last executing test programs: 15.655397193s ago: executing program 1 (id=4543): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0xfffffffffffffe20, 0x1, {0x0, 0x4, 0x0, 0x0, 0x0, {}, {0x9}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 15.493013196s ago: executing program 1 (id=4548): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200012, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nodelalloc}, {@nouser_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") llistxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) 15.082465071s ago: executing program 1 (id=4556): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x14) 14.981453883s ago: executing program 1 (id=4560): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x1200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xff, 0x57e, &(0x7f0000001b40)="$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") mount$incfs(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB='rlog_pages=004']) 14.4552894s ago: executing program 1 (id=4569): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 14.070009446s ago: executing program 1 (id=4572): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) 13.897088318s ago: executing program 32 (id=4572): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) 512.215723ms ago: executing program 0 (id=5123): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_retopts={{0x10}}], 0x10}, 0x4008091) 455.768574ms ago: executing program 0 (id=5127): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) 452.423044ms ago: executing program 3 (id=5129): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x5421, 0x2000020810067) 439.781574ms ago: executing program 0 (id=5131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@empty, @in6=@mcast2}, {}, {}, 0x0, 0x0, 0x3}}, [@policy_type={0xa}]}, 0xcc}}, 0x0) 434.785874ms ago: executing program 2 (id=5132): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) capget(&(0x7f0000feaff9)={0x20071026}, 0x0) 429.312054ms ago: executing program 3 (id=5133): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="240000002d0001"], 0x24}], 0x1}, 0x0) 405.549574ms ago: executing program 3 (id=5135): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') read$FUSE(r0, 0x0, 0x0) 379.940855ms ago: executing program 2 (id=5136): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="050302004020000008001300", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08001c"], 0x5c}, 0x1, 0x0, 0x0, 0x4040805}, 0x0) 378.168305ms ago: executing program 0 (id=5137): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000308fcff", 0x58}], 0x1) 367.478335ms ago: executing program 3 (id=5138): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 346.955865ms ago: executing program 4 (id=5140): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9}}) 320.421885ms ago: executing program 0 (id=5141): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000002100)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write(r0, 0x0, 0x44) 316.563976ms ago: executing program 2 (id=5151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x20}, {0x0, 0x10000, 0xfffffffffffffffd}}}, [@mark={0xc}, @XFRMA_IF_ID={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 316.136076ms ago: executing program 5 (id=5142): r0 = fsopen(&(0x7f0000002e80)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x4, &(0x7f0000002ec0)='default_permissions', &(0x7f0000002f00)='/dev/dlm_plock\x00', 0x0) 310.943476ms ago: executing program 0 (id=5143): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x203, 0x0) 215.411977ms ago: executing program 4 (id=5144): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x26) 215.264817ms ago: executing program 4 (id=5145): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x0, 0x0, 0xfe, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) 215.076697ms ago: executing program 2 (id=5146): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r0, 0x0, 0x0) 211.827847ms ago: executing program 5 (id=5147): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x80040, 0x4) 168.701168ms ago: executing program 2 (id=5148): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) 132.457678ms ago: executing program 5 (id=5149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000580)) 131.847448ms ago: executing program 4 (id=5150): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0) 98.872348ms ago: executing program 3 (id=5152): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@ipv6_newroute={0x30, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}, [@RTA_PRIORITY={0x8, 0x6, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0xfe01, 0x1, 0x9}}]}, 0x30}}, 0x84054) 98.519188ms ago: executing program 2 (id=5153): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) 98.400199ms ago: executing program 5 (id=5154): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000b80)=0xff) 54.263119ms ago: executing program 4 (id=5155): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') lseek(r0, 0x0, 0x2) 53.033749ms ago: executing program 3 (id=5156): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000ac0)={[{@shortname_winnt}, {@utf8no}, {@fat=@usefree}, {@fat=@discard}, {@shortname_winnt}, {@fat=@errors_continue}, {@fat=@check_normal}, {@shortname_lower}, {@shortname_winnt}]}, 0xfd, 0x2ae, &(0x7f0000000800)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 50.529739ms ago: executing program 4 (id=5157): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x1063a, &(0x7f0000020c40)="$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") lchown(&(0x7f0000000100)='./file2\x00', 0x0, 0x0) 675.35µs ago: executing program 5 (id=5158): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003600)=[{{&(0x7f0000000040)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)="6c6402fd987b149457931f540e2c4beba3db5f99d9f9581e4f59c778f816552a00944fae8ca111f670fbf297c29e1d45528564b45be001e34712f4092274618e20e0980e6c96a6f08f7ed1f630348e91709345e6188d5157efeaa23998f15c282afbb8d6d4e8b0f71b9ed3bdb7e02760ff512e790a9bacac729425a84862072a04516c6dc265881c8e499d75f2f41a2bf06be276e1657f5aeab13a6388a85380abf6fec595616ecde25f09a17ad6718fc7b7e9c29ac953e53ee654c8c0d07d5b7f0b55d240df256c6076909630e225eab2abae3b56755a4b9d3dc285660b6df23c35f601e02f79dbcefe609efb5319c60be4c4849b2198df13"}, {&(0x7f00000001c0)="d7fea2272cb8cf85523be19edbf07498f76349251d67ccbe16fffa6e31888bc19c704e6fcbeb1a5de7643b968fd09316716a9397b163542d26d654f62df18132fa2dd9aceb610d0ac97bc888e63690bf9581911f9d39dd6307b7bac0a50f9b4dc08fb6f2ad9064d0291fee17adb99d3245816016b59c378a5fb601243de4ae4f316f"}, {&(0x7f0000000280)="437185b41e18900d13a60fa0032536cbe171ec8f68d8dd0a551ac10e01cfb5eddece857b670fd0f4ad1f730f0f9f0e4846923286"}, {&(0x7f00000002c0)="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"}, {&(0x7f00000012c0)="874738f74e625a73f63d139cec"}, {&(0x7f0000001300)="498e6ea367d0dd3ae0e9fdfb30af6aa6444ab765849f7d1b53caa72a21d51b49fa1f9bc4226e014b0192d95bfbabc02e2dbf61dc01565cb6d04871b672ee4a988238b3d4299e0452eb866a258dfdec239586e4b156099f6c95854cb4974ccad0df77bacfcc0c34324151e458c881aa04d6bd9a1e57074071074aa63cd5208db160f4b53bf030d057cafe91f41a1faa4b595403a5afc6e5cf4b69ccf7cb14dbe286b34c5769f2452fd2cbdc0c77f675e80d598d5f34942c26ec5f8fede8262d2c5742bf7c7bbc53301d8bf7079c3723b1b0abed5f878ceb0d0c12fa9bd68b05b683"}, {&(0x7f0000001400)="7d6b5d56ce4fd0d6097a5b9fb2f8094f3c8f3d78aa0d7cf5a46d295538ce743f8f864ed8281cbc9c5c2b9f836f435d11bff79d4142453fef215155ce0dc9bbdc58c55fa7b08d9a736527f4173ac3fac1"}, {&(0x7f0000001480)="55988a8d1dc4e2cfa9c633dea18ce52ba3422af944b8c3e3d153ed98da9834c50744f951e5cfd2d287"}, {&(0x7f00000014c0)="07e151bac49fc215ada24be8104d724fd0c313c6eb9863c47e91ddd8ec89fb96b73e9679984a0b4357b98aeab9870bd0f6404cbd69e72f1ddc0249cd71ac90c4053dedad6b8de77bac9b8c35e91de5861a4b51e32b9daf35449ab402985d3aafa841a33da241fdda9e85ee9c46655cc78b492bbe79939e7686638f94070f774b39996ef589eba10aa8405c7dacbfaf67c906307274b4d8c15ce5e2fd49e42197bd5b110176af85dac0e7ad5dc8d20810c4f65a142130e9253b4a0883988e27b69ac7440ba8d569eef98f056fe7199775d4772118b20a3a2614cc11b848"}], 0x0, &(0x7f00000016c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000001700)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001780)="f47ffc739cc5a52f49219f59ca4483d4166225609b09527f9659a88bd9e93bc73b4264b353622df4d1dbc88ab59fe95d2ef5519b34616007a086a9ddb23a82f789bfa4fb8b50dc9814060da5e2c437ed275bf1c933c54b87bd89b6c3ab7e9ffb21185b274aabe6c8b781c465804ce71aad5b21a0b054d837774e0548a31a2e27baec68f0cdad138101724244972302d5b5b692388a3a79bb7753101f6ae40b569bbad860d113e434c8f40c3c8109a551ec6e54ad97b6677ba2d766095e4488f6725bfa45"}, {&(0x7f0000001880)="c46ad03c5fad5156bc09f51dcca225e8b9dc67b81002f7717ae8d61a8d60b1cdd47147796035016a87c3b4f430be87fbee0f4ab1e3a8f0d83bf5e32c02e13f10698e17dd16a13b3bc24d3580964e3af6e70437d137f6f45fe22446a2199b44d57a87a16a8190526da57fd144fa8ec7e1b572f2f32373638ab4859d5a84fe2667bdf087adfafe52b27fecfe9523e8e14405de6721cf1572efb1d9d738e97bb6208a9890a7857bea42bdcd44c6af7a5221ae744736e5129d8825d373d367c2b39453d98345f46c55645ce77e245e015a1ea80eda"}, {&(0x7f0000001980)="97751f55bd0343aa5ded71ecae7d44343359fbc00092168d6586ea71ef4da6d184fb316dc69814c9db888999f83aacc09efd994d349980a8b2437226c26984f588d981"}, {&(0x7f0000001a00)="6d203577d68b411e48"}], 0x0, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001a80)="5cd13a4ed401a7ab5a77c08eb4"}, {&(0x7f0000001ac0)="8580f06581c70a7ce82038ffd504b7fc4d39c55266f124509635ab8235ded413b1bc8f6ae0675bfd372d2811f95b92dd6fa8109f3474e0618b12207fd69e57cf322e1b5ab5536758491fb81fbd2ccff28ec1facba417a6fee87131e88e118e277dc0eb1499460613fe37d4f3cd36b7e3411b806fb6b27e0031f71a11a747f38a3dd1ec85fbfbb7"}, {&(0x7f0000001b80)="07c923bb35da8260f82eef4ded1b8b"}, {&(0x7f0000001bc0)="def332af1b80e5447a859d7b47873708f6e5aafba27128c3d42e7a131c28ddc2732e3d6b3655cef2b99ea88d8e664968a113ffd89e41dec7efc6b886b624672dbc3445e5690601a7f85d8f3719b593a79af0ef299b60892d662fee4a39866869e1b4d1f819985344f326ee1600070f77f530ed1cee8fdf35ee773a65762dbbbbd2996f8738ace617a923fa1a6e62d8d16befbb3bcbc1bf87db5b503218c58ddadfceccd956d0dd1109bb389556bbd1"}, {&(0x7f0000001c80)="ada28115d60b33f0494a854c01f82f27bae6d0a46235066764db7e7fc06cdf7516c5f8b4b6df737c6a4db518d219c847be594dc3abd2dc5b3150452c86e1f35db9e67e60454f0faf805574a90d2d30e0abbc887d5f4ae16e39ecb0ae6291f4e4d199d0eb9557332b5e74b33002ee29807e3aa228ed130692fcbed9cba22fe322a384a11b676b7bdf711b61f528fcfdf5ec821d92ad342b4bad36aa1426c14b65421fe8e84a981c17b34d3b5d60f1950cdc9da7e094bc8662f0efdd5013cdefcb26c146c06a"}, {&(0x7f0000001d80)="94b4af14d1eaff7ecae5579a4f7e3388c56efff6d66dfe45c031f1bda16ef02aaa7723dc83"}, {&(0x7f0000001dc0)="7afc5a141d98db6cbc76c96dc10de3e3dc28ab911eb213b067920c164a86f2c04c3323717b58d33d6d316abd4cd6fce723072096f7c9262bb8fa112a02f54ab389"}, {&(0x7f0000001e40)="1f9747cf79a27ade29cc745a242e015e62e046bdbdbd6365ab5c7f4b2ceb1499bbfaa37608ca742dc8cb5affd23a7e82480461876d225ee297f0a2820b4f59bbff2f9e393f5dac8824cf24e163c0562297a3c584932eb6f4dd4976d7ace0568ea0636632f9952a69be4bb732d06fe315c19d81196638b05ac405b47e145e9fce2cc51dba92fad473"}, {&(0x7f0000001f00)="3f077f0fd0a468eb00750c17ba1286fc2d365c1614b22477e8b3221bf87d72fdfe57682736623e44eb0e7b93662492a1432b2938f26499cc8062c42db7831dfe386a165ce44284c7c9b6f6fc31d6a2c1b4dcf5c1ffd512d901c7689a1b8e40b7dfdc3ac202a769d00da3e35f26781f706c6f5cb406ada1ed2146265de9fb6de406ef5588410ffbf39801916707b8099a40347bfede706b9c7f521479340d26212dedad01eba4eeebecc18d177525f8f215e6a2dfe1b84f6cc663eca21e4f7666b9480304109b73ab0886f5757fa1ec16e23ab18302f573"}], 0x0, &(0x7f0000002300)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000002400)=@file={0x1, './file0\x00'}, 0x4, &(0x7f0000002900)=[{&(0x7f0000002480)="e70bc4c6b4db4c0535fc99b97cc1ee801b6fd98a6a3a3749f3fbb941a02a6d51bff6d5a49396738eff04a7ef09cb0d52c23c01eae563632a614d697a282c036cf2d3a70d"}, {&(0x7f0000002500)="9033107ff3120b7345df31f5f4fc50f57944fbd2cd4adaf1f2ffcc263dce6fe2c0bc3403c1ecb5635f7ac75675290e8d321ade0a6ff015a3eec3d900448707b67cdab11f5d0e439607d6bf7768f4fd19f35f84bfdf84dfa22ce47f4ae881b28cf9cc81064786c651caaef011942dd98e9dd2dae0c0f5ec1d59cb"}, {&(0x7f0000002580)="dfc1f2d4c26cd87569df17733c81ffc3669d477c25fb749c848ed3924aecc3fb1d84110c20f8ee5315707602f543f89a4ba418bf97a1adeea47a5148456f0623584f375283ecd55345e16ee01cb1d40000b8d0fac4b32c24f9428ac895b7ed47c565b3fa21ff70e9f5added73335244ce97a338358127eb5f7b227e8b187ac0f60f322594394f99e4b5eeb77f24ef5a89077a0ae0010d0d8a0a2010b20912aa407208b2669ab29dc4d121443928a1ce2b76de121d9f35ba06326e9c59b14a425973db04cc456244dbee46be14dae6a227bede026082d7d5123de95a9e54beb0be62a425c070dd1d15362ae"}, {&(0x7f0000002680)="b6dd15b3ce8e8770eef5bf920cac8eaf6d14fbc82ad10ffdf9e89ac1d8207b4847c2f54480b679de8fa8cd3192060c560c1868e4d52bbbf97df976b548a054816d83ebab2dd6d13d6823fedfff4b13af85a49087774c7573730dcde08105a658e392b5ca910b2405385f"}, {&(0x7f0000002700)="1a7670b827d7299220242378bc69df38578e62892431718d9d1fd0fb71e6404fdea24bf1cf5057ea2b41d3fe15afb8f5281659a60d9434bb8bfdf0cf91466ca2d382b715a983dd7dd6aa99ca4c998e231d7afa1b95de3f697f2122edca06bb63d33a672eaf782afce12680e3646b7079ab019cfe8a89fb67129a2dd14d79c2505eb4f5bb1e7ff57e14378821905c962374dadb3fe75bdca48758dada1cac4455ad4d24a7844cf7748ac28b32dbab22f18773e525972389fa45b01a6deafe3eb09cf97b8dcfc9acc15b67993b9deb643969c583be0016"}, {&(0x7f0000002800)="b07bd801d819e12c1f9f6aee3677a4f958d884eee94faaae3b2444b27e1e244927563469faea394cc84343c354a79e5478fc7ba2"}, {&(0x7f0000002840)="129b75341ec51fa6b71b98c0fc4a3c718343525ea7"}, {&(0x7f0000002880)="ad960e2410e15c4245219be63c74681782cceec2a39001003b971c7dfe5dcb873e77d3431472b44cbe8456b7156254d7418ad7bec38e2456b8d46741e1fa92398b7f920ce377e59296095eb3182aacad55f3a436db1792582b33aeac5f7eab55aaa793cc1cab653943aca99d4c9620a47e240760c1325ea14405057f4708"}], 0x0, &(0x7f0000002a40)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @cred, @cred={{0x0, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}, {{&(0x7f0000002b40)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002bc0)="55ad2afd0ab94b2ef2251a344434bba27edf8db2d1ae6d68c6fb3bdbc417327bbf931a645189dc74b9cf8df256f3da5aa3c2a25501bd1cd65aafccb686192c1b11419af3e85c133e"}, {&(0x7f0000002c40)="df0c3f2725b10b37690869037a2b3822fa89bf2a5101a458c2cd38491ea24fab4308c6ac9e41f1fd659ca916ec20a2af8fa8d22c24e8dd760d40b12c78aba078995ef2f1a6a2059071e01fa9c0424d6a26324c122ec5fe85"}, {&(0x7f0000002cc0)="15db9295b887856a59cf85dad9b61689eb99b634ae557e6d087dc5b60c94601ecf1a9746dbaf84ab910e98a589ae474e0dfb97d3d50f15e10d2e24acd86bdef4dd4952378a02917ff91e882e612a3fc03926491f7a0bd83ea117a1a757d1cd32ca11ce862da26f18fa2521371e4299c5133ef9bb03ad110015715ba99456491cbf47fededa4ae35543a7c5b09a"}, {&(0x7f0000002d80)="f85c40921d9265f030b595d1614fd8e73d956eceef047d671e"}, {&(0x7f0000002dc0)="f505b6acb4f4ace1c6a10719dac764d30643657f6d5294237dd4e04843683477cdc269563c90c3ab667d5586e7dee073a289bd371d5da750059c9f17d85d254c509c565721083fe00ed1135d3e2d185730de738bff6cfae64d0194ca64555082d75e71c8fb66f28e09ad85ce48aa7280751b6e526dfb7da781887e745a7791c100f899bceaa7433b2b6322847c907838efb5484c680b0f1ed90082276a461c73bde6fa0125e6dd0dd2c916133cdeb1f350959d8eb8fd9da5e4536a1ff72d6fc64233e4e4b9801fd0c1fc56f5e82df04c5386aa2e879e795fc5f0677e4bb1391ebf417ca0"}], 0x0, &(0x7f0000003040)=[@cred, @cred, @cred, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000003100)=@abs, 0x0, &(0x7f0000003380)=[{&(0x7f0000003180)="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"}, {&(0x7f0000003280)="b534f5a56bec25a9984bb7aa79f2424e280269909ab092fb533afe40c9b39016febfbc0043231f5e616f16acec474efb103aa2e297cf4316"}, {&(0x7f00000032c0)="ecf011714178aa945d25a7b081ee27db1849debba960713b7dbc339556bb08741dc2efef2360ca99572610775c95"}, {&(0x7f0000003300)="2e33c5ff79b68d8014fe6c4b45f0d4c7dd4d169788a20e8467a75ffadf544144503ded99871c5cfcb1"}, {&(0x7f0000003340)="136232b3d89f76c40b"}], 0x0, &(0x7f0000003540)=[@cred, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}}], 0x4000000000000b6, 0x0) 0s ago: executing program 5 (id=5159): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001}}) kernel console output (not intermixed with test programs): =3 [ 276.627099][ T944] usb 1-1: Product: syz [ 276.632104][ T944] usb 1-1: Manufacturer: syz [ 276.636985][ T944] usb 1-1: SerialNumber: syz [ 276.645115][ T944] usb 1-1: config 0 descriptor?? [ 276.656261][ T422] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 276.689350][ T944] pl2303 1-1:0.106: required interrupt-in endpoint missing [ 276.797162][ T5] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 276.853405][ T9425] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0f000002) [ 276.927187][ T944] usb 1-1: USB disconnect, device number 98 [ 276.971816][ T9434] EXT4-fs (loop4): Test dummy encryption mode enabled [ 276.978906][ T9434] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 276.988711][ T9434] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 277.046220][ T422] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 277.058693][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 277.063852][ T422] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.074171][ T422] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 277.165340][ T343] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 277.187070][ T5] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.197251][ T5] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.252094][ T422] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 277.261216][ T422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.269501][ T422] usb 4-1: Product: syz [ 277.273735][ T422] usb 4-1: Manufacturer: syz [ 277.278330][ T422] usb 4-1: SerialNumber: syz [ 277.283562][ T422] usb 4-1: config 0 descriptor?? [ 277.328378][ T422] usb-storage 4-1:0.0: USB Mass Storage device detected [ 277.335929][ T422] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 277.371310][ T5] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 277.380434][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.388501][ T5] usb 3-1: Product: syz [ 277.392678][ T5] usb 3-1: Manufacturer: syz [ 277.397357][ T5] usb 3-1: SerialNumber: syz [ 277.425381][ T108] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 277.534253][ T23] audit: type=1400 audit(1880668888.860:250): avc: denied { execmem } for pid=9452 comm="syz.0.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 277.577107][ T343] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 277.586717][ T422] usb 4-1: USB disconnect, device number 98 [ 277.589221][ T343] usb 2-1: config 0 has no interface number 0 [ 277.601560][ T343] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 277.614526][ T343] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 277.685380][ T108] usb 5-1: Using ep0 maxpacket: 32 [ 277.750590][ T5] usb 3-1: 0:2 : does not exist [ 277.760091][ T5] usb 3-1: USB disconnect, device number 97 [ 277.761167][ T343] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 277.775143][ T343] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 277.783207][ T343] usb 2-1: Product: syz [ 277.787387][ T343] usb 2-1: SerialNumber: syz [ 277.792828][ T343] usb 2-1: config 0 descriptor?? [ 277.869480][ T108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 277.956126][ T108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.966382][ T108] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 277.975622][ T108] usb 5-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 277.987106][ T108] usb 5-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 277.987411][ T1921] udevd[1921]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 278.000373][ T108] usb 5-1: config 1 interface 2 has no altsetting 1 [ 278.010269][ T944] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 278.098979][ T343] snd-usb-audio: probe of 2-1:0.2 failed with error -12 [ 278.107492][ T343] usb 2-1: USB disconnect, device number 101 [ 278.270245][ T108] usb 5-1: string descriptor 0 read error: -22 [ 278.276521][ T108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.285799][ T944] usb 1-1: Using ep0 maxpacket: 16 [ 278.289725][ T9481] EXT4-fs (loop3): unsupported inode size: 768 [ 278.295500][ T108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.297839][ T9481] EXT4-fs (loop3): blocksize: 1024 [ 278.346932][ T108] usb 5-1: 2:0 : UAC_AS_GENERAL descriptor not found [ 278.411069][ T944] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.421195][ T944] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.562687][ T386] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 278.590091][ T108] usb 5-1: USB disconnect, device number 96 [ 278.606101][ T944] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.615623][ T944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.623943][ T944] usb 1-1: Product: syz [ 278.628382][ T944] usb 1-1: Manufacturer: syz [ 278.633174][ T944] usb 1-1: SerialNumber: syz [ 278.757758][ T422] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 278.769405][ T9506] loop1: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 278.769527][ T9506] loop1: p1 size 100663296 extends beyond EOD, truncated [ 278.864129][ T9506] loop1: p2 start 591104 is beyond EOD, truncated [ 278.871289][ T9506] loop1: p5 size 100663296 extends beyond EOD, truncated [ 278.878825][ T9506] loop1: p6 start 591104 is beyond EOD, truncated [ 278.885238][ T9506] loop1: p7 size 100663296 extends beyond EOD, truncated [ 278.892331][ T386] usb 3-1: Using ep0 maxpacket: 8 [ 278.897076][ T9506] loop1: p8 start 591104 is beyond EOD, truncated [ 278.903945][ T9506] loop1: p9 size 100663296 extends beyond EOD, truncated [ 278.911587][ T9506] loop1: p10 start 591104 is beyond EOD, truncated [ 278.918092][ T9506] loop1: p11 size 100663296 extends beyond EOD, truncated [ 278.925930][ T9506] loop1: p12 start 591104 is beyond EOD, truncated [ 278.932498][ T9506] loop1: p13 size 100663296 extends beyond EOD, truncated [ 278.940170][ T9506] loop1: p14 start 591104 is beyond EOD, truncated [ 278.946861][ T9506] loop1: p15 size 100663296 extends beyond EOD, truncated [ 278.954533][ T9506] loop1: p16 start 591104 is beyond EOD, truncated [ 278.961038][ T9506] loop1: p17 size 100663296 extends beyond EOD, truncated [ 278.968322][ T944] usb 1-1: 0:2 : does not exist [ 278.973318][ T9506] loop1: p18 start 591104 is beyond EOD, truncated [ 278.975036][ T944] usb 1-1: USB disconnect, device number 99 [ 278.986484][ T9506] loop1: p19 size 100663296 extends beyond EOD, truncated [ 278.994694][ T9506] loop1: p20 start 591104 is beyond EOD, truncated [ 279.001279][ T9506] loop1: p21 size 100663296 extends beyond EOD, truncated [ 279.009123][ T9506] loop1: p22 start 591104 is beyond EOD, truncated [ 279.015648][ T9506] loop1: p23 size 100663296 extends beyond EOD, truncated [ 279.023613][ T9506] loop1: p24 start 591104 is beyond EOD, truncated [ 279.030168][ T9506] loop1: p25 size 100663296 extends beyond EOD, truncated [ 279.037843][ T9506] loop1: p26 start 591104 is beyond EOD, truncated [ 279.044627][ T9506] loop1: p27 size 100663296 extends beyond EOD, truncated [ 279.052343][ T9506] loop1: p28 start 591104 is beyond EOD, truncated [ 279.058844][ T9506] loop1: p29 size 100663296 extends beyond EOD, truncated [ 279.066668][ T9506] loop1: p30 start 591104 is beyond EOD, truncated [ 279.071861][ T386] usb 3-1: unable to get BOS descriptor or descriptor too short [ 279.073267][ T9506] loop1: p31 size 100663296 extends beyond EOD, truncated [ 279.088666][ T9506] loop1: p32 start 591104 is beyond EOD, truncated [ 279.095318][ T9506] loop1: p33 size 100663296 extends beyond EOD, truncated [ 279.102926][ T9506] loop1: p34 start 591104 is beyond EOD, truncated [ 279.109563][ T9506] loop1: p35 size 100663296 extends beyond EOD, truncated [ 279.117202][ T9506] loop1: p36 start 591104 is beyond EOD, truncated [ 279.123708][ T9506] loop1: p37 size 100663296 extends beyond EOD, truncated [ 279.131467][ T9506] loop1: p38 start 591104 is beyond EOD, truncated [ 279.138022][ T9506] loop1: p39 size 100663296 extends beyond EOD, truncated [ 279.145604][ T9506] loop1: p40 start 591104 is beyond EOD, truncated [ 279.152308][ T9506] loop1: p41 size 100663296 extends beyond EOD, truncated [ 279.160023][ T9506] loop1: p42 start 591104 is beyond EOD, truncated [ 279.166561][ T9506] loop1: p43 size 100663296 extends beyond EOD, truncated [ 279.169383][ T386] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 279.182448][ T386] usb 3-1: config 1 has no interface number 1 [ 279.182890][ T9506] loop1: p44 start 591104 is beyond EOD, truncated [ 279.188628][ T386] usb 3-1: config 1 interface 3 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 279.195476][ T422] usb 4-1: unable to get BOS descriptor or descriptor too short [ 279.216729][ T9506] loop1: p45 size 100663296 extends beyond EOD, truncated [ 279.223814][ T386] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 80, changing to 7 [ 279.235155][ T386] usb 3-1: config 1 interface 3 has no altsetting 0 [ 279.235204][ T9506] loop1: p46 start 591104 is beyond EOD, truncated [ 279.248770][ T9506] loop1: p47 size 100663296 extends beyond EOD, truncated [ 279.261535][ T9506] loop1: p48 start 591104 is beyond EOD, truncated [ 279.268548][ T9506] loop1: p49 size 100663296 extends beyond EOD, truncated [ 279.279802][ T9506] loop1: p50 start 591104 is beyond EOD, truncated [ 279.286568][ T9506] loop1: p51 size 100663296 extends beyond EOD, truncated [ 279.298264][ T9506] loop1: p52 start 591104 is beyond EOD, truncated [ 279.305098][ T9506] loop1: p53 size 100663296 extends beyond EOD, truncated [ 279.313119][ T9506] loop1: p54 start 591104 is beyond EOD, truncated [ 279.319684][ T9506] loop1: p55 size 100663296 extends beyond EOD, truncated [ 279.328011][ T9506] loop1: p56 start 591104 is beyond EOD, truncated [ 279.334709][ T9506] loop1: p57 size 100663296 extends beyond EOD, truncated [ 279.342728][ T9506] loop1: p58 start 591104 is beyond EOD, truncated [ 279.349282][ T9506] loop1: p59 size 100663296 extends beyond EOD, truncated [ 279.357234][ T9506] loop1: p60 start 591104 is beyond EOD, truncated [ 279.363807][ T9506] loop1: p61 size 100663296 extends beyond EOD, truncated [ 279.371875][ T9506] loop1: p62 start 591104 is beyond EOD, truncated [ 279.375144][ T422] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.378482][ T9506] loop1: p63 size 100663296 extends beyond EOD, truncated [ 279.396611][ T9506] loop1: p64 start 591104 is beyond EOD, truncated [ 279.396757][ T422] usb 4-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.403322][ T9506] loop1: p65 size 100663296 extends beyond EOD, truncated [ 279.423434][ T386] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.432538][ T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.438025][ T422] usb 4-1: config 1 interface 0 has no altsetting 0 [ 279.441641][ T9506] loop1: p66 start 591104 is beyond EOD, truncated [ 279.453899][ T386] usb 3-1: Product: syz [ 279.458058][ T386] usb 3-1: Manufacturer: syz [ 279.462740][ T9506] loop1: p67 size 100663296 extends beyond EOD, truncated [ 279.469886][ T386] usb 3-1: SerialNumber: syz [ 279.476446][ T9506] loop1: p68 start 591104 is beyond EOD, truncated [ 279.488838][ T9506] loop1: p69 size 100663296 extends beyond EOD, truncated [ 279.503893][ T9506] loop1: p70 start 591104 is beyond EOD, truncated [ 279.510797][ T9506] loop1: p71 size 100663296 extends beyond EOD, truncated [ 279.519181][ T9506] loop1: p72 start 591104 is beyond EOD, truncated [ 279.525850][ T9506] loop1: p73 size 100663296 extends beyond EOD, truncated [ 279.533877][ T9506] loop1: p74 start 591104 is beyond EOD, truncated [ 279.540803][ T9506] loop1: p75 size 100663296 extends beyond EOD, truncated [ 279.548869][ T9506] loop1: p76 start 591104 is beyond EOD, truncated [ 279.555436][ T9506] loop1: p77 size 100663296 extends beyond EOD, truncated [ 279.563568][ T9506] loop1: p78 start 591104 is beyond EOD, truncated [ 279.570566][ T9506] loop1: p79 size 100663296 extends beyond EOD, truncated [ 279.578300][ T9506] loop1: p80 start 591104 is beyond EOD, truncated [ 279.585121][ T9506] loop1: p81 size 100663296 extends beyond EOD, truncated [ 279.593220][ T9506] loop1: p82 start 591104 is beyond EOD, truncated [ 279.599783][ T9506] loop1: p83 size 100663296 extends beyond EOD, truncated [ 279.608175][ T9506] loop1: p84 start 591104 is beyond EOD, truncated [ 279.614946][ T9506] loop1: p85 size 100663296 extends beyond EOD, truncated [ 279.624312][ T422] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.635660][ T9506] loop1: p86 start 591104 is beyond EOD, truncated [ 279.642192][ T9506] loop1: p87 size 100663296 extends beyond EOD, truncated [ 279.644472][ T422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.667535][ T422] usb 4-1: Product: syz [ 279.678605][ T422] usb 4-1: Manufacturer: ࠌ [ 279.680392][ T9506] loop1: p88 start 591104 is beyond EOD, truncated [ 279.690043][ T9506] loop1: p89 size 100663296 extends beyond EOD, truncated [ 279.694744][ T422] usb 4-1: SerialNumber: syz [ 279.701154][ T9506] loop1: p90 start 591104 is beyond EOD, truncated [ 279.708919][ T9506] loop1: p91 size 100663296 extends beyond EOD, truncated [ 279.723645][ T9506] loop1: p92 start 591104 is beyond EOD, truncated [ 279.732768][ T9506] loop1: p93 size 100663296 extends beyond EOD, truncated [ 279.745712][ T9506] loop1: p94 start 591104 is beyond EOD, truncated [ 279.746618][ T422] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 279.752241][ T9506] loop1: p95 size 100663296 extends beyond EOD, truncated [ 279.752845][ T9506] loop1: p96 start 591104 is beyond EOD, truncated [ 279.775001][ T9506] loop1: p97 size 100663296 extends beyond EOD, truncated [ 279.795232][ T9506] loop1: p98 start 591104 is beyond EOD, truncated [ 279.802167][ T9506] loop1: p99 size 100663296 extends beyond EOD, truncated [ 279.810277][ T9506] loop1: p100 start 591104 is beyond EOD, truncated [ 279.818481][ T9506] loop1: p101 size 100663296 extends beyond EOD, truncated [ 279.830786][ T9506] loop1: p102 start 591104 is beyond EOD, truncated [ 279.837405][ T9506] loop1: p103 size 100663296 extends beyond EOD, truncated [ 279.847753][ T9506] loop1: p104 start 591104 is beyond EOD, truncated [ 279.855123][ T9506] loop1: p105 size 100663296 extends beyond EOD, truncated [ 279.865109][ T9506] loop1: p106 start 591104 is beyond EOD, truncated [ 279.872065][ T9506] loop1: p107 size 100663296 extends beyond EOD, truncated [ 279.879579][ T386] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 279.895583][ T9506] loop1: p108 start 591104 is beyond EOD, truncated [ 279.902206][ T9506] loop1: p109 size 100663296 extends beyond EOD, truncated [ 279.910423][ T9506] loop1: p110 start 591104 is beyond EOD, truncated [ 279.921242][ T9506] loop1: p111 size 100663296 extends beyond EOD, truncated [ 279.931287][ T9506] loop1: p112 start 591104 is beyond EOD, truncated [ 279.937988][ T9506] loop1: p113 size 100663296 extends beyond EOD, truncated [ 279.953861][ T9506] loop1: p114 start 591104 is beyond EOD, truncated [ 279.960727][ T9506] loop1: p115 size 100663296 extends beyond EOD, truncated [ 279.968788][ T9506] loop1: p116 start 591104 is beyond EOD, truncated [ 279.978312][ T386] usb 3-1: USB disconnect, device number 98 [ 279.985229][ T422] usb 4-1: USB disconnect, device number 99 [ 280.004700][ T9506] loop1: p117 size 100663296 extends beyond EOD, truncated [ 280.025172][ T9506] loop1: p118 start 591104 is beyond EOD, truncated [ 280.036098][ T9506] loop1: p119 size 100663296 extends beyond EOD, truncated [ 280.055829][ T9506] loop1: p120 start 591104 is beyond EOD, truncated [ 280.076381][ T9506] loop1: p121 size 100663296 extends beyond EOD, truncated [ 280.094360][ T9506] loop1: p122 start 591104 is beyond EOD, truncated [ 280.106653][ T9506] loop1: p123 size 100663296 extends beyond EOD, truncated [ 280.116692][ T9506] loop1: p124 start 591104 is beyond EOD, truncated [ 280.123384][ T9506] loop1: p125 size 100663296 extends beyond EOD, truncated [ 280.131499][ T9506] loop1: p126 start 591104 is beyond EOD, truncated [ 280.138170][ T9506] loop1: p127 size 100663296 extends beyond EOD, truncated [ 280.145970][ T9506] loop1: p128 start 591104 is beyond EOD, truncated [ 280.152560][ T9506] loop1: p129 size 100663296 extends beyond EOD, truncated [ 280.160622][ T9506] loop1: p130 start 591104 is beyond EOD, truncated [ 280.167310][ T9506] loop1: p131 size 100663296 extends beyond EOD, truncated [ 280.175933][ T9515] F2FS-fs (loop4): Value of option "test_dummy_encryption=v1" is unrecognized [ 280.179797][ T9506] loop1: p132 start 591104 is beyond EOD, truncated [ 280.195789][ T9506] loop1: p133 size 100663296 extends beyond EOD, truncated [ 280.213163][ T9506] loop1: p134 start 591104 is beyond EOD, truncated [ 280.239103][ T9506] loop1: p135 size 100663296 extends beyond EOD, truncated [ 280.247484][ T9506] loop1: p136 start 591104 is beyond EOD, truncated [ 280.254172][ T9506] loop1: p137 size 100663296 extends beyond EOD, truncated [ 280.265973][ T9506] loop1: p138 start 591104 is beyond EOD, truncated [ 280.272594][ T9506] loop1: p139 size 100663296 extends beyond EOD, truncated [ 280.281266][ T9506] loop1: p140 start 591104 is beyond EOD, truncated [ 280.296773][ T9506] loop1: p141 size 100663296 extends beyond EOD, truncated [ 280.305203][ T9506] loop1: p142 start 591104 is beyond EOD, truncated [ 280.312926][ T9506] loop1: p143 size 100663296 extends beyond EOD, truncated [ 280.331619][ T9506] loop1: p144 start 591104 is beyond EOD, truncated [ 280.338327][ T9506] loop1: p145 size 100663296 extends beyond EOD, truncated [ 280.350608][ T9506] loop1: p146 start 591104 is beyond EOD, truncated [ 280.363094][ T9506] loop1: p147 size 100663296 extends beyond EOD, truncated [ 280.372313][ T9506] loop1: p148 start 591104 is beyond EOD, truncated [ 280.379428][ T9506] loop1: p149 size 100663296 extends beyond EOD, truncated [ 280.395058][ T9506] loop1: p150 start 591104 is beyond EOD, truncated [ 280.401752][ T9506] loop1: p151 size 100663296 extends beyond EOD, truncated [ 280.420718][ T9506] loop1: p152 start 591104 is beyond EOD, truncated [ 280.427493][ T9559] syz.2.4179 uses obsolete (PF_INET,SOCK_PACKET) [ 280.434040][ T9506] loop1: p153 size 100663296 extends beyond EOD, truncated [ 280.442583][ T9506] loop1: p154 start 591104 is beyond EOD, truncated [ 280.449270][ T9506] loop1: p155 size 100663296 extends beyond EOD, truncated [ 280.457291][ T9506] loop1: p156 start 591104 is beyond EOD, truncated [ 280.476971][ T9506] loop1: p157 size 100663296 extends beyond EOD, truncated [ 280.490397][ T9506] loop1: p158 start 591104 is beyond EOD, truncated [ 280.498770][ T9506] loop1: p159 size 100663296 extends beyond EOD, truncated [ 280.507405][ T9506] loop1: p160 start 591104 is beyond EOD, truncated [ 280.514183][ T9506] loop1: p161 size 100663296 extends beyond EOD, truncated [ 280.522206][ T9506] loop1: p162 start 591104 is beyond EOD, truncated [ 280.529108][ T9506] loop1: p163 size 100663296 extends beyond EOD, truncated [ 280.534202][ T565] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 280.537028][ T9506] loop1: p164 start 591104 is beyond EOD, truncated [ 280.557044][ T9506] loop1: p165 size 100663296 extends beyond EOD, truncated [ 280.564894][ T9506] loop1: p166 start 591104 is beyond EOD, truncated [ 280.571566][ T9506] loop1: p167 size 100663296 extends beyond EOD, truncated [ 280.579486][ T9506] loop1: p168 start 591104 is beyond EOD, truncated [ 280.586089][ T9506] loop1: p169 size 100663296 extends beyond EOD, truncated [ 280.594145][ T9506] loop1: p170 start 591104 is beyond EOD, truncated [ 280.600835][ T9506] loop1: p171 size 100663296 extends beyond EOD, truncated [ 280.608697][ T9506] loop1: p172 start 591104 is beyond EOD, truncated [ 280.615403][ T9506] loop1: p173 size 100663296 extends beyond EOD, truncated [ 280.623472][ T9506] loop1: p174 start 591104 is beyond EOD, truncated [ 280.630106][ T23] audit: type=1400 audit(1880668891.712:251): avc: denied { append } for pid=9568 comm="syz.3.4184" name="usbmon0" dev="devtmpfs" ino=10492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 280.653884][ T9506] loop1: p175 size 100663296 extends beyond EOD, truncated [ 280.663599][ T9506] loop1: p176 start 591104 is beyond EOD, truncated [ 280.670343][ T422] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 280.678063][ T9506] loop1: p177 size 100663296 extends beyond EOD, truncated [ 280.686009][ T9506] loop1: p178 start 591104 is beyond EOD, truncated [ 280.694036][ T9506] loop1: p179 size 100663296 extends beyond EOD, truncated [ 280.702005][ T9506] loop1: p180 start 591104 is beyond EOD, truncated [ 280.708865][ T9506] loop1: p181 size 100663296 extends beyond EOD, truncated [ 280.716678][ T9506] loop1: p182 start 591104 is beyond EOD, truncated [ 280.723552][ T9506] loop1: p183 size 100663296 extends beyond EOD, truncated [ 280.731608][ T9506] loop1: p184 start 591104 is beyond EOD, truncated [ 280.738309][ T9506] loop1: p185 size 100663296 extends beyond EOD, truncated [ 280.746189][ T9506] loop1: p186 start 591104 is beyond EOD, truncated [ 280.752910][ T9506] loop1: p187 size 100663296 extends beyond EOD, truncated [ 280.760714][ T9506] loop1: p188 start 591104 is beyond EOD, truncated [ 280.767387][ T9506] loop1: p189 size 100663296 extends beyond EOD, truncated [ 280.775208][ T9506] loop1: p190 start 591104 is beyond EOD, truncated [ 280.781808][ T9506] loop1: p191 size 100663296 extends beyond EOD, truncated [ 280.789147][ T5] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 280.797369][ T9506] loop1: p192 start 591104 is beyond EOD, truncated [ 280.804018][ T9506] loop1: p193 size 100663296 extends beyond EOD, truncated [ 280.811993][ T9506] loop1: p194 start 591104 is beyond EOD, truncated [ 280.818772][ T9506] loop1: p195 size 100663296 extends beyond EOD, truncated [ 280.826638][ T9506] loop1: p196 start 591104 is beyond EOD, truncated [ 280.826713][ T565] usb 1-1: Using ep0 maxpacket: 16 [ 280.833305][ T9506] loop1: p197 size 100663296 extends beyond EOD, truncated [ 280.846463][ T9506] loop1: p198 start 591104 is beyond EOD, truncated [ 280.853148][ T9506] loop1: p199 size 100663296 extends beyond EOD, truncated [ 280.860994][ T9506] loop1: p200 start 591104 is beyond EOD, truncated [ 280.867600][ T9506] loop1: p201 size 100663296 extends beyond EOD, truncated [ 280.875519][ T9506] loop1: p202 start 591104 is beyond EOD, truncated [ 280.882204][ T9506] loop1: p203 size 100663296 extends beyond EOD, truncated [ 280.889889][ T9506] loop1: p204 start 591104 is beyond EOD, truncated [ 280.896521][ T9506] loop1: p205 size 100663296 extends beyond EOD, truncated [ 280.904363][ T9506] loop1: p206 start 591104 is beyond EOD, truncated [ 280.910946][ T9506] loop1: p207 size 100663296 extends beyond EOD, truncated [ 280.918830][ T9506] loop1: p208 start 591104 is beyond EOD, truncated [ 280.925635][ T9506] loop1: p209 size 100663296 extends beyond EOD, truncated [ 280.933717][ T9506] loop1: p210 start 591104 is beyond EOD, truncated [ 280.940530][ T9506] loop1: p211 size 100663296 extends beyond EOD, truncated [ 280.948388][ T9506] loop1: p212 start 591104 is beyond EOD, truncated [ 280.954983][ T9506] loop1: p213 size 100663296 extends beyond EOD, truncated [ 280.962992][ T9506] loop1: p214 start 591104 is beyond EOD, truncated [ 280.969692][ T9506] loop1: p215 size 100663296 extends beyond EOD, truncated [ 280.977534][ T9506] loop1: p216 start 591104 is beyond EOD, truncated [ 280.978369][ T565] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.984375][ T9506] loop1: p217 size 100663296 extends beyond EOD, truncated [ 281.002284][ T9506] loop1: p218 start 591104 is beyond EOD, truncated [ 281.010586][ T9506] loop1: p219 size 100663296 extends beyond EOD, truncated [ 281.019794][ T565] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.020186][ T9506] loop1: p220 start 591104 is beyond EOD, truncated [ 281.035486][ T9506] loop1: p221 size 100663296 extends beyond EOD, truncated [ 281.044871][ T9506] loop1: p222 start 591104 is beyond EOD, truncated [ 281.053232][ T9506] loop1: p223 size 100663296 extends beyond EOD, truncated [ 281.061751][ T23] audit: type=1326 audit(1880668892.119:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9579 comm="syz.3.4189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2e01cc969 code=0x0 [ 281.085005][ T422] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 281.093634][ T422] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 281.102244][ T9506] loop1: p224 start 591104 is beyond EOD, truncated [ 281.109549][ T9506] loop1: p225 size 100663296 extends beyond EOD, truncated [ 281.119339][ T422] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.124414][ T9506] loop1: p226 start 591104 is beyond EOD, truncated [ 281.129590][ T422] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 281.136773][ T9506] loop1: p227 size 100663296 extends beyond EOD, truncated [ 281.153590][ T9506] loop1: p228 start 591104 is beyond EOD, truncated [ 281.160202][ T9506] loop1: p229 size 100663296 extends beyond EOD, truncated [ 281.162745][ T422] usb 5-1: config 0 has no interface number 0 [ 281.169943][ T9506] loop1: p230 start 591104 is beyond EOD, truncated [ 281.183158][ T9506] loop1: p231 size 100663296 extends beyond EOD, truncated [ 281.189712][ T422] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 281.191305][ T9506] loop1: p232 start 591104 is beyond EOD, truncated [ 281.205806][ T5] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 281.208919][ T9506] loop1: p233 size 100663296 extends beyond EOD, truncated [ 281.216237][ T5] usb 3-1: config 0 has no interface number 0 [ 281.221999][ T422] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.229615][ T9506] loop1: p234 start 591104 is beyond EOD, truncated [ 281.230719][ T422] usb 5-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 281.240872][ T9506] loop1: p235 size 100663296 extends beyond EOD, truncated [ 281.249444][ T422] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 281.260445][ T9506] loop1: p236 start 591104 is beyond EOD, truncated [ 281.277675][ T422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.282878][ T565] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.300027][ T565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.308259][ T9506] loop1: p237 size 100663296 extends beyond EOD, truncated [ 281.310238][ T565] usb 1-1: Product: syz [ 281.320144][ T422] usb 5-1: config 0 descriptor?? [ 281.324900][ T565] usb 1-1: Manufacturer: syz [ 281.329895][ T565] usb 1-1: SerialNumber: syz [ 281.335881][ T9506] loop1: p238 start 591104 is beyond EOD, truncated [ 281.343254][ T9506] loop1: p239 size 100663296 extends beyond EOD, truncated [ 281.351554][ T9506] loop1: p240 start 591104 is beyond EOD, truncated [ 281.358427][ T9506] loop1: p241 size 100663296 extends beyond EOD, truncated [ 281.366215][ T9506] loop1: p242 start 591104 is beyond EOD, truncated [ 281.369303][ T422] usb 5-1: MIDIStreaming interface descriptor not found [ 281.376674][ T9506] loop1: p243 size 100663296 extends beyond EOD, truncated [ 281.381090][ T5] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 281.388384][ T9506] loop1: p244 start 591104 is beyond EOD, truncated [ 281.403444][ T9506] loop1: p245 size 100663296 extends beyond EOD, truncated [ 281.405670][ T9590] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 281.411364][ T9506] loop1: p246 start 591104 is beyond EOD, truncated [ 281.424200][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.425953][ T9506] loop1: p247 size 100663296 extends beyond EOD, truncated [ 281.434337][ T5] usb 3-1: Product: syz [ 281.441740][ T9506] loop1: p248 start 591104 is beyond EOD, truncated [ 281.449647][ T9590] EXT4-fs (loop3): orphan cleanup on readonly fs [ 281.452997][ T9506] loop1: p249 size 100663296 extends beyond EOD, truncated [ 281.462513][ T5] usb 3-1: Manufacturer: syz [ 281.470864][ T9590] EXT4-fs error (device loop3): ext4_map_blocks:731: inode #3: block 3: comm syz.3.4194: lblock 3 mapped to illegal pblock 3 (length 1) [ 281.476137][ T9506] loop1: p250 start 591104 is beyond EOD, truncated [ 281.493166][ T9506] loop1: p251 size 100663296 extends beyond EOD, truncated [ 281.496078][ T5] usb 3-1: SerialNumber: syz [ 281.501167][ T9506] loop1: p252 start 591104 is beyond EOD, truncated [ 281.510526][ T5] usb 3-1: config 0 descriptor?? [ 281.513021][ T9506] loop1: p253 size 100663296 extends beyond EOD, truncated [ 281.517245][ T9590] Quota error (device loop3): write_blk: dquota write failed [ 281.525995][ T9506] loop1: p254 start 591104 is beyond EOD, truncated [ 281.532036][ T9590] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 281.538775][ T9506] loop1: p255 size 100663296 extends beyond EOD, truncated [ 281.547474][ T9590] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 281.565204][ T9590] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #3: block 3: comm syz.3.4194: lblock 3 mapped to illegal pblock 3 (length 1) [ 281.579723][ T9590] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 281.592111][ T9590] EXT4-fs error (device loop3): ext4_free_blocks:4795: comm syz.3.4194: Freeing blocks not in datazone - block = 0, count = 4096 [ 281.617896][ T9590] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #3: block 3: comm syz.3.4194: lblock 3 mapped to illegal pblock 3 (length 1) [ 281.625383][ T164] loop1: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 281.625477][ T164] loop1: p1 size 100663296 extends beyond EOD, [ 281.682464][ T565] usb 1-1: 0:2 : does not exist [ 281.719218][ T164] truncated [ 281.726398][ T9590] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 281.732557][ T164] loop1: p2 start 591104 is beyond EOD, truncated [ 281.733151][ T9590] EXT4-fs (loop3): 1 orphan inode deleted [ 281.743688][ T164] loop1: p5 size 100663296 extends beyond EOD, truncated [ 281.751743][ T343] usb 5-1: USB disconnect, device number 97 [ 281.758280][ T164] loop1: p6 start 591104 is beyond EOD, truncated [ 281.762465][ T9590] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 281.768140][ T164] loop1: p7 size 100663296 extends beyond EOD, truncated [ 281.777912][ T565] usb 1-1: USB disconnect, device number 100 [ 281.792231][ T164] loop1: p8 start 591104 is beyond EOD, truncated [ 281.804200][ T164] loop1: p9 size 100663296 extends beyond EOD, truncated [ 281.812455][ T164] loop1: p10 start 591104 is beyond EOD, truncated [ 281.818983][ T164] loop1: p11 size 100663296 extends beyond EOD, truncated [ 281.827013][ T164] loop1: p12 start 591104 is beyond EOD, truncated [ 281.841909][ T164] loop1: p13 size 100663296 extends beyond EOD, truncated [ 281.850854][ T164] loop1: p14 start 591104 is beyond EOD, truncated [ 281.857645][ T164] loop1: p15 size 100663296 extends beyond EOD, truncated [ 281.865416][ T164] loop1: p16 start 591104 is beyond EOD, truncated [ 281.872155][ T164] loop1: p17 size 100663296 extends beyond EOD, truncated [ 281.880397][ T164] loop1: p18 start 591104 is beyond EOD, truncated [ 281.886920][ T164] loop1: p19 size 100663296 extends beyond EOD, truncated [ 281.899647][ T164] loop1: p20 start 591104 is beyond EOD, truncated [ 281.906287][ T164] loop1: p21 size 100663296 extends beyond EOD, truncated [ 281.914178][ T164] loop1: p22 start 591104 is beyond EOD, truncated [ 281.920985][ T164] loop1: p23 size 100663296 extends beyond EOD, truncated [ 281.928641][ T164] loop1: p24 start 591104 is beyond EOD, truncated [ 281.935280][ T164] loop1: p25 size 100663296 extends beyond EOD, truncated [ 281.943069][ T164] loop1: p26 start 591104 is beyond EOD, truncated [ 281.949679][ T164] loop1: p27 size 100663296 extends beyond EOD, truncated [ 281.957461][ T164] loop1: p28 start 591104 is beyond EOD, truncated [ 281.964165][ T164] loop1: p29 size 100663296 extends beyond EOD, truncated [ 281.971862][ T164] loop1: p30 start 591104 is beyond EOD, truncated [ 281.974847][ T5] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 281.978598][ T164] loop1: p31 size 100663296 extends beyond EOD, truncated [ 281.985132][ T5] uvcvideo: No valid video chain found. [ 281.992835][ T164] loop1: p32 start 591104 is beyond EOD, truncated [ 282.004300][ T164] loop1: p33 size 100663296 extends beyond EOD, truncated [ 282.012500][ T164] loop1: p34 start 591104 is beyond EOD, truncated [ 282.013612][ T5] usb 3-1: USB disconnect, device number 99 [ 282.019608][ T164] loop1: p35 size 100663296 extends beyond EOD, truncated [ 282.051231][ T164] loop1: p36 start 591104 is beyond EOD, truncated [ 282.061605][ T164] loop1: p37 size 100663296 extends beyond EOD, truncated [ 282.086860][ T164] loop1: p38 start 591104 is beyond EOD, truncated [ 282.101623][ T164] loop1: p39 size 100663296 extends beyond EOD, truncated [ 282.109344][ T164] loop1: p40 start 591104 is beyond EOD, truncated [ 282.116001][ T164] loop1: p41 size 100663296 extends beyond EOD, truncated [ 282.123693][ T164] loop1: p42 start 591104 is beyond EOD, truncated [ 282.130283][ T164] loop1: p43 size 100663296 extends beyond EOD, truncated [ 282.138051][ T164] loop1: p44 start 591104 is beyond EOD, truncated [ 282.144545][ T164] loop1: p45 size 100663296 extends beyond EOD, truncated [ 282.153278][ T164] loop1: p46 start 591104 is beyond EOD, truncated [ 282.154209][ T9594] F2FS-fs (loop3): invalid crc value [ 282.159851][ T164] loop1: p47 size 100663296 extends beyond EOD, truncated [ 282.172904][ T164] loop1: p48 start 591104 is beyond EOD, truncated [ 282.179414][ T164] loop1: p49 size 100663296 extends beyond EOD, truncated [ 282.187129][ T164] loop1: p50 start 591104 is beyond EOD, truncated [ 282.193702][ T164] loop1: p51 size 100663296 extends beyond EOD, truncated [ 282.193809][ T9594] F2FS-fs (loop3): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 282.212786][ T9594] F2FS-fs (loop3): Failed to read root inode [ 282.212880][ T164] loop1: p52 start 591104 is beyond EOD, truncated [ 282.225647][ T164] loop1: p53 size 100663296 extends beyond EOD, truncated [ 282.233312][ T164] loop1: p54 start 591104 is beyond EOD, truncated [ 282.240358][ T164] loop1: p55 size 100663296 extends beyond EOD, truncated [ 282.248262][ T164] loop1: p56 start 591104 is beyond EOD, truncated [ 282.254876][ T164] loop1: p57 size 100663296 extends beyond EOD, truncated [ 282.263218][ T164] loop1: p58 start 591104 is beyond EOD, truncated [ 282.270275][ T164] loop1: p59 size 100663296 extends beyond EOD, truncated [ 282.277944][ T164] loop1: p60 start 591104 is beyond EOD, truncated [ 282.284797][ T164] loop1: p61 size 100663296 extends beyond EOD, truncated [ 282.292661][ T164] loop1: p62 start 591104 is beyond EOD, truncated [ 282.299252][ T164] loop1: p63 size 100663296 extends beyond EOD, truncated [ 282.307136][ T164] loop1: p64 start 591104 is beyond EOD, truncated [ 282.313832][ T164] loop1: p65 size 100663296 extends beyond EOD, truncated [ 282.321538][ T164] loop1: p66 start 591104 is beyond EOD, truncated [ 282.328120][ T164] loop1: p67 size 100663296 extends beyond EOD, truncated [ 282.335787][ T164] loop1: p68 start 591104 is beyond EOD, truncated [ 282.342324][ T164] loop1: p69 size 100663296 extends beyond EOD, truncated [ 282.350110][ T164] loop1: p70 start 591104 is beyond EOD, truncated [ 282.356637][ T164] loop1: p71 size 100663296 extends beyond EOD, truncated [ 282.364520][ T164] loop1: p72 start 591104 is beyond EOD, truncated [ 282.371091][ T164] loop1: p73 size 100663296 extends beyond EOD, truncated [ 282.378801][ T164] loop1: p74 start 591104 is beyond EOD, truncated [ 282.385298][ T164] loop1: p75 size 100663296 extends beyond EOD, truncated [ 282.393018][ T164] loop1: p76 start 591104 is beyond EOD, truncated [ 282.399560][ T164] loop1: p77 size 100663296 extends beyond EOD, truncated [ 282.407191][ T164] loop1: p78 start 591104 is beyond EOD, truncated [ 282.413757][ T164] loop1: p79 size 100663296 extends beyond EOD, truncated [ 282.425798][ T164] loop1: p80 start 591104 is beyond EOD, truncated [ 282.434957][ T164] loop1: p81 size 100663296 extends beyond EOD, truncated [ 282.449720][ T164] loop1: p82 start 591104 is beyond EOD, truncated [ 282.456437][ T164] loop1: p83 size 100663296 extends beyond EOD, truncated [ 282.468563][ T9608] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 282.478782][ T164] loop1: p84 start 591104 is beyond EOD, truncated [ 282.493341][ T9608] EXT4-fs (loop4): 1 truncate cleaned up [ 282.494454][ T164] loop1: p85 size 100663296 extends beyond EOD, truncated [ 282.499576][ T9608] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,stripe=0x0000000000000004,noinit_itable,quota,,errors=continue [ 282.536889][ T164] loop1: p86 start 591104 is beyond EOD, truncated [ 282.545800][ T164] loop1: p87 size 100663296 extends beyond EOD, truncated [ 282.556859][ T164] loop1: p88 start 591104 is beyond EOD, truncated [ 282.563457][ T164] loop1: p89 size 100663296 extends beyond EOD, truncated [ 282.575823][ T164] loop1: p90 start 591104 is beyond EOD, truncated [ 282.582888][ T164] loop1: p91 size 100663296 extends beyond EOD, truncated [ 282.592361][ T565] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 282.597889][ T164] loop1: p92 start 591104 is beyond EOD, truncated [ 282.606655][ T164] loop1: p93 size 100663296 extends beyond EOD, truncated [ 282.614371][ T164] loop1: p94 start 591104 is beyond EOD, truncated [ 282.620942][ T164] loop1: p95 size 100663296 extends beyond EOD, truncated [ 282.635974][ T164] loop1: p96 start 591104 is beyond EOD, truncated [ 282.646400][ T164] loop1: p97 size 100663296 extends beyond EOD, truncated [ 282.661459][ T164] loop1: p98 start 591104 is beyond EOD, truncated [ 282.671440][ T164] loop1: p99 size 100663296 extends beyond EOD, truncated [ 282.687511][ T164] loop1: p100 start 591104 is beyond EOD, truncated [ 282.704275][ T164] loop1: p101 size 100663296 extends beyond EOD, truncated [ 282.723764][ T164] loop1: p102 start 591104 is beyond EOD, truncated [ 282.731629][ T164] loop1: p103 size 100663296 extends beyond EOD, truncated [ 282.741225][ T164] loop1: p104 start 591104 is beyond EOD, truncated [ 282.748311][ T164] loop1: p105 size 100663296 extends beyond EOD, truncated [ 282.756243][ T164] loop1: p106 start 591104 is beyond EOD, truncated [ 282.762831][ T164] loop1: p107 size 100663296 extends beyond EOD, truncated [ 282.770645][ T164] loop1: p108 start 591104 is beyond EOD, truncated [ 282.777293][ T164] loop1: p109 size 100663296 extends beyond EOD, truncated [ 282.785092][ T164] loop1: p110 start 591104 is beyond EOD, truncated [ 282.791926][ T164] loop1: p111 size 100663296 extends beyond EOD, truncated [ 282.799764][ T164] loop1: p112 start 591104 is beyond EOD, truncated [ 282.806631][ T164] loop1: p113 size 100663296 extends beyond EOD, truncated [ 282.814479][ T164] loop1: p114 start 591104 is beyond EOD, truncated [ 282.821139][ T164] loop1: p115 size 100663296 extends beyond EOD, truncated [ 282.828776][ T164] loop1: p116 start 591104 is beyond EOD, truncated [ 282.835434][ T164] loop1: p117 size 100663296 extends beyond EOD, truncated [ 282.843215][ T164] loop1: p118 start 591104 is beyond EOD, truncated [ 282.849882][ T164] loop1: p119 size 100663296 extends beyond EOD, truncated [ 282.857142][ T565] usb 1-1: Using ep0 maxpacket: 32 [ 282.862800][ T164] loop1: p120 start 591104 is beyond EOD, truncated [ 282.869454][ T164] loop1: p121 size 100663296 extends beyond EOD, truncated [ 282.877186][ T164] loop1: p122 start 591104 is beyond EOD, truncated [ 282.883774][ T164] loop1: p123 size 100663296 extends beyond EOD, truncated [ 282.891515][ T164] loop1: p124 start 591104 is beyond EOD, truncated [ 282.898274][ T164] loop1: p125 size 100663296 extends beyond EOD, truncated [ 282.906068][ T164] loop1: p126 start 591104 is beyond EOD, truncated [ 282.912739][ T164] loop1: p127 size 100663296 extends beyond EOD, truncated [ 282.936497][ T164] loop1: p128 start 591104 is beyond EOD, truncated [ 282.949841][ T164] loop1: p129 size 100663296 extends beyond EOD, truncated [ 282.968999][ T164] loop1: p130 start 591104 is beyond EOD, truncated [ 282.982266][ T565] usb 1-1: config 4 has an invalid interface number: 112 but max is 0 [ 282.990463][ T565] usb 1-1: config 4 has no interface number 0 [ 282.998299][ T164] loop1: p131 size 100663296 extends beyond EOD, truncated [ 283.013525][ T164] loop1: p132 start 591104 is beyond EOD, truncated [ 283.020277][ T164] loop1: p133 size 100663296 extends beyond EOD, truncated [ 283.028676][ T164] loop1: p134 start 591104 is beyond EOD, truncated [ 283.036908][ T164] loop1: p135 size 100663296 extends beyond EOD, truncated [ 283.044977][ T164] loop1: p136 start 591104 is beyond EOD, truncated [ 283.051901][ T164] loop1: p137 size 100663296 extends beyond EOD, truncated [ 283.060265][ T164] loop1: p138 start 591104 is beyond EOD, truncated [ 283.067045][ T164] loop1: p139 size 100663296 extends beyond EOD, truncated [ 283.074941][ T164] loop1: p140 start 591104 is beyond EOD, truncated [ 283.081590][ T164] loop1: p141 size 100663296 extends beyond EOD, truncated [ 283.089937][ T164] loop1: p142 start 591104 is beyond EOD, truncated [ 283.098956][ T164] loop1: p143 size 100663296 extends beyond EOD, truncated [ 283.116286][ T164] loop1: p144 start 591104 is beyond EOD, truncated [ 283.124003][ T164] loop1: p145 size 100663296 extends beyond EOD, truncated [ 283.144844][ T164] loop1: p146 start 591104 is beyond EOD, truncated [ 283.153341][ T164] loop1: p147 size 100663296 extends beyond EOD, truncated [ 283.161864][ T164] loop1: p148 start 591104 is beyond EOD, truncated [ 283.168771][ T164] loop1: p149 size 100663296 extends beyond EOD, truncated [ 283.176751][ T164] loop1: p150 start 591104 is beyond EOD, truncated [ 283.188093][ T565] usb 1-1: New USB device found, idVendor=14cd, idProduct=6116, bcdDevice= 1.55 [ 283.188168][ T164] loop1: p151 size 100663296 extends beyond EOD, truncated [ 283.205483][ T164] loop1: p152 start 591104 is beyond EOD, truncated [ 283.209691][ T565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.212392][ T164] loop1: p153 size 100663296 extends beyond EOD, truncated [ 283.220093][ T565] usb 1-1: Product: syz [ 283.220104][ T565] usb 1-1: Manufacturer: syz [ 283.220119][ T565] usb 1-1: SerialNumber: syz [ 283.242711][ T164] loop1: p154 start 591104 is beyond EOD, truncated [ 283.264187][ T164] loop1: p155 size 100663296 extends beyond EOD, truncated [ 283.279184][ T164] loop1: p156 start 591104 is beyond EOD, truncated [ 283.289893][ T164] loop1: p157 size 100663296 extends beyond EOD, truncated [ 283.299048][ T164] loop1: p158 start 591104 is beyond EOD, truncated [ 283.307717][ T565] ums-cypress 1-1:4.112: USB Mass Storage device detected [ 283.313925][ T164] loop1: p159 size 100663296 extends beyond EOD, truncated [ 283.325091][ T164] loop1: p160 start 591104 is beyond EOD, truncated [ 283.332542][ T164] loop1: p161 size 100663296 extends beyond EOD, truncated [ 283.349257][ T164] loop1: p162 start 591104 is beyond EOD, truncated [ 283.357080][ T164] loop1: p163 size 100663296 extends beyond EOD, truncated [ 283.365066][ T164] loop1: p164 start 591104 is beyond EOD, truncated [ 283.371750][ T164] loop1: p165 size 100663296 extends beyond EOD, truncated [ 283.379838][ T164] loop1: p166 start 591104 is beyond EOD, truncated [ 283.386764][ T164] loop1: p167 size 100663296 extends beyond EOD, truncated [ 283.394968][ T164] loop1: p168 start 591104 is beyond EOD, truncated [ 283.401771][ T164] loop1: p169 size 100663296 extends beyond EOD, truncated [ 283.409850][ T164] loop1: p170 start 591104 is beyond EOD, truncated [ 283.416736][ T164] loop1: p171 size 100663296 extends beyond EOD, truncated [ 283.424638][ T164] loop1: p172 start 591104 is beyond EOD, truncated [ 283.431578][ T164] loop1: p173 size 100663296 extends beyond EOD, truncated [ 283.439568][ T164] loop1: p174 start 591104 is beyond EOD, truncated [ 283.446258][ T164] loop1: p175 size 100663296 extends beyond EOD, truncated [ 283.454278][ T164] loop1: p176 start 591104 is beyond EOD, truncated [ 283.461135][ T164] loop1: p177 size 100663296 extends beyond EOD, truncated [ 283.469010][ T164] loop1: p178 start 591104 is beyond EOD, truncated [ 283.475716][ T164] loop1: p179 size 100663296 extends beyond EOD, truncated [ 283.483911][ T164] loop1: p180 start 591104 is beyond EOD, truncated [ 283.490673][ T164] loop1: p181 size 100663296 extends beyond EOD, truncated [ 283.498470][ T164] loop1: p182 start 591104 is beyond EOD, truncated [ 283.505256][ T164] loop1: p183 size 100663296 extends beyond EOD, truncated [ 283.513038][ T164] loop1: p184 start 591104 is beyond EOD, truncated [ 283.519654][ T164] loop1: p185 size 100663296 extends beyond EOD, truncated [ 283.527441][ T164] loop1: p186 start 591104 is beyond EOD, truncated [ 283.534063][ T164] loop1: p187 size 100663296 extends beyond EOD, truncated [ 283.541935][ T164] loop1: p188 start 591104 is beyond EOD, truncated [ 283.548576][ T164] loop1: p189 size 100663296 extends beyond EOD, truncated [ 283.556358][ T343] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 283.564286][ T164] loop1: p190 start 591104 is beyond EOD, truncated [ 283.567323][ T565] usb 1-1: USB disconnect, device number 101 [ 283.576925][ T164] loop1: p191 size 100663296 extends beyond EOD, truncated [ 283.584694][ T164] loop1: p192 start 591104 is beyond EOD, truncated [ 283.591333][ T164] loop1: p193 size 100663296 extends beyond EOD, truncated [ 283.599154][ T164] loop1: p194 start 591104 is beyond EOD, truncated [ 283.605838][ T164] loop1: p195 size 100663296 extends beyond EOD, truncated [ 283.613660][ T164] loop1: p196 start 591104 is beyond EOD, truncated [ 283.620253][ T164] loop1: p197 size 100663296 extends beyond EOD, truncated [ 283.628118][ T164] loop1: p198 start 591104 is beyond EOD, truncated [ 283.634745][ T164] loop1: p199 size 100663296 extends beyond EOD, truncated [ 283.642596][ T164] loop1: p200 start 591104 is beyond EOD, truncated [ 283.649280][ T5] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 283.656917][ T164] loop1: p201 size 100663296 extends beyond EOD, truncated [ 283.664709][ T164] loop1: p202 start 591104 is beyond EOD, truncated [ 283.671415][ T164] loop1: p203 size 100663296 extends beyond EOD, truncated [ 283.679306][ T164] loop1: p204 start 591104 is beyond EOD, truncated [ 283.685978][ T164] loop1: p205 size 100663296 extends beyond EOD, truncated [ 283.693826][ T164] loop1: p206 start 591104 is beyond EOD, truncated [ 283.700656][ T164] loop1: p207 size 100663296 extends beyond EOD, truncated [ 283.708401][ T164] loop1: p208 start 591104 is beyond EOD, truncated [ 283.715004][ T164] loop1: p209 size 100663296 extends beyond EOD, truncated [ 283.722752][ T164] loop1: p210 start 591104 is beyond EOD, truncated [ 283.729343][ T164] loop1: p211 size 100663296 extends beyond EOD, truncated [ 283.737178][ T164] loop1: p212 start 591104 is beyond EOD, truncated [ 283.743782][ T164] loop1: p213 size 100663296 extends beyond EOD, truncated [ 283.751561][ T164] loop1: p214 start 591104 is beyond EOD, truncated [ 283.758145][ T164] loop1: p215 size 100663296 extends beyond EOD, truncated [ 283.765910][ T164] loop1: p216 start 591104 is beyond EOD, truncated [ 283.772494][ T164] loop1: p217 size 100663296 extends beyond EOD, truncated [ 283.780292][ T164] loop1: p218 start 591104 is beyond EOD, truncated [ 283.787001][ T164] loop1: p219 size 100663296 extends beyond EOD, truncated [ 283.794857][ T164] loop1: p220 start 591104 is beyond EOD, truncated [ 283.801452][ T164] loop1: p221 size 100663296 extends beyond EOD, truncated [ 283.809199][ T164] loop1: p222 start 591104 is beyond EOD, truncated [ 283.815786][ T164] loop1: p223 size 100663296 extends beyond EOD, truncated [ 283.823701][ T164] loop1: p224 start 591104 is beyond EOD, truncated [ 283.830304][ T164] loop1: p225 size 100663296 extends beyond EOD, truncated [ 283.838007][ T164] loop1: p226 start 591104 is beyond EOD, truncated [ 283.844596][ T164] loop1: p227 size 100663296 extends beyond EOD, truncated [ 283.852458][ T164] loop1: p228 start 591104 is beyond EOD, truncated [ 283.859051][ T164] loop1: p229 size 100663296 extends beyond EOD, truncated [ 283.866839][ T164] loop1: p230 start 591104 is beyond EOD, truncated [ 283.873442][ T164] loop1: p231 size 100663296 extends beyond EOD, truncated [ 283.881123][ T164] loop1: p232 start 591104 is beyond EOD, truncated [ 283.887840][ T164] loop1: p233 size 100663296 extends beyond EOD, truncated [ 283.895530][ T164] loop1: p234 start 591104 is beyond EOD, truncated [ 283.902107][ T164] loop1: p235 size 100663296 extends beyond EOD, truncated [ 283.909905][ T164] loop1: p236 start 591104 is beyond EOD, truncated [ 283.916573][ T164] loop1: p237 size 100663296 extends beyond EOD, truncated [ 283.924229][ T164] loop1: p238 start 591104 is beyond EOD, truncated [ 283.930851][ T164] loop1: p239 size 100663296 extends beyond EOD, truncated [ 283.938556][ T164] loop1: p240 start 591104 is beyond EOD, truncated [ 283.945138][ T164] loop1: p241 size 100663296 extends beyond EOD, truncated [ 283.952876][ T164] loop1: p242 start 591104 is beyond EOD, truncated [ 283.959630][ T164] loop1: p243 size 100663296 extends beyond EOD, truncated [ 283.967279][ T164] loop1: p244 start 591104 is beyond EOD, truncated [ 283.973897][ T164] loop1: p245 size 100663296 extends beyond EOD, truncated [ 283.981592][ T164] loop1: p246 start 591104 is beyond EOD, truncated [ 283.988177][ T164] loop1: p247 size 100663296 extends beyond EOD, truncated [ 283.995924][ T164] loop1: p248 start 591104 is beyond EOD, truncated [ 284.000427][ T24] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 284.002749][ T164] loop1: p249 size 100663296 extends beyond EOD, truncated [ 284.011483][ T343] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 284.022784][ T164] loop1: p250 start 591104 is beyond EOD, truncated [ 284.026503][ T343] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 284.033136][ T164] loop1: p251 size 100663296 extends beyond EOD, truncated [ 284.043115][ T343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.051479][ T164] loop1: p252 start 591104 is beyond EOD, truncated [ 284.065802][ T164] loop1: p253 size 100663296 extends beyond EOD, truncated [ 284.073489][ T164] loop1: p254 start 591104 is beyond EOD, truncated [ 284.080131][ T164] loop1: p255 size 100663296 extends beyond EOD, truncated [ 284.217197][ T5] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9801, bcdDevice=25.d8 [ 284.228006][ T343] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.229858][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.242631][ T463] udevd[463]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 284.246988][ T1921] udevd[1921]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 284.256874][ T337] udevd[337]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 284.270280][ T5] usb 5-1: Product: syz [ 284.276176][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 284.278989][ T5] usb 5-1: Manufacturer: syz [ 284.286521][ T1918] udevd[1918]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 284.289891][ T5] usb 5-1: SerialNumber: syz [ 284.299874][ T790] udevd[790]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 284.313963][ T1920] udevd[1920]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 284.314043][ T1456] udevd[1456]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory [ 284.325101][ T5] usb 5-1: config 0 descriptor?? [ 284.336444][ T1922] udevd[1922]: inotify_add_watch(7, /dev/loop1p15, 10) failed: No such file or directory [ 284.344141][ T440] udevd[440]: inotify_add_watch(7, /dev/loop1p19, 10) failed: No such file or directory [ 284.349990][ T1917] udevd[1917]: inotify_add_watch(7, /dev/loop1p17, 10) failed: No such file or directory [ 284.372542][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.381813][ T343] usb 4-1: Product: syz [ 284.385997][ T343] usb 4-1: Manufacturer: syz [ 284.391033][ T5] rndis_host 5-1:0.0: skipping garbage [ 284.391063][ T343] usb 4-1: SerialNumber: syz [ 284.396799][ T5] usb 5-1: bad CDC descriptors [ 284.552978][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.563690][ T18] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 284.639589][ T24] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 284.679694][ T24] usb 3-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 284.693673][ T565] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 284.730785][ T24] usb 3-1: config 4 has no interface number 0 [ 284.761692][ T386] usb 5-1: USB disconnect, device number 98 [ 284.791629][ T343] usb 4-1: 0:2 : does not exist [ 284.808408][ T343] usb 4-1: USB disconnect, device number 100 [ 284.921363][ T24] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 284.930489][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.938606][ T24] usb 3-1: Product: syz [ 284.942904][ T24] usb 3-1: Manufacturer: syz [ 284.947495][ T24] usb 3-1: SerialNumber: syz [ 284.964617][ T18] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 284.973658][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.982447][ T18] usb 1-1: config 0 descriptor?? [ 285.029967][ T18] usb-storage 1-1:0.0: USB Mass Storage device detected [ 285.127225][ T565] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.170404][ T565] usb 2-1: not running at top speed; connect to a high speed hub [ 285.257039][ T565] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 285.267126][ T565] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 285.268677][ T944] usb 1-1: USB disconnect, device number 102 [ 285.278154][ T565] usb 2-1: config 4 has no interface number 0 [ 285.463082][ T565] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 285.472196][ T565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.480233][ T565] usb 2-1: Product: syz [ 285.484533][ T565] usb 2-1: Manufacturer: syz [ 285.489114][ T565] usb 2-1: SerialNumber: syz [ 285.506200][ T24] uvcvideo: Found UVC 0.02 device syz (04f2:b746) [ 285.513556][ T24] uvcvideo: No valid video chain found. [ 285.525102][ T24] usb 3-1: USB disconnect, device number 100 [ 285.529273][ T9738] F2FS-fs (loop4): user quota file already specified [ 285.581942][ T18] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 285.844578][ T9767] EXT4-fs (loop2): Ignoring removed orlov option [ 285.862001][ T9767] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 285.869580][ T9767] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 285.880664][ T9767] EXT4-fs (loop2): can't mount with commit=3882, fs mounted w/o journal [ 285.950303][ T944] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 285.982883][ T565] uvcvideo: Found UVC 0.02 device syz (04f2:b746) [ 285.989449][ T565] uvcvideo: No streaming interface found for terminal 6. [ 285.989790][ T18] usb 4-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 286.010652][ T565] usb 2-1: USB disconnect, device number 102 [ 286.017831][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.028410][ T18] usb 4-1: config 0 descriptor?? [ 286.050068][ T9770] F2FS-fs (loop0): Insane cp_payload (553648128 > 510) [ 286.057077][ T9770] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 286.070478][ T18] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 286.080612][ T9770] F2FS-fs (loop0): invalid crc value [ 286.101177][ T9770] F2FS-fs (loop0): Found nat_bits in checkpoint [ 286.132747][ T9770] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 286.140078][ T9770] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 286.147359][ T9770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 286.288619][ T422] usb 4-1: USB disconnect, device number 101 [ 286.394385][ T944] usb 5-1: not running at top speed; connect to a high speed hub [ 286.437428][ T9788] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 286.447162][ T9788] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2227: inode #15: comm syz.0.4280: corrupted in-inode xattr [ 286.459731][ T9788] EXT4-fs (loop0): Remounting filesystem read-only [ 286.466354][ T9788] EXT4-fs error (device loop0): ext4_orphan_get:1242: comm syz.0.4280: couldn't read orphan inode 15 (err -117) [ 286.478627][ T9788] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000000,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,nodiscard, [ 286.481169][ T944] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 286.499983][ T9788] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop0, type ext3) errno=-22 [ 286.510082][ T944] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 286.530342][ T944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.621880][ T5] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 286.675996][ T18] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 286.708601][ T944] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.717717][ T944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.725755][ T944] usb 5-1: Product: syz [ 286.729962][ T944] usb 5-1: Manufacturer: syz [ 286.734725][ T944] usb 5-1: SerialNumber: syz [ 286.752941][ T9795] loop0: p2 < > p3 < p5 > p4 [ 286.757651][ T9795] loop0: partition table partially beyond EOD, truncated [ 286.765076][ T9795] loop0: p2 start 4278190080 is beyond EOD, truncated [ 286.772346][ T9795] loop0: p4 size 8192 extends beyond EOD, truncated [ 286.779633][ T9795] loop0: p5 size 8192 extends beyond EOD, truncated [ 286.935982][ T18] usb 3-1: Using ep0 maxpacket: 16 [ 287.011918][ T5] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 287.034312][ T5] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 287.046448][ T5] usb 2-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bb.9d [ 287.055869][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.065995][ T18] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 287.074444][ T18] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.076862][ T9781] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 287.084863][ T18] usb 3-1: config 0 has no interface number 0 [ 287.091952][ T9781] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 287.113433][ T9826] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.131174][ T944] usb 5-1: 0:2 : does not exist [ 287.134954][ T9826] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 287.154558][ T944] usb 5-1: USB disconnect, device number 99 [ 287.157889][ T9826] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:2998: comm syz.0.4301: Allocating blocks 42-43 which overlap fs metadata [ 287.175201][ T9826] Quota error (device loop0): write_blk: dquota write failed [ 287.182650][ T9826] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 287.192943][ T9826] EXT4-fs (loop0): 1 truncate cleaned up [ 287.200299][ T9826] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue [ 287.261245][ T18] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 287.270452][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.278512][ T18] usb 3-1: Product: syz [ 287.282877][ T18] usb 3-1: Manufacturer: syz [ 287.287474][ T18] usb 3-1: SerialNumber: syz [ 287.292740][ T18] usb 3-1: config 0 descriptor?? [ 287.358990][ T343] usb 2-1: USB disconnect, device number 103 [ 287.381671][ T9835] EXT4-fs (loop0): invalid inodes per group: 175243296 [ 287.381671][ T9835] [ 287.412636][ T565] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 287.596789][ T18] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 287.618438][ T18] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 287.640260][ T18] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 287.653101][ T9840] loop4: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 287.654191][ T9840] loop4: p3 start 1778417665 is beyond EOD, [ 287.741167][ T18] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 287.745398][ T9840] truncated [ 287.759350][ T18] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 287.781107][ T18] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 287.802788][ T18] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 287.824327][ T18] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 287.835169][ T944] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 287.846508][ T18] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 287.855929][ T18] uvcvideo: No valid video chain found. [ 287.863903][ T18] usb 3-1: USB disconnect, device number 101 [ 287.870175][ T565] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 287.879656][ T565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.933283][ T565] usb 4-1: unsupported MDLM descriptors [ 287.975031][ T9849] cgroup1: release_agent respecified [ 288.105902][ T944] usb 1-1: Using ep0 maxpacket: 16 [ 288.117185][ T9851] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 288.156508][ T108] usb 4-1: USB disconnect, device number 102 [ 288.164531][ T337] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 288.175956][ T337] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.187259][ T337] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 288.195418][ T337] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.206371][ T337] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 288.214485][ T337] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.225389][ T337] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 288.233490][ T337] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.244366][ T337] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 288.246764][ T944] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 288.252491][ T337] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.269091][ T944] usb 1-1: config 0 has no interface number 0 [ 288.271671][ T337] Buffer I/O error on dev loop4p2, logical block 0, async page read [ 288.277459][ T944] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 288.277475][ T944] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 288.277488][ T944] usb 1-1: config 0 interface 41 has no altsetting 0 [ 288.325611][ T1918] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 288.338568][ T1918] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 288.338751][ T1922] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 288.349981][ T1918] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 288.362749][ T440] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 288.369171][ T1918] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 288.381769][ T1919] Buffer I/O error on dev loop4p12, logical block 8, async page read [ 288.397832][ T1921] Buffer I/O error on dev loop4p1, logical block 8, async page read [ 288.407515][ T790] Buffer I/O error on dev loop4p5, logical block 8, async page read [ 288.426643][ T342] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 288.452640][ T944] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 288.461732][ T944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.513579][ T944] usb 1-1: Product: syz [ 288.528823][ T944] usb 1-1: Manufacturer: syz [ 288.534756][ T944] usb 1-1: SerialNumber: syz [ 288.545378][ T944] usb 1-1: config 0 descriptor?? [ 288.571833][ T9838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 288.578847][ T9838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 288.831784][ T944] dm9601: probe of 1-1:0.41 failed with error -71 [ 288.842631][ T108] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 288.850276][ T422] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 288.858266][ T5] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 288.867503][ T944] sr9700: probe of 1-1:0.41 failed with error -71 [ 288.876178][ T944] usb 1-1: USB disconnect, device number 103 [ 288.877050][ T9884] FAT-fs (loop3): bogus number of reserved sectors [ 288.888786][ T9884] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 288.898141][ T9884] FAT-fs (loop3): Can't find a valid FAT filesystem [ 289.135058][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 289.232621][ T108] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 289.248923][ T108] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 289.259945][ T108] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 289.269174][ T422] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 289.283134][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.305311][ T108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.320001][ T422] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 289.342600][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.361908][ T422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.417764][ T422] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 289.496686][ T23] audit: type=1326 audit(1880668899.901:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9898 comm="syz.0.4333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7dbcf3969 code=0x0 [ 289.519621][ T18] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 289.535967][ T5] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.567156][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.593828][ T5] usb 5-1: Product: syz [ 289.605635][ T5] usb 5-1: Manufacturer: syz [ 289.610303][ T5] usb 5-1: SerialNumber: syz [ 289.644196][ T108] usb 2-1: string descriptor 0 read error: -71 [ 289.655006][ T108] hub 2-1:32.0: USB hub found [ 289.673931][ T422] usb 3-1: USB disconnect, device number 102 [ 289.730873][ T108] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 289.795862][ T18] usb 4-1: Using ep0 maxpacket: 16 [ 289.925985][ T18] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 289.975796][ T18] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.998550][ T18] usb 4-1: config 0 has no interface number 0 [ 290.012627][ T5] usb 5-1: 0:2 : does not exist [ 290.018265][ T5] usb 5-1: unit 9 not found! [ 290.062758][ T5] usb 5-1: USB disconnect, device number 100 [ 290.089040][ T108] usb 2-1: USB disconnect, device number 104 [ 290.175119][ T18] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 290.184192][ T18] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.228896][ T18] usb 4-1: Product: syz [ 290.246177][ T18] usb 4-1: Manufacturer: syz [ 290.259463][ T18] usb 4-1: SerialNumber: syz [ 290.272227][ T18] usb 4-1: config 0 descriptor?? [ 290.279232][ T9927] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 290.294974][ T9927] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.467595][ T422] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 290.578154][ T18] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 290.584910][ T18] uvcvideo: No valid video chain found. [ 290.613486][ T18] usb 4-1: USB disconnect, device number 103 [ 290.614678][ T9944] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 290.674182][ T9947] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 290.738457][ T422] usb 1-1: Using ep0 maxpacket: 32 [ 290.848091][ T9952] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 290.919234][ T9955] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 290.927557][ T9942] F2FS-fs (loop4): Insane cp_payload (553648128 > 510) [ 290.945040][ T9942] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 290.955629][ T9942] F2FS-fs (loop4): invalid crc value [ 290.994397][ T9942] F2FS-fs (loop4): Found nat_bits in checkpoint [ 291.027975][ T9942] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 291.040609][ T9942] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 291.048033][ T9942] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 291.052740][ T422] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 291.084851][ T422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.106299][ T422] usb 1-1: Product: syz [ 291.115051][ T422] usb 1-1: Manufacturer: syz [ 291.125972][ T422] usb 1-1: SerialNumber: syz [ 291.139275][ T422] usb 1-1: config 0 descriptor?? [ 291.178907][ T9971] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 291.193552][ T9971] ext4 filesystem being mounted at /921/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 291.228110][ T9976] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 291.401264][ T9982] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 291.411399][ T9982] ext4 filesystem being mounted at /922/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 291.431905][ T422] snd-usb-audio: probe of 1-1:0.0 failed with error -71 [ 291.440007][ T422] usb 1-1: USB disconnect, device number 104 [ 291.672236][ T9988] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 291.751369][ T9995] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 292.011649][T10000] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 292.021114][T10000] ext4 filesystem being mounted at /925/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 292.069069][T10002] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 292.128625][T10015] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 292.169956][T10014] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 292.179070][T10014] ext4 filesystem being mounted at /885/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 292.392816][T10010] F2FS-fs (loop0): Invalid segment count (1) [ 292.409997][T10010] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 292.419603][T10010] F2FS-fs (loop0): invalid crc value [ 292.426394][T10010] F2FS-fs (loop0): Found nat_bits in checkpoint [ 292.457397][T10010] F2FS-fs (loop0): recover fsync data on readonly fs [ 292.464881][T10010] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 292.472168][T10010] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 292.496696][T10022] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 292.544160][T10030] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 292.554136][T10024] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 292.724781][T10033] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 292.860678][T10038] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 293.004705][T10043] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 293.101430][T10045] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 293.340013][T10057] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 294.345024][T10051] F2FS-fs (loop1): Found nat_bits in checkpoint [ 294.422208][T10049] F2FS-fs (loop0): Found nat_bits in checkpoint [ 294.469201][T10051] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 294.541267][T10049] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 294.626526][T10059] F2FS-fs (loop2): Found nat_bits in checkpoint [ 294.779607][T10059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 295.143587][T10067] F2FS-fs (loop3): Value of option "test_dummy_encryption=v" is unrecognized [ 295.485023][T10091] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 295.485023][T10091] [ 295.505474][T10091] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 295.542132][ T1921] print_req_error: 5291 callbacks suppressed [ 295.542149][ T1921] blk_update_request: I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 295.569322][T10055] F2FS-fs (loop4): Found nat_bits in checkpoint [ 295.609958][T10055] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 295.722240][ T565] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 295.971406][ T18] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 296.101345][ T422] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 296.112316][ T565] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 296.133162][ T565] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 296.164415][ T565] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.232062][ T565] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 296.361368][ T422] usb 3-1: Using ep0 maxpacket: 16 [ 296.372318][ T18] usb 1-1: config 0 has an invalid interface number: 23 but max is 0 [ 296.380980][ T18] usb 1-1: config 0 has no interface number 0 [ 296.391430][ T18] usb 1-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 296.412676][ T18] usb 1-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 296.466132][ T565] usb 2-1: USB disconnect, device number 105 [ 296.491430][ T422] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 296.510571][ T422] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.532342][ T422] usb 3-1: config 0 has no interface number 0 [ 296.539070][T10113] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 296.610653][ T18] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 296.619934][ T18] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.628585][ T18] usb 1-1: Product: syz [ 296.633048][ T18] usb 1-1: Manufacturer: syz [ 296.637808][ T18] usb 1-1: SerialNumber: syz [ 296.643587][ T18] usb 1-1: config 0 descriptor?? [ 296.657568][T10111] F2FS-fs (loop3): Found nat_bits in checkpoint [ 296.664824][T10104] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 296.675790][T10104] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 296.686974][ T18] ums-usbat 1-1:0.23: USB Mass Storage device detected [ 296.708151][ T422] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 296.717699][ T422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.726835][ T422] usb 3-1: Product: syz [ 296.731311][T10111] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 296.739605][ T422] usb 3-1: Manufacturer: syz [ 296.744603][ T422] usb 3-1: SerialNumber: syz [ 296.750005][ T422] usb 3-1: config 0 descriptor?? [ 296.806490][ T422] uvcvideo: Found UVC 0.00 device syz (046c:14e8) [ 296.816168][ T422] uvcvideo: No valid video chain found. [ 296.958288][ T18] ums-usbat: probe of 1-1:0.23 failed with error 3 [ 296.966724][ T18] usb 1-1: USB disconnect, device number 105 [ 297.077676][ T565] usb 3-1: USB disconnect, device number 103 [ 297.122429][T10129] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 297.146503][T10132] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 297.163248][T10132] ext4 filesystem being mounted at /844/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 297.251813][T10138] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 297.260947][T10138] ext4 filesystem being mounted at /893/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 297.382562][T10141] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 297.393797][T10146] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 297.402886][T10146] ext4 filesystem being mounted at /845/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 298.257423][ T18] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 298.528237][ T18] usb 1-1: Using ep0 maxpacket: 16 [ 298.662823][ T18] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 298.674092][ T18] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.683760][ T18] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 298.734152][ T18] usb 1-1: language id specifier not provided by device, defaulting to English [ 298.874956][ T18] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.907184][ T18] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.929091][ T18] usb 1-1: Product: syz [ 298.933283][ T18] usb 1-1: Manufacturer: ဤ엝ꭷ咞覂⤦鱚┆갲ﻉ랠ᖼ촎筮Ӓ夯쫗膬裐 [ 298.950734][ T18] usb 1-1: SerialNumber: syz [ 298.950826][ T5] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 299.254125][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 299.319193][ T18] cdc_ncm 1-1:1.0: bind() failure [ 299.325427][ T18] cdc_ncm 1-1:1.1: bind() failure [ 299.336025][ T18] usb 1-1: USB disconnect, device number 106 [ 299.384216][ T5] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 299.397691][ T5] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 299.420152][T10200] loop4: p1 p2 p3 [ 299.426889][ T5] usb 4-1: config 0 has no interface number 0 [ 299.442442][ T164] loop4: p1 p2 p3 [ 299.559447][ T1921] udevd[1921]: inotify_add_watch(7, /dev/loop4p199, 10) failed: No such file or directory [ 299.601021][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 299.635000][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.643107][ T5] usb 4-1: Product: syz [ 299.658969][ T1921] udevd[1921]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 299.686574][ T5] usb 4-1: Manufacturer: syz [ 299.706571][ T5] usb 4-1: SerialNumber: syz [ 299.717671][ T5] usb 4-1: config 0 descriptor?? [ 299.755862][ T1921] udevd[1921]: inotify_add_watch(7, /dev/loop4p20, 10) failed: No such file or directory [ 299.766720][ T5] uvcvideo: Found UVC 0.00 device syz (046d:08f3) [ 299.773197][ T5] uvcvideo: No valid video chain found. [ 299.838208][ T1921] udevd[1921]: inotify_add_watch(7, /dev/loop4p200, 10) failed: No such file or directory [ 299.925605][T10211] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4431'. [ 299.943241][ T1921] udevd[1921]: inotify_add_watch(7, /dev/loop4p201, 10) failed: No such file or directory [ 299.954787][ T463] udevd[463]: inotify_add_watch(7, /dev/loop4p202, 10) failed: No such file or directory [ 299.964871][ T1920] udevd[1920]: inotify_add_watch(7, /dev/loop4p206, 10) failed: No such file or directory [ 299.966208][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p203, 10) failed: No such file or directory [ 299.987818][ T1918] udevd[1918]: inotify_add_watch(7, /dev/loop4p204, 10) failed: No such file or directory [ 299.998779][ T1920] udevd[1920]: inotify_add_watch(7, /dev/loop4p208, 10) failed: No such file or directory [ 300.112389][ T5] usb 4-1: USB disconnect, device number 104 [ 300.729024][ T23] audit: type=1400 audit(1880668910.267:254): avc: denied { ioctl } for pid=10216 comm="syz.3.4434" path="socket:[125736]" dev="sockfs" ino=125736 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.999758][T10221] loop3: p1 p2 p3 [ 301.061383][ T164] loop3: p1 p2 p3 [ 301.474737][ T23] audit: type=1400 audit(1880668910.950:255): avc: denied { write } for pid=10227 comm="syz.3.4439" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.278016][T10215] F2FS-fs (loop0): Found nat_bits in checkpoint [ 302.447889][T10215] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 302.553528][T10258] FAT-fs (loop3): Directory bread(block 64) failed [ 302.608280][T10258] FAT-fs (loop3): Directory bread(block 65) failed [ 302.649287][T10258] FAT-fs (loop3): Directory bread(block 66) failed [ 302.655862][T10258] FAT-fs (loop3): Directory bread(block 67) failed [ 302.684590][T10258] FAT-fs (loop3): Directory bread(block 68) failed [ 302.695540][T10258] FAT-fs (loop3): Directory bread(block 69) failed [ 302.711565][T10258] FAT-fs (loop3): Directory bread(block 70) failed [ 302.744445][T10258] FAT-fs (loop3): Directory bread(block 71) failed [ 302.751181][T10258] FAT-fs (loop3): Directory bread(block 72) failed [ 302.784346][T10258] FAT-fs (loop3): Directory bread(block 73) failed [ 303.610190][T10278] usb usb1: usbfs: process 10278 (syz.4.4462) did not claim interface 0 before use [ 303.698189][ T23] audit: type=1400 audit(1880668913.009:256): avc: denied { getopt } for pid=10281 comm="syz.4.4464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.755209][ T23] audit: type=1400 audit(1880668913.027:257): avc: denied { setopt } for pid=10279 comm="syz.3.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 303.805222][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4452'. [ 303.851097][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4465'. [ 304.039706][ T23] audit: type=1326 audit(1880668913.322:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10299 comm="syz.2.4471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8116493969 code=0x0 [ 304.130476][ T23] audit: type=1326 audit(1880668913.415:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10315 comm="syz.0.4479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7dbcf3969 code=0x0 [ 304.153843][T10309] FAT-fs (loop1): Directory bread(block 64) failed [ 304.160626][T10309] FAT-fs (loop1): Directory bread(block 65) failed [ 304.189570][ T23] audit: type=1400 audit(1880668913.415:260): avc: denied { create } for pid=10318 comm="syz.3.4478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 304.222800][T10309] FAT-fs (loop1): Directory bread(block 66) failed [ 304.236991][T10309] FAT-fs (loop1): Directory bread(block 67) failed [ 304.243786][ T23] audit: type=1400 audit(1880668913.489:261): avc: denied { write } for pid=10318 comm="syz.3.4478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 304.265224][T10309] FAT-fs (loop1): Directory bread(block 68) failed [ 304.277377][T10309] FAT-fs (loop1): Directory bread(block 69) failed [ 304.285282][T10330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4485'. [ 304.296410][T10309] FAT-fs (loop1): Directory bread(block 70) failed [ 304.303056][ T23] audit: type=1400 audit(1880668913.489:262): avc: denied { nlmsg_write } for pid=10318 comm="syz.3.4478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 304.309971][T10335] xt_socket: unknown flags 0x90 [ 304.323863][T10309] FAT-fs (loop1): Directory bread(block 71) failed [ 304.336006][T10309] FAT-fs (loop1): Directory bread(block 72) failed [ 304.346573][T10309] FAT-fs (loop1): Directory bread(block 73) failed [ 304.367413][T10337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4489'. [ 304.387194][ T23] audit: type=1400 audit(1880668913.489:263): avc: denied { write } for pid=10322 comm="syz.2.4481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 304.413445][T10343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4490'. [ 304.481277][T10309] handle_bad_sector: 58 callbacks suppressed [ 304.481288][T10309] attempt to access beyond end of device [ 304.481288][T10309] loop1: rw=0, want=1196, limit=256 [ 304.512349][T10347] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.526079][T10347] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 304.535217][T10347] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 304.545097][T10347] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 304.553457][T10347] System zones: 0-2, 18-18, 34-35 [ 304.559170][T10347] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 304.683422][T10370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4503'. [ 304.692588][T10370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4503'. [ 304.702273][T10370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4503'. [ 304.771081][T10373] IPv6: sit1: Disabled Multicast RS [ 304.811862][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4509'. [ 304.993020][ T1921] udevd[1921]: inotify_add_watch(7, /dev/loop4p232, 10) failed: No such file or directory [ 305.004582][ T463] udevd[463]: inotify_add_watch(7, /dev/loop4p233, 10) failed: No such file or directory [ 305.018181][ T1918] udevd[1918]: inotify_add_watch(7, /dev/loop4p234, 10) failed: No such file or directory [ 305.029892][ T1920] udevd[1920]: inotify_add_watch(7, /dev/loop4p236, 10) failed: No such file or directory [ 305.041107][ T1456] udevd[1456]: inotify_add_watch(7, /dev/loop4p237, 10) failed: No such file or directory [ 305.052257][ T1922] udevd[1922]: inotify_add_watch(7, /dev/loop4p238, 10) failed: No such file or directory [ 305.062844][ T1919] udevd[1919]: inotify_add_watch(7, /dev/loop4p241, 10) failed: No such file or directory [ 305.066145][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p242, 10) failed: No such file or directory [ 305.074232][ T754] udevd[754]: inotify_add_watch(7, /dev/loop4p240, 10) failed: No such file or directory [ 305.094029][ T440] udevd[440]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory [ 305.497176][T10449] __nla_validate_parse: 7 callbacks suppressed [ 305.497185][T10449] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4543'. [ 305.596028][T10456] netlink: 'syz.2.4545': attribute type 3 has an invalid length. [ 305.746156][T10464] device veth3 entered promiscuous mode [ 305.767959][T10454] EXT4-fs (loop4): Test dummy encryption mode enabled [ 305.774858][T10454] EXT4-fs (loop4): Ignoring removed orlov option [ 305.800399][T10454] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,noauto_da_alloc,dioread_nolock,test_dummy_encryption,orlov,nojournal_checksum,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 305.822093][T10460] EXT4-fs (loop1): Ignoring removed orlov option [ 305.838735][T10454] EXT4-fs error (device loop4): ext4_remount:5517: Abort forced by user [ 305.841363][T10460] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 305.841363][T10460] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 305.841363][T10460] [ 305.847451][T10454] EXT4-fs (loop4): Remounting filesystem read-only [ 305.944385][T10460] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,nodelalloc,nouser_xattr,,errors=continue [ 306.278675][T10490] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 306.356995][T10490] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 306.457338][ T23] kauditd_printk_skb: 15 callbacks suppressed [ 306.457350][ T23] audit: type=1400 audit(1880668915.547:279): avc: denied { mounton } for pid=10488 comm="syz.1.4560" path="/868/file2/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.533060][ T23] audit: type=1400 audit(1880668915.584:280): avc: denied { write } for pid=10488 comm="syz.1.4560" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.589295][T10508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.673726][ T23] audit: type=1400 audit(1880668915.584:281): avc: denied { add_name } for pid=10488 comm="syz.1.4560" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.677567][ T338] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 306.780472][ T23] audit: type=1400 audit(1880668915.584:282): avc: denied { create } for pid=10488 comm="syz.1.4560" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 306.801108][ T23] audit: type=1400 audit(1880668915.639:283): avc: denied { setopt } for pid=10506 comm="syz.2.4565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 306.822926][ T338] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 306.848217][ T23] audit: type=1400 audit(1880668915.916:284): avc: denied { remove_name } for pid=338 comm="syz-executor" name=".index" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.872717][ T23] audit: type=1400 audit(1880668915.916:285): avc: denied { rmdir } for pid=338 comm="syz-executor" name=".index" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 306.923707][T10510] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 306.968259][T10510] EXT4-fs error (device loop2): empty_inline_dir:1847: inode #12: block 5: comm syz.2.4567: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0 [ 306.968785][ T23] audit: type=1400 audit(1880668916.027:286): avc: denied { rmdir } for pid=10509 comm="syz.2.4567" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 307.005913][T10515] FAT-fs (loop4): Directory bread(block 64) failed [ 307.009833][T10510] EXT4-fs warning (device loop2): empty_inline_dir:1854: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60 [ 307.026936][T10515] FAT-fs (loop4): Directory bread(block 65) failed [ 307.115488][T10515] FAT-fs (loop4): Directory bread(block 66) failed [ 307.134439][T10515] FAT-fs (loop4): Directory bread(block 67) failed [ 307.152744][T10515] FAT-fs (loop4): Directory bread(block 68) failed [ 307.184484][T10515] FAT-fs (loop4): Directory bread(block 69) failed [ 307.217049][T10515] FAT-fs (loop4): Directory bread(block 70) failed [ 307.249109][T10515] FAT-fs (loop4): Directory bread(block 71) failed [ 307.298668][T10515] FAT-fs (loop4): Directory bread(block 72) failed [ 307.341840][T10531] xt_TCPMSS: Only works on TCP SYN packets [ 307.342958][T10515] FAT-fs (loop4): Directory bread(block 73) failed [ 307.542756][ T363] device bridge_slave_1 left promiscuous mode [ 307.550105][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.571866][ T363] device bridge_slave_0 left promiscuous mode [ 307.604030][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.750731][ T23] audit: type=1400 audit(1880668916.747:287): avc: denied { write } for pid=10551 comm="syz.2.4585" name="001" dev="devtmpfs" ino=9700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 307.777891][T10554] usb usb8: usbfs: process 10554 (syz.2.4585) did not claim interface 0 before use [ 307.870089][ T23] audit: type=1400 audit(1880668916.848:288): avc: denied { read } for pid=10557 comm="syz.0.4587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 307.996136][T10573] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4595'. [ 308.016977][T10536] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.036702][T10536] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.051531][T10573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4595'. [ 308.062960][T10536] device bridge_slave_0 entered promiscuous mode [ 308.083173][T10536] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.093371][T10536] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.117903][T10536] device bridge_slave_1 entered promiscuous mode [ 308.571849][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.586604][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.621216][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.665074][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.711888][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.719000][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.768696][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 308.844523][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.872629][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.897238][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.904475][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.984910][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.994813][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.007310][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.035053][T10636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.070058][T10638] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4625'. [ 309.080562][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.105586][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 309.114329][T10640] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 309.128186][T10636] syz.4.4624 (10636) used greatest stack depth: 21504 bytes left [ 309.146510][T10640] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2227: inode #15: comm syz.0.4626: corrupted in-inode xattr [ 309.163479][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 309.172936][T10645] xt_l2tp: v2 tid > 0xffff: 1845690368 [ 309.178904][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 309.188765][T10640] EXT4-fs (loop0): Remounting filesystem read-only [ 309.219078][T10640] EXT4-fs error (device loop0): ext4_orphan_get:1242: comm syz.0.4626: couldn't read orphan inode 15 (err -117) [ 309.276766][T10640] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,jqfmt=vfsv0,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000005,usrjquota=,nombcache,noquota,grpquota,norecovery, [ 310.023401][ T367] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 310.149321][T10743] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 310.163464][T10743] ext4 filesystem being mounted at /913/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 310.196393][T10760] tc_dump_action: action bad kind [ 310.201661][T10750] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 310.233425][T10750] ext4 filesystem being mounted at /13/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 310.315053][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4684'. [ 310.413840][ T1919] udevd[1919]: inotify_add_watch(7, /dev/loop4p136, 10) failed: No such file or directory [ 310.414018][ T1918] udevd[1918]: inotify_add_watch(7, /dev/loop4p130, 10) failed: No such file or directory [ 310.426725][ T1920] udevd[1920]: inotify_add_watch(7, /dev/loop4p139, 10) failed: No such file or directory [ 310.435335][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p137, 10) failed: No such file or directory [ 310.456451][ T1922] udevd[1922]: inotify_add_watch(7, /dev/loop4p133, 10) failed: No such file or directory [ 310.467196][ T754] udevd[754]: inotify_add_watch(7, /dev/loop4p141, 10) failed: No such file or directory [ 310.467927][ T440] udevd[440]: inotify_add_watch(7, /dev/loop4p140, 10) failed: No such file or directory [ 310.487111][ T367] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 310.496879][ T463] udevd[463]: inotify_add_watch(7, /dev/loop4p142, 10) failed: No such file or directory [ 310.498083][ T108] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 310.516179][ T1921] udevd[1921]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 310.522441][ T1456] udevd[1456]: inotify_add_watch(7, /dev/loop4p132, 10) failed: No such file or directory [ 310.526079][ T367] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 310.546938][ T367] usb 5-1: config 220 has no interface number 2 [ 310.553257][ T367] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 310.568282][ T367] usb 5-1: config 220 interface 0 has no altsetting 0 [ 310.575089][ T367] usb 5-1: config 220 interface 76 has no altsetting 0 [ 310.582105][ T367] usb 5-1: config 220 interface 1 has no altsetting 0 [ 310.762063][ T367] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 310.786234][ T367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.803435][ T108] usb 4-1: Using ep0 maxpacket: 32 [ 310.836899][ T367] usb 5-1: Product: syz [ 310.869785][ T367] usb 5-1: Manufacturer: syz [ 310.885429][ T367] usb 5-1: SerialNumber: syz [ 310.933522][ T108] usb 4-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config [ 311.027397][T10796] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 311.035751][T10796] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 311.061774][T10796] EXT4-fs (loop0): 1 truncate cleaned up [ 311.071896][T10796] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,usrjquota="lazytime,noload,nodelalloc,grpjquota="errors=continue,jqfmt=vfsold,noblock_validity,,errors=continue [ 311.118433][ T108] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 311.126922][T10796] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.4697: Logical block already allocated [ 311.138123][ T108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.205577][ T108] usb 4-1: Product: syz [ 311.219798][ T108] usb 4-1: Manufacturer: syz [ 311.232801][ T108] usb 4-1: SerialNumber: syz [ 311.246621][ T108] usb 4-1: config 0 descriptor?? [ 311.280128][ T343] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 311.313301][ T367] usb 5-1: selecting invalid altsetting 0 [ 311.319126][ T367] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 311.331263][ T108] usb 4-1: bad CDC descriptors [ 311.338277][ T108] usb 4-1: unsupported MDLM descriptors [ 311.363316][ T367] uvcvideo: No valid video chain found. [ 311.479031][ T367] usb 5-1: USB disconnect, device number 101 [ 311.678864][ T565] usb 4-1: USB disconnect, device number 105 [ 311.685321][ T343] usb 6-1: config index 0 descriptor too short (expected 4114, got 18) [ 311.701209][T10832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c118, mo2=0002] [ 311.710266][T10832] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2227: inode #15: comm syz.2.4712: corrupted in-inode xattr [ 311.735824][T10832] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.4712: couldn't read orphan inode 15 (err -117) [ 311.753645][T10832] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nodiscard,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue [ 311.829486][T10842] netlink: 'syz.0.4716': attribute type 3 has an invalid length. [ 311.876143][ T343] usb 6-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 311.885488][ T343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.911193][ T343] usb 6-1: Product: syz [ 311.918909][ T343] usb 6-1: Manufacturer: syz [ 311.926379][ T343] usb 6-1: SerialNumber: syz [ 311.938047][ T343] usb 6-1: config 0 descriptor?? [ 312.103599][ T565] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 312.157689][ T386] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 312.312783][T10866] netlink: 'syz.3.4727': attribute type 3 has an invalid length. [ 312.363584][ T565] usb 3-1: Using ep0 maxpacket: 32 [ 312.428639][ T386] usb 1-1: Using ep0 maxpacket: 32 [ 312.461187][ T343] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 312.491389][ T343] asix: probe of 6-1:0.0 failed with error -71 [ 312.504609][ T565] usb 3-1: config 4 has an invalid interface number: 228 but max is 0 [ 312.519019][ T565] usb 3-1: config 4 has no interface number 0 [ 312.555558][ T343] usb 6-1: USB disconnect, device number 2 [ 312.565738][ T565] usb 3-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 59807, setting to 1024 [ 312.577531][ T386] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 312.588753][ T386] usb 1-1: config 0 has no interface number 0 [ 312.610195][ T386] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 312.624174][ T565] usb 3-1: config 4 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 1024 [ 312.637400][ T386] usb 1-1: config 0 interface 196 has no altsetting 0 [ 312.651524][ T565] usb 3-1: config 4 interface 228 has no altsetting 0 [ 312.829513][ T386] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 312.838894][ T565] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 312.848859][ T565] usb 3-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 312.857258][ T386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.866494][ T386] usb 1-1: Product: syz [ 312.871242][ T565] usb 3-1: Product: syz [ 312.876971][ T386] usb 1-1: Manufacturer: syz [ 312.882105][ T386] usb 1-1: SerialNumber: syz [ 312.887260][ T565] usb 3-1: Manufacturer: syz [ 312.893684][ T386] usb 1-1: config 0 descriptor?? [ 312.899172][ T565] usb 3-1: SerialNumber: syz [ 312.909830][T10880] FAT-fs (loop3): Directory bread(block 64) failed [ 312.917090][T10880] FAT-fs (loop3): Directory bread(block 65) failed [ 312.923729][T10880] FAT-fs (loop3): Directory bread(block 66) failed [ 312.930563][T10846] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 312.937420][T10832] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 312.945616][T10880] FAT-fs (loop3): Directory bread(block 67) failed [ 312.957396][T10880] FAT-fs (loop3): Directory bread(block 68) failed [ 312.966308][T10880] FAT-fs (loop3): Directory bread(block 69) failed [ 312.973281][T10880] FAT-fs (loop3): Directory bread(block 70) failed [ 312.979817][T10880] FAT-fs (loop3): Directory bread(block 71) failed [ 312.986625][T10880] FAT-fs (loop3): Directory bread(block 72) failed [ 312.993610][T10880] FAT-fs (loop3): Directory bread(block 73) failed [ 313.209270][ T386] ipheth 1-1:0.196: Unable to find endpoints [ 313.227182][ T386] usb 1-1: USB disconnect, device number 107 [ 313.338929][ T565] usb 3-1: invalid MIDI in EP 0 [ 313.344007][ T565] snd-usb-audio: probe of 3-1:4.228 failed with error -22 [ 313.373812][ T565] usb 3-1: USB disconnect, device number 104 [ 313.487382][T10924] EXT4-fs (loop4): Test dummy encryption mode enabled [ 313.511043][T10924] EXT4-fs (loop4): Ignoring removed orlov option [ 313.522786][T10924] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,nolazytime,orlov,data_err=abort,errors=remount-ro,nobarrier,quota, [ 313.779317][T10942] FAT-fs (loop3): Directory bread(block 64) failed [ 313.785923][T10942] FAT-fs (loop3): Directory bread(block 65) failed [ 313.792598][T10942] FAT-fs (loop3): Directory bread(block 66) failed [ 313.800615][T10942] FAT-fs (loop3): Directory bread(block 67) failed [ 313.807709][T10942] FAT-fs (loop3): Directory bread(block 68) failed [ 313.814228][T10942] FAT-fs (loop3): Directory bread(block 69) failed [ 313.822805][T10942] FAT-fs (loop3): Directory bread(block 70) failed [ 313.835426][T10942] FAT-fs (loop3): Directory bread(block 71) failed [ 313.842362][T10942] FAT-fs (loop3): Directory bread(block 72) failed [ 313.849084][T10942] FAT-fs (loop3): Directory bread(block 73) failed [ 313.899220][ T23] kauditd_printk_skb: 15 callbacks suppressed [ 313.899232][ T23] audit: type=1400 audit(1880668922.423:304): avc: denied { node_bind } for pid=10948 comm="syz.0.4766" saddr=fe80::bb src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 314.045468][T10964] device wireguard0 entered promiscuous mode [ 314.072905][T10964] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 314.122202][T10970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.128684][ T23] audit: type=1400 audit(1880668922.635:305): avc: denied { getopt } for pid=10971 comm="syz.0.4776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 314.302660][T10984] netlink: 'syz.0.4783': attribute type 29 has an invalid length. [ 314.311665][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4783'. [ 314.357189][T10984] netlink: 'syz.0.4783': attribute type 29 has an invalid length. [ 314.365044][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4783'. [ 314.421902][T11000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.597101][ T23] audit: type=1400 audit(1880668923.069:306): avc: denied { bind } for pid=11021 comm="syz.4.4802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.715936][T11039] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4810'. [ 314.770401][T11044] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 314.962453][T11049] FAT-fs (loop5): Directory bread(block 64) failed [ 314.982982][T11049] FAT-fs (loop5): Directory bread(block 65) failed [ 315.002439][T11049] FAT-fs (loop5): Directory bread(block 66) failed [ 315.019968][T11049] FAT-fs (loop5): Directory bread(block 67) failed [ 315.027723][T11049] FAT-fs (loop5): Directory bread(block 68) failed [ 315.034415][T11049] FAT-fs (loop5): Directory bread(block 69) failed [ 315.041283][T11049] FAT-fs (loop5): Directory bread(block 70) failed [ 315.047871][T11049] FAT-fs (loop5): Directory bread(block 71) failed [ 315.054473][T11049] FAT-fs (loop5): Directory bread(block 72) failed [ 315.061033][T11049] FAT-fs (loop5): Directory bread(block 73) failed [ 315.077144][ T23] audit: type=1400 audit(1880668923.512:307): avc: denied { bind } for pid=11075 comm="syz.2.4823" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.077164][ T23] audit: type=1400 audit(1880668923.512:308): avc: denied { name_bind } for pid=11075 comm="syz.2.4823" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 315.077181][ T23] audit: type=1400 audit(1880668923.512:309): avc: denied { node_bind } for pid=11075 comm="syz.2.4823" saddr=ff02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 315.082549][T11034] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 315.082561][T11034] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 315.153777][T11034] F2FS-fs (loop3): Found nat_bits in checkpoint [ 315.276061][T11034] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 315.283728][T11097] EXT4-fs (loop4): Test dummy encryption mode enabled [ 315.296340][T11034] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 315.302313][T11097] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 315.320302][ T23] audit: type=1400 audit(1880668923.734:310): avc: denied { write } for pid=11100 comm="syz.2.4832" name="rtc0" dev="devtmpfs" ino=9778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 315.352534][T11034] F2FS-fs (loop3): switch extent_cache option is not allowed [ 315.454188][T11115] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.541867][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4845'. [ 315.695594][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4852'. [ 315.768508][T11154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4857'. [ 315.808334][T11160] x_tables: ip_tables: CT.0 target: invalid size 40 (kernel) != (user) 72 [ 315.896678][T11173] netlink: 'syz.3.4866': attribute type 7 has an invalid length. [ 315.921976][T11173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4866'. [ 315.983497][ T23] audit: type=1400 audit(1880668924.343:311): avc: denied { ioctl } for pid=11183 comm="syz.2.4873" path="/dev/usbmon7" dev="devtmpfs" ino=9695 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 316.023276][T11192] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.4877'. [ 316.042512][ T23] audit: type=1400 audit(1880668924.380:312): avc: denied { nlmsg_read } for pid=11191 comm="syz.0.4877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.204032][T11208] binder: 11207:11208 ioctl c00c620f 200000000000 returned -22 [ 316.353082][ T23] audit: type=1400 audit(1880668924.694:313): avc: denied { setopt } for pid=11223 comm="syz.4.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 316.519947][T11248] netlink: 'syz.2.4903': attribute type 9 has an invalid length. [ 316.556050][T11248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4903'. [ 316.730709][T11265] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue [ 316.946408][ T367] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 317.195811][T11272] erofs: (device loop5): mounted with opts: , root inode @ nid 36. [ 317.251360][T11279] rtc_cmos 00:00: Alarms can be up to one day in the future [ 317.336560][ T367] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 317.347109][ T367] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 317.359556][ T367] usb 3-1: config 220 has no interface number 2 [ 317.375205][ T367] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 317.389935][ T367] usb 3-1: config 220 interface 0 has no altsetting 0 [ 317.398905][ T367] usb 3-1: config 220 interface 76 has no altsetting 0 [ 317.412196][ T367] usb 3-1: config 220 interface 1 has no altsetting 0 [ 317.496667][T11313] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 317.585693][ T367] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 317.599613][ T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.617297][ T367] usb 3-1: Product: syz [ 317.628642][ T367] usb 3-1: Manufacturer: syz [ 317.642375][ T367] usb 3-1: SerialNumber: syz [ 317.693591][T11348] netlink: 'syz.3.4951': attribute type 8 has an invalid length. [ 317.815738][T11370] netlink: 'syz.3.4962': attribute type 5 has an invalid length. [ 317.936068][T11396] netlink: 'syz.0.4971': attribute type 4 has an invalid length. [ 317.980499][T11402] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4977'. [ 318.040865][ T367] usb 3-1: selecting invalid altsetting 0 [ 318.046972][ T367] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 318.064797][ T367] uvcvideo: No valid video chain found. [ 318.164406][ T367] usb 3-1: USB disconnect, device number 105 [ 318.277959][T11454] netlink: 'syz.4.5003': attribute type 16 has an invalid length. [ 318.496063][T11495] device bridge1 entered promiscuous mode [ 318.633248][T11513] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 318.655083][T11523] ip6t_rpfilter: unknown options [ 318.687512][T11513] ext4 filesystem being mounted at /1035/bus supports timestamps until (%ptR?) (0x7fffffff) [ 318.994849][T11545] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 319.018352][T11545] EXT4-fs error (device loop5): ext4_xattr_inode_iget:402: inode #11: comm syz.5.5046: missing EA_INODE flag [ 319.066729][T11545] EXT4-fs error (device loop5): ext4_xattr_inode_iget:407: comm syz.5.5046: error while reading EA inode 11 err=-117 [ 319.112835][T11570] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 319.158161][T11570] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters [ 319.172620][T11570] EXT4-fs (loop3): Remounting filesystem read-only [ 319.180144][T11570] EXT4-fs (loop3): 1 orphan inode deleted [ 319.186931][T11570] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noblock_validity,acl,noinit_itable,errors=remount-ro,init_itable,noauto_da_alloc,usrquota,resgid=0x000000000000ee002 [ 319.263219][T11583] netlink: 'syz.2.5062': attribute type 9 has an invalid length. [ 319.282843][T11583] netlink: 'syz.2.5062': attribute type 7 has an invalid length. [ 319.291230][T11583] netlink: 'syz.2.5062': attribute type 8 has an invalid length. [ 319.378108][ T23] kauditd_printk_skb: 21 callbacks suppressed [ 319.378122][ T23] audit: type=1400 audit(1880668927.481:331): avc: denied { write } for pid=11584 comm="syz.3.5063" name="kvm" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 319.428712][T11499] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 319.437295][T11596] netlink: 'syz.5.5067': attribute type 6 has an invalid length. [ 319.452308][T11499] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 319.481370][T11499] F2FS-fs (loop0): invalid crc value [ 319.496376][T11499] F2FS-fs (loop0): Found nat_bits in checkpoint [ 319.556579][T11499] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 319.563954][T11499] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 319.617556][ T23] audit: type=1400 audit(1880668927.703:332): avc: denied { setattr } for pid=11498 comm="syz.0.5025" name="file2" dev="loop0" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 319.731419][T11620] EXT4-fs error (device loop2): ext4_orphan_get:1262: comm syz.2.5077: bad orphan inode 15 [ 319.762071][T11620] ext4_test_bit(bit=14, block=5) = 0 [ 319.784645][T11620] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue [ 319.813715][ T23] audit: type=1400 audit(1880668927.878:333): avc: denied { setattr } for pid=11619 comm="syz.2.5077" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.845415][T11645] xt_ecn: cannot match TCP bits for non-tcp packets [ 320.091619][T11661] EXT4-fs (loop3): Test dummy encryption mode enabled [ 320.127363][T11676] __nla_validate_parse: 5 callbacks suppressed [ 320.127372][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5103'. [ 320.154946][T11661] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 320.282658][ T23] audit: type=1400 audit(1880668928.312:334): avc: denied { create } for pid=11660 comm="syz.3.5097" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 320.293916][T11699] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11699 comm=syz.0.5113 [ 320.353684][T11661] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 320.378656][ T23] audit: type=1326 audit(1880668928.395:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11706 comm="syz.5.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc0217969 code=0x7ffc0000 [ 320.405056][ T23] audit: type=1326 audit(1880668928.395:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11706 comm="syz.5.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc0217969 code=0x7ffc0000 [ 320.428614][T11699] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=11699 comm=syz.0.5113 [ 320.442274][ T23] audit: type=1326 audit(1880668928.395:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11706 comm="syz.5.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fafc0217969 code=0x7ffc0000 [ 320.480346][ T23] audit: type=1326 audit(1880668928.395:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11706 comm="syz.5.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc0217969 code=0x7ffc0000 [ 320.529657][ T23] audit: type=1326 audit(1880668928.395:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11706 comm="syz.5.5117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc0217969 code=0x7ffc0000 [ 320.598609][T11701] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 320.620690][T11701] FAT-fs (loop4): Filesystem has been set read-only [ 320.773490][T11748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5136'. [ 320.902711][T11750] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 320.921104][T11750] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 320.942390][T11750] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 320.952170][T11750] EXT4-fs error (device loop3) in ext4_orphan_del:3257: error 27 [ 320.963235][T11750] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 320.972215][T11750] EXT4-fs error (device loop3) in ext4_orphan_cleanup:2816: error 27 [ 320.983075][T11750] EXT4-fs (loop3): 1 truncate cleaned up [ 320.989797][T11750] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 321.000300][T11750] ext4 filesystem being mounted at /1020/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 321.102615][T11784] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 321.132803][T11784] ================================================================== [ 321.140936][T11784] BUG: KASAN: use-after-free in __ext4_iget+0x3ac/0x40d0 [ 321.147959][T11784] Read of size 8 at addr ffff8881dd38c600 by task syz.2.5153/11784 [ 321.155927][T11784] [ 321.158284][T11784] CPU: 1 PID: 11784 Comm: syz.2.5153 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 321.168164][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.178236][T11784] Call Trace: [ 321.181537][T11784] __dump_stack+0x1e/0x20 [ 321.185955][T11784] dump_stack+0x15b/0x1b8 [ 321.190280][T11784] ? vprintk_default+0x28/0x30 [ 321.195044][T11784] ? show_regs_print_info+0x18/0x18 [ 321.200248][T11784] ? printk+0xcc/0x110 [ 321.204323][T11784] ? __ext4_iget+0x3ac/0x40d0 [ 321.209004][T11784] print_address_description+0x8d/0x4c0 [ 321.214561][T11784] ? __ext4_iget+0x3ac/0x40d0 [ 321.219261][T11784] ? __ext4_iget+0x3ac/0x40d0 [ 321.224049][T11784] __kasan_report+0xef/0x120 [ 321.228644][T11784] ? __ext4_iget+0x3ac/0x40d0 [ 321.233412][T11784] kasan_report+0x30/0x60 [ 321.237743][T11784] __asan_report_load8_noabort+0x14/0x20 [ 321.243379][T11784] __ext4_iget+0x3ac/0x40d0 [ 321.247887][T11784] ? idr_replace+0x190/0x190 [ 321.252486][T11784] ? __kasan_check_write+0x14/0x20 [ 321.257600][T11784] ? _raw_write_lock+0x8e/0xe0 [ 321.262380][T11784] ? _raw_write_trylock+0x140/0x140 [ 321.267577][T11784] ? __proc_create+0x564/0x8d0 [ 321.272453][T11784] ? ext4_get_projid+0x140/0x140 [ 321.277393][T11784] ? _raw_write_unlock+0x2b/0x60 [ 321.282331][T11784] ? proc_register+0x34d/0x4e0 [ 321.287096][T11784] ext4_enable_quotas+0x33b/0x6c0 [ 321.292125][T11784] ext4_fill_super+0x7f7c/0x8670 [ 321.297132][T11784] ? ext4_mount+0x40/0x40 [ 321.301456][T11784] ? register_shrinker_prepared+0x11d/0x160 [ 321.307440][T11784] ? set_blocksize+0x1ab/0x3c0 [ 321.312202][T11784] ? sb_set_blocksize+0xaa/0xf0 [ 321.317041][T11784] mount_bdev+0x279/0x390 [ 321.321475][T11784] ? ext4_mount+0x40/0x40 [ 321.325795][T11784] ext4_mount+0x34/0x40 [ 321.329971][T11784] legacy_get_tree+0xea/0x190 [ 321.334658][T11784] ? ext4_lazyinit_thread+0xcc0/0xcc0 [ 321.340050][T11784] vfs_get_tree+0x89/0x260 [ 321.344458][T11784] do_new_mount+0x234/0x480 [ 321.348977][T11784] do_mount+0x63a/0xd40 [ 321.353121][T11784] ? copy_mount_string+0x30/0x30 [ 321.358048][T11784] ? __kasan_check_read+0x11/0x20 [ 321.363068][T11784] ? copy_mount_options+0x2cc/0x340 [ 321.368260][T11784] ksys_mount+0xc5/0x100 [ 321.372495][T11784] __x64_sys_mount+0xbf/0xd0 [ 321.377075][T11784] do_syscall_64+0xcf/0x170 [ 321.381568][T11784] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 321.387448][T11784] RIP: 0033:0x7f811649510a [ 321.391859][T11784] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.411453][T11784] RSP: 002b:00007f8114afbe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.419857][T11784] RAX: ffffffffffffffda RBX: 00007f8114afbef0 RCX: 00007f811649510a [ 321.427817][T11784] RDX: 0000200000000080 RSI: 0000200000000180 RDI: 00007f8114afbeb0 [ 321.436123][T11784] RBP: 0000200000000080 R08: 00007f8114afbef0 R09: 000000000021081e [ 321.444133][T11784] R10: 000000000021081e R11: 0000000000000246 R12: 0000200000000180 [ 321.452120][T11784] R13: 00007f8114afbeb0 R14: 0000000000000515 R15: 00002000000009c0 [ 321.460083][T11784] [ 321.462422][T11784] Allocated by task 4665: [ 321.466744][T11784] __kasan_kmalloc+0x162/0x200 [ 321.471508][T11784] kasan_slab_alloc+0x12/0x20 [ 321.476193][T11784] kmem_cache_alloc+0xe2/0x270 [ 321.481071][T11784] f2fs_alloc_inode+0x26/0x3b0 [ 321.485844][T11784] iget_locked+0x144/0x810 [ 321.490249][T11784] f2fs_iget+0x55/0x4ac0 [ 321.494493][T11784] f2fs_fill_super+0x44fc/0x7760 [ 321.499422][T11784] mount_bdev+0x279/0x390 [ 321.503745][T11784] f2fs_mount+0x34/0x40 [ 321.507903][T11784] legacy_get_tree+0xea/0x190 [ 321.512611][T11784] vfs_get_tree+0x89/0x260 [ 321.517011][T11784] do_new_mount+0x234/0x480 [ 321.521503][T11784] do_mount+0x63a/0xd40 [ 321.525646][T11784] ksys_mount+0xc5/0x100 [ 321.529877][T11784] __x64_sys_mount+0xbf/0xd0 [ 321.534459][T11784] do_syscall_64+0xcf/0x170 [ 321.539060][T11784] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 321.544932][T11784] [ 321.547253][T11784] Freed by task 10: [ 321.551409][T11784] __kasan_slab_free+0x1c3/0x280 [ 321.556349][T11784] kasan_slab_free+0xe/0x10 [ 321.560855][T11784] slab_free_freelist_hook+0xb7/0x180 [ 321.566218][T11784] kmem_cache_free+0x10c/0x2c0 [ 321.571007][T11784] f2fs_free_inode+0x24/0x30 [ 321.575671][T11784] i_callback+0x4c/0x70 [ 321.579821][T11784] rcu_do_batch+0x446/0x980 [ 321.584312][T11784] rcu_core+0x4bd/0xbd0 [ 321.588458][T11784] rcu_core_si+0x9/0x10 [ 321.592604][T11784] __do_softirq+0x236/0x660 [ 321.597099][T11784] [ 321.599505][T11784] The buggy address belongs to the object at ffff8881dd38c140 [ 321.599505][T11784] which belongs to the cache f2fs_inode_cache of size 1264 [ 321.614117][T11784] The buggy address is located 1216 bytes inside of [ 321.614117][T11784] 1264-byte region [ffff8881dd38c140, ffff8881dd38c630) [ 321.627544][T11784] The buggy address belongs to the page: [ 321.633187][T11784] page:ffffea000774e200 refcount:1 mapcount:0 mapping:ffff8881f0808500 index:0xffff8881dd388570 compound_mapcount: 0 [ 321.645506][T11784] flags: 0x8000000000010200(slab|head) [ 321.650974][T11784] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f0808500 [ 321.659554][T11784] raw: ffff8881dd388570 000000008017000e 00000001ffffffff 0000000000000000 [ 321.668120][T11784] page dumped because: kasan: bad access detected [ 321.674810][T11784] page_owner tracks the page as allocated [ 321.680537][T11784] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 321.698352][T11784] prep_new_page+0x35e/0x370 [ 321.702937][T11784] get_page_from_freelist+0x1296/0x1310 [ 321.708485][T11784] __alloc_pages_nodemask+0x202/0x4b0 [ 321.713866][T11784] alloc_slab_page+0x3c/0x3b0 [ 321.718549][T11784] new_slab+0x93/0x420 [ 321.722613][T11784] ___slab_alloc+0x29e/0x420 [ 321.727188][T11784] __slab_alloc+0x63/0xa0 [ 321.731511][T11784] kmem_cache_alloc+0x12c/0x270 [ 321.736347][T11784] f2fs_alloc_inode+0x26/0x3b0 [ 321.741100][T11784] iget_locked+0x144/0x810 [ 321.745505][T11784] f2fs_iget+0x55/0x4ac0 [ 321.749735][T11784] f2fs_fill_super+0x44fc/0x7760 [ 321.754656][T11784] mount_bdev+0x279/0x390 [ 321.758971][T11784] f2fs_mount+0x34/0x40 [ 321.763111][T11784] legacy_get_tree+0xea/0x190 [ 321.767891][T11784] vfs_get_tree+0x89/0x260 [ 321.772318][T11784] page_owner free stack trace missing [ 321.777676][T11784] [ 321.779994][T11784] Memory state around the buggy address: [ 321.785610][T11784] ffff8881dd38c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 321.793696][T11784] ffff8881dd38c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 321.801853][T11784] >ffff8881dd38c600: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 321.809915][T11784] ^ [ 321.813969][T11784] ffff8881dd38c680: fc fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 [ 321.822015][T11784] ffff8881dd38c700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 321.830065][T11784] ================================================================== [ 321.838131][T11784] Disabling lock debugging due to kernel taint [ 321.858274][T11784] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 321.874578][T11796] FAT-fs (loop3): Directory bread(block 162) failed [ 321.888315][T11796] FAT-fs (loop3): Directory bread(block 163) failed [ 321.899761][T11784] EXT4-fs (loop2): mount failed [ 321.911091][T11796] FAT-fs (loop3): Directory bread(block 164) failed [ 321.919128][T11796] FAT-fs (loop3): Directory bread(block 165) failed [ 321.926191][T11796] FAT-fs (loop3): Directory bread(block 166) failed [ 321.933510][T11796] FAT-fs (loop3): Directory bread(block 167) failed [ 321.940182][T11796] FAT-fs (loop3): Directory bread(block 168) failed [ 321.947146][T11796] FAT-fs (loop3): Directory bread(block 169) failed [ 322.082114][T11796] FAT-fs (loop3): Directory bread(block 162) failed [ 322.095842][T11796] FAT-fs (loop3): Directory bread(block 163) failed [ 322.111067][T11796] attempt to access beyond end of device [ 322.111067][T11796] loop3: rw=2051, want=234, limit=128 [ 322.322037][T11794] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 322.329200][T11794] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 322.339157][T11794] F2FS-fs (loop4): invalid crc value [ 322.347230][T11794] F2FS-fs (loop4): Found nat_bits in checkpoint [ 322.378462][T11794] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 322.385566][T11794] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4