last executing test programs: 11.212373817s ago: executing program 1 (id=299): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.711194063s ago: executing program 1 (id=345): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x80840) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 6.971590581s ago: executing program 1 (id=347): timer_create(0x0, 0x0, &(0x7f00000005c0)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mkdir(&(0x7f00000001c0)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000440)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x41, 0x0) write(r0, &(0x7f0000000540)='0', 0x1) 6.97140205s ago: executing program 1 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000003940)='./file0\x00', 0x181) mount$bind(&(0x7f0000003a00)='.\x00', &(0x7f0000003a40)='./file0/../file0\x00', 0x0, 0x1141099, 0x0) chroot(&(0x7f0000003a80)='./file0/../file0\x00') mount$bind(&(0x7f0000003ac0)='.\x00', &(0x7f0000003b00)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000003b40)='./file0\x00', &(0x7f0000003b80)='./file0/../file0\x00') 6.971213281s ago: executing program 1 (id=350): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x20, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x0) 6.873580313s ago: executing program 1 (id=353): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000080)=@base={0xa, 0x8, 0x4932, 0x7c, 0x0, 0x1, 0x18, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x50) 6.873411773s ago: executing program 32 (id=353): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000080)=@base={0xa, 0x8, 0x4932, 0x7c, 0x0, 0x1, 0x18, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x50) 5.133860305s ago: executing program 3 (id=379): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) pread64(r0, &(0x7f0000000600)=""/70, 0x46, 0x4) 5.133574545s ago: executing program 3 (id=380): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1, 0x14d3, &(0x7f0000002ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000003fc0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000004080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000040c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000004100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000004180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000041c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x4, 0xe, &(0x7f00000042c0)=ANY=[@ANYBLOB="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"], &(0x7f0000004f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004f40)={r3, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f0000004fc0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000005000), &(0x7f0000005040)}, 0x28) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ea30f364c8b31bd39b31b6368869726c936913e46a0713f9dd874021052d6f54136a2b946547f1416b411037771d728e398e4d6ff6021a4fe4430900da406745e85bcdab19d03992c1d40515d1395c6c3881b634c9ba27ba581c9f5f32f8c52fc57c3dff1f8ff58ded12d6cc7ed5b99b0000"], 0x1, 0x14d1, &(0x7f00000015c0)="$eJzs3AlwlcW2KOBe3f1DiBG3EZl79fphiwGaiIjIICIyiIiICIjMIiBiRERERISATCICIgIyRkSGEAGRIUDEMM/zPBg5iIiIyCSTQL/C47ncczy3uO+8cy+vKuur6kqv/Hut3Z1VyT9UZf/UdViNxjWrNiAi8a9Qf5vAX78kCyFihBADhRC3CSECIUTZ+LLx147nUpD8L70J+x/SMPVmr4DdTNz/7I37n71x/7M37n/2xv3P3rj/2Rv3P3vj/jOWraUVuJ1H9h38/D874/N/9sb9z964/9kb9z974/5nb9z/7I37n71x/7M37j9j2dr/B8+gedzEwRhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM/S+44K/TQoi/zW/2uhhjjDHGGGOMMfbv43Pe7BUwxhhjjDHGGGPsfx4IKZTQIhA5RE4RI3KJWHGLiBO3itziNhERt4t4cYfII+4UeUU+kV8UEAVFIVFYGIHCChKhKCKKiqi4SxQTd4sEUVyUECWFE6VEorhHlBb3ijLiPlFW3C/KiQdEeVFBVBSVxIOisnhIVBEPi6riEVFNVBc1RE3xqKglHhO1xeOijnhC1BVPinriKVFfPC0aiIaikXhGNBbPiiaiqWgmmosWoqVo9S/lvyV6iLdFT9FLJIveoo94R/QV/UR/MUAMFO+KQeI9MVi8L4aIoWKY+EAMFx+KEeIjMVKMEqPFx2KMGCvGifFigpgoUsQnYpL4VEwWn4kpYqqYJqaLVDFDpInPxUwxS8wWX4g54ksxV8wT88UCkS4WikViscgQX4kl4muRKZaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdopdYrfYI/aKfWK/OCC+EVni2//L/PP/kN8NBAiQIEGDhhyQA2IgBmIhFuIgDnJDbohABOIhHvJAHsgLeSE/5IeCUBAKQ2FAQCAgKAJFIApRKAbFIAESoASUAAcOEiERSsO9UAbKQFkoC+WgHJSHClABKkElqAyVoQpUgapQFapBNagBNeBReBQeg9pQG+pAHagLdaEe1IP6UB8aQANoBI2gMTSGJtAEmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIAk6QkfoBJ2gM3SGLtAFukJX6AZvwpvwFrwFb8Pb0Auqyd7QB/pAX+gL/WEADIB3YRC8B+/B+zAEhsIw+AA+gA9hBJyDkTAKRsNoqCzHwjgYDyQnQgqkwCSYBJNhMkyBqTAVpkMqzIA0SIOZMAtmwRcwB76EL2EezIMFkA7psAgWQwZkwBI4D5mwFJbBclgBK2EFrIY1sBrWwXpYBxthI2yGzbAVtsJ22A47YSfsht2wF/bCftgPQyALsuAgHIRDcAgOw2E4AkfgKByFY3AMjsNxOAEn4CScgtNwCs7CWTgH5+ECXIBLcAkuw2W4Clev/fLLa7TUMofMIWNkjIyVsTJOxsncMreMyIiMl/Eyj8wj88q8Mr/MLwvKgrKwLCxRoiQZyiKyiIzKqCwmi8kEmSBLyBLSSScTZaIsLUvLMrKMLCvvl+XkA7K8rCDbukqykqws27kq8mFZVVaV1WR1WUPWlDVlLVlL1pa1ZR1ZR9aVdWU9+ZSsL3tDf2gor3WmsRwKTeQwaCabyxaypfwQnpOt5QhoI9vKdvIFOQpGQgfZ2iXJl2VHOQ46yVfleHhNdpEToat8Q3aTb8ru8i3ZQ7ZxPWUvOQV6yz5yOvSV/WR/OUDOhOryWsdqyPflEDlUDpMfyAXwoRwhP5Ij5Sg5Wn4sx8ixcpwcLyfIiTJFfiInyU/lZPmZnCKnymlyukyVM2Sa/FzOlLPkbPmFnCO/lHPlPDlfLpDpcqFcJBfLDPmVXCK/lplyqVwml8sVcqVcJVfLNXKtXCfXyw1yo9wkN8stcqvcJrfLHXKn3CV3yz1yr9wn98sD8huZJb+VB+Vf5CH5nTwsv5dH5A/yqPxRHpM/yePyZ3lC/iJPylPytDwjz8pf5Tl5Xl6QF+Ul+Zu8LK/Iq9JLoUBJpZRWgcqhcqoYlUvFqltUnLpV5Va3qYi6XcWrO1QedafKq/Kp/KqAKqgKqcLKKFRWkQpVEVVURdVdqpi6WyWo4qqEKqmcKqUS1T2qtLpXlVH3qbLqflVOPaDKqwqqoqqkHlSV1UOqinpYVVWPqGqquqqhaqpHVS31mKqtHld11BOqrnpS1VNPqfrqadVANVSN1DOqsXpWNVFNVTPVXLVQLVUr9ZxqrZ5XbVRb1U69oNqrF1UH9ZJKUi+rjuoV1Um9qjqr11QX9brqqt5Q3dSbqru6oq4qr3qqXipZ9VZ91Duqr+qn+qsBaqB6Vw1S76nB6n01RA1Vw9QHarj6UI1QH6mRapQarT5WY9RYNU6NVxPURJWiPlGT1KdqsvpMTVFT1TQ1XaWqGar/H5Vm/zfyP/0n+YN/f/fNaovaqrap7WqH2ql2qd1qj9qj9ql96oA6oLJUljqoDqpD6pA6rA6rI+qIOqqOqmPqmDqujqsT6oQ6qU6pi+qMOqt+VefUeXVeXVSX1CV1+Y+fgdCgpVZa60Dn0Dl1jM6lY/UtOk7fqnPr23RE367j9R06j75T59X5dH5dQBfUhXRhbTRqq0mHuoguqqP6Ll1M360TdHFdQpfUTpfSifqe/+f8G62vlW6lW+vWuo1uo9vpdrq9bq876A46SSfpjrqj7qQ76c66s+6iu+iuuqvuprvp7rq77qF76J66p07WybqPfkf31f10fz1AD9Tv6kF6kB6sB+sheogepofp4Xq4HqFH6JF6pB6tR+sxeowep8fpCXqCTtEpepKepCfryXqKnqKn6Wk6VafqNJ2mZ+qZeraerefoOXqunqvn6/k6XafrRXqRztAZeoleojP1Ur1UL9fL9Uq9Uq/Wq/VavVav1+v1Rr1RZ+oteoveprfpHXqH3qV36T16j96n9+kD+oDO0ln6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+gT+qQ+qU/r0/qsPqvP6XP6gr6gL+lL+rK+rK/qq9cu+wIZyEAHOsgR5AhigpggNogN4oK4IHeQO4gEkSA+iA/yBHcGeYN8Qf6gQFAwKBQUDkyAgQ0oCIMiQdEgGtwVFAvuDhKC4kGJoGTgglJBYnBPUDq4NygT3BeUDe4PygUPBOWDCkHFoFLwYFA5eCioEjwcVA0eCaoF1YMaQc3g0aBW8FhQO3g8qBM8EdQNngzqBU8F9YOngwZBw6BR8EzQOHg2aBI0DZoFzYMWQcug1b+1vvfn8j3veppeJtn0Nn3MO6av6Wf6mwFmoHnXDDLvmcHmfTPEDDXDzAdmuPnQjDAfmZFmlBltPjZjzFgzzow3E8xEk2I+MZPMp2ay+cxMMVPNNDPdpJoZJs18bmaaWWa2+cLMMV+auWaemW8WmHSz0Cwyi02G+cosMV+bTLPULDPLzQqz0qwyq80as9asM+vNBrPRbDKbzRaz1Wwz280Os9PsMrvNHrPX7DP7zQHzjcky35qD5i/mkPnOHDbfmyPmB3PU/GiOmZ/McfOzOWF+MSfNKXPanDFnza/mnDlvLpiL5pL5zVw2V8xV469d3F87vaNGjTkwB8ZgDMZiLMZhHObG3BjBCMZjPObBPJgX82J+zI8FsSAWxsJ4DSFhESyCUYxiMSyGCZiAJbAEOnSYiIlYGktjGSyDZbEslsNyWB7LY0WsiA/ig/gQPoQP48P4CD6C1bE61sSaWAtrYW2sjXWwDtbFulgP62F9rI8NsAE2wkbYGBtjE2yCzbAZtsAW2ApbYWtsjW2wDbbDdtge22MH7IBJmIQdsSN2wk7YGTtjF+yCXbErdsNu2B27Yw/sgT2xJyZjMvbBPtgX+2J/7I8DcSAOwkE4GAfjEByCw3AYDsfhOAJH4EgchaPxYxyDY3EcjscJOBFTMAUn4SScjJNxCk7BaTgNUzEV0zANZ+JMnI2zcQ7Owbk4F+fjfEzHdFyEizADM3AJLsFMzMRluAxX4ApchatwDa7BdbgON+AG3ISbcAtuwW24DXfgDtyFu3AP7sF9uA8P4AHMwiw8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/gCTyJJ/E0nsazeBbP4Tm8gBfwEv6Gl/EKXkWPMTaXjbW32Dh7q81tb7P/GOe3BWxBW8gWtsbmtfn+LkZrbYItbkvYktbZUjbR3vOnuLytYCvaSvZBW9k+ZKv8Ka5lH7O17eO2jn3C1rSP/l1c1z5p69lnbX3b1DawzW0j29I2ts/aJrapbWab2xa2pW1vX7Qd7Es2yb5sO9pX/hQvsovtGrvWrrPr7T67316wF+0x+5O9ZH+zPW0vO9C+awfZ9+xg+74dYof+KR5tP7Zj7Fg7zo63E+zEP8XT7HSbamfYNPu5nWln/SlOtwvtHJth59p5dr5d8Ht8bU0Z9iu7xH5tM+1Su8wutyvsSrvKrv6PtS63G+0mu9nusXvtNrvd7rA77S67+/f42j4O2G9slv3WHrU/2kP2O3vYHrdH7A+/x9f2d9z+bE/YX+xJe8qetmfsWfurPWfP/77/a3s/Y6/Yq9ZbQUCSFGkKKAflpBjKRbF0C8XRrZSbbqMI3U7xdAfloTspL+Wj/FSAClIhKkyGkCwRhVSEilKU7qJidDclUHEqQSXJUSlKpHuoNN1LZeg+Kkv3Uzl6gMpTBapIlehBqkwPURV6mKrSI1SNqlMNqkmPUi16jGrT41SHnqC69CTVo6eoPj1NDaghNaJnqDE9S02oKTWj5tSCWlIreo5a0/PUhtpSO3qB2tOL1IFeoiR6mTrSK9SJXqXO9Bp1odepK71B3ehN6k5vUQ96m3pSL0qm3tSH3qG+1I/60wAaSO/SIHqPBtP7NISG0jD6gIbThzSCPqKRNIpG08c0hsbSOBpPE2gipdAnNIk+pcn0GU2hqTSNplMqzaA0+pxm0iyaTV/QHPqS5tI8mk8LKJ0W0iJaTBn0FS2hrymTltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjtoJ+2i3bSH9tI+2k8H6BvKom/pIP2FDtF3dJi+pyP0Ax2lH+kY/UTH6Wc6Qb/QSTpFp+kMnaVf6Rydpwt0kS7Rb3SZrtBV8iRCCGWoQh0GYY4wZxgT5gpjw1vCuPDWMHd4WxgJbw/jwzvCPOGdYd4wX5g/LBAWDAuFhUMTYmhDCsOwSFg0jIZ3hcXCu8OEsHhYIiwZurBUmBjeE5YO7w3LhPeFZcP7w3LhA2H5sEJYMawUPhhWDh8Kq4QPh1XDR8JqYfWwRlgzfDSsFT4W1g4fD+uET4RlwifDeuFTYf3w6bBB2DBsFD4TNg6fDZuETcNmYfOwRdgybBU+F7YOnw/bhG3DduELYfvwxbBD+FKYFL4cdgxfueHx5LB32Cd8J3wn9P5xNT+6IJoeXRhdFF0czYh+FV0S/TqaGV0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RTdHPW+Zk7hwEmnnHaBy+FyuhiXy8W6W1ycu9Xldre5iLvdxbs7XB53p8vr8rn8roAr6Aq5ws44dNaRC10RV9RF3V2umLvbJbjiroQr6Zwr5RJdS9fKtXKt3fOujWvr2rkX3AvuRfeie8m95F52Hd0rrpN71XV2r7ku7nX3unvDdXNvuu7uLdfDve16ul4u2SW7Pq6P6+v6uv6uvxvoBrpBbpAb7Aa7IW6IG+aGueFuuBvhRriRbqQb7Ua7MW6MG+fGuQlugktxKW6Sm+Qmu8luipviprlpLtWlujSX5ma6mW62m+3muDlurpvr5rv5Lt2lu0VukctwGW6JW+IyXaZb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+a2uR1uh9vldrk9bo/b5/a5A+6Ay3JZ7qA76A65Q+6w+94dcT+4o+5Hd8z95I67n90J94s76U650+6MO+t+defceXfBXXSX3G/usrvirjrvUiKfRCZFPo1MjnwWmRKZGpkWmR5JjcyIpEU+j8yMzIrMjnwRmRP5MjI3Mi8yP7Igkh5ZGFkUWRzJiHwVWRL5OpIZWRpZFlkeWRFZGfG+0LbQF/FFfdTf5Yv5u32CL+5L+JLe+VI+0d/jS/t7fRl/ny/r7/fl/AO+vK/gK/qmvplv7lv4lr6Vf8639s/7Nr6tb+df8O39i76Df8kn+Zd9R/+K7+Rf9Z39a76Lf9139W/4bv5N392/5Xv4t31P38sn+96+j3/H9/X9fH8/wA/07/pB/j0/2L/vh/ihfpj/wA/3H/oR/iM/0o/yo/3Hfowf68f58X6Cn+hT/Cd+kv/UT/af+Sl+qp/mp/tUP8On+c/9TD/Lz/Zf+Dn+Sz/Xz/Pz/QKf7hf6RX6xz/Bf+SX+a5/pl/plfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t9/j9/p9fr8/4L/xWf5bf9D/xR/y3/nD/nt/xP/gj/of/TH/kz/uf/Yn/C/+pD/lT/sz/qz/1Z/z5/0Ff9Ff8r/5y/6Kv8r/s8YYY4wx9t+ibnC89z/5nvxjXNNHCHHr9gJH/rHmhrx/nfeT+zpGhBAv9+ra8G+jYcPk5OQ/XpupRFB0nhAicj0/h7geLxXtxIsiSbQVpf/p+vrJikA3qB+9X4jY/5QTI67H1+vf+1/Ub7rwhvXnCZFQ9HpOLnE9vl6/zH9Rf3f7G9TP9V2KEG3+U06cuB5fr58onheviKS/eyVjjDHGGGOMMfZX/eSlbje6v712f15QX8/JKa7HN7o/Z4wxxhhjjDHG2M332pvdX3ouKaltZ57whCc8+Y/Jzf7LxBhjjDHGGPt3u37Rf7NXwhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZV//Gx8ndrP3yBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjN1s/ycAAP//fMhn/w==") 4.220798038s ago: executing program 3 (id=402): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x20f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) 3.145869304s ago: executing program 5 (id=433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x50) ppoll(&(0x7f0000000440)=[{r0, 0x1000}], 0x1, &(0x7f0000000480), 0x0, 0x0) 2.383625402s ago: executing program 3 (id=436): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) 2.383431602s ago: executing program 3 (id=437): syz_usb_connect$cdc_ecm(0x3, 0x62, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x60, 0x60, "", [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0xfffffffffffffc1c, 0x24, 0x0, 0x6a}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x5d, 0x79}, [@acm={0x4, 0x24, 0x2, 0x3}, @country_functional={0x0, 0x24, 0x7, 0x0, 0x99e4}, @obex={0x5, 0x24, 0x15, 0x3ff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x24, 0x9, 0x6a}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0xa, 0xd}}}}}]}}]}}, 0x0) 2.327934014s ago: executing program 5 (id=440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x2c, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) 2.327635894s ago: executing program 5 (id=442): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x20, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="a0002883781e", 0x6}], 0x1}}], 0x1, 0x0) 2.293130895s ago: executing program 5 (id=446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, 0x0) 2.288318295s ago: executing program 5 (id=448): socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000010"], 0x48) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000600000082505a5a440000000010109024400010100000009040000030205240000000d0c0f0100000000000000000009"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000240)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000001800)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000003840)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000038c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000058c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005980)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f00000059c0)='./file0\x00', 0x80101, 0x0) dup2(r5, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.237804936s ago: executing program 4 (id=449): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000b80)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, 0x1}, 0x80) write$binfmt_misc(r1, &(0x7f0000000c40), 0xfe46) 2.237546626s ago: executing program 4 (id=451): mount$bpf(0x200000000000, &(0x7f0000000440)='.\x00', 0x0, 0x28e7840, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001ec0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = eventfd2(0x0, 0x0) io_setup(0x3, &(0x7f0000000c40)=0x0) getpid() io_submit(r4, 0x2, &(0x7f0000000c80)=[&(0x7f0000000cc0)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x7, 0x4, r3, 0x0, 0x0, 0x3}]) shutdown(r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtclass={0x68, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}, @TCA_RATE={0x6, 0x5, {0xfe}}]}, 0x68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000780)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r9, &(0x7f00000007c0), 0xffffffffffffff58, 0x20008005, &(0x7f0000000800)={0x2, 0x4e20}, 0x10) 1.480879865s ago: executing program 0 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18, 0x8f, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x28}}, 0x4000) 1.429838176s ago: executing program 0 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)={0x20, 0x19, 0x15, 0x70bd30, 0x25dfdbfd, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x01\x00'}, @generic="5aca4e"]}, 0x20}], 0x1}, 0x0) 1.429746685s ago: executing program 0 (id=464): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000740)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x40004f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) 1.429656016s ago: executing program 0 (id=465): r0 = open_tree(0xffffffffffffffff, 0x0, 0x100) write$P9_RAUTH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000c00)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c40)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000d00)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='./proc\x00', &(0x7f0000000e80)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./proc/devices\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000f00)=""/4114, 0x1012, 0x81000000000001) 1.329477618s ago: executing program 4 (id=466): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000200)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1.24584186s ago: executing program 4 (id=468): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x20, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="a0002883781e", 0x6}], 0x1}}], 0x1, 0x0) 1.207356751s ago: executing program 4 (id=471): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4000000005000140000000", 0xb) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x2000010, &(0x7f0000000280)={[{@data_writeback}, {@journal_async_commit}]}, 0x1, 0x7f7, &(0x7f0000001140)="$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") 964.057527ms ago: executing program 2 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, r4, 0x321, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 637.798845ms ago: executing program 4 (id=475): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000540)={0xe, {"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", 0x1040}}, 0x1006) recvmmsg(r0, &(0x7f0000001640), 0x0, 0x10002, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x13, 0x3, &(0x7f00000001c0)=@framed={{0xde, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x2c}}, &(0x7f0000000200)='syzkaller\x00'}, 0x80) 561.467227ms ago: executing program 0 (id=476): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='-'], 0x28) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x19c) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) syz_emit_ethernet(0x7c, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "193914", 0xe, 0x2f, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0xffffffffffffff26, 0xffff}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x1]}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) readv(r1, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/21, 0x15}], 0x1) 508.666388ms ago: executing program 0 (id=477): mount$bpf(0x200000000000, &(0x7f0000000440)='.\x00', 0x0, 0x28e7840, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001ec0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = eventfd2(0x0, 0x0) io_setup(0x3, &(0x7f0000000c40)=0x0) getpid() io_submit(r4, 0x2, &(0x7f0000000c80)=[&(0x7f0000000cc0)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r3}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x7, 0x4, r3, 0x0, 0x0, 0x3}]) shutdown(r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtclass={0x68, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}, @TCA_RATE={0x6, 0x5, {0xfe}}]}, 0x68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000780)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r9, &(0x7f00000007c0), 0xffffffffffffff58, 0x20008005, &(0x7f0000000800)={0x2, 0x4e20}, 0x10) 457.87385ms ago: executing program 3 (id=478): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000780)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000007c0), 0xffffffffffffff58, 0x20008005, &(0x7f0000000800)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000840)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) 95.352918ms ago: executing program 2 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x6, 0xc, &(0x7f0000002200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000002280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000022c0)={{r0}, &(0x7f0000002300), &(0x7f0000002340)=r1}, 0x20) 87.712009ms ago: executing program 2 (id=480): mkdir(&(0x7f00000001c0)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000440)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x41, 0x0) write(r0, &(0x7f0000000540)='0', 0x1) 37.886159ms ago: executing program 2 (id=481): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x20, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="a0002883781ecc", 0x7}], 0x1}}], 0x1, 0x0) 37.78305ms ago: executing program 2 (id=482): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 37.71247ms ago: executing program 2 (id=483): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000500)='./file1\x00', 0x14b27e, 0x68) syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000020732b130040004102030109026000033c06e0090904000000010100000a240108000a00020102090401000001020000090441010101020000090501090000090206072501080609000904020000eb020000090402010101020000090582094000070905072501000503004fbd5c9931c1c88c394ba585064f2861c48b"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=484): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='e:my_read_msr1 msr/read_msr', 0x1b) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) creat(&(0x7f0000000300)='./tracing/dynamic_events\x00', 0x21) write(r3, &(0x7f0000000340)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.169' (ED25519) to the list of known hosts. [ 17.790848][ T30] audit: type=1400 audit(1792456877.628:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.791954][ T277] cgroup: Unknown subsys name 'net' [ 17.813522][ T30] audit: type=1400 audit(1792456877.628:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.840885][ T30] audit: type=1400 audit(1792456877.658:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.841204][ T277] cgroup: Unknown subsys name 'devices' [ 17.985722][ T277] cgroup: Unknown subsys name 'hugetlb' [ 17.991334][ T277] cgroup: Unknown subsys name 'rlimit' [ 18.127765][ T30] audit: type=1400 audit(1792456877.968:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.150939][ T30] audit: type=1400 audit(1792456877.968:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.154697][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.175864][ T30] audit: type=1400 audit(1792456877.968:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.207289][ T30] audit: type=1400 audit(1792456878.028:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.232659][ T30] audit: type=1400 audit(1792456878.028:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.246914][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.258212][ T30] audit: type=1400 audit(1792456878.088:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.292372][ T30] audit: type=1400 audit(1792456878.088:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.839975][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.847081][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.854616][ T285] device bridge_slave_0 entered promiscuous mode [ 18.862472][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.869707][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.877060][ T285] device bridge_slave_1 entered promiscuous mode [ 18.941441][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.948549][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.955891][ T286] device bridge_slave_0 entered promiscuous mode [ 18.963926][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.971015][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.978277][ T286] device bridge_slave_1 entered promiscuous mode [ 18.984872][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.991897][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.999239][ T287] device bridge_slave_0 entered promiscuous mode [ 19.027247][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.034333][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.041627][ T287] device bridge_slave_1 entered promiscuous mode [ 19.081249][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.088325][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.095803][ T289] device bridge_slave_0 entered promiscuous mode [ 19.113917][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.121005][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.128374][ T288] device bridge_slave_0 entered promiscuous mode [ 19.135008][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.142030][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.149362][ T289] device bridge_slave_1 entered promiscuous mode [ 19.175721][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.182768][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.190140][ T288] device bridge_slave_1 entered promiscuous mode [ 19.238142][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.245196][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.252469][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.259499][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.320810][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.327861][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.335130][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.342138][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.369082][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.376141][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.383396][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.390435][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.406892][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.413931][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.421296][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.428359][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.443417][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.450477][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.457753][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.464780][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.495714][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.503945][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.512985][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.520342][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.527885][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.535118][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.542398][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.549961][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.558184][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.565421][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.572571][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.580827][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.588223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.611483][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.619440][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.627439][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.636063][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.643074][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.659316][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.666848][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.687464][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.695798][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.702826][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.710330][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.718569][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.726886][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.733894][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.741278][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.749207][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.757516][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.764552][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.771943][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.779867][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.790023][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.798179][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.805215][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.820078][ T285] device veth0_vlan entered promiscuous mode [ 19.827196][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.835262][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.842607][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.850868][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.866186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.873677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.881494][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 19.889990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.898313][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.905361][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.912896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 19.921251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.929414][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.936443][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.943856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 19.952215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.967595][ T285] device veth1_macvtap entered promiscuous mode [ 19.977209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 19.985659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.993527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.002180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.010217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.018465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.026611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.043749][ T286] device veth0_vlan entered promiscuous mode [ 20.053075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.061428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.069964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.078212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.086368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.094569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.102424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.110441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.118473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.126790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.135171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.142604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.155324][ T287] device veth0_vlan entered promiscuous mode [ 20.164730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.172634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.180715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.188977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.200710][ T287] device veth1_macvtap entered promiscuous mode [ 20.210715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.218331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.225857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.233912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.242179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.249945][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.258352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.266692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.274576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.282513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.290112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.300425][ T288] device veth0_vlan entered promiscuous mode [ 20.310729][ T286] device veth1_macvtap entered promiscuous mode [ 20.319533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.327919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.336261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.343806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.352352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.360794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.369238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.377756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.386138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.398748][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.407029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.422840][ T288] device veth1_macvtap entered promiscuous mode [ 20.431264][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.439024][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.447143][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.455301][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.463439][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.471953][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.479451][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.492570][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 20.494505][ T289] device veth0_vlan entered promiscuous mode [ 20.517856][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.526965][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.538089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.547925][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.549920][ T309] loop1: detected capacity change from 0 to 4096 [ 20.556526][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.573361][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.588679][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.626532][ T289] device veth1_macvtap entered promiscuous mode [ 20.640588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.650933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.660900][ T309] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 20.691500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.704942][ T309] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.2: Failed to acquire dquot type 0 [ 20.720699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.779924][ T330] loop4: detected capacity change from 0 to 512 [ 20.893298][ T335] ======================================================= [ 20.893298][ T335] WARNING: The mand mount option has been deprecated and [ 20.893298][ T335] and is ignored by this kernel. Remove the mand [ 20.893298][ T335] option from the mount to silence this warning. [ 20.893298][ T335] ======================================================= [ 20.924130][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 20.934054][ T330] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 20.935732][ T306] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 20.946483][ T330] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 20.968185][ T330] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.184216][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 21.304532][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 21.304572][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 21.326726][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 21.368187][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 21.445317][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 21.457410][ T39] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 21.498938][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 21.513424][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 21.570157][ T39] usb 3-1: config 0 descriptor?? [ 21.612082][ T306] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 21.850373][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 21.861865][ T341] loop1: detected capacity change from 0 to 512 [ 21.863180][ T306] usb 4-1: config 0 descriptor?? [ 21.927673][ T341] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 21.940106][ T341] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.956617][ T341] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 22.031737][ T351] loop1: detected capacity change from 0 to 512 [ 22.059587][ T351] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 22.072785][ T351] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 22.084514][ T351] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.14: invalid indirect mapped block 32768 (level 2) [ 22.098386][ T351] EXT4-fs (loop1): 1 orphan inode deleted [ 22.104140][ T351] EXT4-fs (loop1): 1 truncate cleaned up [ 22.109800][ T351] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 22.214108][ T325] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 22.277561][ T39] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 22.285068][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.338964][ T39] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 22.361626][ T39] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 22.375509][ T306] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 22.383745][ T39] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 22.407933][ T306] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 22.445499][ T39] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 22.452956][ T39] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 22.462193][ T39] microsoft 0003:045E:07DA.0001: unknown main item tag 0xd [ 22.473480][ T39] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input4 [ 22.485653][ T39] microsoft 0003:045E:07DA.0001: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 22.500906][ T39] usb 3-1: USB disconnect, device number 2 [ 22.517832][ T359] fido_id[359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 22.634114][ T325] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 22.644295][ T325] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 22.754208][ T325] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 22.763346][ T325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 22.771393][ T325] usb 5-1: SerialNumber: syz [ 22.774572][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 22.786301][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.834536][ T325] usb-storage 5-1:1.0: USB Mass Storage device detected [ 22.842259][ T325] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 22.924837][ T325] usb 4-1: USB disconnect, device number 2 [ 22.954173][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 22.963675][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.971698][ T20] usb 1-1: Product: syz [ 22.975980][ T20] usb 1-1: Manufacturer: syz [ 22.980554][ T20] usb 1-1: SerialNumber: syz [ 23.007565][ T364] loop2: detected capacity change from 0 to 512 [ 23.024835][ T20] usb 1-1: selecting invalid altsetting 1 [ 23.046191][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 23.046206][ T30] audit: type=1400 audit(1792456882.878:133): avc: denied { read write } for pid=344 comm="syz.4.12" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 23.075758][ T30] audit: type=1400 audit(1792456882.878:134): avc: denied { open } for pid=344 comm="syz.4.12" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 23.107908][ T30] audit: type=1400 audit(1792456882.888:135): avc: denied { mounton } for pid=344 comm="syz.4.12" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 23.131140][ T364] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.16: inode has both inline data and extents flags [ 23.150294][ T364] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.16: couldn't read orphan inode 15 (err -117) [ 23.174109][ T364] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 23.201582][ T30] audit: type=1400 audit(1792456883.038:136): avc: denied { create } for pid=344 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 23.206181][ T370] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 23.220999][ T30] audit: type=1400 audit(1792456883.038:137): avc: denied { create } for pid=369 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.250197][ T325] usb 5-1: USB disconnect, device number 2 [ 23.257276][ T30] audit: type=1400 audit(1792456883.038:138): avc: denied { ioctl } for pid=369 comm="syz.1.18" path="socket:[15717]" dev="sockfs" ino=15717 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.283006][ T30] audit: type=1400 audit(1792456883.068:139): avc: denied { write } for pid=344 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 23.336839][ T374] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.338751][ T30] audit: type=1400 audit(1792456883.178:140): avc: denied { read append } for pid=373 comm="syz.1.20" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.375814][ T30] audit: type=1400 audit(1792456883.178:141): avc: denied { open } for pid=373 comm="syz.1.20" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.399798][ T30] audit: type=1400 audit(1792456883.178:142): avc: denied { ioctl } for pid=373 comm="syz.1.20" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.447390][ T381] loop1: detected capacity change from 0 to 512 [ 23.475466][ T381] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 23.493086][ T381] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 23.525283][ T20] usb 1-1: selecting invalid altsetting 1 [ 23.531060][ T20] cdc_ncm 1-1:1.0: bind() failure [ 23.570943][ T393] loop1: detected capacity change from 0 to 512 [ 23.671477][ T396] loop1: detected capacity change from 0 to 16 [ 23.683499][ T396] erofs: (device loop1): mounted with root inode @ nid 36. [ 23.697769][ T396] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=89 [ 23.716027][ T396] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=89 [ 23.717293][ T379] usb 1-1: USB disconnect, device number 2 [ 23.725615][ T396] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=89 [ 23.745869][ T396] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=89 [ 23.754984][ T396] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=89 [ 23.764587][ T396] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=89 [ 24.174075][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.245717][ T406] loop0: detected capacity change from 0 to 512 [ 24.267442][ T408] loop2: detected capacity change from 0 to 256 [ 24.287021][ T408] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 24.287479][ T406] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 24.323390][ T406] EXT4-fs (loop0): 1 truncate cleaned up [ 24.329234][ T406] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 24.384794][ T321] loop2: p1 p2 p3 p4[EZD] [ 24.390571][ T321] loop2: p1 start 16384 is beyond EOD, truncated [ 24.397535][ T321] loop2: p2 size 150994944 extends beyond EOD, truncated [ 24.405376][ T415] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 24.405614][ T321] loop2: p3 start 67108864 is beyond EOD, truncated [ 24.419433][ T321] loop2: p4 size 33555584 extends beyond EOD, truncated [ 24.425365][ T415] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 24.427277][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 24.460676][ T411] loop2: p1 p2 p3 p4[EZD] [ 24.466027][ T411] loop2: p1 start 16384 is beyond EOD, truncated [ 24.479145][ T411] loop2: p2 size 150994944 extends beyond EOD, truncated [ 24.486955][ T411] loop2: p3 start 67108864 is beyond EOD, truncated [ 24.493648][ T411] loop2: p4 size 33555584 extends beyond EOD, truncated [ 24.574154][ T6] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 24.585414][ T425] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 24.603985][ T425] FAT-fs (loop0): Directory bread(block 64) failed [ 24.610616][ T425] FAT-fs (loop0): Directory bread(block 65) failed [ 24.617322][ T425] FAT-fs (loop0): Directory bread(block 66) failed [ 24.640483][ T425] FAT-fs (loop0): Directory bread(block 67) failed [ 24.647297][ T425] FAT-fs (loop0): Directory bread(block 68) failed [ 24.653907][ T425] FAT-fs (loop0): Directory bread(block 69) failed [ 24.660571][ T425] FAT-fs (loop0): Directory bread(block 70) failed [ 24.668051][ T425] FAT-fs (loop0): Directory bread(block 71) failed [ 24.674883][ T425] FAT-fs (loop0): Directory bread(block 72) failed [ 24.681525][ T425] FAT-fs (loop0): Directory bread(block 73) failed [ 24.754179][ T6] usb 2-1: New USB device found, idVendor=146d, idProduct=0721, bcdDevice=9c.25 [ 24.763590][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.771938][ T6] usb 2-1: Product: syz [ 24.776354][ T6] usb 2-1: Manufacturer: syz [ 24.780992][ T6] usb 2-1: SerialNumber: syz [ 24.786555][ T6] usb 2-1: config 0 descriptor?? [ 24.853926][ T10] attempt to access beyond end of device [ 24.853926][ T10] loop0: rw=1, want=1832, limit=256 [ 24.866733][ T10] attempt to access beyond end of device [ 24.866733][ T10] loop0: rw=1, want=7960, limit=256 [ 24.879716][ T10] attempt to access beyond end of device [ 24.879716][ T10] loop0: rw=1, want=12112, limit=256 [ 24.895122][ T10] attempt to access beyond end of device [ 24.895122][ T10] loop0: rw=1, want=26512, limit=256 [ 24.908525][ T10] attempt to access beyond end of device [ 24.908525][ T10] loop0: rw=1, want=28880, limit=256 [ 24.920893][ T10] attempt to access beyond end of device [ 24.920893][ T10] loop0: rw=1, want=32216, limit=256 [ 24.932634][ T10] attempt to access beyond end of device [ 24.932634][ T10] loop0: rw=1, want=33800, limit=256 [ 25.044403][ T436] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 25.088113][ T63] usb 2-1: USB disconnect, device number 2 [ 26.097511][ T450] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 26.139523][ T6] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 26.156600][ T452] set_capacity_and_notify: 4 callbacks suppressed [ 26.156615][ T452] loop3: detected capacity change from 0 to 512 [ 26.185146][ T452] EXT4-fs (loop3): Test dummy encryption mode enabled [ 26.201329][ T452] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.47: inode has both inline data and extents flags [ 26.218121][ T452] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.47: couldn't read orphan inode 15 (err -117) [ 26.233811][ T452] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 26.253250][ T452] EXT4-fs (loop3): shut down requested (1) [ 26.301546][ T463] loop4: detected capacity change from 0 to 128 [ 26.374896][ T463] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 26.415197][ T45] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 26.426233][ T475] loop3: detected capacity change from 0 to 512 [ 26.493826][ T467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 26.506658][ T6] usb 1-1: not running at top speed; connect to a high speed hub [ 26.515886][ T475] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.56: bg 0: block 5: invalid block bitmap [ 26.574680][ T475] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 26.594122][ T475] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.56: invalid indirect mapped block 3 (level 2) [ 26.613915][ T481] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 26.631601][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.645972][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 26.657426][ T475] EXT4-fs (loop3): 1 orphan inode deleted [ 26.663172][ T475] EXT4-fs (loop3): 1 truncate cleaned up [ 26.674093][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 26.683344][ T484] loop2: detected capacity change from 0 to 512 [ 26.689812][ T475] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.701321][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.754678][ T6] usb 1-1: Found UVC 1.00 device (046d:0825) [ 26.771728][ T488] loop3: detected capacity change from 0 to 512 [ 26.781568][ T484] EXT4-fs (loop2): Ignoring removed bh option [ 26.788952][ T488] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 26.805020][ T484] EXT4-fs error (device loop2): ext4_iget_extra_inode:4604: inode #15: comm syz.2.59: corrupted in-inode xattr [ 26.806824][ T488] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 26.817958][ T484] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.59: couldn't read orphan inode 15 (err -117) [ 26.825612][ T488] EXT4-fs (loop3): orphan cleanup on readonly fs [ 26.836884][ T484] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,bsddf,bh,grpid,noauto_da_alloc,nodelalloc,init_itable=0x0000000000000009,noload,usrjquota=,nolazytime,inlinecrypt,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 26.869364][ T488] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.60: attempt to clear invalid blocks 1024 len 1 [ 26.882639][ T488] EXT4-fs (loop3): Remounting filesystem read-only [ 26.889338][ T488] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.60: bg 0: block 361: padding at end of block bitmap is not set [ 26.903762][ T488] EXT4-fs (loop3): Remounting filesystem read-only [ 26.910448][ T488] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 26.928348][ T488] EXT4-fs (loop3): Remounting filesystem read-only [ 26.941246][ T488] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.60: invalid indirect mapped block 1811939328 (level 0) [ 26.964348][ T488] EXT4-fs (loop3): Remounting filesystem read-only [ 26.965328][ T6] usb 1-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 26.971187][ T488] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.60: invalid indirect mapped block 2185560079 (level 1) [ 26.994199][ T63] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 27.003543][ T488] EXT4-fs (loop3): Remounting filesystem read-only [ 27.010362][ T488] EXT4-fs (loop3): 1 truncate cleaned up [ 27.014106][ T6] usb 1-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 27.016359][ T488] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none. [ 27.044103][ T6] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 27.052945][ T6] usb 1-1: No streaming interface found for terminal 2. [ 27.091059][ T6] usb 1-1: USB disconnect, device number 3 [ 27.188637][ T516] loop1: detected capacity change from 0 to 16 [ 27.188852][ T514] loop3: detected capacity change from 0 to 512 [ 27.203435][ T514] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 27.216515][ T516] erofs: (device loop1): mounted with root inode @ nid 36. [ 27.226204][ T521] loop2: detected capacity change from 0 to 512 [ 27.227640][ T514] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,grpjquota=./bus,. Quota mode: writeback. [ 27.234432][ T516] attempt to access beyond end of device [ 27.234432][ T516] loop1: rw=524288, want=264, limit=16 [ 27.247033][ T514] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.258357][ T516] attempt to access beyond end of device [ 27.258357][ T516] loop1: rw=0, want=24, limit=16 [ 27.280770][ T516] attempt to access beyond end of device [ 27.280770][ T516] loop1: rw=0, want=24, limit=16 [ 27.306809][ T521] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.74: inode #1: comm syz.2.74: iget: illegal inode # [ 27.326226][ T521] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.74: error while reading EA inode 1 err=-117 [ 27.339021][ T521] EXT4-fs (loop2): 1 orphan inode deleted [ 27.344988][ T521] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,grpjquota=,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,inlinecrypt,,errors=continue. Quota mode: none. [ 27.384113][ T63] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.388421][ T527] loop3: detected capacity change from 0 to 128 [ 27.401514][ T63] usb 5-1: config 0 has no interfaces? [ 27.564142][ T63] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 27.580369][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.597078][ T63] usb 5-1: Product: syz [ 27.605319][ T63] usb 5-1: Manufacturer: syz [ 27.610028][ T63] usb 5-1: SerialNumber: syz [ 27.615619][ T63] usb 5-1: config 0 descriptor?? [ 27.682547][ T547] loop3: detected capacity change from 0 to 512 [ 27.687369][ T536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 27.702805][ T547] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 27.730144][ T547] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,grpjquota=./bus,. Quota mode: writeback. [ 27.766298][ T547] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.862072][ T299] usb 5-1: USB disconnect, device number 3 [ 27.956684][ T286] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 27.964604][ T286] FAT-fs (loop3): Filesystem has been set read-only [ 28.087273][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 28.087287][ T30] audit: type=1400 audit(1792456887.918:238): avc: denied { mount } for pid=577 comm="syz.1.97" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.116305][ T379] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.123857][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.131925][ T30] audit: type=1400 audit(1792456887.928:239): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 28.210267][ T30] audit: type=1400 audit(1792456888.048:240): avc: denied { write } for pid=590 comm="syz.1.103" name="arp" dev="proc" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.239261][ T30] audit: type=1400 audit(1792456888.078:241): avc: denied { create } for pid=590 comm="syz.1.103" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.259946][ T30] audit: type=1400 audit(1792456888.078:242): avc: denied { write } for pid=590 comm="syz.1.103" name="file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.282595][ T30] audit: type=1400 audit(1792456888.078:243): avc: denied { open } for pid=590 comm="syz.1.103" path="/27/file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.305100][ T30] audit: type=1400 audit(1792456888.078:244): avc: denied { ioctl } for pid=590 comm="syz.1.103" path="/27/file0" dev="tmpfs" ino=165 ioctlcmd=0x4c03 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.329040][ T30] audit: type=1400 audit(1792456888.098:245): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 28.351542][ T30] audit: type=1400 audit(1792456888.098:246): avc: denied { module_load } for pid=592 comm="syz.1.104" path="/sys/power/sync_on_suspend" dev="sysfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 28.424154][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 28.476880][ T602] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 28.486981][ T602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 28.495259][ T602] EXT4-fs (loop4): orphan cleanup on readonly fs [ 28.501843][ T602] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.108: attempt to clear invalid blocks 1024 len 1 [ 28.515286][ T602] EXT4-fs (loop4): Remounting filesystem read-only [ 28.522041][ T602] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.108: bg 0: block 361: padding at end of block bitmap is not set [ 28.536429][ T602] EXT4-fs (loop4): Remounting filesystem read-only [ 28.542936][ T602] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 28.544158][ T379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.552227][ T602] EXT4-fs (loop4): Remounting filesystem read-only [ 28.561813][ T6] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 28.568536][ T602] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.108: invalid indirect mapped block 1811939328 (level 0) [ 28.576458][ T564] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.590740][ T602] EXT4-fs (loop4): Remounting filesystem read-only [ 28.597764][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.604298][ T602] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.108: invalid indirect mapped block 2185560079 (level 1) [ 28.614636][ T379] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 28.628424][ T602] EXT4-fs (loop4): Remounting filesystem read-only [ 28.637334][ T6] usb 3-1: config 0 has no interface number 0 [ 28.643846][ T602] EXT4-fs (loop4): 1 truncate cleaned up [ 28.649910][ T379] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.655414][ T602] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none. [ 28.666518][ T6] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.695207][ T379] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 28.704354][ T6] usb 3-1: config 0 interface 85 has no altsetting 0 [ 28.847802][ T30] audit: type=1400 audit(1792456888.688:247): avc: denied { getopt } for pid=606 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.868067][ T379] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.877259][ T6] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 28.886675][ T379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.894743][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.902816][ T6] usb 3-1: Product: syz [ 28.907030][ T6] usb 3-1: Manufacturer: syz [ 28.911627][ T6] usb 3-1: SerialNumber: syz [ 28.916286][ T379] usb 1-1: Product: syz [ 28.920436][ T379] usb 1-1: Manufacturer: syz [ 28.925073][ T379] usb 1-1: SerialNumber: syz [ 28.930628][ T6] usb 3-1: config 0 descriptor?? [ 28.974640][ T6] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 28.982470][ T379] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 28.990384][ T379] cdc_ncm 1-1:1.0: bind() failure [ 29.014115][ T564] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.024301][ T564] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.034140][ T404] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 29.041666][ T564] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 29.051449][ T564] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.191175][ T379] usb 3-1: USB disconnect, device number 3 [ 29.191744][ T63] usb 1-1: USB disconnect, device number 4 [ 29.266763][ T564] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 29.275892][ T564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.283867][ T564] usb 2-1: Product: syz [ 29.288098][ T564] usb 2-1: Manufacturer: syz [ 29.292687][ T564] usb 2-1: SerialNumber: syz [ 29.324089][ T404] usb 5-1: Using ep0 maxpacket: 32 [ 29.334498][ T564] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 29.345797][ T564] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 29.356543][ T564] usbserial_generic 2-1:1.0: generic converter detected [ 29.364519][ T564] usb 2-1: generic converter now attached to ttyUSB0 [ 29.539682][ T379] usb 2-1: USB disconnect, device number 3 [ 29.546129][ T379] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 29.555134][ T379] usbserial_generic 2-1:1.0: device disconnected [ 29.634165][ T404] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 29.643318][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.651365][ T404] usb 5-1: Product: syz [ 29.655580][ T404] usb 5-1: Manufacturer: syz [ 29.660227][ T404] usb 5-1: SerialNumber: syz [ 29.709161][ T642] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 29.735180][ T647] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 29.742586][ T647] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.757557][ T647] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 2: comm syz.2.127: lblock 2 mapped to illegal pblock 2 (length 1) [ 29.772100][ T647] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 48: comm syz.2.127: lblock 0 mapped to illegal pblock 48 (length 1) [ 29.786343][ T647] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.127: Failed to acquire dquot type 0 [ 29.797904][ T647] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 29.807544][ T647] EXT4-fs error (device loop2): ext4_evict_inode:285: inode #11: comm syz.2.127: mark_inode_dirty error [ 29.819053][ T647] EXT4-fs warning (device loop2): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 29.829905][ T647] EXT4-fs (loop2): 1 orphan inode deleted [ 29.835728][ T647] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,dioread_nolock,norecovery,nodiscard,init_itable,nomblk_io_submit,,errors=continue. Quota mode: none. [ 29.855461][ T45] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 29.870026][ T45] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0 [ 29.883577][ T45] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 29.897898][ T45] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:2: Failed to release dquot type 0 [ 29.910558][ T288] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 29.923771][ T288] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 29.933850][ T288] EXT4-fs error (device loop2): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 30.074148][ T404] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 30.080554][ T404] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 30.099980][ T670] binder: 669:670 unknown command 0 [ 30.100538][ T404] usb 5-1: USB disconnect, device number 4 [ 30.115285][ T670] binder: 669:670 ioctl c0306201 200000000240 returned -22 [ 30.136638][ T672] FAULT_INJECTION: forcing a failure. [ 30.136638][ T672] name failslab, interval 1, probability 0, space 0, times 1 [ 30.149624][ T672] CPU: 0 PID: 672 Comm: syz.1.138 Not tainted syzkaller #0 [ 30.156831][ T672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 30.166904][ T672] Call Trace: [ 30.170184][ T672] [ 30.173109][ T672] __dump_stack+0x21/0x30 [ 30.177472][ T672] dump_stack_lvl+0x110/0x170 [ 30.182158][ T672] ? show_regs_print_info+0x20/0x20 [ 30.187365][ T672] dump_stack+0x15/0x20 [ 30.191523][ T672] should_fail+0x3ab/0x500 [ 30.195948][ T672] __should_failslab+0xa4/0xe0 [ 30.200720][ T672] should_failslab+0x9/0x20 [ 30.205227][ T672] slab_pre_alloc_hook+0x39/0xd0 [ 30.210175][ T672] __kmalloc+0x6d/0x2c0 [ 30.214337][ T672] ? __kasan_check_write+0x14/0x20 [ 30.219465][ T672] ? blk_mq_alloc_tag_set+0x402/0xd40 [ 30.224843][ T672] blk_mq_alloc_tag_set+0x402/0xd40 [ 30.230045][ T672] loop_add+0x260/0x8f0 [ 30.234204][ T672] ? xor_init+0x70/0x70 [ 30.238360][ T672] loop_control_ioctl+0x120/0x550 [ 30.243388][ T672] ? __fget_files+0x2e1/0x340 [ 30.248069][ T672] ? xor_init+0x70/0x70 [ 30.252238][ T672] ? security_file_ioctl+0x84/0xa0 [ 30.257368][ T672] ? xor_init+0x70/0x70 [ 30.261533][ T672] __se_sys_ioctl+0x121/0x1a0 [ 30.266218][ T672] __x64_sys_ioctl+0x7b/0x90 [ 30.270819][ T672] x64_sys_call+0x2f/0x9a0 [ 30.275246][ T672] do_syscall_64+0x4c/0xa0 [ 30.279667][ T672] ? clear_bhb_loop+0x50/0xa0 [ 30.284347][ T672] ? clear_bhb_loop+0x50/0xa0 [ 30.289032][ T672] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.294931][ T672] RIP: 0033:0x7fd2dac38559 [ 30.299347][ T672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.318949][ T672] RSP: 002b:00007fd2d9691028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.327353][ T672] RAX: ffffffffffffffda RBX: 00007fd2daebffa0 RCX: 00007fd2dac38559 [ 30.335311][ T672] RDX: 0000000087000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 30.343265][ T672] RBP: 00007fd2daccfad8 R08: 0000000000000000 R09: 0000000000000000 [ 30.351218][ T672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.359168][ T672] R13: 00007fd2daec0038 R14: 00007fd2daebffa0 R15: 00007ffc41890038 [ 30.367126][ T672] [ 30.434076][ T564] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.452089][ T683] erofs: (device loop1): mounted with root inode @ nid 36. [ 30.543128][ T691] exfat: Deprecated parameter 'utf8' [ 30.548536][ T691] exfat: Deprecated parameter 'utf8' [ 30.581153][ T691] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 30.606730][ T695] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 30.624177][ T695] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.754942][ T710] FAT-fs (loop4): bogus number of reserved sectors [ 30.761477][ T710] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 30.772683][ T710] FAT-fs (loop4): Can't find a valid FAT filesystem [ 30.809363][ T715] FAT-fs (loop1): Unrecognized mount option "ÿ01777777777777777777777" or missing value [ 30.819383][ T564] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.830055][ T564] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.864251][ T379] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.914147][ T564] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 30.923285][ T564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 30.931549][ T564] usb 3-1: SerialNumber: syz [ 30.937135][ T715] exfat: Deprecated parameter 'namecase' [ 30.941573][ T732] EXT4-fs (loop0): Ignoring removed nobh option [ 30.942794][ T715] exfat: Deprecated parameter 'namecase' [ 30.965620][ T732] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,nombcache,,errors=continue. Quota mode: writeback. [ 30.981797][ T732] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.996997][ T732] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.165: corrupted inode contents [ 30.997587][ T715] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x88b1af91, utbl_chksum : 0xe619d30d) [ 31.009934][ T732] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.165: mark_inode_dirty error [ 31.029531][ T715] exFAT-fs (loop1): invalid start cluster (4278190088) [ 31.043390][ T732] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.165: corrupted inode contents [ 31.057560][ T742] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.165: corrupted inode contents [ 31.069457][ T742] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.165: mark_inode_dirty error [ 31.080957][ T742] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.165: corrupted inode contents [ 31.092822][ T742] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.165: mark_inode_dirty error [ 31.108951][ T742] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.165: corrupted inode contents [ 31.120828][ T742] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #2: comm syz.0.165: mark_inode_dirty error [ 31.137355][ T732] EXT4-fs error (device loop0): ext4_do_update_inode:5260: inode #2: comm syz.0.165: corrupted inode contents [ 31.196474][ T668] set_capacity_and_notify: 12 callbacks suppressed [ 31.196492][ T668] loop2: detected capacity change from 0 to 512 [ 31.323662][ T668] FAT-fs (loop2): bogus logical sector size 0 [ 31.384696][ T668] FAT-fs (loop2): Can't find a valid FAT filesystem [ 31.465499][ T379] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.476458][ T379] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.514702][ T564] usb 3-1: 0:2 : does not exist [ 31.524209][ T564] usb 3-1: USB disconnect, device number 4 [ 31.814132][ T379] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.823273][ T379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.831422][ T379] usb 4-1: Product: syz [ 31.835656][ T379] usb 4-1: Manufacturer: syz [ 31.840260][ T379] usb 4-1: SerialNumber: syz [ 31.884474][ T379] cdc_ncm 4-1:1.0: skipping garbage [ 31.889761][ T379] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 31.897236][ T379] cdc_ncm 4-1:1.0: bind() failure [ 31.902953][ T379] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 31.909898][ T379] cdc_ncm 4-1:1.1: bind() failure [ 31.924109][ T20] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 31.932014][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.069399][ T790] loop2: detected capacity change from 0 to 1024 [ 32.080516][ T790] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.094597][ T379] usb 4-1: USB disconnect, device number 3 [ 32.161060][ T810] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 32.216929][ T827] FAULT_INJECTION: forcing a failure. [ 32.216929][ T827] name failslab, interval 1, probability 0, space 0, times 0 [ 32.231633][ T827] CPU: 1 PID: 827 Comm: syz.1.203 Not tainted syzkaller #0 [ 32.238852][ T827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 32.248897][ T827] Call Trace: [ 32.252173][ T827] [ 32.255097][ T827] __dump_stack+0x21/0x30 [ 32.259419][ T827] dump_stack_lvl+0x110/0x170 [ 32.264082][ T827] ? show_regs_print_info+0x20/0x20 [ 32.269270][ T827] dump_stack+0x15/0x20 [ 32.273411][ T827] should_fail+0x3ab/0x500 [ 32.277820][ T827] __should_failslab+0xa4/0xe0 [ 32.282574][ T827] should_failslab+0x9/0x20 [ 32.287059][ T827] slab_pre_alloc_hook+0x39/0xd0 [ 32.291979][ T827] ? security_inode_alloc+0x33/0x110 [ 32.297243][ T827] kmem_cache_alloc+0x44/0x260 [ 32.301990][ T827] security_inode_alloc+0x33/0x110 [ 32.307089][ T827] inode_init_always+0x72c/0x9b0 [ 32.312013][ T827] new_inode_pseudo+0x91/0x210 [ 32.316756][ T827] __sock_create+0x12c/0x7a0 [ 32.321328][ T827] __sys_socketpair+0x1a1/0x590 [ 32.326156][ T827] ? __kasan_check_write+0x14/0x20 [ 32.331250][ T827] __x64_sys_socketpair+0x9b/0xb0 [ 32.336258][ T827] x64_sys_call+0x36/0x9a0 [ 32.340654][ T827] do_syscall_64+0x4c/0xa0 [ 32.345049][ T827] ? clear_bhb_loop+0x50/0xa0 [ 32.349705][ T827] ? clear_bhb_loop+0x50/0xa0 [ 32.354362][ T827] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.360238][ T827] RIP: 0033:0x7fd2dac38559 [ 32.364633][ T827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.384220][ T827] RSP: 002b:00007fd2d9691028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 32.392624][ T827] RAX: ffffffffffffffda RBX: 00007fd2daebffa0 RCX: 00007fd2dac38559 [ 32.400577][ T827] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 32.408529][ T827] RBP: 00007fd2daccfad8 R08: 0000000000000000 R09: 0000000000000000 [ 32.416497][ T827] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 32.424455][ T827] R13: 00007fd2daec0038 R14: 00007fd2daebffa0 R15: 00007ffc41890038 [ 32.432411][ T827] [ 32.443130][ T827] socket: no more sockets [ 32.484213][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.490193][ T832] loop0: detected capacity change from 0 to 2048 [ 32.502338][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.521926][ T20] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 32.539630][ T20] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.541609][ T843] loop1: detected capacity change from 0 to 128 [ 32.575930][ T843] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 32.585518][ T832] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.587123][ T843] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1) [ 32.604576][ T843] FAT-fs (loop1): Filesystem has been set read-only [ 32.611230][ T843] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1) [ 32.621088][ T843] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1) [ 32.629602][ T843] FAT-fs (loop1): error, clusters badly computed (1 != 2) [ 32.640478][ T843] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 1) [ 32.652210][ T285] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 32.704894][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.714179][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.722175][ T20] usb 5-1: Product: syz [ 32.726426][ T20] usb 5-1: Manufacturer: syz [ 32.731096][ T20] usb 5-1: SerialNumber: syz [ 32.944081][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.084084][ T564] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.114082][ T379] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.304166][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 33.314123][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 33.323870][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 33.334859][ T6] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 33.343886][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.364140][ T850] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 33.371287][ T850] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 33.384496][ T6] pl2303 1-1:1.0: pl2303 converter detected [ 33.391592][ T6] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 33.434222][ T20] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 33.440254][ T20] cdc_ncm 5-1:1.0: bind() failure [ 33.446025][ T20] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 33.452810][ T20] cdc_ncm 5-1:1.1: bind() failure [ 33.457937][ T564] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.468985][ T20] usb 5-1: USB disconnect, device number 5 [ 33.475254][ T564] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.524155][ T379] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.604298][ T379] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.614413][ T379] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.623352][ T379] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 33.634311][ T379] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 33.647640][ T560] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.655184][ T564] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 33.664267][ T379] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 33.675088][ T564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.683066][ T564] usb 4-1: Product: syz [ 33.687398][ T379] usb 2-1: config 1 interface 1 has no altsetting 0 [ 33.694144][ T564] usb 4-1: Manufacturer: syz [ 33.698761][ T564] usb 4-1: SerialNumber: syz [ 33.714268][ T850] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 33.734285][ T850] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 33.754154][ T850] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 33.774132][ T850] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 33.794200][ T850] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 33.924233][ T379] usb 2-1: string descriptor 0 read error: -22 [ 33.930576][ T379] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 33.940226][ T379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.940607][ T899] loop4: detected capacity change from 0 to 1024 [ 33.964731][ T899] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 33.971303][ T899] EXT4-fs (loop4): mount failed [ 34.034155][ T560] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 34.044510][ T560] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 34.055803][ T560] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 34.065838][ T560] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.174175][ T564] usb 4-1: cannot find UAC_HEADER [ 34.179539][ T564] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 34.234148][ T560] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 34.243706][ T560] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.251736][ T560] usb 3-1: Product: syz [ 34.255952][ T560] usb 3-1: Manufacturer: syz [ 34.260530][ T560] usb 3-1: SerialNumber: syz [ 34.284166][ T896] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 34.304503][ T560] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 34.315834][ T560] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 34.326584][ T560] usbserial_generic 3-1:1.0: generic converter detected [ 34.334244][ T560] usb 3-1: generic converter now attached to ttyUSB1 [ 34.354156][ T325] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 34.375613][ T560] usb 4-1: USB disconnect, device number 4 [ 34.434169][ T379] usb 2-1: cannot get ctl value: req = 0x82, wValue = 0x201, wIndex = 0x200, type = 4 [ 34.443877][ T379] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 34.454233][ T379] usb 2-1: USB disconnect, device number 4 [ 34.554227][ T849] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 34.562172][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 34.562186][ T30] audit: type=1400 audit(1792456894.398:275): avc: denied { search } for pid=895 comm="syz.2.233" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 34.562423][ T902] UDC core: couldn't find an available UDC or it's busy: -16 [ 34.594111][ T325] usb 5-1: Using ep0 maxpacket: 32 [ 34.597423][ T902] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.634108][ T849] pl2303 ttyUSB0: error sending break = -32 [ 34.640274][ T560] usb 1-1: USB disconnect, device number 5 [ 34.654167][ T896] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -71 [ 34.662297][ T896] pl2303 ttyUSB0: pl2303_get_line_request - failed: -19 [ 34.669348][ T896] pl2303 ttyUSB0: pl2303_set_line_request - failed: -19 [ 34.676348][ T896] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -19 [ 34.684195][ T896] pl2303 ttyUSB0: failed to submit interrupt urb: -19 [ 34.691400][ T560] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 34.692471][ T404] usb 3-1: USB disconnect, device number 5 [ 34.701701][ T560] pl2303 1-1:1.0: device disconnected [ 34.706125][ T404] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 34.718764][ T325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.729904][ T404] usbserial_generic 3-1:1.0: device disconnected [ 34.736442][ T325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.746765][ T325] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.756285][ T325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.764829][ T325] usb 5-1: config 0 descriptor?? [ 34.804719][ T325] hub 5-1:0.0: USB hub found [ 34.904425][ T904] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 34.931014][ T909] loop3: detected capacity change from 0 to 512 [ 34.964651][ T917] loop1: detected capacity change from 0 to 512 [ 35.004688][ T917] EXT4-fs (loop1): Ignoring removed nobh option [ 35.017053][ T909] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 35.028697][ T909] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 35.028719][ T325] hub 5-1:0.0: 1 port detected [ 35.039399][ T909] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.237: Corrupt directory, running e2fsck is recommended [ 35.045491][ T917] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,nombcache,,errors=continue. Quota mode: writeback. [ 35.057058][ T909] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 35.072076][ T917] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.080524][ T909] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz.3.237: corrupted in-inode xattr [ 35.098003][ T917] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.240: corrupted inode contents [ 35.102648][ T909] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.237: couldn't read orphan inode 15 (err -117) [ 35.114502][ T917] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.240: mark_inode_dirty error [ 35.126133][ T909] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback. [ 35.137593][ T917] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.240: corrupted inode contents [ 35.167718][ T909] EXT4-fs error (device loop3): ext4_empty_dir:3147: inode #2: block 3: comm syz.3.237: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 35.179383][ T921] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.240: corrupted inode contents [ 35.191824][ T909] EXT4-fs warning (device loop3): ext4_empty_dir:3149: inode #2: comm syz.3.237: directory missing '.' [ 35.202977][ T921] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.240: mark_inode_dirty error [ 35.225328][ T921] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.240: corrupted inode contents [ 35.243370][ T921] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.240: mark_inode_dirty error [ 35.256464][ T325] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 35.257813][ T927] loop2: detected capacity change from 0 to 256 [ 35.262826][ T325] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 35.274241][ T927] exfat: Deprecated parameter 'namecase' [ 35.282366][ T921] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.240: corrupted inode contents [ 35.284368][ T929] loop0: detected capacity change from 0 to 512 [ 35.294691][ T927] exfat: Deprecated parameter 'namecase' [ 35.307311][ T921] EXT4-fs error (device loop1): ext4_dirty_inode:6118: inode #2: comm syz.1.240: mark_inode_dirty error [ 35.322645][ T917] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #2: comm syz.1.240: corrupted inode contents [ 35.329950][ T929] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 35.344935][ T929] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.244: invalid indirect mapped block 256 (level 1) [ 35.358638][ T929] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.244: invalid indirect mapped block 2683928664 (level 1) [ 35.373288][ T929] EXT4-fs (loop0): 1 truncate cleaned up [ 35.375539][ T927] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 35.379252][ T929] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 35.416774][ T325] usbhid 5-1:0.0: can't add hid device: -71 [ 35.422936][ T325] usbhid: probe of 5-1:0.0 failed with error -71 [ 35.455650][ T325] usb 5-1: USB disconnect, device number 6 [ 35.486137][ T940] loop1: detected capacity change from 0 to 512 [ 35.504921][ T940] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 35.514920][ T940] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 35.530929][ T940] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.604419][ T30] audit: type=1400 audit(1792456895.438:276): avc: denied { read } for pid=928 comm="syz.0.244" path="socket:[18001]" dev="sockfs" ino=18001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.637340][ T946] EXT4-fs (loop1): Ignoring removed nobh option [ 35.649392][ T946] EXT4-fs (loop1): 1 truncate cleaned up [ 35.656317][ T946] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,errors=remount-ro,nombcache,noload,nobh,debug_want_extra_isize=0x0000000000000008,. Quota mode: none. [ 35.683055][ T30] audit: type=1400 audit(1792456895.518:277): avc: denied { unlink } for pid=944 comm="syz.1.249" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.744146][ T404] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 35.773198][ T949] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 35.786754][ T30] audit: type=1400 audit(1792456895.628:278): avc: denied { rename } for pid=948 comm="syz.1.250" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.791320][ T949] EXT4-fs error (device loop1): ext4_get_first_dir_block:3619: inode #12: block 80: comm syz.1.250: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 35.809113][ T30] audit: type=1400 audit(1792456895.628:279): avc: denied { unlink } for pid=948 comm="syz.1.250" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.829602][ T949] EXT4-fs error (device loop1): ext4_get_first_dir_block:3621: inode #12: comm syz.1.250: directory missing '..' [ 35.854411][ T30] audit: type=1400 audit(1792456895.628:280): avc: denied { rename } for pid=948 comm="syz.1.250" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.900906][ T30] audit: type=1400 audit(1792456895.738:281): avc: denied { setcheckreqprot } for pid=960 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.037266][ T970] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.259: missing EA_INODE flag [ 36.048883][ T970] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.259: error while reading EA inode 2 err=-117 [ 36.061217][ T970] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.259: inode #3584: comm syz.1.259: iget: illegal inode # [ 36.064111][ T404] usb 3-1: not running at top speed; connect to a high speed hub [ 36.082251][ T970] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.259: error while reading EA inode 3584 err=-117 [ 36.094844][ T970] EXT4-fs (loop1): 1 orphan inode deleted [ 36.100557][ T970] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 36.154175][ T404] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 36.190158][ T30] audit: type=1400 audit(1792456896.028:282): avc: denied { search } for pid=979 comm="syz.0.263" name="/" dev="configfs" ino=14508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 36.206664][ T987] set_capacity_and_notify: 3 callbacks suppressed [ 36.206680][ T987] loop3: detected capacity change from 0 to 2048 [ 36.225613][ T30] audit: type=1400 audit(1792456896.028:283): avc: denied { write } for pid=979 comm="syz.0.263" name="uac2.usb0" dev="configfs" ino=15908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 36.249354][ T30] audit: type=1400 audit(1792456896.028:284): avc: denied { add_name } for pid=979 comm="syz.0.263" name="p_volume_present" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 36.276622][ T990] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 36.314064][ T325] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 36.344174][ T404] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 36.345361][ T987] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.355964][ T1010] loop0: detected capacity change from 0 to 512 [ 36.364259][ T987] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.370235][ T404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.410085][ T404] usb 3-1: Product: syz [ 36.410483][ T987] fs-verity: sha512 using implementation "sha512-avx2" [ 36.414449][ T404] usb 3-1: Manufacturer: syz [ 36.425820][ T404] usb 3-1: SerialNumber: syz [ 36.445520][ T1010] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 36.470829][ T1010] EXT4-fs error (device loop0): ext4_quota_enable:6431: comm syz.0.270: Bad quota inum: 3, type: 2 [ 36.482122][ T1010] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=2, err=-117, ino=3). Please run e2fsck to fix. [ 36.497350][ T1010] EXT4-fs (loop0): mount failed [ 36.525597][ T1025] 9p: Unknown Cache mode r [ 36.671899][ T379] usb 3-1: USB disconnect, device number 6 [ 36.724313][ T325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 36.764123][ T325] usb 5-1: not running at top speed; connect to a high speed hub [ 36.845221][ T325] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 4 [ 36.856180][ T325] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 4 [ 37.104213][ T325] usb 5-1: string descriptor 0 read error: -22 [ 37.110498][ T325] usb 5-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 37.119832][ T325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.369632][ T974] loop4: detected capacity change from 0 to 1024 [ 37.391205][ T974] EXT4-fs (loop4): Mount option "dioread_nolock" incompatible with ext3 [ 37.711701][ T1049] loop0: detected capacity change from 0 to 256 [ 37.734572][ T1049] exfat: Deprecated parameter 'utf8' [ 37.748328][ T1049] exfat: Deprecated parameter 'utf8' [ 38.280179][ T1055] loop1: detected capacity change from 0 to 256 [ 38.291876][ T1058] loop2: detected capacity change from 0 to 1024 [ 38.301444][ T1049] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 38.301554][ T1058] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.327354][ T1055] exfat: Deprecated parameter 'namecase' [ 38.333020][ T1055] exfat: Deprecated parameter 'namecase' [ 38.361343][ T1064] loop3: detected capacity change from 0 to 512 [ 38.370641][ T1058] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x000000000000007e,delalloc,nogrpid,jqfmt=vfsv0,dioread_nolock,,errors=continue. Quota mode: writeback. [ 38.421494][ T1055] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 38.424202][ T1064] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 38.444861][ T1069] loop0: detected capacity change from 0 to 256 [ 38.472119][ T1064] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.480202][ T1064] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 38.485109][ T1069] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 38.495116][ T1064] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.298: attempt to clear invalid blocks 2 len 1 [ 38.517627][ T1064] EXT4-fs (loop3): Remounting filesystem read-only [ 38.525906][ T1064] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 38.540892][ T1064] EXT4-fs (loop3): Remounting filesystem read-only [ 38.547943][ T1064] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.298: invalid indirect mapped block 1819239214 (level 0) [ 38.562714][ T1064] EXT4-fs (loop3): Remounting filesystem read-only [ 38.571070][ T1064] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.298: invalid indirect mapped block 1819239214 (level 1) [ 38.585659][ T1064] EXT4-fs (loop3): Remounting filesystem read-only [ 38.593237][ T1064] EXT4-fs (loop3): 1 truncate cleaned up [ 38.599421][ T1064] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 38.763860][ T1098] loop2: detected capacity change from 0 to 512 [ 38.834131][ T560] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.867324][ T1098] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 38.878910][ T1098] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.900328][ T1098] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.303: Failed to acquire dquot type 0 [ 38.911195][ T1115] loop3: detected capacity change from 0 to 4096 [ 38.957959][ T1115] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 38.983237][ T1115] fs-verity: sha256 using implementation "sha256-avx2" [ 38.991211][ T1115] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.309: Failed to acquire dquot type 0 [ 39.016421][ T1115] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.309: Failed to acquire dquot type 0 [ 39.217802][ T1126] EXT4-fs error (device loop0): __ext4_iget:4950: inode #2: block 131072: comm syz.0.315: invalid block [ 39.255071][ T1126] EXT4-fs (loop0): get root inode failed [ 39.274210][ T560] usb 2-1: unable to get BOS descriptor or descriptor too short [ 39.274299][ T1126] EXT4-fs (loop0): mount failed [ 39.364252][ T560] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.425938][ T560] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.672942][ T1139] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.683699][ T1139] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.714125][ T560] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 39.723440][ T560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.732834][ T560] usb 2-1: Product: syz [ 39.737316][ T560] usb 2-1: Manufacturer: syz [ 39.741994][ T560] usb 2-1: SerialNumber: syz [ 39.753431][ T325] usb 5-1: Can't get UAC3 power state for id 10 [ 39.804776][ T560] usb 2-1: selecting invalid altsetting 1 [ 39.814162][ T325] usb 5-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 39.834144][ T325] usb 5-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 39.841674][ T325] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 39.841811][ T560] usb 2-1: unit 6 not found! [ 39.868941][ T325] usb 5-1: USB disconnect, device number 7 [ 39.881773][ T1152] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 39.950992][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 39.951007][ T30] audit: type=1400 audit(1792456899.788:295): avc: denied { mmap_zero } for pid=1160 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 41.544034][ C0] sched: RT throttling activated [ 41.544034][ C1] sched: RT throttling activated [ 41.564173][ T560] usb 2-1: cannot get ctl value: req = 0x82, wValue = 0x100, wIndex = 0x200, type = 3 [ 41.573821][ T560] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 41.595053][ T560] usb 2-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 41.605168][ T560] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 41.607453][ T1178] set_capacity_and_notify: 2 callbacks suppressed [ 41.607466][ T1178] loop2: detected capacity change from 0 to 512 [ 41.616826][ T560] usb 2-1: USB disconnect, device number 5 [ 41.636643][ T1178] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.334: inode has both inline data and extents flags [ 41.650040][ T1178] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.334: couldn't read orphan inode 15 (err -117) [ 41.662120][ T1178] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 41.754068][ T325] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 41.761750][ T1191] loop2: detected capacity change from 0 to 2048 [ 41.796977][ T1191] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 41.815592][ T1191] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,nomblk_io_submit,grpid,norecovery,inlinecrypt,max_batch_time=0x0000000000001867,,errors=continue. Quota mode: none. [ 41.844537][ T306] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.874228][ T26] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 41.896933][ T30] audit: type=1400 audit(1792456901.738:296): avc: denied { ioctl } for pid=1196 comm="syz.2.342" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 42.114110][ T306] usb 1-1: Using ep0 maxpacket: 32 [ 42.234211][ T306] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 42.242305][ T306] usb 1-1: config 0 has no interface number 0 [ 42.248450][ T306] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 42.259483][ T325] usb 5-1: unable to get BOS descriptor or descriptor too short [ 42.267132][ T306] usb 1-1: config 0 interface 85 has no altsetting 0 [ 42.274126][ T26] usb 4-1: not running at top speed; connect to a high speed hub [ 42.344199][ T325] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 32, setting to 8 [ 42.364232][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 42.444201][ T306] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 42.453393][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.461402][ T306] usb 1-1: Product: syz [ 42.465641][ T306] usb 1-1: Manufacturer: syz [ 42.470231][ T306] usb 1-1: SerialNumber: syz [ 42.475422][ T306] usb 1-1: config 0 descriptor?? [ 42.534227][ T26] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 42.543322][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.551545][ T26] usb 4-1: Product: syz [ 42.555759][ T26] usb 4-1: Manufacturer: syz [ 42.560372][ T26] usb 4-1: SerialNumber: syz [ 42.615044][ T325] usb 5-1: string descriptor 0 read error: -22 [ 42.621318][ T325] usb 5-1: New USB device found, idVendor=0499, idProduct=101c, bcdDevice= 0.40 [ 42.633902][ T325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.674751][ T325] snd-usb-audio: probe of 5-1:1.0 failed with error -2 [ 42.755003][ T306] usb 1-1: USB disconnect, device number 6 [ 42.774608][ T1207] loop2: detected capacity change from 0 to 16 [ 42.785777][ T1207] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.810184][ T30] audit: type=1400 audit(1792456902.648:297): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.875828][ T564] usb 5-1: USB disconnect, device number 8 [ 42.928685][ T30] audit: type=1400 audit(1792456902.768:298): avc: denied { mounton } for pid=1221 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 42.950328][ T30] audit: type=1400 audit(1792456902.768:299): avc: denied { create } for pid=1221 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.967837][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.977803][ T1221] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.985270][ T1221] device bridge_slave_0 entered promiscuous mode [ 42.995537][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.002554][ T1221] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.010131][ T1221] device bridge_slave_1 entered promiscuous mode [ 43.044593][ T1221] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.051647][ T1221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.058928][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.065990][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.084468][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.092153][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.099952][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.111078][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.119356][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.126397][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.135276][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.143435][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.150484][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.162434][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.170331][ T560] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.171986][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.192966][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.204080][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.212064][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.219724][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.228154][ T1221] device veth0_vlan entered promiscuous mode [ 43.240522][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.250469][ T1221] device veth1_macvtap entered promiscuous mode [ 43.265965][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.274517][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.289191][ T30] audit: type=1400 audit(1792456903.128:300): avc: denied { mount } for pid=1221 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.312719][ T30] audit: type=1400 audit(1792456903.138:301): avc: denied { mounton } for pid=1221 comm="syz-executor" path="/root/syzkaller.7lsLso/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 43.349814][ T1231] loop5: detected capacity change from 0 to 2048 [ 43.385235][ T321] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 43.390558][ T321] loop5: partition table partially beyond EOD, truncated [ 43.402827][ T321] loop5: p1 start 3405774849 is beyond EOD, truncated [ 43.410666][ T321] loop5: p2 start 53543428 is beyond EOD, truncated [ 43.420337][ T560] usb 3-1: Using ep0 maxpacket: 16 [ 43.426239][ T321] loop5: p3 start 4284289 is beyond EOD, truncated [ 43.447924][ T321] loop5: p5 start 3405774849 is beyond EOD, truncated [ 43.455196][ T321] loop5: p6 start 53543428 is beyond EOD, truncated [ 43.473836][ T1231] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 43.479674][ T1231] loop5: partition table partially beyond EOD, truncated [ 43.487127][ T30] audit: type=1400 audit(1792456903.328:302): avc: denied { append } for pid=1248 comm="syz.4.366" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.509091][ T1253] loop4: detected capacity change from 0 to 512 [ 43.510205][ T1231] loop5: p1 start 3405774849 is beyond EOD, truncated [ 43.523282][ T1231] loop5: p2 start 53543428 is beyond EOD, truncated [ 43.530302][ T1231] loop5: p3 start 4284289 is beyond EOD, truncated [ 43.537986][ T1231] loop5: p5 start 3405774849 is beyond EOD, truncated [ 43.544867][ T560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.544984][ T1231] loop5: p6 start 53543428 is beyond EOD, truncated [ 43.563561][ T560] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.574484][ T560] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 43.592504][ T560] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 43.592980][ T1253] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.368: inode has both inline data and extents flags [ 43.601947][ T560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.629697][ T1253] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.368: couldn't read orphan inode 15 (err -117) [ 43.642924][ T1253] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 43.665420][ T560] usb 3-1: config 0 descriptor?? [ 43.712839][ T321] udevd[321]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 43.751907][ T321] udevd[321]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 43.829972][ T1268] loop5: detected capacity change from 0 to 512 [ 43.926265][ T1268] EXT4-fs error (device loop5): ext4_orphan_get:1410: inode #15: comm syz.5.372: inode has both inline data and extents flags [ 43.953882][ T1268] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.372: couldn't read orphan inode 15 (err -117) [ 43.966861][ T1268] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 43.980597][ T45] device bridge_slave_1 left promiscuous mode [ 43.988109][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.996889][ T45] device bridge_slave_0 left promiscuous mode [ 44.003240][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.013570][ T45] device veth1_macvtap left promiscuous mode [ 44.019696][ T45] device veth0_vlan left promiscuous mode [ 44.034114][ T379] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 44.187891][ T560] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input7 [ 44.361632][ T30] audit: type=1400 audit(1792456904.198:303): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=811 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.384965][ T560] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 44.385640][ T30] audit: type=1400 audit(1792456904.198:304): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=811 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.401152][ T560] usb 3-1: USB disconnect, device number 7 [ 44.437413][ T1281] fido_id[1281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 44.464165][ T379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.492174][ T379] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.507775][ T379] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.517796][ T379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.538741][ T379] usb 5-1: config 0 descriptor?? [ 44.574566][ T379] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 44.601135][ T1262] usb 4-1: USB disconnect, device number 5 [ 44.617919][ T1289] loop3: detected capacity change from 0 to 256 [ 44.804084][ T299] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 44.890461][ T1293] UDC core: couldn't find an available UDC or it's busy: -16 [ 44.898044][ T1293] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 44.917119][ T1262] usb 5-1: USB disconnect, device number 9 [ 45.006571][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 45.006608][ T30] audit: type=1400 audit(1792456904.848:307): avc: denied { getopt } for pid=1294 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.020390][ T1296] loop4: detected capacity change from 0 to 256 [ 45.085141][ T1296] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d) [ 45.105414][ T30] audit: type=1400 audit(1792456904.948:308): avc: denied { setattr } for pid=1294 comm="syz.4.381" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.125159][ T1301] loop2: detected capacity change from 0 to 512 [ 45.224219][ T299] usb 1-1: unable to get BOS descriptor or descriptor too short [ 45.249971][ T1301] EXT4-fs error (device loop2): ext4_orphan_get:1410: inode #15: comm syz.2.384: inode has both inline data and extents flags [ 45.267669][ T1301] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.384: couldn't read orphan inode 15 (err -117) [ 45.280464][ T1301] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.304271][ T299] usb 1-1: not running at top speed; connect to a high speed hub [ 45.312246][ T30] audit: type=1400 audit(1792456905.148:309): avc: denied { read write open } for pid=1300 comm="syz.2.384" path="/70/file0/file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.414326][ T299] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 45.441277][ T30] audit: type=1400 audit(1792456905.278:310): avc: denied { getopt } for pid=1321 comm="syz.5.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.475113][ T299] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 45.569070][ T1340] loop4: detected capacity change from 0 to 512 [ 45.577552][ T1340] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 45.592722][ T1340] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 45.601156][ T1340] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.610964][ T1340] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.404: attempt to clear invalid blocks 1024 len 1 [ 45.624382][ T1340] EXT4-fs (loop4): Remounting filesystem read-only [ 45.631039][ T1340] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.404: bg 0: block 361: padding at end of block bitmap is not set [ 45.645491][ T299] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 45.645676][ T1340] EXT4-fs (loop4): Remounting filesystem read-only [ 45.659466][ T299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.666082][ T1340] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 45.670353][ T299] usb 1-1: Product: syz [ 45.682461][ T1340] EXT4-fs (loop4): Remounting filesystem read-only [ 45.688992][ T299] usb 1-1: Manufacturer: syz [ 45.689010][ T299] usb 1-1: SerialNumber: syz [ 45.701034][ T1340] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.404: invalid indirect mapped block 1811939328 (level 0) [ 45.715169][ T1340] EXT4-fs (loop4): Remounting filesystem read-only [ 45.721775][ T1340] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.404: invalid indirect mapped block 2185560079 (level 1) [ 45.737234][ T1340] EXT4-fs (loop4): Remounting filesystem read-only [ 45.737910][ T1361] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 45.743992][ T1340] EXT4-fs (loop4): 1 truncate cleaned up [ 45.760998][ T1340] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none. [ 45.844792][ T1364] EXT4-fs (loop5): Ignoring removed orlov option [ 45.852435][ T1364] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 45.864085][ T560] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 45.865630][ T1364] EXT4-fs error (device loop5): ext4_iget_extra_inode:4604: inode #15: comm syz.5.410: corrupted in-inode xattr [ 45.886206][ T1369] netlink: 64 bytes leftover after parsing attributes in process `syz.4.414'. [ 45.888510][ T1364] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.410: couldn't read orphan inode 15 (err -117) [ 45.911235][ T1364] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,user_xattr,nogrpid,init_itable=0x0000000000400fff,,errors=continue. Quota mode: none. [ 46.022389][ T30] audit: type=1400 audit(1792456905.858:311): avc: denied { write } for pid=1355 comm="syz.5.410" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 46.073032][ T1380] syz.2.419 (1380): attempted to duplicate a private mapping with mremap. This is not supported. [ 46.174110][ T30] audit: type=1400 audit(1792456905.988:312): avc: denied { bind } for pid=1372 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.220987][ T1386] input: syz0 as /devices/virtual/input/input8 [ 46.227037][ T299] usb 1-1: USB disconnect, device number 7 [ 46.267829][ T30] audit: type=1400 audit(1792456906.108:313): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 46.296904][ T30] audit: type=1400 audit(1792456906.128:314): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.318731][ T30] audit: type=1400 audit(1792456906.128:315): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=2100 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.341065][ T30] audit: type=1400 audit(1792456906.128:316): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2100 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.404149][ T560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 46.417574][ T560] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 46.441994][ T560] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.00 [ 46.454203][ T560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.473230][ T560] usb 4-1: config 0 descriptor?? [ 46.489220][ T1407] EXT4-fs (loop2): 1 truncate cleaned up [ 46.496719][ T1407] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 46.504209][ T1350] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.764922][ T299] usb 4-1: USB disconnect, device number 6 [ 47.402048][ T1488] capability: warning: `syz.4.438' uses 32-bit capabilities (legacy support in use) [ 47.479930][ T1503] set_capacity_and_notify: 4 callbacks suppressed [ 47.479946][ T1503] loop2: detected capacity change from 0 to 256 [ 47.517118][ T1503] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.644129][ T299] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 47.844812][ T404] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 47.884180][ T299] usb 4-1: Using ep0 maxpacket: 16 [ 47.965010][ T1528] netlink: 'syz.0.458': attribute type 11 has an invalid length. [ 47.983373][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 47.991832][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.000698][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 48.006272][ T299] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.009205][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.021928][ T299] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 48.028600][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.044764][ T1532] loop0: detected capacity change from 0 to 128 [ 48.045321][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.051244][ T299] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 64 [ 48.060201][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.072135][ T299] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.077422][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.089850][ T299] usb 4-1: config 1 interface 0 has no altsetting 0 [ 48.113862][ T1532] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.124928][ T1532] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.234119][ T404] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.244308][ T404] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.264208][ T299] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.273378][ T299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.281611][ T299] usb 4-1: Product: syz [ 48.286009][ T299] usb 4-1: Manufacturer: syz [ 48.290614][ T299] usb 4-1: SerialNumber: syz [ 48.310384][ T1540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 48.319342][ T1486] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 48.326855][ T1486] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 48.354156][ T404] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 48.363640][ T404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.371692][ T404] usb 6-1: SerialNumber: syz [ 48.415755][ T404] usb-storage 6-1:1.0: USB Mass Storage device detected [ 48.463275][ T404] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 48.575146][ T299] usb 4-1: bad CDC descriptors [ 48.592322][ T299] usb 4-1: USB disconnect, device number 7 [ 48.720202][ T1561] loop4: detected capacity change from 0 to 2048 [ 48.772304][ T1561] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 320 [ 49.258510][ T299] usb 6-1: USB disconnect, device number 2 [ 49.791544][ T1591] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 49.803288][ T1591] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 49.811682][ T1591] CPU: 0 PID: 1591 Comm: syz.5.484 Not tainted syzkaller #0 [ 49.818961][ T1591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 49.829006][ T1591] RIP: 0010:tracing_release_file_tr+0x48/0x100 [ 49.835155][ T1591] Code: 81 c3 d8 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e6 1c 3c 00 48 8b 1b 48 83 c3 28 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c9 1c 3c 00 48 8b 1b 48 85 db 74 [ 49.854753][ T1591] RSP: 0018:ffffc900012efd80 EFLAGS: 00010206 [ 49.860809][ T1591] RAX: 0000000000000005 RBX: 0000000000000028 RCX: ffff888119dcbc00 [ 49.868764][ T1591] RDX: 0000000000000000 RSI: ffff888119ae6a80 RDI: ffff88812ee43a70 [ 49.876718][ T1591] RBP: ffffc900012efda0 R08: ffff8881053d54c7 R09: 1ffff11020a7aa98 [ 49.884673][ T1591] R10: dffffc0000000000 R11: ffffed1020a7aa99 R12: 1ffff1102335cd55 [ 49.892626][ T1591] R13: ffff888119ae6a80 R14: ffff88812ee43a70 R15: dffffc0000000000 [ 49.900584][ T1591] FS: 000055558df28500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 49.909496][ T1591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.916153][ T1591] CR2: 000000110c30d2d1 CR3: 00000001172d3000 CR4: 00000000003506b0 [ 49.924113][ T1591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.932072][ T1591] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.940034][ T1591] Call Trace: [ 49.943300][ T1591] [ 49.946212][ T1591] ? tracing_open_file_tr+0x1a0/0x1a0 [ 49.951834][ T1591] __fput+0x22b/0x900 [ 49.955894][ T1591] ____fput+0x15/0x20 [ 49.959854][ T1591] task_work_run+0x127/0x190 [ 49.964425][ T1591] exit_to_user_mode_loop+0xd0/0xe0 [ 49.969609][ T1591] exit_to_user_mode_prepare+0x87/0xd0 [ 49.975047][ T1591] syscall_exit_to_user_mode+0x1a/0x30 [ 49.980486][ T1591] do_syscall_64+0x58/0xa0 [ 49.984881][ T1591] ? clear_bhb_loop+0x50/0xa0 [ 49.989543][ T1591] ? clear_bhb_loop+0x50/0xa0 [ 49.994198][ T1591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.000081][ T1591] RIP: 0033:0x7fb2b06f2559 [ 50.004475][ T1591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.024064][ T1591] RSP: 002b:00007fff2b14b9e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 50.032466][ T1591] RAX: 0000000000000000 RBX: 00007fff2b14bad0 RCX: 00007fb2b06f2559 [ 50.040419][ T1591] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 50.048374][ T1591] RBP: 000000000000c260 R08: 0000000000000001 R09: 0000000000000000 [ 50.056348][ T1591] R10: 0000001b30420000 R11: 0000000000000246 R12: 00007fff2b14bb10 [ 50.064392][ T1591] R13: 00007fb2b0979fac R14: 000000000000c295 R15: 00007fb2b0979fa0 [ 50.072509][ T1591] [ 50.075526][ T1591] Modules linked in: [ 50.084426][ T1591] ---[ end trace 29d2c5c134c96a75 ]--- [ 50.089995][ T1591] RIP: 0010:tracing_release_file_tr+0x48/0x100 [ 50.096345][ T1591] Code: 81 c3 d8 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e6 1c 3c 00 48 8b 1b 48 83 c3 28 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c9 1c 3c 00 48 8b 1b 48 85 db 74 [ 50.116155][ T1591] RSP: 0018:ffffc900012efd80 EFLAGS: 00010206 [ 50.122430][ T1591] RAX: 0000000000000005 RBX: 0000000000000028 RCX: ffff888119dcbc00 [ 50.130520][ T1591] RDX: 0000000000000000 RSI: ffff888119ae6a80 RDI: ffff88812ee43a70 [ 50.138938][ T1591] RBP: ffffc900012efda0 R08: ffff8881053d54c7 R09: 1ffff11020a7aa98 [ 50.147390][ T1591] R10: dffffc0000000000 R11: ffffed1020a7aa99 R12: 1ffff1102335cd55 [ 50.155473][ T306] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 50.155658][ T1591] R13: ffff888119ae6a80 R14: ffff88812ee43a70 R15: dffffc0000000000 [ 50.171062][ T1591] FS: 000055558df28500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 50.180191][ T1591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.186820][ T1591] CR2: 00007fa69dbb54b8 CR3: 00000001172d3000 CR4: 00000000003506b0 [ 50.194967][ T1591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.203209][ T1591] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.211419][ T1591] Kernel panic - not syncing: Fatal exception [ 50.217576][ T1591] Kernel Offset: disabled [ 50.221890][ T1591] Rebooting in 86400 seconds..