 0000000000040000 [ 96.061688][ T1815] RBP: ffff8881d8361aa0 R08: ffffffff81e5e076 R09: ffffed103b074756 [ 96.069488][ T1815] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 96.077300][ T1815] R13: ffff8881d83a3a08 R14: ffff8881d83a3a58 R15: ffff8881d8361ad0 [ 96.085112][ T1815] FS: 00007f731561e6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 96.093884][ T1815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.100301][ T1815] CR2: 00007f834d67ad58 CR3: 00000001eb893000 CR4: 00000000003406b0 [ 96.108118][ T1815] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.115932][ T1815] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.123729][ T1815] Call Trace: [ 96.126868][ T1815] ? __warn+0x162/0x250 [ 96.130853][ T1815] ? report_bug+0x3a1/0x4e0 [ 96.135192][ T1815] ? ovl_dir_modified+0x45c/0x570 [ 96.140050][ T1815] ? ovl_dir_modified+0x45c/0x570 [ 96.144910][ T1815] ? do_invalid_op+0x6e/0x110 [ 96.149424][ T1815] ? invalid_op+0x1e/0x30 [ 96.153594][ T1815] ? ovl_dir_modified+0x1e6/0x570 [ 96.158472][ T1815] ? ovl_dir_modified+0x45c/0x570 [ 96.163443][ T1815] ? ovl_dir_modified+0x45c/0x570 [ 96.168298][ T1815] ? ovl_dir_modified+0x45c/0x570 [ 96.173155][ T1815] ? ovl_path_type+0x18e/0x2f0 [ 96.177753][ T1815] ovl_do_remove+0x6f0/0xc80 [ 96.182184][ T1815] ? ovl_set_redirect+0x5f0/0x5f0 [ 96.187052][ T1815] ? security_inode_rmdir+0xca/0x110 [ 96.192160][ T1815] vfs_rmdir+0x285/0x3c0 [ 96.196241][ T1815] incfs_kill_sb+0x18d/0x200 [ 96.200668][ T1815] deactivate_locked_super+0xa8/0x110 [ 96.205875][ T1815] vfs_get_tree+0x1b9/0x260 [ 96.210224][ T1815] do_new_mount+0x292/0x570 [ 96.214561][ T1815] ? do_move_mount_old+0x160/0x160 [ 96.219509][ T1815] ? security_capable+0x86/0xb0 [ 96.224202][ T1815] do_mount+0x688/0xe10 [ 96.228183][ T1815] ? copy_mount_string+0x30/0x30 [ 96.232956][ T1815] ? copy_mount_options+0x29a/0x300 [ 96.237986][ T1815] ksys_mount+0xc2/0xf0 [ 96.241977][ T1815] __x64_sys_mount+0xb1/0xc0 [ 96.246494][ T1815] do_syscall_64+0xca/0x1c0 [ 96.250832][ T1815] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 96.256560][ T1815] RIP: 0033:0x7f731639cb99 [ 96.260813][ T1815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.280424][ T1815] RSP: 002b:00007f731561e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.288671][ T1815] RAX: ffffffffffffffda RBX: 00007f731652af60 RCX: 00007f731639cb99 [ 96.296481][ T1815] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 96.304382][ T1815] RBP: 00007f731640ba7a R08: 0000000020000dc0 R09: 0000000000000000 [ 96.312191][ T1815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.320004][ T1815] R13: 000000000000000b R14: 00007f731652af60 R15: 00007ffc392589f8 [ 96.327816][ T1815] ---[ end trace 5af93ed8bc9148e9 ]--- [ 96.342956][ T74] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 96.656524][ T74] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.683971][ T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.701232][ T74] usb 4-1: Product: syz [ 96.705426][ T74] usb 4-1: Manufacturer: syz [ 96.710513][ T74] usb 4-1: SerialNumber: syz [ 96.757193][ T74] usb 4-1: selecting invalid altsetting 1 [ 96.764070][ T1818] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.822960][ T1818] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 96.830109][ T1818] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.156430][ T414] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 97.330069][ T1808] EXT4-fs (loop3): Unrecognized mount option "rw" or missing value [ 97.356623][ T74] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 97.362713][ T74] cdc_ncm 4-1:1.1: bind() failure [ 97.369844][ T74] usb 4-1: USB disconnect, device number 16 [ 97.396469][ T414] usb 3-1: Using ep0 maxpacket: 32 [ 97.516507][ T414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 97.527807][ T414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 97.542190][ T121] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 97.549638][ T414] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 97.558627][ T414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.567643][ T414] usb 3-1: config 0 descriptor?? [ 97.586715][ T1818] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 97.807111][ T1854] netlink: 'syz.4.341': attribute type 3 has an invalid length. [ 97.896481][ T74] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 97.916761][ T121] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.926776][ T121] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.935418][ T121] usb 2-1: config 1 has no interface number 0 [ 97.941635][ T121] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.952677][ T121] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 97.961562][ T121] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 98.017809][ T1856] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 98.028687][ T1818] incfs: ino conflict with backing FS 4 [ 98.072603][ T414] hid-led 0003:1294:1320.000E: unknown main item tag 0x0 [ 98.079941][ T414] hid-led 0003:1294:1320.000E: unknown main item tag 0x0 [ 98.086881][ T414] hid-led 0003:1294:1320.000E: unknown main item tag 0x0 [ 98.093781][ T414] hid-led 0003:1294:1320.000E: unknown main item tag 0x0 [ 98.101315][ T414] hid-led 0003:1294:1320.000E: unknown main item tag 0x0 [ 98.109525][ T414] hid-led 0003:1294:1320.000E: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 98.122351][ T414] hid-led 0003:1294:1320.000E: Riso Kagaku Webmail Notifier initialized [ 98.284848][ T74] usb 1-1: Using ep0 maxpacket: 32 [ 98.289861][ T121] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.300013][ T414] usb 3-1: USB disconnect, device number 19 [ 98.305923][ T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.314182][ T121] usb 2-1: Product: syz [ 98.318246][ T121] usb 2-1: Manufacturer: syz [ 98.322566][ T121] usb 2-1: SerialNumber: syz [ 98.327481][ T378] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 98.335745][ T378] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 98.343947][ T378] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 98.366888][ T121] usb 2-1: selecting invalid altsetting 1 [ 98.397747][ T1850] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 98.659128][ T1865] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 98.666659][ T1865] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 98.676607][ T1865] F2FS-fs (loop4): invalid crc value [ 98.683008][ T1865] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.708045][ T1865] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 98.714984][ T1865] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 98.730311][ T1865] netlink: 'syz.4.343': attribute type 10 has an invalid length. [ 98.737927][ T1865] netlink: 148 bytes leftover after parsing attributes in process `syz.4.343'. [ 98.749481][ T352] attempt to access beyond end of device [ 98.749481][ T352] loop4: rw=2049, want=45112, limit=40427 [ 99.218550][ T1843] EXT4-fs (loop1): Unrecognized mount option "rw" or missing value [ 99.346579][ T121] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 99.352699][ T121] cdc_ncm 2-1:1.1: bind() failure [ 99.354122][ T1885] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 99.361196][ T121] usb 2-1: USB disconnect, device number 17 [ 99.369278][ T1885] ------------[ cut here ]------------ [ 99.379491][ T1885] WARNING: CPU: 0 PID: 1885 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 99.388672][ T1885] Modules linked in: [ 99.392416][ T1885] CPU: 0 PID: 1885 Comm: syz.2.347 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 99.403348][ T1885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 99.413359][ T1885] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 99.418807][ T1885] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 99.438457][ T1885] RSP: 0018:ffff8881e0d17a48 EFLAGS: 00010283 [ 99.444354][ T1885] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 99.452170][ T1885] RDX: ffffc90001d4c000 RSI: 0000000000022693 RDI: 0000000000022694 [ 99.459980][ T1885] RBP: ffff8881d8068cc0 R08: ffffffff81e5e076 R09: ffffed103b02e086 [ 99.467787][ T1885] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 99.475598][ T1885] R13: ffff8881d8170388 R14: ffff8881d81703d8 R15: ffff8881d8068cf0 [ 99.483414][ T1885] FS: 00007f387be556c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 99.492183][ T1885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.498599][ T1885] CR2: 0000000000000000 CR3: 00000001e21ea000 CR4: 00000000003406b0 [ 99.506413][ T1885] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.514240][ T1885] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.522033][ T1885] Call Trace: [ 99.525196][ T1885] ? __warn+0x162/0x250 [ 99.529155][ T1885] ? report_bug+0x3a1/0x4e0 [ 99.533495][ T1885] ? ovl_dir_modified+0x45c/0x570 [ 99.538352][ T1885] ? ovl_dir_modified+0x45c/0x570 [ 99.543212][ T1885] ? do_invalid_op+0x6e/0x110 [ 99.547751][ T1885] ? invalid_op+0x1e/0x30 [ 99.551890][ T1885] ? ovl_dir_modified+0x1e6/0x570 [ 99.556774][ T1885] ? ovl_dir_modified+0x45c/0x570 [ 99.561614][ T1885] ? ovl_dir_modified+0x45c/0x570 [ 99.566478][ T1885] ? ovl_dir_modified+0x45c/0x570 [ 99.571331][ T1885] ? ovl_path_type+0x18e/0x2f0 [ 99.575936][ T1885] ovl_do_remove+0x6f0/0xc80 [ 99.580362][ T1885] ? ovl_set_redirect+0x5f0/0x5f0 [ 99.585219][ T1885] ? security_inode_rmdir+0xca/0x110 [ 99.590342][ T1885] vfs_rmdir+0x285/0x3c0 [ 99.594420][ T1885] incfs_kill_sb+0x105/0x200 [ 99.598850][ T1885] deactivate_locked_super+0xa8/0x110 [ 99.604053][ T1885] vfs_get_tree+0x1b9/0x260 [ 99.608423][ T1885] do_new_mount+0x292/0x570 [ 99.612736][ T1885] ? do_move_mount_old+0x160/0x160 [ 99.617682][ T1885] ? security_capable+0x86/0xb0 [ 99.622367][ T1885] do_mount+0x688/0xe10 [ 99.626359][ T1885] ? copy_mount_string+0x30/0x30 [ 99.631131][ T1885] ? copy_mount_options+0x1d2/0x300 [ 99.636202][ T1885] ? copy_mount_options+0x29a/0x300 [ 99.641207][ T1885] ksys_mount+0xc2/0xf0 [ 99.645196][ T1885] __x64_sys_mount+0xb1/0xc0 [ 99.649623][ T1885] do_syscall_64+0xca/0x1c0 [ 99.653961][ T1885] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 99.659685][ T1885] RIP: 0033:0x7f387cbd3b99 [ 99.663943][ T1885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.683377][ T1885] RSP: 002b:00007f387be55048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 99.691625][ T1885] RAX: ffffffffffffffda RBX: 00007f387cd61f60 RCX: 00007f387cbd3b99 [ 99.699433][ T1885] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 99.707244][ T1885] RBP: 00007f387cc42a7a R08: 0000000020000dc0 R09: 0000000000000000 [ 99.715141][ T1885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.722952][ T1885] R13: 000000000000000b R14: 00007f387cd61f60 R15: 00007fff2461ae48 [ 99.730767][ T1885] ---[ end trace 5af93ed8bc9148ea ]--- [ 99.741576][ T1885] ------------[ cut here ]------------ [ 99.746869][ T1885] WARNING: CPU: 1 PID: 1885 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 99.756043][ T1885] Modules linked in: [ 99.759786][ T1885] CPU: 1 PID: 1885 Comm: syz.2.347 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 99.770715][ T1885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 99.780629][ T1885] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 99.786081][ T1885] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 99.805698][ T1885] RSP: 0018:ffff8881e0d17a48 EFLAGS: 00010246 [ 99.811590][ T1885] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 99.819400][ T1885] RDX: ffffc90001d4c000 RSI: 000000000003ffff RDI: 0000000000040000 [ 99.827217][ T1885] RBP: ffff8881d8068cc0 R08: ffffffff81e5e076 R09: ffffed103b02e086 [ 99.835027][ T1885] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 99.842836][ T1885] R13: ffff8881d8170388 R14: ffff8881d81703d8 R15: ffff8881d8068cf0 [ 99.850660][ T1885] FS: 00007f387be556c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 99.859427][ T1885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.865843][ T1885] CR2: 000000110c24b90f CR3: 00000001e21ea000 CR4: 00000000003406a0 [ 99.873649][ T1885] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.881458][ T1885] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.889294][ T1885] Call Trace: [ 99.892416][ T1885] ? __warn+0x162/0x250 [ 99.896394][ T1885] ? report_bug+0x3a1/0x4e0 [ 99.900732][ T1885] ? ovl_dir_modified+0x45c/0x570 [ 99.905620][ T1885] ? ovl_dir_modified+0x45c/0x570 [ 99.910455][ T1885] ? do_invalid_op+0x6e/0x110 [ 99.914967][ T1885] ? invalid_op+0x1e/0x30 [ 99.919131][ T1885] ? ovl_dir_modified+0x1e6/0x570 [ 99.923988][ T1885] ? ovl_dir_modified+0x45c/0x570 [ 99.928849][ T1885] ? ovl_dir_modified+0x45c/0x570 [ 99.933709][ T1885] ? ovl_dir_modified+0x45c/0x570 [ 99.938569][ T1885] ? ovl_path_type+0x18e/0x2f0 [ 99.943173][ T1885] ovl_do_remove+0x6f0/0xc80 [ 99.947601][ T1885] ? ovl_set_redirect+0x5f0/0x5f0 [ 99.952457][ T1885] ? security_inode_rmdir+0xca/0x110 [ 99.957578][ T1885] vfs_rmdir+0x285/0x3c0 [ 99.961660][ T1885] incfs_kill_sb+0x18d/0x200 [ 99.966086][ T1885] deactivate_locked_super+0xa8/0x110 [ 99.971292][ T1885] vfs_get_tree+0x1b9/0x260 [ 99.975632][ T1885] do_new_mount+0x292/0x570 [ 99.979971][ T1885] ? do_move_mount_old+0x160/0x160 [ 99.984918][ T1885] ? security_capable+0x86/0xb0 [ 99.989608][ T1885] do_mount+0x688/0xe10 [ 99.993597][ T1885] ? copy_mount_string+0x30/0x30 [ 99.998368][ T1885] ? copy_mount_options+0x1d2/0x300 [ 100.003401][ T1885] ? copy_mount_options+0x29a/0x300 [ 100.008446][ T1885] ksys_mount+0xc2/0xf0 [ 100.012429][ T1885] __x64_sys_mount+0xb1/0xc0 [ 100.016857][ T1885] do_syscall_64+0xca/0x1c0 [ 100.021198][ T1885] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 100.026926][ T1885] RIP: 0033:0x7f387cbd3b99 [ 100.031181][ T1885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.050614][ T1885] RSP: 002b:00007f387be55048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.058863][ T1885] RAX: ffffffffffffffda RBX: 00007f387cd61f60 RCX: 00007f387cbd3b99 [ 100.066673][ T1885] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 100.074481][ T1885] RBP: 00007f387cc42a7a R08: 0000000020000dc0 R09: 0000000000000000 [ 100.082294][ T1885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.090103][ T1885] R13: 000000000000000b R14: 00007f387cd61f60 R15: 00007fff2461ae48 [ 100.097922][ T1885] ---[ end trace 5af93ed8bc9148eb ]--- [ 100.156489][ T74] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.226473][ T74] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 100.291223][ T74] usb 1-1: can't read configurations, error -71 [ 101.198430][ T1910] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 101.268156][ T74] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 101.586955][ T1905] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 101.596580][ T1905] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 101.600225][ T1917] netlink: 'syz.4.356': attribute type 3 has an invalid length. [ 101.613704][ T1905] F2FS-fs (loop3): invalid crc value [ 101.643903][ T1905] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.696928][ T74] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.720566][ T74] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.741617][ T74] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 101.766698][ T1905] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 101.773669][ T1905] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.792381][ T1905] netlink: 'syz.3.354': attribute type 10 has an invalid length. [ 101.800248][ T1905] netlink: 148 bytes leftover after parsing attributes in process `syz.3.354'. [ 101.812558][ T353] attempt to access beyond end of device [ 101.812558][ T353] loop3: rw=2049, want=45112, limit=40427 [ 101.916590][ T74] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.925727][ T74] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.946444][ T74] usb 1-1: Product: syz [ 101.956677][ T74] usb 1-1: Manufacturer: syz [ 101.976524][ T74] usb 1-1: SerialNumber: syz [ 102.057357][ T74] usb 1-1: selecting invalid altsetting 1 [ 102.259004][ T1926] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.294114][ T1926] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 102.301077][ T1926] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.459876][ T341] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 102.540141][ T1901] EXT4-fs (loop0): Unrecognized mount option "rw" or missing value [ 102.556485][ T74] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 102.562370][ T74] cdc_ncm 1-1:1.1: bind() failure [ 102.569518][ T74] usb 1-1: USB disconnect, device number 18 [ 102.696503][ T377] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 102.836454][ T341] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.846421][ T341] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 102.855027][ T341] usb 5-1: config 1 has no interface number 0 [ 102.861003][ T341] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.871757][ T341] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 102.880626][ T341] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 102.946575][ T377] usb 2-1: Using ep0 maxpacket: 32 [ 102.967843][ T1949] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 103.048593][ T341] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.066541][ T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 103.080897][ T377] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 103.092032][ T341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.092885][ T377] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 103.099860][ T341] usb 5-1: Product: syz [ 103.099870][ T341] usb 5-1: Manufacturer: syz [ 103.099878][ T341] usb 5-1: SerialNumber: syz [ 103.121798][ T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.130947][ T377] usb 2-1: config 0 descriptor?? [ 103.146558][ T1944] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 103.156992][ T341] usb 5-1: selecting invalid altsetting 1 [ 103.495548][ T13] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 103.688560][ T1926] incfs: ino conflict with backing FS 4 [ 103.717439][ T377] hid-led 0003:1294:1320.000F: unknown main item tag 0x0 [ 103.724332][ T377] hid-led 0003:1294:1320.000F: unknown main item tag 0x0 [ 103.731559][ T377] hid-led 0003:1294:1320.000F: unknown main item tag 0x0 [ 103.738778][ T377] hid-led 0003:1294:1320.000F: unknown main item tag 0x0 [ 103.745829][ T377] hid-led 0003:1294:1320.000F: unknown main item tag 0x0 [ 103.746469][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 103.759058][ T377] hid-led 0003:1294:1320.000F: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.1-1/input0 [ 103.773984][ T377] hid-led 0003:1294:1320.000F: Riso Kagaku Webmail Notifier initialized [ 103.786581][ T341] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 103.792572][ T341] cdc_ncm 5-1:1.1: bind() failure [ 103.800878][ T341] usb 5-1: USB disconnect, device number 20 [ 103.849982][ T1953] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 103.924120][ T74] usb 2-1: USB disconnect, device number 18 [ 103.930575][ T377] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 103.939162][ T377] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 103.947289][ T377] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 104.337688][ T1977] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 104.995824][ T1986] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 105.106478][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.121020][ T1984] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 105.128867][ T1984] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 105.163601][ T1984] F2FS-fs (loop1): invalid crc value [ 105.173379][ T1984] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.186558][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 105.197280][ T13] usb 3-1: can't read configurations, error -71 [ 105.232902][ T1984] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 105.239832][ T1984] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.254491][ T1984] netlink: 'syz.1.371': attribute type 10 has an invalid length. [ 105.262638][ T1984] netlink: 148 bytes leftover after parsing attributes in process `syz.1.371'. [ 105.270974][ T2001] netlink: 'syz.3.374': attribute type 3 has an invalid length. [ 105.280292][ T964] attempt to access beyond end of device [ 105.280292][ T964] loop1: rw=2049, want=45112, limit=40427 [ 105.476445][ T377] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 105.846518][ T377] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.863738][ T377] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.876530][ T377] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 106.186480][ T377] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.195406][ T377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.203193][ T377] usb 5-1: Product: syz [ 106.207309][ T377] usb 5-1: Manufacturer: syz [ 106.211712][ T377] usb 5-1: SerialNumber: syz [ 106.256970][ T377] usb 5-1: selecting invalid altsetting 1 [ 106.276492][ T414] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 106.636522][ T414] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.649540][ T414] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.664389][ T414] usb 4-1: config 1 has no interface number 0 [ 106.674515][ T414] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.698402][ T414] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 106.751492][ T414] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 106.850325][ T1999] EXT4-fs (loop4): Unrecognized mount option "rw" or missing value [ 106.866701][ T377] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 106.872547][ T377] cdc_ncm 5-1:1.1: bind() failure [ 106.885659][ T377] usb 5-1: USB disconnect, device number 21 [ 106.963703][ T2021] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.970097][ T414] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.982238][ T414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.990502][ T414] usb 4-1: Product: syz [ 106.994497][ T414] usb 4-1: Manufacturer: syz [ 106.999158][ T414] usb 4-1: SerialNumber: syz [ 107.010540][ T2021] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 107.017286][ T2021] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.037053][ T414] usb 4-1: selecting invalid altsetting 1 [ 107.326454][ T341] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 107.448006][ T2038] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 107.511341][ T2044] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 107.566478][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 107.637650][ T2016] EXT4-fs (loop3): Unrecognized mount option "rw" or missing value [ 107.688165][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 107.721639][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 107.733123][ T341] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 107.742197][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.751617][ T341] usb 3-1: config 0 descriptor?? [ 107.776516][ T414] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 107.776557][ T2021] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 107.782405][ T414] cdc_ncm 4-1:1.1: bind() failure [ 107.802211][ T414] usb 4-1: USB disconnect, device number 17 [ 108.026424][ T377] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 108.238150][ T2021] incfs: ino conflict with backing FS 4 [ 108.257635][ T341] hid-led 0003:1294:1320.0010: unknown main item tag 0x0 [ 108.264671][ T341] hid-led 0003:1294:1320.0010: unknown main item tag 0x0 [ 108.266473][ T377] usb 2-1: Using ep0 maxpacket: 32 [ 108.276948][ T341] hid-led 0003:1294:1320.0010: unknown main item tag 0x0 [ 108.284609][ T341] hid-led 0003:1294:1320.0010: unknown main item tag 0x0 [ 108.292488][ T341] hid-led 0003:1294:1320.0010: unknown main item tag 0x0 [ 108.300635][ T341] hid-led 0003:1294:1320.0010: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 108.317823][ T341] hid-led 0003:1294:1320.0010: Riso Kagaku Webmail Notifier initialized [ 108.404894][ T2051] EXT4-fs (loop1): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 108.461642][ T341] usb 3-1: USB disconnect, device number 22 [ 108.468125][ T429] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 108.478707][ T371] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 108.486838][ T371] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 108.568959][ T2060] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 108.576577][ T2060] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 108.590353][ T2060] F2FS-fs (loop4): invalid crc value [ 108.598887][ T2060] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.625033][ T2060] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 108.631917][ T2060] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.662865][ T2060] netlink: 'syz.4.389': attribute type 10 has an invalid length. [ 108.670679][ T2060] netlink: 148 bytes leftover after parsing attributes in process `syz.4.389'. [ 108.706040][ T352] attempt to access beyond end of device [ 108.706040][ T352] loop4: rw=2049, want=45112, limit=40427 [ 109.364983][ T2077] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.427135][ T2077] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 109.453990][ T2077] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 109.719227][ T341] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 109.796505][ T377] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.806523][ T414] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 109.856468][ T377] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 109.863887][ T377] usb 2-1: can't read configurations, error -71 [ 110.046412][ T414] usb 5-1: Using ep0 maxpacket: 32 [ 110.096477][ T341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.106499][ T341] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.117389][ T341] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 110.166583][ T414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.176476][ T414] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 110.185467][ T414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.193988][ T414] usb 5-1: config 0 descriptor?? [ 110.237000][ T414] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 110.322578][ T341] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.332226][ T341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.340374][ T341] usb 4-1: Product: syz [ 110.344349][ T341] usb 4-1: Manufacturer: syz [ 110.349184][ T341] usb 4-1: SerialNumber: syz [ 110.377698][ T2097] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 110.387110][ T341] usb 4-1: selecting invalid altsetting 1 [ 110.683674][ T2104] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 110.803807][ T2107] incfs: ino conflict with backing FS 4 [ 110.927195][ T2081] EXT4-fs (loop3): Unrecognized mount option "rw" or missing value [ 110.956461][ T341] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 110.962290][ T341] cdc_ncm 4-1:1.1: bind() failure [ 110.967188][ T429] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 110.977790][ T341] usb 4-1: USB disconnect, device number 18 [ 111.336462][ T429] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.346609][ T429] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.356338][ T429] usb 1-1: config 1 has no interface number 0 [ 111.362303][ T429] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.373094][ T429] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 111.381976][ T429] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 111.422890][ T2121] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 111.430619][ T2121] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 111.440571][ T2121] F2FS-fs (loop2): invalid crc value [ 111.457072][ T2121] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.499382][ T2121] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 111.506284][ T2121] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.524212][ T2121] netlink: 'syz.2.405': attribute type 10 has an invalid length. [ 111.531918][ T2121] netlink: 148 bytes leftover after parsing attributes in process `syz.2.405'. [ 111.543454][ T1742] attempt to access beyond end of device [ 111.543454][ T1742] loop2: rw=2049, want=45112, limit=40427 [ 111.554683][ T429] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.563678][ T429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.571757][ T429] usb 1-1: Product: syz [ 111.575762][ T429] usb 1-1: Manufacturer: syz [ 111.580241][ T429] usb 1-1: SerialNumber: syz [ 111.627366][ T429] usb 1-1: selecting invalid altsetting 1 [ 111.922753][ T2125] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.973780][ T2125] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 111.985688][ T2125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.215900][ T13] usb 5-1: USB disconnect, device number 22 [ 112.256232][ T2106] EXT4-fs (loop0): Unrecognized mount option "rw" or missing value [ 112.306688][ T429] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 112.312647][ T429] cdc_ncm 1-1:1.1: bind() failure [ 112.317632][ T371] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 112.328316][ T429] usb 1-1: USB disconnect, device number 19 [ 112.566458][ T371] usb 4-1: Using ep0 maxpacket: 32 [ 112.686633][ T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 112.697760][ T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 112.710201][ T371] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 112.719319][ T371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.728665][ T371] usb 4-1: config 0 descriptor?? [ 112.747016][ T2125] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 113.146466][ T377] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 113.188729][ T2125] incfs: ino conflict with backing FS 4 [ 113.207917][ T371] hid-led 0003:1294:1320.0011: unknown main item tag 0x0 [ 113.214900][ T371] hid-led 0003:1294:1320.0011: unknown main item tag 0x0 [ 113.222127][ T371] hid-led 0003:1294:1320.0011: unknown main item tag 0x0 [ 113.228994][ T371] hid-led 0003:1294:1320.0011: unknown main item tag 0x0 [ 113.235755][ T371] hid-led 0003:1294:1320.0011: unknown main item tag 0x0 [ 113.243869][ T371] hid-led 0003:1294:1320.0011: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0 [ 113.256888][ T371] hid-led 0003:1294:1320.0011: Riso Kagaku Webmail Notifier initialized [ 113.386457][ T377] usb 1-1: Using ep0 maxpacket: 32 [ 113.410402][ T13] usb 4-1: USB disconnect, device number 19 [ 113.417306][ T429] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 113.425430][ T429] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 113.434269][ T429] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 113.457693][ T2161] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 113.776314][ T2169] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 114.076471][ T124] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 114.594577][ T2179] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 114.602756][ T124] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.653596][ T2179] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.662128][ T124] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.676849][ T2179] F2FS-fs (loop3): invalid crc value [ 114.682000][ T124] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 114.707603][ T2179] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.749815][ T2179] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.757455][ T2179] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.777987][ T2179] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 114.785555][ T2179] netlink: 148 bytes leftover after parsing attributes in process `syz.3.419'. [ 114.797813][ T353] attempt to access beyond end of device [ 114.797813][ T353] loop3: rw=2049, want=45112, limit=40427 [ 114.895650][ T2192] netlink: 'syz.1.421': attribute type 3 has an invalid length. [ 114.926505][ T377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.934450][ T124] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.947088][ T124] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.964220][ T124] usb 3-1: Product: syz [ 114.968278][ T124] usb 3-1: Manufacturer: syz [ 114.972965][ T124] usb 3-1: SerialNumber: syz [ 114.996493][ T377] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 115.004105][ T377] usb 1-1: can't read configurations, error -71 [ 115.017481][ T124] usb 3-1: selecting invalid altsetting 1 [ 115.346633][ T74] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 115.579916][ T2173] EXT4-fs (loop2): Unrecognized mount option "rw" or missing value [ 115.626511][ T124] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 115.632630][ T124] cdc_ncm 3-1:1.1: bind() failure [ 115.644934][ T124] usb 3-1: USB disconnect, device number 23 [ 115.706467][ T74] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.716441][ T74] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.725049][ T74] usb 4-1: config 1 has no interface number 0 [ 115.731040][ T74] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.741696][ T74] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 115.750818][ T74] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 115.916476][ T74] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.925447][ T74] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.933437][ T74] usb 4-1: Product: syz [ 115.937453][ T74] usb 4-1: Manufacturer: syz [ 115.941832][ T74] usb 4-1: SerialNumber: syz [ 115.987067][ T74] usb 4-1: selecting invalid altsetting 1 [ 116.158434][ T2213] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 116.543006][ T2194] EXT4-fs (loop3): Unrecognized mount option "rw" or missing value [ 116.731286][ T2226] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 116.741193][ T74] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 116.748597][ T74] cdc_ncm 4-1:1.1: bind() failure [ 116.769436][ T74] usb 4-1: USB disconnect, device number 20 [ 116.799697][ T2217] F2FS-fs (loop2): Found nat_bits in checkpoint [ 116.835925][ T2217] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 116.843098][ T2217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.186468][ T74] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 117.496415][ T13] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 117.525704][ T2254] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.532735][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.540592][ T2254] device bridge_slave_0 entered promiscuous mode [ 117.548588][ T2254] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.555536][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.556534][ T74] usb 3-1: Using ep0 maxpacket: 32 [ 117.563334][ T2254] device bridge_slave_1 entered promiscuous mode [ 117.629215][ T2254] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.636166][ T2254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.643322][ T2254] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.650164][ T2254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.658174][ T2253] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 117.665700][ T2253] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.678871][ T2253] F2FS-fs (loop1): invalid crc value [ 117.686518][ T2253] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.708386][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.716353][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.716513][ T74] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 117.734192][ T74] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 117.734268][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.745132][ T74] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 117.752188][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 117.761349][ T74] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.766200][ T2253] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.781484][ T74] usb 3-1: config 0 descriptor?? [ 117.784195][ T2253] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.797865][ T2238] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 117.805895][ T2253] attempt to access beyond end of device [ 117.805895][ T2253] loop1: rw=2049, want=45152, limit=40427 [ 117.807075][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.826248][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.827580][ T964] attempt to access beyond end of device [ 117.827580][ T964] loop1: rw=2049, want=45168, limit=40427 [ 117.833097][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.852588][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.862319][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.869167][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.876691][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.884605][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.907033][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.919488][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.937841][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.953103][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.968072][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.207373][ T2269] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.215661][ T2269] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 118.239407][ T473] device bridge_slave_1 left promiscuous mode [ 118.240079][ T2217] incfs: ino conflict with backing FS 4 [ 118.245366][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.251083][ T429] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 118.268630][ T473] device bridge_slave_0 left promiscuous mode [ 118.274733][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.297783][ T74] hid-led 0003:1294:1320.0012: unknown main item tag 0x0 [ 118.304718][ T74] hid-led 0003:1294:1320.0012: unknown main item tag 0x0 [ 118.311947][ T74] hid-led 0003:1294:1320.0012: unknown main item tag 0x0 [ 118.328746][ T74] hid-led 0003:1294:1320.0012: unknown main item tag 0x0 [ 118.335630][ T74] hid-led 0003:1294:1320.0012: unknown main item tag 0x0 [ 118.346137][ T74] hid-led 0003:1294:1320.0012: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 118.354384][ T2274] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 118.359009][ T74] hid-led 0003:1294:1320.0012: Riso Kagaku Webmail Notifier initialized [ 118.502797][ T378] usb 3-1: USB disconnect, device number 24 [ 118.510689][ T124] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 118.518784][ T124] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 118.526870][ T124] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 118.636544][ T429] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.646542][ T429] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.657210][ T429] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 118.816551][ T429] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.825451][ T429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.857430][ T429] usb 5-1: Product: syz [ 118.861656][ T429] usb 5-1: Manufacturer: syz [ 118.866291][ T429] usb 5-1: SerialNumber: syz [ 118.928217][ T429] usb 5-1: selecting invalid altsetting 1 [ 119.236471][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.296447][ T13] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 119.303826][ T13] usb 1-1: can't read configurations, error -71 [ 119.499288][ T2264] EXT4-fs (loop4): Unrecognized mount option "rw" or missing value [ 119.646483][ T429] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 119.652329][ T429] cdc_ncm 5-1:1.1: bind() failure [ 119.658926][ T429] usb 5-1: USB disconnect, device number 23 [ 120.116436][ T13] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 120.197708][ T2302] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 120.476735][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.506419][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.524345][ T13] usb 1-1: config 1 has no interface number 0 [ 120.536483][ T13] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.559490][ T13] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 120.563463][ T2314] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 120.568447][ T13] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 120.610042][ T2309] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 120.623850][ T2309] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 120.677115][ T2309] F2FS-fs (loop4): invalid crc value [ 120.707830][ T2309] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.746506][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.759487][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.769198][ T13] usb 1-1: Product: syz [ 120.773254][ T13] usb 1-1: Manufacturer: syz [ 120.777998][ T2309] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 120.784908][ T2309] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.792285][ T13] usb 1-1: SerialNumber: syz [ 120.814327][ T2309] attempt to access beyond end of device [ 120.814327][ T2309] loop4: rw=2049, want=45152, limit=40427 [ 120.830806][ T352] attempt to access beyond end of device [ 120.830806][ T352] loop4: rw=2049, want=45168, limit=40427 [ 120.849201][ T13] usb 1-1: selecting invalid altsetting 1 [ 121.189056][ T2318] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.240414][ T2318] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 121.247239][ T2318] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.358426][ T2294] EXT4-fs (loop0): Unrecognized mount option "rw" or missing value [ 121.376480][ T13] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 121.382299][ T13] cdc_ncm 1-1:1.1: bind() failure [ 121.388527][ T13] usb 1-1: USB disconnect, device number 23 [ 121.496816][ T378] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 121.576437][ T429] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 121.736421][ T378] usb 2-1: Using ep0 maxpacket: 32 [ 121.816437][ T429] usb 4-1: Using ep0 maxpacket: 32 [ 121.936722][ T429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 121.947706][ T429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 121.958824][ T429] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 121.967699][ T429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.976153][ T429] usb 4-1: config 0 descriptor?? [ 121.996481][ T2340] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 122.077202][ T2353] EXT4-fs (loop4): Test dummy encryption mode enabled [ 122.085766][ T2353] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 122.416511][ T13] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 122.428004][ T2318] incfs: ino conflict with backing FS 4 [ 122.447826][ T429] hid-led 0003:1294:1320.0013: unknown main item tag 0x0 [ 122.454726][ T429] hid-led 0003:1294:1320.0013: unknown main item tag 0x0 [ 122.461940][ T429] hid-led 0003:1294:1320.0013: unknown main item tag 0x0 [ 122.469010][ T429] hid-led 0003:1294:1320.0013: unknown main item tag 0x0 [ 122.475934][ T429] hid-led 0003:1294:1320.0013: unknown main item tag 0x0 [ 122.483968][ T429] hid-led 0003:1294:1320.0013: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0 [ 122.496853][ T429] hid-led 0003:1294:1320.0013: Riso Kagaku Webmail Notifier initialized [ 122.649937][ T341] usb 4-1: USB disconnect, device number 21 [ 122.657780][ T371] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 122.665764][ T371] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 122.674081][ T371] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 122.786667][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.796974][ T13] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.810041][ T13] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 123.116470][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.125367][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.133164][ T13] usb 5-1: Product: syz [ 123.137184][ T13] usb 5-1: Manufacturer: syz [ 123.141525][ T13] usb 5-1: SerialNumber: syz [ 123.196936][ T13] usb 5-1: selecting invalid altsetting 1 [ 123.236522][ T378] usb 2-1: unable to get BOS descriptor or descriptor too short [ 123.296505][ T378] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 123.306891][ T378] usb 2-1: can't read configurations, error -71 [ 123.323063][ T2368] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 123.914075][ T2382] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 123.989467][ T2357] EXT4-fs (loop4): Unrecognized mount option "rw" or missing value [ 124.046939][ T2379] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 124.054450][ T2379] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 124.063691][ T2379] F2FS-fs (loop0): invalid crc value [ 124.070410][ T2379] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.116473][ T13] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 124.122641][ T13] cdc_ncm 5-1:1.1: bind() failure [ 124.132568][ T13] usb 5-1: USB disconnect, device number 24 [ 124.140024][ T2379] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 124.148359][ T2379] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.179706][ T2379] attempt to access beyond end of device [ 124.179706][ T2379] loop0: rw=2049, want=45152, limit=40427 [ 124.196102][ T1621] attempt to access beyond end of device [ 124.196102][ T1621] loop0: rw=2049, want=45168, limit=40427 [ 124.287150][ T429] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 124.646492][ T429] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.656442][ T429] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.665090][ T429] usb 4-1: config 1 has no interface number 0 [ 124.673172][ T429] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.708349][ T429] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 124.717536][ T429] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 124.886474][ T429] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.895419][ T429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.903169][ T429] usb 4-1: Product: syz [ 124.907164][ T429] usb 4-1: Manufacturer: syz [ 124.911547][ T429] usb 4-1: SerialNumber: syz [ 124.956948][ T429] usb 4-1: selecting invalid altsetting 1 [ 124.996427][ T378] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 125.356589][ T378] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.375037][ T378] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.387813][ T378] usb 2-1: config 1 has no interface number 0 [ 125.394766][ T378] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.405925][ T378] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 125.414959][ T378] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 125.576520][ T2409] F2FS-fs (loop2): Found nat_bits in checkpoint [ 125.586610][ T378] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.598708][ T378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.614219][ T378] usb 2-1: Product: syz [ 125.622282][ T378] usb 2-1: Manufacturer: syz [ 125.632320][ T378] usb 2-1: SerialNumber: syz [ 125.641326][ T2409] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 125.648026][ T2409] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 125.676831][ T378] usb 2-1: selecting invalid altsetting 1 [ 125.823134][ T2388] EXT4-fs (loop3): Unrecognized mount option "rw" or missing value [ 125.956487][ T429] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 125.962334][ T429] cdc_ncm 4-1:1.1: bind() failure [ 125.972705][ T429] usb 4-1: USB disconnect, device number 22 [ 126.076435][ T13] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 126.287186][ T2406] EXT4-fs (loop1): Unrecognized mount option "rw" or missing value [ 126.316440][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 126.326545][ T378] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 126.332425][ T378] cdc_ncm 2-1:1.1: bind() failure [ 126.349794][ T378] usb 2-1: USB disconnect, device number 23 [ 126.437739][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 126.448946][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 126.462781][ T13] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 126.472010][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.480935][ T13] usb 3-1: config 0 descriptor?? [ 126.496543][ T2409] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 126.550720][ T2441] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 126.557002][ T2438] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 126.561932][ T2441] ------------[ cut here ]------------ [ 126.575649][ T2441] WARNING: CPU: 1 PID: 2441 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 126.584811][ T2441] Modules linked in: [ 126.588558][ T2441] CPU: 1 PID: 2441 Comm: syz.3.481 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 126.599563][ T2441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 126.609478][ T2441] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 126.614930][ T2441] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 126.634376][ T2441] RSP: 0018:ffff8881e2e1fa48 EFLAGS: 00010287 [ 126.640271][ T2441] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 126.648080][ T2441] RDX: ffffc90003558000 RSI: 0000000000003fab RDI: 0000000000003fac [ 126.656062][ T2441] RBP: ffff8881d806aee0 R08: ffffffff81e5e076 R09: ffffed103b0620f3 [ 126.663850][ T2441] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 126.671658][ T2441] R13: ffff8881d83106f0 R14: ffff8881d8310740 R15: ffff8881d806af10 [ 126.679472][ T2441] FS: 00007fda5cc696c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 126.688235][ T2441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.694656][ T2441] CR2: 0000000000000000 CR3: 00000001da389000 CR4: 00000000003406a0 [ 126.702470][ T2441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.710282][ T2441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.718190][ T2441] Call Trace: [ 126.721316][ T2441] ? __warn+0x162/0x250 [ 126.725303][ T2441] ? report_bug+0x3a1/0x4e0 [ 126.729638][ T2441] ? ovl_dir_modified+0x45c/0x570 [ 126.734498][ T2441] ? ovl_dir_modified+0x45c/0x570 [ 126.739360][ T2441] ? do_invalid_op+0x6e/0x110 [ 126.743883][ T2441] ? invalid_op+0x1e/0x30 [ 126.748042][ T2441] ? ovl_dir_modified+0x1e6/0x570 [ 126.752896][ T2441] ? ovl_dir_modified+0x45c/0x570 [ 126.757762][ T2441] ? ovl_dir_modified+0x45c/0x570 [ 126.762617][ T2441] ? ovl_dir_modified+0x45c/0x570 [ 126.767480][ T2441] ? ovl_path_type+0x18e/0x2f0 [ 126.772079][ T2441] ovl_do_remove+0x6f0/0xc80 [ 126.776512][ T2441] ? ovl_set_redirect+0x5f0/0x5f0 [ 126.781366][ T2441] ? security_inode_rmdir+0xca/0x110 [ 126.786486][ T2441] vfs_rmdir+0x285/0x3c0 [ 126.790568][ T2441] incfs_kill_sb+0x105/0x200 [ 126.795005][ T2441] deactivate_locked_super+0xa8/0x110 [ 126.800199][ T2441] vfs_get_tree+0x1b9/0x260 [ 126.804542][ T2441] do_new_mount+0x292/0x570 [ 126.808905][ T2441] ? do_move_mount_old+0x160/0x160 [ 126.813828][ T2441] ? security_capable+0x86/0xb0 [ 126.818512][ T2441] do_mount+0x688/0xe10 [ 126.822507][ T2441] ? copy_mount_string+0x30/0x30 [ 126.827278][ T2441] ? copy_mount_options+0x29a/0x300 [ 126.832311][ T2441] ksys_mount+0xc2/0xf0 [ 126.836319][ T2441] __x64_sys_mount+0xb1/0xc0 [ 126.840731][ T2441] do_syscall_64+0xca/0x1c0 [ 126.845205][ T2441] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 126.850908][ T2441] RIP: 0033:0x7fda5d9e7b99 [ 126.855160][ T2441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.874597][ T2441] RSP: 002b:00007fda5cc69048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.882843][ T2441] RAX: ffffffffffffffda RBX: 00007fda5db75f60 RCX: 00007fda5d9e7b99 [ 126.890654][ T2441] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 126.898465][ T2441] RBP: 00007fda5da56a7a R08: 0000000020000dc0 R09: 0000000000000000 [ 126.906298][ T2441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.914095][ T2441] R13: 000000000000000b R14: 00007fda5db75f60 R15: 00007fff8e140ed8 [ 126.921905][ T2441] ---[ end trace 5af93ed8bc9148ec ]--- [ 126.929594][ T2441] ------------[ cut here ]------------ [ 126.934878][ T2441] WARNING: CPU: 1 PID: 2441 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 126.944062][ T2441] Modules linked in: [ 126.947795][ T2441] CPU: 1 PID: 2441 Comm: syz.3.481 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 126.958728][ T2441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 126.968630][ T2441] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 126.974103][ T2441] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 126.993540][ T2441] RSP: 0018:ffff8881e2e1fa48 EFLAGS: 00010246 [ 126.996435][ T429] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 126.999440][ T2441] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 126.999446][ T2441] RDX: ffffc90003558000 RSI: 000000000003ffff RDI: 0000000000040000 [ 126.999453][ T2441] RBP: ffff8881d806aee0 R08: ffffffff81e5e076 R09: ffffed103b0620f3 [ 126.999459][ T2441] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 126.999466][ T2441] R13: ffff8881d83106f0 R14: ffff8881d8310740 R15: ffff8881d806af10 [ 126.999474][ T2441] FS: 00007fda5cc696c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 126.999479][ T2441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.999494][ T2441] CR2: 00007f66fb1fc2da CR3: 00000001da389000 CR4: 00000000003426a0 [ 127.068872][ T2441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.076676][ T2441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.084487][ T2441] Call Trace: [ 127.087631][ T2441] ? __warn+0x162/0x250 [ 127.091648][ T2441] ? report_bug+0x3a1/0x4e0 [ 127.095948][ T2441] ? ovl_dir_modified+0x45c/0x570 [ 127.100810][ T2441] ? ovl_dir_modified+0x45c/0x570 [ 127.105669][ T2441] ? do_invalid_op+0x6e/0x110 [ 127.110182][ T2441] ? invalid_op+0x1e/0x30 [ 127.114348][ T2441] ? ovl_dir_modified+0x1e6/0x570 [ 127.119208][ T2441] ? ovl_dir_modified+0x45c/0x570 [ 127.124154][ T2441] ? ovl_dir_modified+0x45c/0x570 [ 127.129016][ T2441] ? ovl_dir_modified+0x45c/0x570 [ 127.133878][ T2441] ? ovl_path_type+0x18e/0x2f0 [ 127.137954][ T2409] incfs: ino conflict with backing FS 4 [ 127.138483][ T2441] ovl_do_remove+0x6f0/0xc80 [ 127.138496][ T2441] ? ovl_set_redirect+0x5f0/0x5f0 [ 127.138507][ T2441] ? security_inode_rmdir+0xca/0x110 [ 127.138522][ T2441] vfs_rmdir+0x285/0x3c0 [ 127.157690][ T13] hid-led 0003:1294:1320.0014: unknown main item tag 0x0 [ 127.158277][ T2441] incfs_kill_sb+0x18d/0x200 [ 127.162367][ T13] hid-led 0003:1294:1320.0014: unknown main item tag 0x0 [ 127.169213][ T2441] deactivate_locked_super+0xa8/0x110 [ 127.169223][ T2441] vfs_get_tree+0x1b9/0x260 [ 127.169232][ T2441] do_new_mount+0x292/0x570 [ 127.169246][ T2441] ? do_move_mount_old+0x160/0x160 [ 127.169257][ T2441] ? security_capable+0x86/0xb0 [ 127.169266][ T2441] do_mount+0x688/0xe10 [ 127.169275][ T2441] ? copy_mount_string+0x30/0x30 [ 127.169289][ T2441] ? copy_mount_options+0x29a/0x300 [ 127.176314][ T13] hid-led 0003:1294:1320.0014: unknown main item tag 0x0 [ 127.180491][ T2441] ksys_mount+0xc2/0xf0 [ 127.180500][ T2441] __x64_sys_mount+0xb1/0xc0 [ 127.180510][ T2441] do_syscall_64+0xca/0x1c0 [ 127.180521][ T2441] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 127.180529][ T2441] RIP: 0033:0x7fda5d9e7b99 [ 127.180543][ T2441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.186210][ T13] hid-led 0003:1294:1320.0014: unknown main item tag 0x0 [ 127.190027][ T2441] RSP: 002b:00007fda5cc69048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.190037][ T2441] RAX: ffffffffffffffda RBX: 00007fda5db75f60 RCX: 00007fda5d9e7b99 [ 127.190042][ T2441] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 127.190048][ T2441] RBP: 00007fda5da56a7a R08: 0000000020000dc0 R09: 0000000000000000 [ 127.190052][ T2441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.190058][ T2441] R13: 000000000000000b R14: 00007fda5db75f60 R15: 00007fff8e140ed8 [ 127.190066][ T2441] ---[ end trace 5af93ed8bc9148ed ]--- [ 127.378192][ T13] hid-led 0003:1294:1320.0014: unknown main item tag 0x0 [ 127.401012][ T13] hid-led 0003:1294:1320.0014: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 127.412236][ T429] usb 1-1: Using ep0 maxpacket: 32 [ 127.429980][ T13] hid-led 0003:1294:1320.0014: Riso Kagaku Webmail Notifier initialized [ 127.445617][ T13] usb 3-1: USB disconnect, device number 25 [ 127.464194][ T371] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 127.487845][ T371] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 127.511331][ T371] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 127.537399][ T2436] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 127.641176][ T2453] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 127.648761][ T2453] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.656845][ T124] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 127.667503][ T2453] F2FS-fs (loop3): invalid crc value [ 127.674180][ T2453] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.706811][ T2453] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 127.716304][ T2453] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.744994][ T2453] attempt to access beyond end of device [ 127.744994][ T2453] loop3: rw=2049, want=45152, limit=40427 [ 127.762001][ T2254] attempt to access beyond end of device [ 127.762001][ T2254] loop3: rw=2049, want=45168, limit=40427 [ 128.016464][ T124] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.027299][ T124] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.038073][ T124] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 128.206552][ T124] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.215394][ T124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.236402][ T124] usb 2-1: Product: syz [ 128.240409][ T124] usb 2-1: Manufacturer: syz [ 128.244810][ T124] usb 2-1: SerialNumber: syz [ 128.296906][ T124] usb 2-1: selecting invalid altsetting 1 [ 128.436448][ T429] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.496503][ T429] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 128.503944][ T429] usb 1-1: can't read configurations, error -71 [ 128.836560][ T124] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 128.842508][ T124] cdc_ncm 2-1:1.1: bind() failure [ 128.864775][ T124] usb 2-1: USB disconnect, device number 24 [ 129.364954][ T2488] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 129.376114][ T2488] ------------[ cut here ]------------ [ 129.381377][ T2488] WARNING: CPU: 1 PID: 2488 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 129.390582][ T2488] Modules linked in: [ 129.394298][ T2488] CPU: 1 PID: 2488 Comm: syz.1.493 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 129.405231][ T2488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 129.415132][ T2488] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 129.420597][ T2488] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 129.440038][ T2488] RSP: 0018:ffff8881e0597a48 EFLAGS: 00010283 [ 129.445937][ T2488] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 129.453749][ T2488] RDX: ffffc90000b8b000 RSI: 00000000000040c0 RDI: 00000000000040c1 [ 129.461560][ T2488] RBP: ffff8881e7811ee0 R08: ffffffff81e5e076 R09: ffffed103b028c5b [ 129.469369][ T2488] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 129.477184][ T2488] R13: ffff8881d8146230 R14: ffff8881d8146280 R15: ffff8881e7811f10 [ 129.484993][ T2488] FS: 00007f731561e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 129.493785][ T2488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.500189][ T2488] CR2: 0000000000000000 CR3: 00000001e73b2000 CR4: 00000000003406a0 [ 129.507992][ T2488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.515825][ T2488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.523614][ T2488] Call Trace: [ 129.526751][ T2488] ? __warn+0x162/0x250 [ 129.530738][ T2488] ? report_bug+0x3a1/0x4e0 [ 129.535072][ T2488] ? ovl_dir_modified+0x45c/0x570 [ 129.539934][ T2488] ? ovl_dir_modified+0x45c/0x570 [ 129.544795][ T2488] ? do_invalid_op+0x6e/0x110 [ 129.549314][ T2488] ? invalid_op+0x1e/0x30 [ 129.553474][ T2488] ? ovl_dir_modified+0x1e6/0x570 [ 129.558334][ T2488] ? ovl_dir_modified+0x45c/0x570 [ 129.563214][ T2488] ? ovl_dir_modified+0x45c/0x570 [ 129.568057][ T2488] ? ovl_dir_modified+0x45c/0x570 [ 129.572915][ T2488] ? ovl_path_type+0x18e/0x2f0 [ 129.577522][ T2488] ovl_do_remove+0x6f0/0xc80 [ 129.581950][ T2488] ? ovl_set_redirect+0x5f0/0x5f0 [ 129.586803][ T2488] ? security_inode_rmdir+0xca/0x110 [ 129.591922][ T2488] vfs_rmdir+0x285/0x3c0 [ 129.596010][ T2488] incfs_kill_sb+0x105/0x200 [ 129.600433][ T2488] deactivate_locked_super+0xa8/0x110 [ 129.605775][ T2488] vfs_get_tree+0x1b9/0x260 [ 129.610095][ T2488] do_new_mount+0x292/0x570 [ 129.614431][ T2488] ? do_move_mount_old+0x160/0x160 [ 129.619378][ T2488] ? security_capable+0x86/0xb0 [ 129.624065][ T2488] do_mount+0x688/0xe10 [ 129.628078][ T2488] ? copy_mount_string+0x30/0x30 [ 129.632833][ T2488] ? copy_mount_options+0x29a/0x300 [ 129.637863][ T2488] ksys_mount+0xc2/0xf0 [ 129.641857][ T2488] __x64_sys_mount+0xb1/0xc0 [ 129.646285][ T2488] do_syscall_64+0xca/0x1c0 [ 129.650623][ T2488] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 129.656351][ T2488] RIP: 0033:0x7f731639cb99 [ 129.660600][ T2488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.680253][ T2488] RSP: 002b:00007f731561e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.688499][ T2488] RAX: ffffffffffffffda RBX: 00007f731652af60 RCX: 00007f731639cb99 [ 129.696312][ T2488] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 129.704130][ T2488] RBP: 00007f731640ba7a R08: 0000000020000dc0 R09: 0000000000000000 [ 129.711936][ T2488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.719744][ T2488] R13: 000000000000000b R14: 00007f731652af60 R15: 00007ffc392589f8 [ 129.727581][ T2488] ---[ end trace 5af93ed8bc9148ee ]--- [ 129.778485][ T2488] ------------[ cut here ]------------ [ 129.783780][ T2488] WARNING: CPU: 1 PID: 2488 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 129.793098][ T2488] Modules linked in: [ 129.796830][ T2488] CPU: 1 PID: 2488 Comm: syz.1.493 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 129.807760][ T2488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 129.817667][ T2488] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 129.823121][ T2488] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 129.842563][ T2488] RSP: 0018:ffff8881e0597a48 EFLAGS: 00010287 [ 129.848459][ T2488] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 129.856289][ T2488] RDX: ffffc90000b8b000 RSI: 000000000000db26 RDI: 000000000000db27 [ 129.864088][ T2488] RBP: ffff8881e7811ee0 R08: ffffffff81e5e076 R09: ffffed103b028c5b [ 129.871896][ T2488] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 129.879724][ T2488] R13: ffff8881d8146230 R14: ffff8881d8146280 R15: ffff8881e7811f10 [ 129.887522][ T2488] FS: 00007f731561e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 129.896286][ T2488] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.902704][ T2488] CR2: 000000110c2f094f CR3: 00000001e73b2000 CR4: 00000000003406a0 [ 129.910528][ T2488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.918341][ T2488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.926138][ T2488] Call Trace: [ 129.929283][ T2488] ? __warn+0x162/0x250 [ 129.933928][ T2488] ? report_bug+0x3a1/0x4e0 [ 129.938252][ T2488] ? ovl_dir_modified+0x45c/0x570 [ 129.943116][ T2488] ? ovl_dir_modified+0x45c/0x570 [ 129.947978][ T2488] ? do_invalid_op+0x6e/0x110 [ 129.952479][ T2488] ? invalid_op+0x1e/0x30 [ 129.956643][ T2488] ? ovl_dir_modified+0x1e6/0x570 [ 129.961528][ T2488] ? ovl_dir_modified+0x45c/0x570 [ 129.966368][ T2488] ? ovl_dir_modified+0x45c/0x570 [ 129.971232][ T2488] ? ovl_dir_modified+0x45c/0x570 [ 129.976087][ T2488] ? ovl_path_type+0x18e/0x2f0 [ 129.980711][ T2488] ovl_do_remove+0x6f0/0xc80 [ 129.985117][ T2488] ? ovl_set_redirect+0x5f0/0x5f0 [ 129.989974][ T2488] ? security_inode_rmdir+0xca/0x110 [ 129.995176][ T2488] vfs_rmdir+0x285/0x3c0 [ 129.999262][ T2488] incfs_kill_sb+0x18d/0x200 [ 130.003685][ T2488] deactivate_locked_super+0xa8/0x110 [ 130.008926][ T2488] vfs_get_tree+0x1b9/0x260 [ 130.013230][ T2488] do_new_mount+0x292/0x570 [ 130.017572][ T2488] ? do_move_mount_old+0x160/0x160 [ 130.022540][ T2488] ? security_capable+0x86/0xb0 [ 130.027204][ T2488] do_mount+0x688/0xe10 [ 130.031198][ T2488] ? copy_mount_string+0x30/0x30 [ 130.035972][ T2488] ? copy_mount_options+0x29a/0x300 [ 130.041003][ T2488] ksys_mount+0xc2/0xf0 [ 130.044997][ T2488] __x64_sys_mount+0xb1/0xc0 [ 130.049421][ T2488] do_syscall_64+0xca/0x1c0 [ 130.053765][ T2488] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 130.060098][ T2488] RIP: 0033:0x7f731639cb99 [ 130.064351][ T2488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.083791][ T2488] RSP: 002b:00007f731561e048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.092036][ T2488] RAX: ffffffffffffffda RBX: 00007f731652af60 RCX: 00007f731639cb99 [ 130.099933][ T2488] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 130.107744][ T2488] RBP: 00007f731640ba7a R08: 0000000020000dc0 R09: 0000000000000000 [ 130.115555][ T2488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.123370][ T2488] R13: 000000000000000b R14: 00007f731652af60 R15: 00007ffc392589f8 [ 130.131183][ T2488] ---[ end trace 5af93ed8bc9148ef ]--- [ 130.138768][ T377] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 130.261570][ T2493] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 130.301934][ T2496] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 130.331299][ T2496] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 130.378241][ T2496] F2FS-fs (loop3): invalid crc value [ 130.412496][ T2496] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.453508][ T2496] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 130.460674][ T2496] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.496587][ T377] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.548303][ T377] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 130.596930][ T377] usb 3-1: config 1 has no interface number 0 [ 130.638097][ T13] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 130.647717][ T2496] attempt to access beyond end of device [ 130.647717][ T2496] loop3: rw=2049, want=45152, limit=40427 [ 130.659048][ T377] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.671841][ T377] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 130.682477][ T377] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 130.693944][ T2254] attempt to access beyond end of device [ 130.693944][ T2254] loop3: rw=2049, want=45168, limit=40427 [ 130.856624][ T377] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.878877][ T377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.891593][ T2501] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.902849][ T377] usb 3-1: Product: syz [ 130.906887][ T377] usb 3-1: Manufacturer: syz [ 130.911299][ T377] usb 3-1: SerialNumber: syz [ 130.923565][ T2501] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 130.930427][ T2501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.957168][ T377] usb 3-1: selecting invalid altsetting 1 [ 131.076470][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.086350][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.095027][ T13] usb 5-1: config 1 has no interface number 0 [ 131.100999][ T13] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.111781][ T13] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 131.120629][ T13] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 131.286442][ T124] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 131.286539][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.294796][ T2519] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 131.311375][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.312867][ T2519] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 131.319324][ T13] usb 5-1: Product: syz [ 131.329843][ T2519] F2FS-fs (loop0): invalid crc value [ 131.331972][ T13] usb 5-1: Manufacturer: syz [ 131.340768][ T13] usb 5-1: SerialNumber: syz [ 131.348124][ T2519] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.372732][ T2519] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 131.379816][ T2519] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 131.387774][ T13] usb 5-1: selecting invalid altsetting 1 [ 131.434609][ T2519] netlink: 'syz.0.500': attribute type 10 has an invalid length. [ 131.442330][ T2519] netlink: 148 bytes leftover after parsing attributes in process `syz.0.500'. [ 131.454132][ T1621] attempt to access beyond end of device [ 131.454132][ T1621] loop0: rw=2049, want=45112, limit=40427 [ 131.516471][ T377] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 131.522517][ T377] cdc_ncm 3-1:1.1: bind() failure [ 131.527512][ T124] usb 2-1: Using ep0 maxpacket: 32 [ 131.535941][ T377] usb 3-1: USB disconnect, device number 26 [ 131.646497][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 131.657728][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 131.668758][ T124] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 131.677525][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.686315][ T124] usb 2-1: config 0 descriptor?? [ 131.706556][ T2517] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 131.915718][ T2498] EXT4-fs (loop4): Unrecognized mount option "rw" or missing value [ 131.996458][ T13] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 132.002282][ T13] cdc_ncm 5-1:1.1: bind() failure [ 132.015984][ T13] usb 5-1: USB disconnect, device number 25 [ 132.036458][ T377] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 132.147899][ T2501] incfs: ino conflict with backing FS 4 [ 132.167639][ T124] hid-led 0003:1294:1320.0015: unknown main item tag 0x0 [ 132.174665][ T124] hid-led 0003:1294:1320.0015: unknown main item tag 0x0 [ 132.181573][ T124] hid-led 0003:1294:1320.0015: unknown main item tag 0x0 [ 132.188422][ T124] hid-led 0003:1294:1320.0015: unknown main item tag 0x0 [ 132.195266][ T124] hid-led 0003:1294:1320.0015: unknown main item tag 0x0 [ 132.208929][ T124] hid-led 0003:1294:1320.0015: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.1-1/input0 [ 132.221751][ T124] hid-led 0003:1294:1320.0015: Riso Kagaku Webmail Notifier initialized [ 132.286416][ T377] usb 1-1: Using ep0 maxpacket: 32 [ 132.326444][ T429] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 132.370081][ T124] usb 2-1: USB disconnect, device number 25 [ 132.376505][ T378] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 132.384448][ T378] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 132.392907][ T378] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 132.403876][ T2534] EXT4-fs (loop0): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 132.686529][ T429] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.696530][ T429] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.707272][ T429] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 132.806441][ T378] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 132.867264][ T429] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.876550][ T429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.884348][ T429] usb 3-1: Product: syz [ 132.891851][ T429] usb 3-1: Manufacturer: syz [ 132.896573][ T429] usb 3-1: SerialNumber: syz [ 132.937283][ T429] usb 3-1: selecting invalid altsetting 1 [ 133.166449][ T378] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.177605][ T378] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.186266][ T378] usb 5-1: config 1 has no interface number 0 [ 133.192257][ T378] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.202889][ T378] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 133.212620][ T378] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 133.376584][ T378] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.385477][ T378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.393557][ T378] usb 5-1: Product: syz [ 133.397586][ T378] usb 5-1: Manufacturer: syz [ 133.402038][ T378] usb 5-1: SerialNumber: syz [ 133.446896][ T378] usb 5-1: selecting invalid altsetting 1 [ 133.579768][ T2541] EXT4-fs (loop2): Unrecognized mount option "rw" or missing value [ 133.606460][ T429] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 133.612331][ T429] cdc_ncm 3-1:1.1: bind() failure [ 133.618571][ T429] usb 3-1: USB disconnect, device number 27 [ 133.805960][ T2560] overlayfs: failed to resolve './file0': -2 [ 133.811880][ T377] usb 1-1: unable to get BOS descriptor or descriptor too short [ 133.820717][ T2560] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 133.876440][ T377] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 133.883880][ T377] usb 1-1: can't read configurations, error -71 [ 134.059354][ T2545] EXT4-fs (loop4): Unrecognized mount option "rw" or missing value [ 134.071591][ T2562] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 134.085392][ T2562] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 134.096699][ T2562] F2FS-fs (loop3): invalid crc value [ 134.103900][ T2562] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.138136][ T2562] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 134.144973][ T2562] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.181936][ T2562] attempt to access beyond end of device [ 134.181936][ T2562] loop3: rw=2049, want=45152, limit=40427 [ 134.197899][ T2254] attempt to access beyond end of device [ 134.197899][ T2254] loop3: rw=2049, want=45168, limit=40427 [ 134.203295][ T378] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 134.221960][ T378] cdc_ncm 5-1:1.1: bind() failure [ 134.228992][ T378] usb 5-1: USB disconnect, device number 26 [ 134.243780][ T2573] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 134.576493][ T2572] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 134.586462][ T2572] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 134.597871][ T2572] F2FS-fs (loop1): invalid crc value [ 134.608076][ T2572] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.632713][ T2572] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 134.639969][ T2572] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.682408][ T2572] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 134.690048][ T2572] netlink: 148 bytes leftover after parsing attributes in process `syz.1.511'. [ 134.726034][ T964] attempt to access beyond end of device [ 134.726034][ T964] loop1: rw=2049, want=45112, limit=40427 [ 134.866522][ T377] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 135.556416][ T341] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 135.585359][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.596892][ T377] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.612176][ T377] usb 1-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 135.621104][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.646128][ T377] usb 1-1: config 0 descriptor?? [ 135.664170][ T2607] overlayfs: failed to resolve './file0': -2 [ 135.671688][ T2607] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 136.065536][ T2579] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.077024][ T2597] F2FS-fs (loop4): Found nat_bits in checkpoint [ 136.131166][ T2597] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 136.138178][ T2597] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 136.166534][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.176537][ T341] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.185127][ T341] usb 3-1: config 1 has no interface number 0 [ 136.191103][ T341] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.202103][ T341] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 136.212492][ T341] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 136.317052][ T2579] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.325875][ T23] audit: type=1400 audit(1720022657.200:222): avc: denied { map } for pid=2578 comm="syz.0.513" path="/dev/ashmem" dev="devtmpfs" ino=851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.332532][ T2579] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.367855][ T377] hid-generic 0003:0EEF:C002.0016: unbalanced delimiter at end of report description [ 136.377379][ T377] hid-generic: probe of 0003:0EEF:C002.0016 failed with error -22 [ 136.386597][ T341] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.395786][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.403570][ T341] usb 3-1: Product: syz [ 136.407635][ T341] usb 3-1: Manufacturer: syz [ 136.412713][ T341] usb 3-1: SerialNumber: syz [ 136.457003][ T341] usb 3-1: selecting invalid altsetting 1 [ 136.476441][ T124] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 136.570845][ T377] usb 1-1: USB disconnect, device number 27 [ 136.709383][ T2628] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 136.716929][ T2628] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 136.726280][ T2628] F2FS-fs (loop3): invalid crc value [ 136.732824][ T2628] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.736430][ T124] usb 5-1: Using ep0 maxpacket: 32 [ 136.759363][ T2628] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 136.766313][ T2628] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 136.781398][ T2628] attempt to access beyond end of device [ 136.781398][ T2628] loop3: rw=2049, want=45152, limit=40427 [ 136.795302][ T2254] attempt to access beyond end of device [ 136.795302][ T2254] loop3: rw=2049, want=45160, limit=40427 [ 136.866554][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 136.877890][ T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 136.889220][ T124] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 136.898199][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.906851][ T124] usb 5-1: config 0 descriptor?? [ 136.926806][ T2621] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 136.956481][ T377] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 137.078007][ T2599] EXT4-fs (loop2): Unrecognized mount option "rw" or missing value [ 137.091929][ T2639] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 137.100772][ T341] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 137.107224][ T341] cdc_ncm 3-1:1.1: bind() failure [ 137.114383][ T341] usb 3-1: USB disconnect, device number 28 [ 137.591902][ T377] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.595720][ T2597] incfs: ino conflict with backing FS 4 [ 137.601886][ T377] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.618579][ T377] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 137.627850][ T124] hid-led 0003:1294:1320.0017: unknown main item tag 0x0 [ 137.634717][ T124] hid-led 0003:1294:1320.0017: unknown main item tag 0x0 [ 137.641613][ T124] hid-led 0003:1294:1320.0017: unknown main item tag 0x0 [ 137.648532][ T124] hid-led 0003:1294:1320.0017: unknown main item tag 0x0 [ 137.655384][ T124] hid-led 0003:1294:1320.0017: unknown main item tag 0x0 [ 137.663226][ T124] hid-led 0003:1294:1320.0017: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 137.676024][ T124] hid-led 0003:1294:1320.0017: Riso Kagaku Webmail Notifier initialized [ 137.806865][ T377] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.819877][ T377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.833912][ T377] usb 1-1: Product: syz [ 137.842034][ T377] usb 1-1: Manufacturer: syz [ 137.855045][ T341] usb 5-1: USB disconnect, device number 27 [ 137.862342][ T377] usb 1-1: SerialNumber: syz [ 137.863793][ T13] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 137.913328][ T13] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 137.921793][ T13] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 137.937053][ T377] usb 1-1: selecting invalid altsetting 1 [ 138.042643][ T2653] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 138.051805][ T2653] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.098371][ T2653] F2FS-fs (loop2): invalid crc value [ 138.114757][ T2653] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.130438][ T2666] overlayfs: failed to resolve './file0': -2 [ 138.158222][ T2666] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 138.202540][ T2653] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 138.210135][ T2653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 138.234685][ T2653] netlink: 'syz.2.526': attribute type 10 has an invalid length. [ 138.248899][ T2653] netlink: 148 bytes leftover after parsing attributes in process `syz.2.526'. [ 138.283076][ T1742] attempt to access beyond end of device [ 138.283076][ T1742] loop2: rw=2049, want=45112, limit=40427 [ 138.297085][ T2659] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 138.313635][ T2659] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.325014][ T2659] F2FS-fs (loop1): invalid crc value [ 138.331836][ T2659] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.570135][ T2659] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 138.577033][ T2659] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 138.654597][ T2659] netlink: 'syz.1.527': attribute type 10 has an invalid length. [ 138.662267][ T2659] netlink: 148 bytes leftover after parsing attributes in process `syz.1.527'. [ 138.674563][ T964] attempt to access beyond end of device [ 138.674563][ T964] loop1: rw=2049, want=45112, limit=40427 [ 138.740640][ T2630] EXT4-fs (loop0): Unrecognized mount option "rw" or missing value [ 138.826481][ T377] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 138.832505][ T377] cdc_ncm 1-1:1.1: bind() failure [ 138.851786][ T377] usb 1-1: USB disconnect, device number 28 [ 139.171515][ T2681] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 139.186698][ T2681] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.202100][ T2681] F2FS-fs (loop2): invalid crc value [ 139.209561][ T2681] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.257539][ T2681] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.264383][ T2681] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.286409][ T124] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 139.328554][ T2687] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 139.341865][ T2687] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.352627][ T2687] F2FS-fs (loop1): invalid crc value [ 139.357769][ T2681] netlink: 'syz.2.532': attribute type 10 has an invalid length. [ 139.365385][ T2681] netlink: 148 bytes leftover after parsing attributes in process `syz.2.532'. [ 139.367770][ T2687] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.389382][ T1742] attempt to access beyond end of device [ 139.389382][ T1742] loop2: rw=2049, want=45112, limit=40427 [ 139.433954][ T2687] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 139.441141][ T2687] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.465725][ T2687] attempt to access beyond end of device [ 139.465725][ T2687] loop1: rw=2049, want=45152, limit=40427 [ 139.480983][ T964] attempt to access beyond end of device [ 139.480983][ T964] loop1: rw=2049, want=45160, limit=40427 [ 139.498984][ T2701] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 139.573863][ T124] usb 5-1: Using ep0 maxpacket: 32 [ 139.808283][ T2709] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 139.819454][ T2709] ------------[ cut here ]------------ [ 139.824727][ T2709] WARNING: CPU: 1 PID: 2709 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 139.833910][ T2709] Modules linked in: [ 139.837648][ T2709] CPU: 1 PID: 2709 Comm: syz.2.536 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 139.848580][ T2709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 139.858480][ T2709] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 139.863942][ T2709] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 139.883379][ T2709] RSP: 0018:ffff8881dc59fa48 EFLAGS: 00010287 [ 139.889282][ T2709] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 139.897103][ T2709] RDX: ffffc90001d4c000 RSI: 0000000000003fb6 RDI: 0000000000003fb7 [ 139.904913][ T2709] RBP: ffff8881d8050220 R08: ffffffff81e5e076 R09: ffffed103a38ab81 [ 139.912720][ T2709] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 139.920528][ T2709] R13: ffff8881d1c55b60 R14: ffff8881d1c55bb0 R15: ffff8881d8050250 [ 139.928340][ T2709] FS: 00007f387be556c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 139.937106][ T2709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.943532][ T2709] CR2: 0000001b30f16ff8 CR3: 00000001f33d9000 CR4: 00000000003426a0 [ 139.951338][ T2709] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.959147][ T2709] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.966958][ T2709] Call Trace: [ 139.970101][ T2709] ? __warn+0x162/0x250 [ 139.974087][ T2709] ? report_bug+0x3a1/0x4e0 [ 139.978418][ T2709] ? ovl_dir_modified+0x45c/0x570 [ 139.983283][ T2709] ? ovl_dir_modified+0x45c/0x570 [ 139.988142][ T2709] ? do_invalid_op+0x6e/0x110 [ 139.992653][ T2709] ? invalid_op+0x1e/0x30 [ 139.996819][ T2709] ? ovl_dir_modified+0x1e6/0x570 [ 140.001676][ T2709] ? ovl_dir_modified+0x45c/0x570 [ 140.006540][ T2709] ? ovl_dir_modified+0x45c/0x570 [ 140.011400][ T2709] ? ovl_dir_modified+0x45c/0x570 [ 140.016260][ T2709] ? ovl_path_type+0x18e/0x2f0 [ 140.020869][ T2709] ovl_do_remove+0x6f0/0xc80 [ 140.025292][ T2709] ? ovl_set_redirect+0x5f0/0x5f0 [ 140.030161][ T2709] ? security_inode_rmdir+0xca/0x110 [ 140.035282][ T2709] vfs_rmdir+0x285/0x3c0 [ 140.039358][ T2709] incfs_kill_sb+0x105/0x200 [ 140.043778][ T2709] deactivate_locked_super+0xa8/0x110 [ 140.048986][ T2709] vfs_get_tree+0x1b9/0x260 [ 140.053328][ T2709] do_new_mount+0x292/0x570 [ 140.057663][ T2709] ? do_move_mount_old+0x160/0x160 [ 140.062607][ T2709] ? security_capable+0x86/0xb0 [ 140.067296][ T2709] do_mount+0x688/0xe10 [ 140.071289][ T2709] ? copy_mount_string+0x30/0x30 [ 140.076059][ T2709] ? copy_mount_options+0x29a/0x300 [ 140.081094][ T2709] ksys_mount+0xc2/0xf0 [ 140.085086][ T2709] __x64_sys_mount+0xb1/0xc0 [ 140.089515][ T2709] do_syscall_64+0xca/0x1c0 [ 140.093854][ T2709] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 140.099580][ T2709] RIP: 0033:0x7f387cbd3b99 [ 140.103836][ T2709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.123273][ T2709] RSP: 002b:00007f387be55048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.131517][ T2709] RAX: ffffffffffffffda RBX: 00007f387cd61f60 RCX: 00007f387cbd3b99 [ 140.139328][ T2709] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 140.147139][ T2709] RBP: 00007f387cc42a7a R08: 0000000020000dc0 R09: 0000000000000000 [ 140.154950][ T2709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.162762][ T2709] R13: 000000000000000b R14: 00007f387cd61f60 R15: 00007fff2461ae48 [ 140.170578][ T2709] ---[ end trace 5af93ed8bc9148f0 ]--- [ 140.176735][ T124] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 140.185570][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.195318][ T124] usb 5-1: config 0 descriptor?? [ 140.199724][ T2709] ------------[ cut here ]------------ [ 140.205374][ T2709] WARNING: CPU: 0 PID: 2709 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 140.214550][ T2709] Modules linked in: [ 140.218292][ T2709] CPU: 0 PID: 2709 Comm: syz.2.536 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 140.229227][ T2709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.239126][ T2709] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 140.244584][ T2709] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 14 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 140.264025][ T2709] RSP: 0018:ffff8881dc59fa48 EFLAGS: 00010283 [ 140.269923][ T2709] RAX: ffffffff81e5e2ec RBX: 0000000000000000 RCX: 0000000000040000 [ 140.277734][ T2709] RDX: ffffc90001d4c000 RSI: 000000000000da51 RDI: 000000000000da52 [ 140.285549][ T2709] RBP: ffff8881d8050220 R08: ffffffff81e5e076 R09: ffffed103a38ab81 [ 140.293364][ T2709] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 140.301176][ T2709] R13: ffff8881d1c55b60 R14: ffff8881d1c55bb0 R15: ffff8881d8050250 [ 140.308982][ T2709] FS: 00007f387be556c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 140.317744][ T2709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.324165][ T2709] CR2: 0000000000000000 CR3: 00000001f33d9000 CR4: 00000000003426b0 [ 140.331980][ T2709] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.339789][ T2709] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.347598][ T2709] Call Trace: [ 140.350731][ T2709] ? __warn+0x162/0x250 [ 140.354719][ T2709] ? report_bug+0x3a1/0x4e0 [ 140.359059][ T2709] ? ovl_dir_modified+0x45c/0x570 [ 140.363919][ T2709] ? ovl_dir_modified+0x45c/0x570 [ 140.368780][ T2709] ? do_invalid_op+0x6e/0x110 [ 140.373289][ T2709] ? invalid_op+0x1e/0x30 [ 140.377457][ T2709] ? ovl_dir_modified+0x1e6/0x570 [ 140.382318][ T2709] ? ovl_dir_modified+0x45c/0x570 [ 140.387181][ T2709] ? ovl_dir_modified+0x45c/0x570 [ 140.392036][ T2709] ? ovl_dir_modified+0x45c/0x570 [ 140.396901][ T2709] ? ovl_path_type+0x18e/0x2f0 [ 140.401605][ T2709] ovl_do_remove+0x6f0/0xc80 [ 140.406034][ T2709] ? ovl_set_redirect+0x5f0/0x5f0 [ 140.410930][ T2709] ? security_inode_rmdir+0xca/0x110 [ 140.416015][ T2709] vfs_rmdir+0x285/0x3c0 [ 140.420096][ T2709] incfs_kill_sb+0x18d/0x200 [ 140.424521][ T2709] deactivate_locked_super+0xa8/0x110 [ 140.429728][ T2709] vfs_get_tree+0x1b9/0x260 [ 140.434094][ T2709] do_new_mount+0x292/0x570 [ 140.438408][ T2709] ? do_move_mount_old+0x160/0x160 [ 140.443354][ T2709] ? security_capable+0x86/0xb0 [ 140.448042][ T2709] do_mount+0x688/0xe10 [ 140.452044][ T2709] ? copy_mount_string+0x30/0x30 [ 140.456807][ T2709] ? copy_mount_options+0x29a/0x300 [ 140.461841][ T2709] ksys_mount+0xc2/0xf0 [ 140.465832][ T2709] __x64_sys_mount+0xb1/0xc0 [ 140.470263][ T2709] do_syscall_64+0xca/0x1c0 [ 140.474631][ T2709] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 140.480330][ T2709] RIP: 0033:0x7f387cbd3b99 [ 140.484580][ T2709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.504020][ T2709] RSP: 002b:00007f387be55048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.512265][ T2709] RAX: ffffffffffffffda RBX: 00007f387cd61f60 RCX: 00007f387cbd3b99 [ 140.520077][ T2709] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 140.527886][ T2709] RBP: 00007f387cc42a7a R08: 0000000020000dc0 R09: 0000000000000000 [ 140.535697][ T2709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.543509][ T2709] R13: 000000000000000b R14: 00007f387cd61f60 R15: 00007fff2461ae48 [ 140.551325][ T2709] ---[ end trace 5af93ed8bc9148f1 ]--- [ 140.607883][ T124] rndis_host: probe of 5-1:0.0 failed with error -22 [ 140.758072][ T2712] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 140.759934][ T2720] overlayfs: failed to resolve './file1': -2 [ 140.776092][ T2720] SELinux: security_context_str_to_sid() failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 140.813875][ T2715] EXT4-fs (loop2): Test dummy encryption mode enabled [ 140.838582][ T124] usb 5-1: USB disconnect, device number 28 [ 140.845819][ T2712] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.847115][ T2715] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 140.876585][ T2712] EXT4-fs (loop3): Remounting filesystem read-only [ 141.067965][ T2725] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.096418][ T341] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 141.118356][ T2725] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 141.140166][ T23] audit: type=1400 audit(1720022662.020:223): avc: denied { create } for pid=2724 comm="syz.0.542" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 141.140516][ T2725] attempt to access beyond end of device [ 141.140516][ T2725] loop0: rw=2049, want=45104, limit=40427 [ 141.176651][ T23] audit: type=1400 audit(1720022662.050:224): avc: denied { read } for pid=2724 comm="syz.0.542" name="file0" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 141.387400][ T23] audit: type=1400 audit(1720022662.270:225): avc: denied { read write } for pid=2741 comm="syz.4.546" name="uhid" dev="devtmpfs" ino=9288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 141.390262][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.410773][ T23] audit: type=1400 audit(1720022662.270:226): avc: denied { open } for pid=2741 comm="syz.4.546" path="/dev/uhid" dev="devtmpfs" ino=9288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 141.418192][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.447993][ T124] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 141.455548][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.462775][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.470057][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.477314][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.484462][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.491149][ T2729] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.491850][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.498059][ T341] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.504949][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.522305][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.529690][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.534367][ T341] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 141.537122][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.553083][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.557654][ T341] usb 2-1: config 1 has no interface number 0 [ 141.560449][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.573712][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.574371][ T2729] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 141.581109][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.587373][ T341] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.587386][ T341] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 141.587396][ T341] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 141.587929][ T2729] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.594923][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.637674][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.644808][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.652049][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.659266][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.666578][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.673865][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.681110][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.688350][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.695480][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.702736][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.709963][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.717115][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.724286][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.731669][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.738891][ T377] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 141.746558][ T341] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.747237][ T377] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 141.767398][ T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.775247][ T341] usb 2-1: Product: syz [ 141.779216][ T341] usb 2-1: Manufacturer: syz [ 141.783603][ T341] usb 2-1: SerialNumber: syz [ 141.816483][ T124] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 141.827180][ T124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.837086][ T341] usb 2-1: selecting invalid altsetting 1 [ 141.838347][ T124] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.853126][ T124] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 141.866248][ T124] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 141.874127][ T23] audit: type=1400 audit(1720022662.750:227): avc: denied { ioctl } for pid=2748 comm="syz.2.547" path="socket:[30581]" dev="sockfs" ino=30581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.877779][ T124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.915091][ T124] usb 1-1: config 0 descriptor?? [ 141.966432][ T13] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 142.066426][ T377] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 142.206398][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 142.326524][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 142.337594][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 142.351003][ T2726] EXT4-fs (loop1): Unrecognized mount option "rw" or missing value [ 142.351125][ T13] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 142.367833][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.380713][ T13] usb 4-1: config 0 descriptor?? [ 142.396641][ T2729] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 142.436497][ T377] usb 5-1: config 0 has no interfaces? [ 142.441818][ T377] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 142.451086][ T377] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.486538][ T377] usb 5-1: config 0 descriptor?? [ 142.506456][ T341] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 142.512310][ T341] cdc_ncm 2-1:1.1: bind() failure [ 142.525109][ T341] usb 2-1: USB disconnect, device number 26 [ 142.562007][ T23] audit: type=1400 audit(1720022663.440:228): avc: denied { execute } for pid=2724 comm="syz.0.542" path="/48/file0/bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.785553][ T377] usb 5-1: USB disconnect, device number 29 [ 142.801699][ T23] audit: type=1400 audit(1720022663.680:229): avc: denied { relabelfrom } for pid=2764 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 142.821712][ T23] audit: type=1400 audit(1720022663.680:230): avc: denied { relabelto } for pid=2764 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 142.843462][ T2729] incfs: ino conflict with backing FS 4 [ 142.857677][ T13] hid-led 0003:1294:1320.0019: unknown main item tag 0x0 [ 142.864593][ T13] hid-led 0003:1294:1320.0019: unknown main item tag 0x0 [ 142.871424][ T13] hid-led 0003:1294:1320.0019: unknown main item tag 0x0 [ 142.878313][ T13] hid-led 0003:1294:1320.0019: unknown main item tag 0x0 [ 142.885307][ T13] hid-led 0003:1294:1320.0019: unknown main item tag 0x0 [ 142.893541][ T13] hid-led 0003:1294:1320.0019: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0 [ 142.906258][ T13] hid-led 0003:1294:1320.0019: Riso Kagaku Webmail Notifier initialized [ 143.091807][ T377] usb 4-1: USB disconnect, device number 23 [ 143.099093][ T378] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 143.107113][ T378] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 143.115239][ T378] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 143.138009][ T2768] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 143.147104][ T23] audit: type=1400 audit(1720022664.030:231): avc: denied { mount } for pid=2767 comm="syz.1.553" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 143.147137][ T2768] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038 (0x7fffffff) [ 143.338305][ T2773] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 143.348123][ T2773] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 143.496201][ T23] audit: type=1400 audit(1720022664.370:232): avc: denied { name_bind } for pid=2786 comm="syz.2.560" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 143.525130][ T2789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.561'. [ 143.601724][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.609169][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.616735][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.623987][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.631163][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.638375][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.645524][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.652809][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.660028][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.667281][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.674475][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.681709][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.688891][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.696082][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.703317][ T23] audit: type=1400 audit(1720022664.570:233): avc: denied { unmount } for pid=2254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 143.722690][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.729881][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.737110][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.744252][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.751620][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.758856][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.766018][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.773249][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.780441][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.787655][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.794823][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.802191][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.809367][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.816584][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.823779][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.831298][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.838535][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.840574][ T429] usb 1-1: USB disconnect, device number 29 [ 143.845764][ T377] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 143.846759][ T377] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 143.869898][ T1621] attempt to access beyond end of device [ 143.869898][ T1621] loop0: rw=2049, want=45120, limit=40427 [ 143.886558][ T341] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 144.177668][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 144.196897][ T2819] cgroup: syz.0.574 (2819) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 144.213577][ T2819] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 144.230555][ T2816] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,grpquota,,errors=continue [ 144.241532][ T2816] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 144.246531][ T341] usb 3-1: config 0 has no interfaces? [ 144.254361][ T23] audit: type=1400 audit(1720022665.130:234): avc: denied { ioctl } for pid=2815 comm="syz.3.573" path="/35/file0/cpu.stat" dev="loop3" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 144.261878][ T341] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 144.289941][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.301273][ T341] usb 3-1: config 0 descriptor?? [ 144.391066][ T2826] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue [ 144.516408][ T377] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 144.552057][ T2834] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 144.565151][ T2834] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff) [ 144.767435][ T377] usb 1-1: Using ep0 maxpacket: 8 [ 144.808381][ T2840] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 144.817945][ T2840] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 144.887115][ T378] usb 3-1: USB disconnect, device number 29 [ 144.936544][ T377] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 144.944566][ T377] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.954888][ T377] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.964830][ T377] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.974621][ T377] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.987482][ T377] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.996254][ T377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.506293][ T2908] [ 145.517985][ T2908] ********************************************************** [ 145.538739][ T2908] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 145.546214][ T2908] ** ** [ 145.554576][ T2908] ** trace_printk() being used. Allocating extra memory. ** [ 145.565086][ T2909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.592'. [ 145.574120][ T2908] ** ** [ 145.581929][ T2908] ** This means that this is a DEBUG kernel and it is ** [ 145.589603][ T2908] ** unsafe for production use. ** [ 145.598625][ T2908] ** ** [ 145.605964][ T2908] ** If you see this message and you are not debugging ** [ 145.613462][ T2908] ** the kernel, report this immediately to your vendor! ** [ 145.621376][ T2908] ** ** [ 145.628728][ T2908] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 145.635985][ T2908] ********************************************************** [ 145.748977][ T2918] BUG: kernel NULL pointer dereference, address: 0000000000000086 [ 145.756602][ T2918] #PF: supervisor instruction fetch in kernel mode [ 145.762935][ T2918] #PF: error_code(0x0010) - not-present page [ 145.768743][ T2918] PGD 1ef148067 P4D 1ef148067 PUD 1e3d0b067 PMD 0 [ 145.775080][ T2918] Oops: 0010 [#1] PREEMPT SMP KASAN [ 145.780116][ T2918] CPU: 1 PID: 2918 Comm: syz.1.594 Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 145.791060][ T2918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 145.800951][ T2918] RIP: 0010:0x86 [ 145.804336][ T2918] Code: Bad RIP value. [ 145.808235][ T2918] RSP: 0018:ffff8881df0b7308 EFLAGS: 00010086 [ 145.814137][ T2918] RAX: ffff8881df0b7338 RBX: dffffc0000000000 RCX: 0000000000040000 [ 145.821950][ T2918] RDX: ffffc90000b8b000 RSI: 00000000000016f0 RDI: 00000000000016f1 [ 145.829765][ T2918] RBP: 0000000000000ec0 R08: ffffffff82316961 R09: ffffffff811c8ff5 [ 145.837573][ T2918] R10: ffff8881e81f9f80 R11: 0000000000000002 R12: ffffffff84601550 [ 145.845384][ T2918] R13: fffffe0000000ec8 R14: ffff8881efb10000 R15: fffffe0000000ecb [ 145.853205][ T2918] FS: 00007f731561e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 145.861990][ T2918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.868385][ T2918] CR2: 000000000000005c CR3: 00000001e3648000 CR4: 00000000003426a0 [ 145.876194][ T2918] Call Trace: [ 145.879331][ T2918] ? __die+0xb4/0x100 [ 145.883143][ T2918] ? no_context+0xbda/0xe50 [ 145.887483][ T2918] ? is_prefetch+0x4b0/0x4b0 [ 145.891905][ T2918] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 145.897288][ T2918] ? __do_page_fault+0xa7d/0xbb0 [ 145.902068][ T2918] ? vmx_spec_ctrl_restore_host+0x83/0xfd [ 145.907620][ T2918] ? __bad_area_nosemaphore+0xc0/0x460 [ 145.913029][ T2918] ? page_fault+0x2f/0x40 [ 145.917184][ T2918] ? __entry_text_end+0x4/0x4 [ 145.921707][ T2918] ? vmx_handle_exit_irqoff+0x45/0x220 [ 145.926997][ T2918] ? check_preemption_disabled+0x91/0x320 [ 145.932565][ T2918] ? handle_external_interrupt_irqoff+0x148/0x2f0 [ 145.938921][ T2918] ? handle_external_interrupt_irqoff+0x12a/0x2f0 [ 145.945153][ T2918] ? __entry_text_end+0x4/0x4 [ 145.949671][ T2918] ? vcpu_enter_guest+0x2d06/0x9f70 [ 145.954721][ T2918] ? unwind_next_frame+0x176a/0x1ea0 [ 145.959833][ T2918] ? check_preemption_disabled+0x9f/0x320 [ 145.965377][ T2918] ? debug_smp_processor_id+0x20/0x20 [ 145.970691][ T2918] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 145.976594][ T2918] ? local_bh_enable+0x20/0x20 [ 145.981198][ T2918] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 145.986575][ T2918] ? rcu_softirq_qs+0x90/0x90 [ 145.991089][ T2918] ? check_preemption_disabled+0x9f/0x320 [ 145.996642][ T2918] ? debug_smp_processor_id+0x20/0x20 [ 146.001846][ T2918] ? check_preemption_disabled+0x9f/0x320 [ 146.007420][ T2918] ? check_preemption_disabled+0x9f/0x320 [ 146.012964][ T2918] ? debug_smp_processor_id+0x20/0x20 [ 146.018164][ T2918] ? check_preemption_disabled+0x9f/0x320 [ 146.023763][ T2918] ? debug_smp_processor_id+0x20/0x20 [ 146.028941][ T2918] ? switch_mm_irqs_off+0x325/0xab0 [ 146.034001][ T2918] ? _raw_spin_unlock_irq+0x4a/0x60 [ 146.039009][ T2918] ? finish_task_switch+0x130/0x590 [ 146.044045][ T2918] ? __schedule+0xb0d/0x1320 [ 146.048457][ T2918] ? is_mmconf_reserved+0x430/0x430 [ 146.053490][ T2918] ? debug_smp_processor_id+0x20/0x20 [ 146.058696][ T2918] ? check_preemption_disabled+0x9f/0x320 [ 146.064251][ T2918] ? preempt_schedule+0xd9/0xe0 [ 146.068939][ T2918] ? preempt_schedule_common+0xa6/0xd0 [ 146.074242][ T2918] ? preempt_schedule+0xd9/0xe0 [ 146.078923][ T2918] ? schedule_preempt_disabled+0x20/0x20 [ 146.084391][ T2918] ? tracing_record_taskinfo+0x74/0x230 [ 146.089770][ T2918] ? vmx_vcpu_load_vmcs+0x655/0x8b0 [ 146.094804][ T2918] ? ___preempt_schedule+0x16/0x20 [ 146.099748][ T2918] ? tracing_record_taskinfo+0x4a/0x230 [ 146.105131][ T2918] ? read_msr+0x40/0x40 [ 146.109134][ T2918] ? try_to_wake_up+0x9d3/0x14f0 [ 146.113909][ T2918] ? check_preemption_disabled+0x9f/0x320 [ 146.119573][ T2918] ? cpus_share_cache+0x110/0x110 [ 146.124422][ T2918] ? check_preemption_disabled+0x9f/0x320 [ 146.129975][ T2918] ? debug_smp_processor_id+0x20/0x20 [ 146.135186][ T2918] ? kvm_arch_vcpu_ioctl_run+0x748/0x18d0 [ 146.140737][ T2918] ? kvm_vcpu_ioctl+0x7f9/0xd10 [ 146.145422][ T2918] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 146.151344][ T2918] ? create_vcpu_fd+0x120/0x120 [ 146.156014][ T2918] ? do_futex+0x13fe/0x19f0 [ 146.160354][ T2918] ? create_vcpu_fd+0x120/0x120 [ 146.165038][ T2918] ? do_vfs_ioctl+0x742/0x1720 [ 146.169636][ T2918] ? ioctl_preallocate+0x250/0x250 [ 146.174580][ T2918] ? remove_vma_list+0x2e6/0x380 [ 146.179369][ T2918] ? userfaultfd_unmap_prep+0x4c0/0x4c0 [ 146.184752][ T2918] ? __fget+0x407/0x490 [ 146.188743][ T2918] ? fget_many+0x20/0x20 [ 146.192828][ T2918] ? switch_fpu_return+0x1d4/0x410 [ 146.197770][ T2918] ? security_file_ioctl+0x7d/0xa0 [ 146.202707][ T2918] ? __x64_sys_ioctl+0xd4/0x110 [ 146.207418][ T2918] ? do_syscall_64+0xca/0x1c0 [ 146.211910][ T2918] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 146.217801][ T2918] Modules linked in: [ 146.221547][ T2918] CR2: 0000000000000086 [ 146.225539][ T2918] ---[ end trace 5af93ed8bc9148f2 ]--- [ 146.230828][ T2918] RIP: 0010:0x86 [ 146.234217][ T2918] Code: Bad RIP value. [ 146.238128][ T2918] RSP: 0018:ffff8881df0b7308 EFLAGS: 00010086 [ 146.244013][ T2918] RAX: ffff8881df0b7338 RBX: dffffc0000000000 RCX: 0000000000040000 [ 146.251825][ T2918] RDX: ffffc90000b8b000 RSI: 00000000000016f0 RDI: 00000000000016f1 [ 146.259638][ T2918] RBP: 0000000000000ec0 R08: ffffffff82316961 R09: ffffffff811c8ff5 [ 146.267451][ T2918] R10: ffff8881e81f9f80 R11: 0000000000000002 R12: ffffffff84601550 [ 146.275258][ T2918] R13: fffffe0000000ec8 R14: ffff8881efb10000 R15: fffffe0000000ecb [ 146.283070][ T2918] FS: 00007f731561e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 146.291841][ T2918] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.298446][ T2918] CR2: 000000000000005c CR3: 00000001e3648000 CR4: 00000000003426a0 [ 146.306193][ T2918] Kernel panic - not syncing: Fatal exception [ 146.312309][ T2918] Kernel Offset: disabled [ 146.316437][ T2918] Rebooting in 86400 seconds..