last executing test programs: 5.210725249s ago: executing program 0 (id=797): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000400)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x542, &(0x7f00000027c0)="$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") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 3.449349467s ago: executing program 0 (id=826): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x202402, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@nolazytime}, {@orlov}, {@jqfmt_vfsv0}, {@grpid, 0x2e}], [], 0x2c}, 0x0, 0x45d, &(0x7f00000010c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x1014c1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 3.363261706s ago: executing program 0 (id=831): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) chdir(&(0x7f0000000480)='./cgroup\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.271957187s ago: executing program 0 (id=833): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file3\x00', 0x0) 3.220636767s ago: executing program 0 (id=835): unshare(0x20060400) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x10012, r1, 0x0) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) 3.017188188s ago: executing program 2 (id=837): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) 3.006562218s ago: executing program 0 (id=838): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000290000000400"], 0x18}, 0x0) 2.976398568s ago: executing program 32 (id=838): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000290000000400"], 0x18}, 0x0) 2.931982459s ago: executing program 2 (id=840): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000404355220500000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0x9, 'Z'}, @global=@item_012={0x2, 0x1, 0x7, "c4ca"}]}}, 0x0}, 0x0) 2.367916331s ago: executing program 5 (id=843): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x220000, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x290, &(0x7f0000000780)="$eJzs3M9r034YwPFn7bZuHVt7+PIFBfFBL3oJW/0LeuhALCjbKm4HIXOpK43taOIkIm43r/4dw6M3Qf0HdvEi3sXLEAQvO4iV5YfrtsB+0Jpufb9g5Fk+nyf5JE3Kk0A/Ow9eP6lXHaNqupIaU0mJbMquSH4vCg2Fy5Qfj0qnTbk58fPLlfnFpTvFcrk0pzpbXLhVUNWpq++fvXhz7aM7cf/t1LuMbOcf7vwofN3+f/vSzu+FaOtNV01dbjZdc9m2dKXm1A3Ve7ZlOpbWGo7VOtBetZtra56ajZXJ7FrLchw1G57WLU/dprotT83HZq2hhmHoZFYGTfrUGZWtuTmz2JPBIAnjcStbraKZjm2sbP2LQQEAgP6SVP2/WnO05mjjuPo/JWev/4ePHu5Qr8/n+UL9Pwj26v9seP8eRP0PAAAAAAAAAAAAAAAAAAAAAMB5sNtu59rtdi5aRn8ZERkTkej/pMeJ3uDzH2zzi0sZCX64NyZiv1qvrFeCZdBerEpNbLFkekTkl389hIJ49na5NK2+vHywN8L8jfVKWjJRfiQfnz8T5OvB/BHJdu6/IDn5Ly4/UyrE5o/Kjesd+Ybk5NMjaYotK/51HeanpfRyRjVzt3wof9zvBwAAAADARWDoX0ee3/12Q6NpQw61Byv33w9I7pj3A4eer4flcswEPQAAAAAAoPsc73ndtG2rRXC64AKfupH+GIaXEpEubvDzqshJO38Xkf44CV0Nvj0N7vqTdE76mwkAAABAt+0X/UmPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwXXSycOi/meZe6xjd+lkjhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoD38CAAD//8grHrI=") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x101, 0x0) getdents(r0, 0x0, 0x0) 2.351312631s ago: executing program 5 (id=844): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long}, 0x8) 2.341103461s ago: executing program 5 (id=845): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x54f6, &(0x7f0000005800)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101141, 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="eb", 0xd}], 0x1, 0x17ffffd, 0x0) 2.012822262s ago: executing program 5 (id=848): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0xd}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 1.868052482s ago: executing program 5 (id=850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) io_setup(0x64, &(0x7f0000001840)=0x0) io_destroy(r2) 1.861968183s ago: executing program 4 (id=851): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1.792895623s ago: executing program 4 (id=852): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0xffff}}]}, 0x24}}, 0x0) 1.792625513s ago: executing program 4 (id=853): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r2, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}}, 0x0) 1.792345763s ago: executing program 4 (id=854): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000002280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}, {@index_on}]}) 1.783368723s ago: executing program 5 (id=855): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.783202413s ago: executing program 4 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x39, 0x0) 1.761236483s ago: executing program 4 (id=857): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109023b000101000000090400000302060000052406000005240000000d240f00fff200000000000000090582024000000000090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000fc0)={{0x12, 0x1, 0x110, 0x81, 0x31, 0xc8, 0x20, 0x2c7c, 0x128, 0xc994, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x0, 0x90, 0x5, [{{0x9, 0x4, 0x5b, 0x7, 0x0, 0xff, 0xff, 0x30, 0xe4}}]}}]}}, 0x0) 1.051067446s ago: executing program 2 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 995.396946ms ago: executing program 2 (id=865): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x0, 0x6d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @pic={0x0, 0xff}}) 817.746677ms ago: executing program 2 (id=866): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8}}, 0x30) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}}, 0x0) 787.677507ms ago: executing program 2 (id=867): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a0584000000000000010902ec27d5792cad072400010000000009"], 0x0) r0 = syz_io_uring_setup(0xc7, &(0x7f0000000080)={0x0, 0x1765, 0x400}, &(0x7f0000000100), &(0x7f0000000140)) r1 = io_uring_setup(0x6249, &(0x7f0000000300)={0x0, 0x2d2, 0x80, 0x0, 0x10000000}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r2) 331.558979ms ago: executing program 3 (id=875): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x80000000}) write$binfmt_elf64(r0, &(0x7f0000001180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x80, 0x47, 0x3, 0x9, 0x3, 0x0, 0x2, 0x2ec, 0x40, 0x103, 0x4c, 0x1d, 0x38, 0x1, 0x1, 0x7, 0x5}, [{0x7, 0x83d, 0x3, 0x7e48c34d, 0x8, 0x1, 0x9, 0x1}]}, 0x78) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000500)={0x1000, 0xfffffffffffff000, 0x5}) 244.36871ms ago: executing program 3 (id=876): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000005640)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001400)=""/119, 0x77}], 0x1, &(0x7f00000037c0)=""/153, 0xc}}], 0x1, 0x0, 0x0) 168.16034ms ago: executing program 3 (id=879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x3, 0x4}) 155.43897ms ago: executing program 1 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) 128.57977ms ago: executing program 1 (id=883): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b'], 0x48) 87.00218ms ago: executing program 3 (id=884): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 85.78843ms ago: executing program 3 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) times(0x0) 36.11214ms ago: executing program 1 (id=886): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) 35.93246ms ago: executing program 1 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000d7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) getpgid(0x0) 31.05898ms ago: executing program 3 (id=888): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, 0x0) 30.76226ms ago: executing program 1 (id=889): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000200000092000040"]) 0s ago: executing program 1 (id=892): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000001580)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "711e8f", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev}, {[], @time_exceed={0x9, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "bede78", 0x0, 0x0, 0x0, @dev, @loopback}}}}}}}, 0x0) kernel console output (not intermixed with test programs): the interface descriptor's value: 9 [ 25.945540][ T314] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 25.956595][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.964949][ T443] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 25.972780][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.983599][ T39] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 25.992792][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.996111][ T488] loop3: detected capacity change from 0 to 131072 [ 26.005212][ T39] usb 2-1: config 0 descriptor?? [ 26.007314][ T314] usb 5-1: config 0 descriptor?? [ 26.015508][ T443] EXT4-fs (loop2): orphan cleanup on readonly fs [ 26.024817][ T443] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4 [ 26.034505][ T488] F2FS-fs (loop3): invalid crc value [ 26.039488][ T443] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 26.041086][ T488] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 26.049977][ T443] EXT4-fs error (device loop2): ext4_acquire_dquot:6787: comm syz.2.47: Failed to acquire dquot type 1 [ 26.075213][ T443] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.47: Invalid block bitmap block 0 in block_group 0 [ 26.084425][ T488] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 26.088654][ T443] Quota error (device loop2): write_blk: dquota write failed [ 26.103044][ T443] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 26.114532][ T443] EXT4-fs error (device loop2): ext4_acquire_dquot:6787: comm syz.2.47: Failed to acquire dquot type 1 [ 26.126494][ T443] Quota error (device loop2): write_blk: dquota write failed [ 26.133786][ T28] audit: type=1400 audit(1731373509.744:161): avc: denied { write } for pid=487 comm="syz.3.64" path="/21/mnt/file1" dev="loop3" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.136434][ T443] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 26.165598][ T443] EXT4-fs error (device loop2): ext4_acquire_dquot:6787: comm syz.2.47: Failed to acquire dquot type 1 [ 26.170287][ T510] loop0: detected capacity change from 0 to 128 [ 26.186958][ T443] EXT4-fs (loop2): 1 orphan inode deleted [ 26.198778][ T443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 26.208160][ T510] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.232699][ T510] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038 (0x7fffffff) [ 26.255974][ T291] EXT4-fs (loop0): unmounting filesystem. [ 26.289155][ T28] audit: type=1400 audit(1731373509.904:162): avc: denied { ioctl } for pid=513 comm="syz.0.72" path="socket:[16683]" dev="sockfs" ino=16683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.348273][ T520] netlink: 'syz.0.75': attribute type 11 has an invalid length. [ 26.355927][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 26.364866][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 26.370884][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 26.389274][ T39] usb 2-1: USB disconnect, device number 2 [ 26.481814][ T528] loop3: detected capacity change from 0 to 2048 [ 26.498829][ T314] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 26.510143][ T314] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 26.526325][ T314] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0 [ 26.535496][ T314] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0 [ 26.543356][ T528] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 26.544529][ T314] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 26.559204][ T528] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038 (0x7fffffff) [ 26.569663][ T314] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 26.590534][ T314] microsoft 0003:045E:07DA.0001: no inputs found [ 26.597719][ T528] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.71: bg 0: block 288: padding at end of block bitmap is not set [ 26.611854][ T314] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 26.630875][ T294] EXT4-fs (loop3): unmounting filesystem. [ 26.708643][ T314] usb 5-1: USB disconnect, device number 2 [ 26.832964][ T544] loop3: detected capacity change from 0 to 512 [ 26.890766][ T544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.909793][ T544] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff) [ 26.957650][ T294] EXT4-fs (loop3): unmounting filesystem. [ 27.170141][ T535] loop0: detected capacity change from 0 to 131072 [ 27.203987][ T535] F2FS-fs (loop0): Test dummy encryption mode enabled [ 27.227172][ T535] F2FS-fs (loop0): invalid crc value [ 27.246291][ T535] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.349032][ T535] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.388120][ T576] loop4: detected capacity change from 0 to 512 [ 27.421179][ T576] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.432625][ T576] ext4 filesystem being mounted at /19/bus supports timestamps until 2038 (0x7fffffff) [ 27.485138][ T292] EXT4-fs (loop4): unmounting filesystem. [ 27.647457][ T586] loop4: detected capacity change from 0 to 512 [ 27.670268][ T586] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.102: invalid block [ 27.681921][ T586] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.102: invalid indirect mapped block 10 (level 1) [ 27.695351][ T586] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.102: invalid indirect mapped block 8 (level 1) [ 27.708651][ T443] syz.2.47 (443) used greatest stack depth: 19080 bytes left [ 27.721556][ T6] usb 3-1: USB disconnect, device number 2 [ 27.728217][ T586] EXT4-fs (loop4): 1 truncate cleaned up [ 27.734626][ T586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 27.743510][ T289] EXT4-fs (loop2): unmounting filesystem. [ 27.760178][ T542] loop1: detected capacity change from 0 to 131072 [ 27.772288][ T292] EXT4-fs (loop4): unmounting filesystem. [ 27.773407][ T542] F2FS-fs (loop1): invalid crc value [ 27.783283][ T594] loop2: detected capacity change from 0 to 512 [ 27.797407][ T594] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 27.812547][ T301] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.821579][ T542] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 27.845009][ T594] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #17: comm syz.2.104: iget: bad i_size value: -6917529027641081756 [ 27.858233][ T594] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.104: couldn't read orphan inode 17 (err -117) [ 27.865611][ T542] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 27.870917][ T594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.903804][ T594] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.104: bg 0: block 65: padding at end of block bitmap is not set [ 27.919023][ T594] EXT4-fs error (device loop2): ext4_acquire_dquot:6787: comm syz.2.104: Failed to acquire dquot type 0 [ 27.932481][ T314] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.951260][ T289] EXT4-fs (loop2): unmounting filesystem. [ 28.172416][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 28.182568][ T301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.203295][ T301] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 28.222329][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.242671][ T301] usb 4-1: config 0 descriptor?? [ 28.268527][ T625] loop2: detected capacity change from 0 to 512 [ 28.286721][ T625] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.116: invalid indirect mapped block 10 (level 1) [ 28.300026][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.311588][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.321204][ T314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 28.334029][ T625] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.116: invalid indirect mapped block 8 (level 1) [ 28.346962][ T314] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 28.355904][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.364108][ T625] EXT4-fs (loop2): 1 truncate cleaned up [ 28.369573][ T625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.378598][ T314] usb 1-1: config 0 descriptor?? [ 28.400883][ T289] EXT4-fs (loop2): unmounting filesystem. [ 28.542412][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.572439][ T301] usbhid 4-1:0.0: can't add hid device: -71 [ 28.578256][ T301] usbhid: probe of 4-1:0.0 failed with error -71 [ 28.595664][ T301] usb 4-1: USB disconnect, device number 2 [ 28.688058][ T609] loop4: detected capacity change from 0 to 131072 [ 28.695262][ T609] F2FS-fs (loop4): Test dummy encryption mode enabled [ 28.708407][ T609] F2FS-fs (loop4): invalid crc value [ 28.723204][ T609] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.772302][ T609] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.802452][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 28.863466][ T314] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 28.870571][ T314] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 28.900715][ T314] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 28.913591][ T314] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 28.932193][ T314] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 28.942474][ T39] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 28.950382][ T39] usb 2-1: config 0 has no interface number 0 [ 28.956600][ T314] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 28.978159][ T314] microsoft 0003:045E:07DA.0002: no inputs found [ 29.002436][ T314] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 29.026290][ T637] loop3: detected capacity change from 0 to 512 [ 29.043171][ T637] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 29.081204][ T637] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz.3.120: iget: bad i_size value: -6917529027641081756 [ 29.094537][ T314] usb 1-1: USB disconnect, device number 3 [ 29.102777][ T637] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.120: couldn't read orphan inode 17 (err -117) [ 29.114855][ T637] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.132477][ T39] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=da.6f [ 29.141351][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.170960][ T630] loop2: detected capacity change from 0 to 131072 [ 29.179523][ T39] usb 2-1: Product: syz [ 29.183556][ T39] usb 2-1: Manufacturer: syz [ 29.188402][ T637] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.120: bg 0: block 65: padding at end of block bitmap is not set [ 29.221496][ T39] usb 2-1: SerialNumber: syz [ 29.227659][ T630] F2FS-fs (loop2): invalid crc value [ 29.233225][ T637] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.120: Failed to acquire dquot type 0 [ 29.245857][ T39] usb 2-1: config 0 descriptor?? [ 29.264158][ T630] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 29.275017][ T294] EXT4-fs (loop3): unmounting filesystem. [ 29.328868][ T630] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 29.446249][ T671] incfs: Options parsing error. -22 [ 29.451326][ T671] incfs: mount failed -22 [ 29.491339][ T627] loop1: detected capacity change from 0 to 512 [ 29.524596][ T627] EXT4-fs: Ignoring removed bh option [ 29.529852][ T627] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.553379][ T627] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 29.563822][ T627] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 29.572546][ T627] EXT4-fs (loop1): orphan cleanup on readonly fs [ 29.579224][ T627] EXT4-fs error (device loop1): ext4_acquire_dquot:6787: comm syz.1.115: Failed to acquire dquot type 1 [ 29.590570][ T627] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.115: Invalid block bitmap block 0 in block_group 0 [ 29.604124][ T627] EXT4-fs error (device loop1): ext4_acquire_dquot:6787: comm syz.1.115: Failed to acquire dquot type 1 [ 29.616280][ T627] EXT4-fs error (device loop1): ext4_acquire_dquot:6787: comm syz.1.115: Failed to acquire dquot type 1 [ 29.629355][ T627] EXT4-fs (loop1): 1 orphan inode deleted [ 29.635248][ T627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.275801][ T662] loop4: detected capacity change from 0 to 131072 [ 30.295401][ T662] F2FS-fs (loop4): invalid crc value [ 30.306785][ T662] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.353445][ T662] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 30.393638][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 30.393654][ T28] audit: type=1400 audit(1731373514.014:183): avc: denied { name_bind } for pid=706 comm="syz.3.147" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 30.422519][ T391] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.605505][ T693] loop0: detected capacity change from 0 to 131072 [ 30.631378][ T693] F2FS-fs (loop0): invalid crc value [ 30.638078][ T693] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 30.673312][ T693] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 30.722623][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.753841][ T28] audit: type=1400 audit(1731373514.374:184): avc: denied { read write } for pid=718 comm="syz.4.151" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 30.777287][ T28] audit: type=1400 audit(1731373514.374:185): avc: denied { open } for pid=718 comm="syz.4.151" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 30.822519][ T391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.842728][ T391] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.861825][ T391] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.886174][ T391] usb 3-1: config 0 descriptor?? [ 30.949500][ T724] netlink: 277 bytes leftover after parsing attributes in process `syz.4.153'. [ 30.972487][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 30.981543][ T726] loop4: detected capacity change from 0 to 2048 [ 31.004014][ T726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.019273][ T726] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 31.046917][ T734] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 31.057326][ T292] EXT4-fs (loop4): unmounting filesystem. [ 31.074536][ T28] audit: type=1400 audit(1731373514.694:186): avc: denied { execute } for pid=735 comm="syz.0.157" path="/26/cpuacct.usage_percpu_user" dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 31.102578][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.116091][ T28] audit: type=1400 audit(1731373514.724:187): avc: denied { getopt } for pid=735 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 31.139520][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.149457][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 31.162628][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 31.171570][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.180545][ T24] usb 4-1: config 0 descriptor?? [ 31.242476][ T391] usbhid 3-1:0.0: can't add hid device: -71 [ 31.248303][ T391] usbhid: probe of 3-1:0.0 failed with error -71 [ 31.258034][ T391] usb 3-1: USB disconnect, device number 3 [ 31.280327][ T39] usb 2-1: USB disconnect, device number 3 [ 31.296423][ T290] EXT4-fs (loop1): unmounting filesystem. [ 31.653414][ T24] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 31.667875][ T24] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 31.686620][ T24] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 31.713576][ T24] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 31.725795][ T28] audit: type=1326 audit(1731373515.344:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.2.166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8e417e719 code=0x0 [ 31.754078][ T24] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 31.785113][ T24] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 31.806593][ T24] microsoft 0003:045E:07DA.0003: no inputs found [ 31.816700][ T24] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 31.867638][ T24] usb 4-1: USB disconnect, device number 3 [ 31.909291][ T740] loop0: detected capacity change from 0 to 131072 [ 31.926324][ T740] F2FS-fs (loop0): invalid crc value [ 31.956704][ T740] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.046110][ T740] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 32.253653][ T748] loop4: detected capacity change from 0 to 131072 [ 32.260536][ T765] loop1: detected capacity change from 0 to 40427 [ 32.273440][ T765] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 32.286415][ T748] F2FS-fs (loop4): invalid crc value [ 32.293231][ T765] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 32.307979][ T748] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 32.319560][ T765] F2FS-fs (loop1): invalid crc value [ 32.347380][ T765] F2FS-fs (loop1): Found nat_bits in checkpoint [ 32.366976][ T748] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 32.414050][ T28] audit: type=1400 audit(1731373516.034:189): avc: denied { create } for pid=778 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.437851][ T28] audit: type=1400 audit(1731373516.054:190): avc: denied { bind } for pid=778 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.439540][ T779] netlink: 'syz.3.170': attribute type 18 has an invalid length. [ 32.458260][ T28] audit: type=1400 audit(1731373516.054:191): avc: denied { write } for pid=778 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.486345][ T765] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 32.496927][ T765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 32.570643][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 32.585472][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 32.601993][ T790] loop3: detected capacity change from 0 to 1024 [ 32.638259][ T790] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 32.649388][ T790] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 32.688423][ T790] EXT4-fs error (device loop3): ext4_get_journal_inode:5720: comm syz.3.176: inode #1: comm syz.3.176: iget: illegal inode # [ 32.730540][ T790] EXT4-fs (loop3): no journal found [ 32.743294][ T790] EXT4-fs (loop3): can't get journal size [ 32.767656][ T796] loop0: detected capacity change from 0 to 1024 [ 32.774757][ T790] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.817543][ T294] EXT4-fs (loop3): unmounting filesystem. [ 32.850169][ T796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.896141][ T808] loop3: detected capacity change from 0 to 512 [ 32.920654][ T28] audit: type=1400 audit(1731373516.534:192): avc: denied { mounton } for pid=795 comm="syz.0.179" path="/31/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.945876][ T796] EXT4-fs error (device loop0): ext4_get_inode_usage:834: inode #2: comm syz.0.179: corrupted in-inode xattr [ 32.976137][ T808] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.992817][ T808] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038 (0x7fffffff) [ 33.019448][ T291] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2738: inode #2: comm syz-executor: corrupted in-inode xattr [ 33.064101][ T294] EXT4-fs (loop3): unmounting filesystem. [ 33.082593][ T291] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2808: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 33.109381][ T291] EXT4-fs (loop0): unmounting filesystem. [ 33.242412][ T314] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.382408][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.482433][ T314] usb 5-1: Using ep0 maxpacket: 32 [ 33.602450][ T314] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 33.610383][ T314] usb 5-1: config 0 has no interface number 0 [ 33.718282][ T821] loop0: detected capacity change from 0 to 40427 [ 33.734760][ T821] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 33.740020][ T801] loop2: detected capacity change from 0 to 131072 [ 33.752452][ T821] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 33.771419][ T821] F2FS-fs (loop0): invalid crc value [ 33.777091][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.788112][ T801] F2FS-fs (loop2): invalid crc value [ 33.790211][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.793484][ T314] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=da.6f [ 33.803816][ T24] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 33.824882][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.832044][ T314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.836693][ T24] usb 4-1: config 0 descriptor?? [ 33.845369][ T821] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.850863][ T314] usb 5-1: Product: syz [ 33.855460][ T314] usb 5-1: Manufacturer: syz [ 33.859888][ T314] usb 5-1: SerialNumber: syz [ 33.865308][ T801] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.894013][ T314] usb 5-1: config 0 descriptor?? [ 33.922533][ T821] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 33.929664][ T821] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.947808][ T805] loop1: detected capacity change from 0 to 131072 [ 33.956755][ T805] F2FS-fs (loop1): invalid crc value [ 33.970819][ T801] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 33.979537][ T8] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 33.989616][ T805] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 33.991834][ T8] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 34.035158][ T805] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 34.151908][ T812] loop4: detected capacity change from 0 to 512 [ 34.158420][ T812] EXT4-fs: Ignoring removed bh option [ 34.164444][ T812] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.174716][ T812] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 34.190437][ T812] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 34.199251][ T812] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.206535][ T812] EXT4-fs error (device loop4): ext4_acquire_dquot:6787: comm syz.4.171: Failed to acquire dquot type 1 [ 34.218066][ T812] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.171: Invalid block bitmap block 0 in block_group 0 [ 34.231762][ T812] EXT4-fs error (device loop4): ext4_acquire_dquot:6787: comm syz.4.171: Failed to acquire dquot type 1 [ 34.243421][ T812] EXT4-fs error (device loop4): ext4_acquire_dquot:6787: comm syz.4.171: Failed to acquire dquot type 1 [ 34.254983][ T812] EXT4-fs (loop4): 1 orphan inode deleted [ 34.260911][ T812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 34.404275][ T842] capability: warning: `syz.2.187' uses 32-bit capabilities (legacy support in use) [ 34.499782][ T849] loop0: detected capacity change from 0 to 1024 [ 34.530698][ T856] loop1: detected capacity change from 0 to 512 [ 34.540163][ T849] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 34.552638][ T849] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 34.565292][ T849] EXT4-fs error (device loop0): ext4_get_journal_inode:5720: comm syz.0.192: inode #1: comm syz.0.192: iget: illegal inode # [ 34.579353][ T849] EXT4-fs (loop0): no journal found [ 34.580352][ T856] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.584666][ T849] EXT4-fs (loop0): can't get journal size [ 34.593653][ T856] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 34.600309][ T849] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.636548][ T291] EXT4-fs (loop0): unmounting filesystem. [ 34.643753][ T290] EXT4-fs (loop1): unmounting filesystem. [ 34.752476][ T24] hid-led: probe of 0003:27B8:01ED.0004 failed with error -71 [ 34.773204][ T24] usb 4-1: USB disconnect, device number 4 [ 35.324746][ T867] loop2: detected capacity change from 0 to 131072 [ 35.342689][ T867] F2FS-fs (loop2): invalid crc value [ 35.347047][ T872] loop1: detected capacity change from 0 to 131072 [ 35.356977][ T867] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 35.360062][ T872] F2FS-fs (loop1): invalid crc value [ 35.387265][ T872] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.391435][ T867] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 35.432920][ T872] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 35.710989][ T897] loop3: detected capacity change from 0 to 2048 [ 35.722501][ T301] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.785904][ T897] Alternate GPT is invalid, using primary GPT. [ 35.799620][ T897] loop3: p1 p2 p3 [ 35.808964][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 35.808980][ T28] audit: type=1400 audit(1731373519.424:198): avc: denied { create } for pid=900 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.836488][ T904] loop2: detected capacity change from 0 to 512 [ 35.843812][ T28] audit: type=1400 audit(1731373519.454:199): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.878854][ T28] audit: type=1400 audit(1731373519.454:200): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.905253][ T28] audit: type=1400 audit(1731373519.454:201): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.905910][ T904] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.938114][ T316] udevd[316]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 35.949776][ T741] udevd[741]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.962178][ T28] audit: type=1400 audit(1731373519.454:202): avc: denied { write } for pid=900 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.967354][ T424] udevd[424]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.996325][ T24] usb 5-1: USB disconnect, device number 3 [ 36.003721][ T904] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 36.006464][ T292] EXT4-fs (loop4): unmounting filesystem. [ 36.015059][ T28] audit: type=1400 audit(1731373519.454:203): avc: denied { read } for pid=900 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.038214][ T28] audit: type=1400 audit(1731373519.554:204): avc: denied { validate_trans } for pid=906 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.076169][ T741] udevd[741]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 36.078813][ T289] EXT4-fs (loop2): unmounting filesystem. [ 36.094179][ T337] udevd[337]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 36.104070][ T424] udevd[424]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 36.132541][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.155997][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.182454][ T301] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 36.211060][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.223189][ T301] usb 1-1: config 0 descriptor?? [ 36.307157][ T940] syz.2.225[940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.307223][ T940] syz.2.225[940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.352565][ T937] loop1: detected capacity change from 0 to 2048 [ 36.370803][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 36.382399][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.403847][ T937] Alternate GPT is invalid, using primary GPT. [ 36.409955][ T937] loop1: p1 p2 p3 [ 36.476549][ T316] udevd[316]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 36.488265][ T741] udevd[741]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 36.500067][ T424] udevd[424]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 36.742162][ T916] loop3: detected capacity change from 0 to 131072 [ 36.749930][ T916] F2FS-fs (loop3): invalid crc value [ 36.756933][ T916] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.792817][ T916] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 36.961432][ T965] loop2: detected capacity change from 0 to 2048 [ 36.978920][ T965] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.028187][ T965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.068098][ T28] audit: type=1400 audit(1731373520.684:205): avc: denied { setattr } for pid=964 comm="syz.2.234" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.068157][ T965] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.234: bg 0: block 234: padding at end of block bitmap is not set [ 37.124458][ T28] audit: type=1400 audit(1731373520.744:206): avc: denied { quotaon } for pid=964 comm="syz.2.234" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.142524][ T301] hid-led: probe of 0003:27B8:01ED.0005 failed with error -71 [ 37.147163][ T965] EXT4-fs (loop2): Remounting filesystem read-only [ 37.161384][ T965] EXT4-fs error (device loop2) in ext4_evict_inode:254: Readonly filesystem [ 37.180500][ T301] usb 1-1: USB disconnect, device number 4 [ 37.182713][ T965] EXT4-fs error (device loop2) in ext4_evict_inode:254: Readonly filesystem [ 37.241501][ T289] EXT4-fs (loop2): unmounting filesystem. [ 37.243950][ T977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 37.285856][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.343731][ T28] audit: type=1400 audit(1731373520.964:207): avc: denied { read } for pid=985 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.365290][ T963] loop4: detected capacity change from 0 to 40427 [ 37.386118][ T963] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.440706][ T963] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 37.462958][ T292] syz-executor: attempt to access beyond end of device [ 37.462958][ T292] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.572424][ T6] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.777224][ T1029] capability: warning: `syz.0.260' uses deprecated v2 capabilities in a way that may be insecure [ 37.777594][ T1000] loop1: detected capacity change from 0 to 40427 [ 37.822402][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 37.834658][ T1031] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 37.849118][ T1000] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.944398][ T6] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 37.952809][ T6] usb 4-1: config 0 has no interface number 0 [ 37.960779][ T1000] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.007346][ T290] syz-executor: attempt to access beyond end of device [ 38.007346][ T290] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.069492][ T1070] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.102450][ T293] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 38.132717][ T6] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=da.6f [ 38.141712][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.146683][ T1078] tmpfs: Unknown parameter 'h' [ 38.154531][ T6] usb 4-1: Product: syz [ 38.163426][ T6] usb 4-1: Manufacturer: syz [ 38.168222][ T6] usb 4-1: SerialNumber: syz [ 38.173984][ T6] usb 4-1: config 0 descriptor?? [ 38.190111][ T1080] loop0: detected capacity change from 0 to 2048 [ 38.205967][ T1080] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.214619][ T1080] ext4 filesystem being mounted at /53/bus supports timestamps until 2038 (0x7fffffff) [ 38.242274][ T291] EXT4-fs (loop0): unmounting filesystem. [ 38.248340][ T1087] netlink: 'syz.1.284': attribute type 14 has an invalid length. [ 38.402793][ T1101] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.429859][ T982] loop3: detected capacity change from 0 to 512 [ 38.443814][ T982] EXT4-fs: Ignoring removed bh option [ 38.449123][ T982] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.456232][ T982] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 38.457487][ T1093] loop0: detected capacity change from 0 to 40427 [ 38.467061][ T982] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 38.480530][ T982] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.486830][ T1093] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.487615][ T982] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.227: Failed to acquire dquot type 1 [ 38.493299][ T293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.511867][ T982] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.227: Invalid block bitmap block 0 in block_group 0 [ 38.514799][ T293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.539559][ T293] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 38.549343][ T293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.557938][ T982] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.227: Failed to acquire dquot type 1 [ 38.569110][ T293] usb 5-1: config 0 descriptor?? [ 38.582659][ T982] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.227: Failed to acquire dquot type 1 [ 38.595816][ T982] EXT4-fs (loop3): 1 orphan inode deleted [ 38.603287][ T982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.630866][ T1093] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 38.659069][ T291] syz-executor: attempt to access beyond end of device [ 38.659069][ T291] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.699044][ T1116] loop1: detected capacity change from 0 to 2048 [ 38.733716][ T1116] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.742050][ T1116] ext4 filesystem being mounted at /62/bus supports timestamps until 2038 (0x7fffffff) [ 38.775116][ T290] EXT4-fs (loop1): unmounting filesystem. [ 38.990932][ T1132] loop2: detected capacity change from 0 to 40427 [ 38.997853][ T1132] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 39.005491][ T1132] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 39.014339][ T1132] F2FS-fs (loop2): invalid crc value [ 39.020700][ T1132] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.055403][ T1132] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 39.062284][ T1132] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.085872][ T289] syz-executor: attempt to access beyond end of device [ 39.085872][ T289] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 39.099940][ T289] syz-executor: attempt to access beyond end of device [ 39.099940][ T289] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 39.116759][ T289] syz-executor: attempt to access beyond end of device [ 39.116759][ T289] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.502520][ T293] hid-led: probe of 0003:27B8:01ED.0006 failed with error -71 [ 39.511881][ T293] usb 5-1: USB disconnect, device number 4 [ 39.673064][ T8] device bridge_slave_1 left promiscuous mode [ 39.679072][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.686521][ T8] device bridge_slave_0 left promiscuous mode [ 39.692722][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.700497][ T8] device veth1_macvtap left promiscuous mode [ 39.706398][ T8] device veth0_vlan left promiscuous mode [ 40.037950][ T1145] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.077792][ T1151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.307'. [ 40.174502][ T1169] loop0: detected capacity change from 0 to 128 [ 40.215832][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.223399][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.230860][ T1154] device bridge_slave_0 entered promiscuous mode [ 40.242839][ T1178] loop4: detected capacity change from 0 to 1024 [ 40.243178][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.249521][ T1178] EXT4-fs: Ignoring removed orlov option [ 40.260741][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.268455][ T1178] EXT4-fs (loop4): Test dummy encryption mode enabled [ 40.278713][ T1178] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.287999][ T1154] device bridge_slave_1 entered promiscuous mode [ 40.317799][ T293] usb 4-1: USB disconnect, device number 5 [ 40.333344][ T292] EXT4-fs (loop4): unmounting filesystem. [ 40.339428][ T294] EXT4-fs (loop3): unmounting filesystem. [ 40.420644][ T1194] loop0: detected capacity change from 0 to 512 [ 40.427588][ T1194] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.440613][ T39] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.448943][ T1194] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.470212][ T1194] EXT4-fs (loop0): 1 truncate cleaned up [ 40.497443][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.504362][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.513201][ T1194] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.524756][ T1199] loop3: detected capacity change from 0 to 128 [ 40.554191][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.578177][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.584802][ T291] EXT4-fs (loop0): unmounting filesystem. [ 40.586086][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.620114][ T1207] loop3: detected capacity change from 0 to 1024 [ 40.626780][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.635201][ T1207] EXT4-fs: Ignoring removed orlov option [ 40.640650][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.647955][ T1207] EXT4-fs (loop3): Test dummy encryption mode enabled [ 40.649382][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.660641][ T1207] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.662202][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.682203][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.686811][ T294] EXT4-fs (loop3): unmounting filesystem. [ 40.691010][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.702437][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.722857][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.744018][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.768324][ T1216] loop4: detected capacity change from 0 to 256 [ 40.774630][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.793518][ T1214] loop3: detected capacity change from 0 to 2048 [ 40.799164][ T1154] device veth0_vlan entered promiscuous mode [ 40.806499][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.815248][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.823531][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.852664][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.862604][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.875318][ T1214] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.879981][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.884610][ T1154] device veth1_macvtap entered promiscuous mode [ 40.894073][ T39] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 40.910157][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.925057][ T39] usb 2-1: config 0 descriptor?? [ 40.939262][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.950639][ T1224] process 'syz.4.338' launched '/dev/fd/3' with NULL argv: empty string added [ 40.960593][ T294] EXT4-fs (loop3): unmounting filesystem. [ 40.964872][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 40.964887][ T28] audit: type=1400 audit(1731373524.574:227): avc: denied { execute_no_trans } for pid=1223 comm="syz.4.338" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.004190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.025662][ T28] audit: type=1400 audit(1731373524.644:228): avc: denied { mount } for pid=1154 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.043589][ T1228] loop4: detected capacity change from 0 to 128 [ 41.051238][ T1226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 41.099242][ T28] audit: type=1400 audit(1731373524.684:229): avc: denied { mounton } for pid=1154 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.105667][ T1234] loop2: detected capacity change from 0 to 512 [ 41.135666][ T28] audit: type=1400 audit(1731373524.694:230): avc: denied { write } for pid=1229 comm="syz.2.304" path="socket:[18211]" dev="sockfs" ino=18211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.147005][ T1234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.168363][ T1239] loop0: detected capacity change from 0 to 1024 [ 41.169503][ T28] audit: type=1400 audit(1731373524.694:231): avc: denied { read write } for pid=1231 comm="syz.0.350" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.197794][ T1239] EXT4-fs: Ignoring removed orlov option [ 41.203451][ T28] audit: type=1400 audit(1731373524.694:232): avc: denied { open } for pid=1231 comm="syz.0.350" path="/72/file0/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.207315][ T1239] EXT4-fs (loop0): Test dummy encryption mode enabled [ 41.238894][ T1234] EXT4-fs (loop2): 1 truncate cleaned up [ 41.247138][ T1234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 41.258263][ T28] audit: type=1400 audit(1731373524.704:233): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 41.303644][ T1239] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.313981][ T1154] EXT4-fs (loop2): unmounting filesystem. [ 41.345436][ T1247] loop4: detected capacity change from 0 to 2048 [ 41.371752][ T291] EXT4-fs (loop0): unmounting filesystem. [ 41.414050][ T1247] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.457768][ T1247] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.487268][ T1242] loop3: detected capacity change from 0 to 40427 [ 41.494126][ T1247] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 41.506620][ T1247] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.506620][ T1247] [ 41.518204][ T1247] EXT4-fs (loop4): Total free blocks count 0 [ 41.524109][ T1247] EXT4-fs (loop4): Free/Dirty block details [ 41.530627][ T1242] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.531556][ T1247] EXT4-fs (loop4): free_blocks=2415919104 [ 41.537464][ T1259] syz.2.351[1259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.542317][ T1259] syz.2.351[1259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.542321][ T1247] EXT4-fs (loop4): dirty_blocks=32 [ 41.542338][ T1247] EXT4-fs (loop4): Block reservation details [ 41.575940][ T1247] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 41.583771][ T28] audit: type=1400 audit(1731373525.204:234): avc: denied { load_policy } for pid=1258 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 41.583787][ T1261] SELinux: policydb version -1750478540 does not match my version range 15-33 [ 41.612840][ T1261] SELinux: failed to load policy [ 41.617921][ T1260] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 41.667602][ T1264] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 41.668606][ T1242] F2FS-fs (loop3): Start checkpoint disabled! [ 41.690930][ T1242] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 41.733853][ T28] audit: type=1400 audit(1731373525.354:235): avc: denied { write } for pid=1273 comm="syz.0.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.791152][ T1282] loop4: detected capacity change from 0 to 512 [ 41.826957][ T1282] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.838682][ T1282] EXT4-fs (loop4): 1 truncate cleaned up [ 41.844421][ T1282] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.890380][ T292] EXT4-fs (loop4): unmounting filesystem. [ 41.900427][ T1291] syz.3.363[1291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.900508][ T1291] syz.3.363[1291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.902558][ T39] hid-led: probe of 0003:27B8:01ED.0007 failed with error -71 [ 41.941758][ T39] usb 2-1: USB disconnect, device number 4 [ 41.954110][ T1291] SELinux: policydb version -1750478540 does not match my version range 15-33 [ 41.971827][ T1291] SELinux: failed to load policy [ 41.987568][ T1297] loop0: detected capacity change from 0 to 2048 [ 42.040860][ T1297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.056172][ T1297] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.072855][ T1297] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 42.085197][ T1297] EXT4-fs (loop0): This should not happen!! Data will be lost [ 42.085197][ T1297] [ 42.095357][ T1297] EXT4-fs (loop0): Total free blocks count 0 [ 42.102953][ T1297] EXT4-fs (loop0): Free/Dirty block details [ 42.109003][ T1297] EXT4-fs (loop0): free_blocks=2415919104 [ 42.115286][ T1297] EXT4-fs (loop0): dirty_blocks=32 [ 42.120304][ T1297] EXT4-fs (loop0): Block reservation details [ 42.127089][ T1297] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 42.137058][ T1315] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 42.209658][ T1324] loop3: detected capacity change from 0 to 512 [ 42.216840][ T1324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.233754][ T1324] EXT4-fs (loop3): 1 truncate cleaned up [ 42.239664][ T1324] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.269938][ T294] EXT4-fs (loop3): unmounting filesystem. [ 42.351781][ T1339] loop0: detected capacity change from 0 to 128 [ 42.434554][ T1347] loop3: detected capacity change from 0 to 2048 [ 42.483025][ T1347] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.510164][ T1347] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.537714][ T1347] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 42.550029][ T1347] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.550029][ T1347] [ 42.559993][ T1347] EXT4-fs (loop3): Total free blocks count 0 [ 42.566071][ T1347] EXT4-fs (loop3): Free/Dirty block details [ 42.571903][ T1347] EXT4-fs (loop3): free_blocks=2415919104 [ 42.578065][ T1347] EXT4-fs (loop3): dirty_blocks=32 [ 42.583192][ T1347] EXT4-fs (loop3): Block reservation details [ 42.589074][ T1347] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 42.595784][ T1359] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 42.922700][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.933161][ T1350] loop4: detected capacity change from 0 to 131072 [ 42.940324][ T1350] F2FS-fs (loop4): Test dummy encryption mode enabled [ 42.948100][ T1350] F2FS-fs (loop4): invalid crc value [ 42.954797][ T1350] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.990134][ T1350] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.008855][ T1350] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 43.162524][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 43.282536][ T6] usb 1-1: config 0 has no interfaces? [ 43.310928][ T1371] loop1: detected capacity change from 0 to 512 [ 43.326677][ T1368] loop2: detected capacity change from 0 to 2048 [ 43.328792][ T314] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 43.343050][ T1371] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.357615][ T314] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 43.378951][ T1371] EXT4-fs (loop1): 1 truncate cleaned up [ 43.384839][ T1375] loop3: detected capacity change from 0 to 4096 [ 43.384900][ T1371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.401995][ T1368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.423437][ T1368] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.427737][ T1375] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.442574][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=08ad, bcdDevice=45.03 [ 43.452458][ T1368] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 43.462618][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.477871][ T290] EXT4-fs (loop1): unmounting filesystem. [ 43.483836][ T1368] EXT4-fs (loop2): This should not happen!! Data will be lost [ 43.483836][ T1368] [ 43.493705][ T1368] EXT4-fs (loop2): Total free blocks count 0 [ 43.499567][ T1368] EXT4-fs (loop2): Free/Dirty block details [ 43.505386][ T1368] EXT4-fs (loop2): free_blocks=2415919104 [ 43.511067][ T1368] EXT4-fs (loop2): dirty_blocks=32 [ 43.512432][ T6] usb 1-1: Product: syz [ 43.516375][ T1368] EXT4-fs (loop2): Block reservation details [ 43.525987][ T1368] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 43.530330][ T6] usb 1-1: Manufacturer: syz [ 43.537148][ T1380] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 43.562256][ T294] EXT4-fs (loop3): unmounting filesystem. [ 43.568339][ T6] usb 1-1: SerialNumber: syz [ 43.578330][ T6] usb 1-1: config 0 descriptor?? [ 43.622834][ T28] audit: type=1400 audit(1731373527.244:236): avc: denied { nlmsg_write } for pid=1383 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 43.763029][ T1372] loop4: detected capacity change from 0 to 40427 [ 43.789331][ T1372] F2FS-fs (loop4): invalid crc value [ 43.823546][ T1372] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.836360][ T1382] loop1: detected capacity change from 0 to 40427 [ 43.854488][ T6] usb 1-1: USB disconnect, device number 5 [ 43.869950][ T1382] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 43.887750][ T1382] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 43.896346][ T1372] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.925301][ T1391] f2fs_ckpt-7:4: attempt to access beyond end of device [ 43.925301][ T1391] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.940287][ T1382] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.972175][ T1388] loop3: detected capacity change from 0 to 40427 [ 43.979170][ T1388] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 43.992519][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 43.994703][ T1388] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 44.008850][ T1388] F2FS-fs (loop3): invalid crc value [ 44.029817][ T1382] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.036996][ T1382] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.044740][ T1388] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.145428][ T1388] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 44.153057][ T1388] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.193732][ T1388] syz.3.400: attempt to access beyond end of device [ 44.193732][ T1388] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.261578][ T294] syz-executor: attempt to access beyond end of device [ 44.261578][ T294] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 44.382521][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.394030][ T1407] loop4: detected capacity change from 0 to 40427 [ 44.397106][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.412581][ T1407] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 44.415789][ T24] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 44.431136][ T1407] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 44.453182][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.480482][ T24] usb 3-1: config 0 descriptor?? [ 44.490288][ T1407] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.577949][ T1407] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 44.589813][ T1407] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.609990][ T1407] F2FS-fs (loop4): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 44.630635][ T292] syz-executor: attempt to access beyond end of device [ 44.630635][ T292] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.875467][ T1436] loop0: detected capacity change from 0 to 40427 [ 44.883306][ T1436] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 44.891043][ T1436] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.921827][ T1436] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.980267][ T1436] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 44.983452][ T1471] syz.4.431[1471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.987185][ T1471] syz.4.431[1471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.994989][ T1436] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 45.080274][ T1479] loop3: detected capacity change from 0 to 2048 [ 45.092404][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 45.245694][ T1491] loop4: detected capacity change from 0 to 1024 [ 45.269622][ T1491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.299901][ T292] EXT4-fs (loop4): unmounting filesystem. [ 45.332463][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 45.382579][ T24] hid-led: probe of 0003:27B8:01ED.0009 failed with error -71 [ 45.391084][ T24] usb 3-1: USB disconnect, device number 4 [ 45.453652][ T6] usb 2-1: config 0 has no interfaces? [ 45.496142][ T1513] netlink: 'syz.0.449': attribute type 9 has an invalid length. [ 45.612622][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=08ad, bcdDevice=45.03 [ 45.621572][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.634472][ T6] usb 2-1: Product: syz [ 45.643539][ T6] usb 2-1: Manufacturer: syz [ 45.647970][ T6] usb 2-1: SerialNumber: syz [ 45.656995][ T6] usb 2-1: config 0 descriptor?? [ 45.858866][ T1501] loop4: detected capacity change from 0 to 131072 [ 45.865869][ T1501] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 45.872734][ T1501] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 45.881296][ T1501] F2FS-fs (loop4): invalid crc value [ 45.888267][ T1501] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.930420][ T6] usb 2-1: USB disconnect, device number 5 [ 45.961791][ T1533] loop3: detected capacity change from 0 to 1024 [ 45.962099][ T1501] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 45.981740][ T1501] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 46.004538][ T1533] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 46.013115][ T1501] 9pnet_virtio: no channels available for device syz [ 46.026192][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 46.026209][ T28] audit: type=1400 audit(1731373529.634:284): avc: denied { read } for pid=1500 comm="syz.4.444" name="file1" dev="loop4" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 46.076805][ T1539] loop0: detected capacity change from 0 to 1024 [ 46.083356][ T1539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.093181][ T294] EXT4-fs (loop3): unmounting filesystem. [ 46.120132][ T1539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 46.132957][ T1539] System zones: 0-1, 3-12 [ 46.137708][ T1539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.168042][ T1539] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 16: comm syz.0.458: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 46.211272][ T291] EXT4-fs (loop0): unmounting filesystem. [ 46.255862][ T28] audit: type=1400 audit(1731373529.874:285): avc: denied { read } for pid=1551 comm="syz.0.462" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.299166][ T28] audit: type=1400 audit(1731373529.874:286): avc: denied { open } for pid=1551 comm="syz.0.462" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.340282][ T28] audit: type=1400 audit(1731373529.894:287): avc: denied { ioctl } for pid=1551 comm="syz.0.462" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.380527][ T1556] netlink: 104 bytes leftover after parsing attributes in process `syz.2.466'. [ 46.382494][ T28] audit: type=1400 audit(1731373529.994:288): avc: denied { nlmsg_read } for pid=1555 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.482442][ T28] audit: type=1400 audit(1731373530.084:289): avc: denied { nlmsg_write } for pid=1566 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 46.555102][ T1575] loop3: detected capacity change from 0 to 1024 [ 46.582830][ T1575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.642603][ T1575] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 46.671396][ T1575] System zones: 0-1, 3-12 [ 46.676448][ T1575] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.723225][ T1575] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #2: block 16: comm syz.3.474: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 46.815977][ T294] EXT4-fs (loop3): unmounting filesystem. [ 46.903415][ T28] audit: type=1400 audit(1731373530.524:290): avc: denied { map } for pid=1614 comm="syz.1.492" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.057511][ T1627] loop0: detected capacity change from 0 to 256 [ 47.075194][ T1627] exfat: Deprecated parameter 'namecase' [ 47.080761][ T1627] exfat: Deprecated parameter 'utf8' [ 47.100818][ T1633] loop1: detected capacity change from 0 to 1024 [ 47.112304][ T1635] loop3: detected capacity change from 0 to 256 [ 47.117024][ T1633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.129177][ T1635] exfat: Deprecated parameter 'utf8' [ 47.134755][ T1627] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 47.135283][ T1635] exfat: Deprecated parameter 'utf8' [ 47.157894][ T1635] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 47.174105][ T28] audit: type=1400 audit(1731373530.794:291): avc: denied { write } for pid=1626 comm="syz.0.507" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.195674][ T6] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 47.203158][ T1633] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 47.231543][ T1633] System zones: 0-1, 3-12 [ 47.267495][ T1633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.282479][ T28] audit: type=1400 audit(1731373530.834:292): avc: denied { add_name } for pid=1626 comm="syz.0.507" name="blkio.bfq.time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.304752][ T28] audit: type=1400 audit(1731373530.834:293): avc: denied { associate } for pid=1626 comm="syz.0.507" name="blkio.bfq.time_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.354042][ T1633] EXT4-fs error (device loop1): ext4_find_dest_de:2113: inode #2: block 16: comm syz.1.498: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 47.382916][ T1568] loop2: detected capacity change from 0 to 131072 [ 47.391923][ T1568] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 47.424507][ T1568] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 47.438882][ T1568] F2FS-fs (loop2): invalid crc value [ 47.451765][ T290] EXT4-fs (loop1): unmounting filesystem. [ 47.453492][ T1568] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.463510][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 47.565687][ T1568] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 47.569547][ T1671] loop1: detected capacity change from 0 to 256 [ 47.574644][ T1568] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 47.589636][ T1671] exfat: Deprecated parameter 'utf8' [ 47.591563][ T6] usb 5-1: config 0 has no interfaces? [ 47.594895][ T1671] exfat: Deprecated parameter 'utf8' [ 47.621611][ T1568] 9pnet_virtio: no channels available for device syz [ 47.640348][ T1671] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 47.772499][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=08ad, bcdDevice=45.03 [ 47.781599][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.789677][ T6] usb 5-1: Product: syz [ 47.794102][ T6] usb 5-1: Manufacturer: syz [ 47.798518][ T6] usb 5-1: SerialNumber: syz [ 47.816025][ T6] usb 5-1: config 0 descriptor?? [ 47.873052][ T314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.889179][ T1691] loop2: detected capacity change from 0 to 1024 [ 47.896138][ T1691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.935005][ T1691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a003c018, mo2=0002] [ 47.949115][ T1691] System zones: 0-1, 3-12 [ 47.954073][ T1691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.990161][ T1691] EXT4-fs error (device loop2): ext4_find_dest_de:2113: inode #2: block 16: comm syz.2.519: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 48.026367][ T1154] EXT4-fs (loop2): unmounting filesystem. [ 48.061996][ T39] usb 5-1: USB disconnect, device number 5 [ 48.232527][ T314] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 48.243283][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.254006][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.263518][ T314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 48.332509][ T745] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 48.352559][ T314] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 48.361530][ T314] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 48.369497][ T314] usb 4-1: Manufacturer: syz [ 48.374799][ T314] usb 4-1: config 0 descriptor?? [ 48.573594][ T1731] overlayfs: invalid origin (000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 48.592556][ T745] usb 3-1: Using ep0 maxpacket: 16 [ 48.612981][ T1737] loop0: detected capacity change from 0 to 256 [ 48.687357][ T1749] loop0: detected capacity change from 0 to 512 [ 48.699378][ T1749] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.711177][ T1749] EXT4-fs (loop0): 1 truncate cleaned up [ 48.718376][ T1749] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.729988][ T1749] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 7 (only 1 groups) [ 48.745739][ T291] EXT4-fs (loop0): unmounting filesystem. [ 48.853322][ T314] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 48.860360][ T314] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 48.869157][ T314] appleir 0003:05AC:8243.000A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 48.912516][ T745] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 48.921449][ T745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.929518][ T745] usb 3-1: Product: syz [ 48.933542][ T745] usb 3-1: Manufacturer: syz [ 48.937925][ T745] usb 3-1: SerialNumber: syz [ 48.942954][ T745] r8152-cfgselector 3-1: config 0 descriptor?? [ 49.123301][ T293] usb 4-1: USB disconnect, device number 6 [ 49.422490][ T745] r8152-cfgselector 3-1: Unknown version 0x0000 [ 49.428697][ T745] r8152-cfgselector 3-1: bad CDC descriptors [ 49.462687][ T745] r8152-cfgselector 3-1: Unknown version 0x0000 [ 49.469451][ T745] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 49.673307][ T1767] loop3: detected capacity change from 0 to 2048 [ 49.689071][ T1767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.716047][ T1767] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.730838][ T1767] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 49.743573][ T1767] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.743573][ T1767] [ 49.753109][ T1767] EXT4-fs (loop3): Total free blocks count 0 [ 49.758984][ T1767] EXT4-fs (loop3): Free/Dirty block details [ 49.760170][ T1775] loop4: detected capacity change from 0 to 2048 [ 49.765157][ T1767] EXT4-fs (loop3): free_blocks=2415919104 [ 49.776682][ T1767] EXT4-fs (loop3): dirty_blocks=48 [ 49.781754][ T1767] EXT4-fs (loop3): Block reservation details [ 49.787741][ T1767] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 49.801344][ T325] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 49.815274][ T1775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.845056][ T1775] EXT4-fs: Ignoring removed orlov option [ 49.851024][ T1775] EXT4-fs (loop4): can't enable nombcache during remount [ 49.868352][ T292] EXT4-fs (loop4): unmounting filesystem. [ 49.932497][ T592] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 50.010278][ T1796] loop2: detected capacity change from 0 to 2048 [ 50.023706][ T1796] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.075725][ T1154] EXT4-fs (loop2): unmounting filesystem. [ 50.127657][ T1806] loop4: detected capacity change from 0 to 2048 [ 50.181292][ T1806] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.197157][ T1806] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 50.209499][ T1806] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.209499][ T1806] [ 50.220291][ T1806] EXT4-fs (loop4): Total free blocks count 0 [ 50.240146][ T1806] EXT4-fs (loop4): Free/Dirty block details [ 50.246327][ T1806] EXT4-fs (loop4): free_blocks=2415919104 [ 50.251964][ T1806] EXT4-fs (loop4): dirty_blocks=48 [ 50.257211][ T1806] EXT4-fs (loop4): Block reservation details [ 50.269067][ T1806] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 50.287124][ T325] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.299594][ T325] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.299594][ T325] [ 50.315085][ T592] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 50.342427][ T592] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.350578][ T1833] loop4: detected capacity change from 0 to 1024 [ 50.355586][ T592] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 50.372259][ T1835] loop2: detected capacity change from 0 to 256 [ 50.379274][ T592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.398193][ T1835] FAT-fs (loop2): Directory bread(block 64) failed [ 50.415628][ T1835] FAT-fs (loop2): Directory bread(block 65) failed [ 50.422086][ T1835] FAT-fs (loop2): Directory bread(block 66) failed [ 50.428770][ T1835] FAT-fs (loop2): Directory bread(block 67) failed [ 50.435335][ T1835] FAT-fs (loop2): Directory bread(block 68) failed [ 50.441763][ T1835] FAT-fs (loop2): Directory bread(block 69) failed [ 50.448309][ T1835] FAT-fs (loop2): Directory bread(block 70) failed [ 50.455153][ T1835] FAT-fs (loop2): Directory bread(block 71) failed [ 50.461578][ T1835] FAT-fs (loop2): Directory bread(block 72) failed [ 50.468030][ T1835] FAT-fs (loop2): Directory bread(block 73) failed [ 50.573898][ T8] kworker/u4:0: attempt to access beyond end of device [ 50.573898][ T8] loop2: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 50.620114][ T1859] loop2: detected capacity change from 0 to 256 [ 50.635525][ T1859] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 50.650473][ T1863] loop3: detected capacity change from 0 to 1024 [ 50.662857][ T1859] exFAT-fs (loop2): error, invalid size(size(4096) > aligned(9223372036854777344) [ 50.662857][ T1859] [ 50.674698][ T1859] exFAT-fs (loop2): Filesystem has been set read-only [ 50.701655][ T1859] exFAT-fs (loop2): error, invalid size(size(4096) > aligned(9223372036854777344) [ 50.701655][ T1859] [ 50.712531][ T592] usb 2-1: string descriptor 0 read error: -71 [ 50.729744][ T592] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 50.745295][ T592] usb 2-1: USB disconnect, device number 6 [ 50.844413][ T1886] loop4: detected capacity change from 0 to 256 [ 50.862907][ T1886] FAT-fs (loop4): Directory bread(block 64) failed [ 50.869276][ T1886] FAT-fs (loop4): Directory bread(block 65) failed [ 50.880967][ T1886] FAT-fs (loop4): Directory bread(block 66) failed [ 50.887433][ T1886] FAT-fs (loop4): Directory bread(block 67) failed [ 50.894354][ T1886] FAT-fs (loop4): Directory bread(block 68) failed [ 50.900733][ T1886] FAT-fs (loop4): Directory bread(block 69) failed [ 50.907225][ T1886] FAT-fs (loop4): Directory bread(block 70) failed [ 50.913611][ T1886] FAT-fs (loop4): Directory bread(block 71) failed [ 50.920270][ T1886] FAT-fs (loop4): Directory bread(block 72) failed [ 50.929497][ T1886] FAT-fs (loop4): Directory bread(block 73) failed [ 50.949175][ T1892] loop0: detected capacity change from 0 to 1024 [ 50.992788][ T8] kworker/u4:0: attempt to access beyond end of device [ 50.992788][ T8] loop4: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 51.051248][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 51.051265][ T28] audit: type=1400 audit(1731373534.664:316): avc: denied { remount } for pid=1900 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 51.092039][ T28] audit: type=1400 audit(1731373534.704:317): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 51.208748][ T1920] loop0: detected capacity change from 0 to 256 [ 51.225784][ T1922] loop4: detected capacity change from 0 to 2048 [ 51.236696][ T1920] FAT-fs (loop0): Directory bread(block 64) failed [ 51.246055][ T1920] FAT-fs (loop0): Directory bread(block 65) failed [ 51.252673][ T1920] FAT-fs (loop0): Directory bread(block 66) failed [ 51.259166][ T1920] FAT-fs (loop0): Directory bread(block 67) failed [ 51.265803][ T1920] FAT-fs (loop0): Directory bread(block 68) failed [ 51.272456][ T1920] FAT-fs (loop0): Directory bread(block 69) failed [ 51.279011][ T1920] FAT-fs (loop0): Directory bread(block 70) failed [ 51.286182][ T1920] FAT-fs (loop0): Directory bread(block 71) failed [ 51.293763][ T1920] FAT-fs (loop0): Directory bread(block 72) failed [ 51.312960][ T1920] FAT-fs (loop0): Directory bread(block 73) failed [ 51.335619][ T1925] loop4: detected capacity change from 0 to 2048 [ 51.358588][ T1925] ext4 filesystem being mounted at /129/bus supports timestamps until 2038 (0x7fffffff) [ 51.375481][ T312] kworker/u4:3: attempt to access beyond end of device [ 51.375481][ T312] loop0: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 51.384436][ T1925] fs-verity: sha512 using implementation "sha512-avx2" [ 51.540449][ T28] audit: type=1400 audit(1731373535.154:318): avc: denied { relabelfrom } for pid=1950 comm="syz.1.633" name="" dev="pipefs" ino=22719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 51.547023][ T1951] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 51.571407][ T28] audit: type=1400 audit(1731373535.184:319): avc: denied { relabelto } for pid=1950 comm="syz.1.633" name="" dev="pipefs" ino=22719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:" [ 51.607408][ T1956] xt_hashlimit: size too large, truncated to 1048576 [ 51.676060][ T1965] loop3: detected capacity change from 0 to 2048 [ 51.752240][ T1967] loop1: detected capacity change from 0 to 4096 [ 51.788536][ T1965] ext4 filesystem being mounted at /144/bus supports timestamps until 2038 (0x7fffffff) [ 52.412424][ T745] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 52.792459][ T745] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 52.806589][ T745] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.812501][ T301] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 52.819874][ T745] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 52.835790][ T745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.858969][ T28] audit: type=1400 audit(1731373536.474:320): avc: denied { name_bind } for pid=1997 comm="syz.4.652" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 52.894747][ T2000] loop1: detected capacity change from 0 to 2048 [ 52.904916][ T2000] ext4 filesystem being mounted at /122/bus supports timestamps until 2038 (0x7fffffff) [ 52.935823][ T2004] xt_hashlimit: size too large, truncated to 1048576 [ 53.115625][ T2007] loop1: detected capacity change from 0 to 1024 [ 53.132532][ T745] usb 1-1: string descriptor 0 read error: -71 [ 53.139060][ T745] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 53.148571][ T745] usb 1-1: USB disconnect, device number 6 [ 53.192503][ T301] usb 4-1: config index 0 descriptor too short (expected 9221, got 92) [ 53.200636][ T301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.211462][ T301] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 6 [ 53.372522][ T301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.381467][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.389383][ T301] usb 4-1: Product: syz [ 53.393450][ T301] usb 4-1: Manufacturer: syz [ 53.397787][ T301] usb 4-1: SerialNumber: syz [ 53.402974][ T301] usb 4-1: config 0 descriptor?? [ 53.436764][ T2017] loop2: detected capacity change from 0 to 512 [ 53.443617][ T2017] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.453367][ T314] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 53.455126][ T2017] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.660: corrupted in-inode xattr [ 53.472948][ T2017] EXT4-fs (loop2): 1 truncate cleaned up [ 53.484018][ T28] audit: type=1400 audit(1731373537.104:321): avc: denied { append } for pid=2016 comm="syz.2.660" name="loop7" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.702512][ T2022] loop4: detected capacity change from 0 to 16 [ 53.709566][ T2022] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 53.807957][ T2026] loop4: detected capacity change from 0 to 256 [ 53.814247][ T314] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 53.814733][ T2026] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.836285][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.843070][ T2026] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.866884][ T314] usb 2-1: config 0 descriptor?? [ 53.909713][ T301] usb 4-1: USB disconnect, device number 7 [ 53.910488][ T2032] xt_hashlimit: size too large, truncated to 1048576 [ 54.026371][ T2035] loop4: detected capacity change from 0 to 1024 [ 54.393957][ T314] waltop 0003:172F:0501.000B: item fetching failed at offset 0/3 [ 54.403717][ T314] waltop: probe of 0003:172F:0501.000B failed with error -22 [ 54.599402][ T293] usb 2-1: USB disconnect, device number 7 [ 54.636584][ T2045] loop3: detected capacity change from 0 to 512 [ 54.648806][ T2045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.660567][ T2045] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.673: corrupted in-inode xattr [ 54.672782][ T2045] EXT4-fs (loop3): 1 truncate cleaned up [ 54.691762][ T28] audit: type=1400 audit(1731373538.304:322): avc: denied { getopt } for pid=2051 comm="syz.4.676" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.717499][ T2052] loop4: detected capacity change from 0 to 256 [ 54.719675][ T2054] loop3: detected capacity change from 0 to 16 [ 54.734153][ T2054] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 54.736793][ T2052] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 54.762215][ T28] audit: type=1400 audit(1731373538.374:323): avc: denied { setattr } for pid=2051 comm="syz.4.676" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.823496][ T2058] SELinux: Context ì is not valid (left unmapped). [ 54.893318][ T2062] loop3: detected capacity change from 0 to 256 [ 54.899862][ T2062] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.912336][ T2062] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.040921][ T28] audit: type=1400 audit(1731373538.654:324): avc: denied { mount } for pid=2063 comm="syz.3.681" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 55.052430][ T314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 55.062315][ T28] audit: type=1400 audit(1731373538.664:325): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 55.133277][ T2066] SELinux: Context Ü is not valid (left unmapped). [ 55.402479][ T301] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 55.422513][ T314] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 55.432807][ T314] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 55.446189][ T314] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 55.455332][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.491233][ T2080] loop0: detected capacity change from 0 to 256 [ 55.502134][ T2080] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 55.523603][ T2078] loop3: detected capacity change from 0 to 40424 [ 55.538286][ T2078] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 55.545726][ T2078] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 55.554681][ T2078] F2FS-fs (loop3): invalid crc value [ 55.561069][ T2078] F2FS-fs (loop3): Mismatch valid blocks 931 vs. 256 [ 55.568273][ T2078] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 55.630599][ T293] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 55.638374][ T293] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 55.646382][ T293] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x3 [ 55.656447][ T293] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 55.742517][ T314] usb 5-1: string descriptor 0 read error: -71 [ 55.749020][ T314] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 55.758894][ T314] usb 5-1: USB disconnect, device number 6 [ 55.764720][ T301] usb 2-1: config index 0 descriptor too short (expected 9221, got 92) [ 55.774006][ T301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.784090][ T301] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 6 [ 55.807454][ T2102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2102 comm=syz.2.697 [ 55.952667][ T301] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.961601][ T592] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 55.968859][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.976896][ T301] usb 2-1: Product: syz [ 55.980877][ T301] usb 2-1: Manufacturer: syz [ 55.985422][ T301] usb 2-1: SerialNumber: syz [ 55.990404][ T301] usb 2-1: config 0 descriptor?? [ 56.322500][ T592] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 56.331584][ T592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.340213][ T592] usb 1-1: config 0 descriptor?? [ 56.493027][ T301] usb 2-1: USB disconnect, device number 8 [ 56.694511][ T2114] loop2: detected capacity change from 0 to 256 [ 56.704298][ T2114] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 56.827091][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 56.827106][ T28] audit: type=1400 audit(1731373540.444:327): avc: denied { remount } for pid=2125 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 56.864300][ T592] waltop 0003:172F:0501.000D: item fetching failed at offset 0/3 [ 56.872493][ T592] waltop: probe of 0003:172F:0501.000D failed with error -22 [ 56.913068][ T2128] syz.2.709[2128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.913169][ T2128] syz.2.709[2128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.952443][ T314] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 57.044248][ T2137] loop1: detected capacity change from 0 to 256 [ 57.053322][ T2137] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 57.067113][ T592] usb 1-1: USB disconnect, device number 7 [ 57.202434][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 57.211224][ T2141] loop1: detected capacity change from 0 to 40427 [ 57.218183][ T2141] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 57.226479][ T2141] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 57.236765][ T2141] F2FS-fs (loop1): Found nat_bits in checkpoint [ 57.272251][ T2141] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 57.279269][ T2141] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 57.295974][ T290] syz-executor: attempt to access beyond end of device [ 57.295974][ T290] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 57.332530][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.343353][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.353475][ T314] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 57.362329][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.371245][ T314] usb 5-1: config 0 descriptor?? [ 57.463001][ T28] audit: type=1400 audit(1731373541.084:328): avc: denied { read } for pid=2156 comm="syz.1.721" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.484297][ T28] audit: type=1400 audit(1731373541.084:329): avc: denied { open } for pid=2156 comm="syz.1.721" path="net:[4026532299]" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 57.602455][ T39] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 57.634470][ T39] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 57.664881][ T39] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 57.692454][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.692466][ T19] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 57.767525][ T2161] loop1: detected capacity change from 0 to 40427 [ 57.775357][ T2161] F2FS-fs (loop1): invalid crc value [ 57.790781][ T2161] F2FS-fs (loop1): Found nat_bits in checkpoint [ 57.839761][ T2161] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 57.843711][ T314] zydacron 0003:13EC:0006.000E: unknown main item tag 0x0 [ 57.860218][ T28] audit: type=1400 audit(1731373541.464:330): avc: denied { mount } for pid=2160 comm="syz.1.723" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.876063][ T2177] loop0: detected capacity change from 0 to 40427 [ 57.888161][ T314] zydacron 0003:13EC:0006.000E: unexpected long global item [ 57.896448][ T314] zydacron 0003:13EC:0006.000E: parse failed [ 57.899626][ T28] audit: type=1400 audit(1731373541.504:331): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.902912][ T314] zydacron: probe of 0003:13EC:0006.000E failed with error -22 [ 57.929055][ T2177] F2FS-fs (loop0): heap/no_heap options were deprecated [ 57.932585][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 57.941442][ T2177] F2FS-fs (loop0): invalid crc value [ 57.947942][ T2177] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.002469][ T39] usb 3-1: string descriptor 0 read error: -71 [ 58.015439][ T39] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 58.024549][ T2177] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.034483][ T39] usb 3-1: USB disconnect, device number 6 [ 58.058602][ T291] syz-executor: attempt to access beyond end of device [ 58.058602][ T291] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.073419][ T293] usb 5-1: USB disconnect, device number 7 [ 58.110088][ T2189] loop1: detected capacity change from 0 to 512 [ 58.124822][ T2189] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038 (0x7fffffff) [ 58.141915][ T2189] EXT4-fs (loop1): shut down requested (0) [ 58.149052][ T2189] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 58.212531][ T19] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 58.223332][ T19] usb 4-1: New USB device strings: Mfr=1, Product=58, SerialNumber=231 [ 58.231398][ T19] usb 4-1: Product: syz [ 58.235573][ T19] usb 4-1: Manufacturer: syz [ 58.239980][ T19] usb 4-1: SerialNumber: syz [ 58.245029][ T19] usb 4-1: config 0 descriptor?? [ 58.287170][ T19] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 58.294815][ T19] usb 4-1: Detected FT232H [ 58.619074][ T2205] loop0: detected capacity change from 0 to 512 [ 58.627571][ T2205] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.737: casefold flag without casefold feature [ 58.640285][ T2205] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.737: couldn't read orphan inode 15 (err -117) [ 58.712513][ T19] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 58.744767][ T19] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 58.761994][ T19] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 58.782023][ T19] usb 4-1: USB disconnect, device number 8 [ 58.793697][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 58.813365][ T19] ftdi_sio 4-1:0.0: device disconnected [ 58.872431][ T745] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 59.068809][ T2221] loop0: detected capacity change from 0 to 40427 [ 59.102448][ T2221] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 59.110008][ T2221] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 59.130228][ T2221] F2FS-fs (loop0): invalid crc value [ 59.151359][ T2221] F2FS-fs (loop0): Found nat_bits in checkpoint [ 59.232650][ T2221] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 59.239856][ T2221] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 59.253932][ T2221] syz.0.743: attempt to access beyond end of device [ 59.253932][ T2221] loop0: rw=34817, sector=77824, nr_sectors = 976 limit=40427 [ 59.255482][ T745] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 59.281226][ T745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.282934][ T291] syz-executor: attempt to access beyond end of device [ 59.282934][ T291] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.303448][ T745] usb 5-1: config 0 descriptor?? [ 59.405184][ T2234] loop1: detected capacity change from 0 to 40427 [ 59.412115][ T2234] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 59.423798][ T2234] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 59.436511][ T2234] F2FS-fs (loop1): invalid crc value [ 59.443670][ T2234] F2FS-fs (loop1): Found nat_bits in checkpoint [ 59.472511][ T19] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 59.502146][ T2234] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 59.509202][ T2234] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 59.536151][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 59.549011][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 59.552863][ T2263] netlink: 'syz.0.760': attribute type 34 has an invalid length. [ 59.617998][ T2270] syz.0.764[2270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.618081][ T2270] syz.0.764[2270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.725209][ T2283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.768'. [ 59.823907][ T745] waltop 0003:172F:0501.000F: item fetching failed at offset 0/3 [ 59.831639][ T745] waltop: probe of 0003:172F:0501.000F failed with error -22 [ 59.832822][ T19] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 59.853952][ T19] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.866991][ T19] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 59.875914][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.037892][ T745] usb 5-1: USB disconnect, device number 8 [ 60.043679][ T39] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 60.062577][ T293] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 60.162572][ T19] usb 4-1: string descriptor 0 read error: -71 [ 60.169379][ T19] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 60.178949][ T19] usb 4-1: USB disconnect, device number 9 [ 60.282480][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 60.322457][ T293] usb 2-1: Using ep0 maxpacket: 32 [ 60.442550][ T39] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 60.451147][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.460999][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.469774][ T293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.480500][ T293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.490146][ T293] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 60.498982][ T293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.507831][ T293] usb 2-1: config 0 descriptor?? [ 60.614799][ T28] audit: type=1400 audit(1731373544.234:332): avc: denied { ioctl } for pid=2298 comm="syz.0.776" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.614853][ T2299] binder: 2298:2299 ioctl c018620b 20000140 returned -14 [ 60.647015][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.656289][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.671824][ T39] usb 3-1: Product: syz [ 60.676627][ T39] usb 3-1: Manufacturer: syz [ 60.682580][ T39] usb 3-1: SerialNumber: syz [ 60.726035][ T2306] loop4: detected capacity change from 0 to 512 [ 60.746808][ T2306] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038 (0x7fffffff) [ 60.855092][ T2321] loop4: detected capacity change from 0 to 1024 [ 60.862734][ T2321] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.881267][ T2321] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2738: inode #2: comm syz.4.785: corrupted in-inode xattr [ 60.887220][ T2326] netlink: 'syz.0.786': attribute type 4 has an invalid length. [ 60.893945][ T2321] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #2: comm syz.4.785: corrupted in-inode xattr [ 60.986204][ T293] kone 0003:1E7D:2CED.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 61.083657][ T2344] loop4: detected capacity change from 0 to 256 [ 61.093047][ T2344] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 61.112166][ T28] audit: type=1400 audit(1731373544.724:333): avc: denied { remove_name } for pid=2343 comm="syz.4.795" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.156539][ T19] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 61.162739][ T39] usb 3-1: 0:2 : does not exist [ 61.165923][ T28] audit: type=1400 audit(1731373544.784:334): avc: denied { rename } for pid=2343 comm="syz.4.795" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.212531][ T293] kone 0003:1E7D:2CED.0010: couldn't init struct kone_device [ 61.226702][ T293] kone 0003:1E7D:2CED.0010: couldn't install mouse [ 61.249461][ T293] kone: probe of 0003:1E7D:2CED.0010 failed with error -5 [ 61.273306][ T293] usb 2-1: USB disconnect, device number 9 [ 61.291152][ T28] audit: type=1400 audit(1731373544.784:335): avc: denied { rmdir } for pid=2343 comm="syz.4.795" name="file0" dev="loop4" ino=1048640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.383391][ T2349] loop0: detected capacity change from 0 to 512 [ 61.412902][ T2349] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 61.431407][ T2349] EXT4-fs (loop0): orphan cleanup on readonly fs [ 61.441209][ T2349] EXT4-fs warning (device loop0): ext4_enable_quotas:7022: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 61.462487][ T2349] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 61.481171][ T2349] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.797: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 61.501579][ T2346] loop4: detected capacity change from 0 to 40427 [ 61.513849][ T2349] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.797: couldn't read orphan inode 13 (err -117) [ 61.513904][ T2346] F2FS-fs (loop4): invalid crc value [ 61.547244][ T2346] F2FS-fs (loop4): Found nat_bits in checkpoint [ 61.572617][ T19] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 61.581494][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.590506][ T19] usb 4-1: config 0 descriptor?? [ 61.602697][ T2346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 61.615714][ T2346] syz.4.796: attempt to access beyond end of device [ 61.615714][ T2346] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.637137][ T292] syz-executor: attempt to access beyond end of device [ 61.637137][ T292] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 61.794216][ T2364] loop4: detected capacity change from 0 to 512 [ 61.807164][ T2364] EXT4-fs (loop4): invalid journal inode [ 61.822620][ T293] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 61.923863][ T2358] loop1: detected capacity change from 0 to 40427 [ 61.943789][ T2358] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.992904][ T2358] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 62.015913][ T2358] syz.1.799: attempt to access beyond end of device [ 62.015913][ T2358] loop1: rw=2049, sector=77824, nr_sectors = 968 limit=40427 [ 62.037784][ T290] syz-executor: attempt to access beyond end of device [ 62.037784][ T290] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.084645][ T2366] loop4: detected capacity change from 0 to 40427 [ 62.101566][ T2366] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 62.109247][ T2366] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 62.118824][ T19] waltop 0003:172F:0501.0011: item fetching failed at offset 0/3 [ 62.126622][ T19] waltop: probe of 0003:172F:0501.0011 failed with error -22 [ 62.137515][ T2366] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.193190][ T2366] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 62.200511][ T2366] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.223170][ T293] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.234293][ T39] usb 3-1: USB disconnect, device number 7 [ 62.240230][ T293] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.322488][ T293] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 62.326091][ T314] usb 4-1: USB disconnect, device number 10 [ 62.337174][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 62.337201][ T293] usb 1-1: SerialNumber: syz [ 62.466074][ T2394] tipc: Started in network mode [ 62.470856][ T2394] tipc: Node identity 7f000001, cluster identity 4711 [ 62.478485][ T2394] tipc: Enabled bearer , priority 10 [ 62.501669][ T2396] loop1: detected capacity change from 0 to 1024 [ 62.508621][ T2396] EXT4-fs: Ignoring removed oldalloc option [ 62.515346][ T2396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.613728][ T2387] loop2: detected capacity change from 0 to 40427 [ 62.620605][ T2387] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 62.628535][ T2387] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 62.633323][ T293] usb 1-1: 0:2 : does not exist [ 62.638866][ T2387] F2FS-fs (loop2): invalid crc value [ 62.643816][ T293] usb 1-1: USB disconnect, device number 8 [ 62.657660][ T2387] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.667566][ T424] udevd[424]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.700637][ T2408] loop1: detected capacity change from 0 to 256 [ 62.712608][ T745] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 62.720141][ T2408] exfat: Deprecated parameter 'namecase' [ 62.725736][ T2408] exfat: Deprecated parameter 'utf8' [ 62.733454][ T2387] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 62.733751][ T2408] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 62.740487][ T2387] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 62.825350][ T28] audit: type=1400 audit(1731373546.444:336): avc: denied { remount } for pid=2386 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.828852][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 62.853505][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 62.894470][ T28] audit: type=1400 audit(1731373546.514:337): avc: denied { write } for pid=2413 comm="syz.3.818" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 62.972415][ T745] usb 5-1: Using ep0 maxpacket: 32 [ 62.998723][ T2422] loop2: detected capacity change from 0 to 2048 [ 63.024108][ T2422] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038 (0x7fffffff) [ 63.042453][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 63.053291][ T2427] syz.3.823[2427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.053394][ T2427] syz.3.823[2427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.079901][ T2431] futex_wake_op: syz.3.825 tries to shift op by 144; fix this program [ 63.106604][ T745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.120621][ T745] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.131565][ T745] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 63.146646][ T745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.158477][ T745] usb 5-1: config 0 descriptor?? [ 63.177395][ T2439] loop0: detected capacity change from 0 to 128 [ 63.190520][ T2441] syz.2.830[2441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.190599][ T2441] syz.2.830[2441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.205308][ T2441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.830'. [ 63.248821][ T2445] tipc: Started in network mode [ 63.251352][ T2447] loop0: detected capacity change from 0 to 512 [ 63.253577][ T2445] tipc: Node identity ac14140f, cluster identity 4711 [ 63.253668][ T2445] tipc: New replicast peer: 255.255.255.255 [ 63.260428][ T2447] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.271501][ T2445] tipc: Enabled bearer , priority 10 [ 63.274364][ T2447] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.833: bad orphan inode 131083 [ 63.305657][ T28] audit: type=1400 audit(1731373546.924:338): avc: denied { setattr } for pid=2446 comm="syz.0.833" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.327439][ T28] audit: type=1400 audit(1731373546.924:339): avc: denied { write } for pid=2446 comm="syz.0.833" name="work" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.349659][ T28] audit: type=1400 audit(1731373546.924:340): avc: denied { add_name } for pid=2446 comm="syz.0.833" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.369991][ T28] audit: type=1400 audit(1731373546.924:341): avc: denied { remove_name } for pid=2446 comm="syz.0.833" name="#3" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 63.392452][ T28] audit: type=1400 audit(1731373546.924:342): avc: denied { rename } for pid=2446 comm="syz.0.833" name="#3" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.414456][ T28] audit: type=1400 audit(1731373546.924:343): avc: denied { unlink } for pid=2446 comm="syz.0.833" name="#3" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.436550][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.436805][ T293] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 63.448731][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.454786][ T28] audit: type=1400 audit(1731373546.924:344): avc: denied { unlink } for pid=2446 comm="syz.0.833" name="#4" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.488873][ T19] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.488890][ T28] audit: type=1400 audit(1731373546.924:345): avc: denied { link } for pid=2446 comm="syz.0.833" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.520038][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.522510][ T391] tipc: Node number set to 2130706433 [ 63.529284][ T2454] netlink: 264 bytes leftover after parsing attributes in process `syz.2.836'. [ 63.547411][ T19] usb 2-1: config 0 descriptor?? [ 63.667216][ T745] savu 0003:1E7D:2D5A.0012: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 63.692563][ T2460] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.699456][ T2460] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.707536][ T2460] device bridge_slave_0 entered promiscuous mode [ 63.716102][ T2460] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.723082][ T2460] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.730371][ T2460] device bridge_slave_1 entered promiscuous mode [ 63.742455][ T293] usb 4-1: Using ep0 maxpacket: 8 [ 63.788348][ T2460] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.795215][ T2460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.802292][ T2460] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.809113][ T2460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.833324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.840855][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.848402][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.857728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.866162][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.873025][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.880389][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.882741][ T301] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 63.901703][ T293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.902656][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.920065][ T293] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 63.920433][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.929582][ T293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.935823][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.936763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.944710][ T293] usb 4-1: config 0 descriptor?? [ 63.956932][ T314] usb 5-1: USB disconnect, device number 9 [ 63.972278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.987624][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.998320][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.007526][ T2460] device veth0_vlan entered promiscuous mode [ 64.013854][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.021348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.033829][ T19] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 64.041010][ T2460] device veth1_macvtap entered promiscuous mode [ 64.049945][ T19] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 64.062807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.071070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.081066][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.113768][ T312] device bridge_slave_1 left promiscuous mode [ 64.125704][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.133394][ T312] device bridge_slave_0 left promiscuous mode [ 64.139466][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.148012][ T312] device veth1_macvtap left promiscuous mode [ 64.159158][ T312] device veth0_vlan left promiscuous mode [ 64.187138][ T2472] loop5: detected capacity change from 0 to 128 [ 64.203616][ T424] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 64.252554][ T301] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 64.260449][ T301] usb 3-1: config 0 has no interface number 0 [ 64.268509][ T301] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.272430][ T391] tipc: Node number set to 2886997007 [ 64.280115][ T301] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.294076][ T301] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 64.303284][ T301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.315325][ T301] usb 3-1: config 0 descriptor?? [ 64.333077][ T391] usb 2-1: USB disconnect, device number 10 [ 64.415528][ T2476] loop5: detected capacity change from 0 to 40427 [ 64.426776][ T2476] F2FS-fs (loop5): Found nat_bits in checkpoint [ 64.453518][ T293] kone 0003:1E7D:2CED.0014: collection stack underflow [ 64.460240][ T293] kone 0003:1E7D:2CED.0014: item 0 4 0 12 parsing failed [ 64.467354][ T293] kone 0003:1E7D:2CED.0014: parse failed [ 64.472829][ T2476] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 64.480278][ T293] kone: probe of 0003:1E7D:2CED.0014 failed with error -22 [ 64.498183][ T2476] syz.5.845: attempt to access beyond end of device [ 64.498183][ T2476] loop5: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 64.557159][ T2460] syz-executor: attempt to access beyond end of device [ 64.557159][ T2460] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.557550][ T2485] mmap: syz.4.847 (2485): VmData 167477248 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 64.610263][ T2487] loop4: detected capacity change from 0 to 512 [ 64.639009][ T2487] EXT4-fs mount: 40 callbacks suppressed [ 64.639030][ T2487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.659885][ T19] usb 4-1: USB disconnect, device number 11 [ 64.667063][ T2487] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038 (0x7fffffff) [ 64.709153][ T292] EXT4-fs (loop4): unmounting filesystem. [ 64.755935][ T2502] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 64.766942][ T2502] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 64.802659][ T301] hid (null): invalid report_size 51908 [ 64.809992][ T301] uclogic 0003:5543:0522.0015: invalid report_size 51908 [ 64.816968][ T301] uclogic 0003:5543:0522.0015: item 0 2 1 7 parsing failed [ 64.824329][ T301] uclogic 0003:5543:0522.0015: parse failed [ 64.830051][ T301] uclogic: probe of 0003:5543:0522.0015 failed with error -22 [ 65.005883][ T2464] usb 3-1: USB disconnect, device number 8 [ 65.062568][ T745] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 65.142456][ T19] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 65.292463][ T293] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 65.452517][ T745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.464952][ T745] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.474867][ T745] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 65.484788][ T745] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 65.502467][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.528390][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.539876][ T19] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 65.549753][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.562480][ T293] usb 5-1: Using ep0 maxpacket: 8 [ 65.568797][ T19] usb 2-1: config 0 descriptor?? [ 65.656629][ T2521] loop3: detected capacity change from 0 to 131072 [ 65.663704][ T2521] F2FS-fs (loop3): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 65.672063][ T2521] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 65.681766][ T2521] F2FS-fs (loop3): invalid crc value [ 65.688738][ T2521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.695039][ T745] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.712496][ T293] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 65.722175][ T293] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.734954][ T745] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.744686][ T2521] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 65.751679][ T745] usb 6-1: Product: syz [ 65.751700][ T745] usb 6-1: Manufacturer: syz [ 65.751715][ T745] usb 6-1: SerialNumber: syz [ 65.765017][ T2521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 65.783188][ T2521] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=8 iblocks=0, run fsck to fix. [ 65.862476][ T19] usb 2-1: string descriptor 0 read error: -71 [ 65.943495][ T293] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.954534][ T293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.963040][ T293] usb 5-1: Product: syz [ 65.965294][ T19] usbhid 2-1:0.0: can't add hid device: -71 [ 65.969202][ T293] usb 5-1: Manufacturer: syz [ 65.976567][ T19] usbhid: probe of 2-1:0.0 failed with error -71 [ 65.982614][ T293] usb 5-1: SerialNumber: syz [ 65.985109][ T19] usb 2-1: USB disconnect, device number 11 [ 66.022503][ T2508] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 66.052526][ T2464] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 66.237291][ T2552] loop3: detected capacity change from 0 to 512 [ 66.245851][ T2508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.254538][ T2508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.257925][ T2552] EXT4-fs (loop3): 1 orphan inode deleted [ 66.267849][ T2552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.272614][ T293] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 66.277466][ T312] EXT4-fs error (device loop3): ext4_release_dquot:6810: comm kworker/u4:3: Failed to release dquot type 1 [ 66.291355][ T293] usb 5-1: USB disconnect, device number 10 [ 66.294606][ T2464] usb 3-1: Using ep0 maxpacket: 16 [ 66.305164][ T2552] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038 (0x7fffffff) [ 66.326953][ T294] EXT4-fs (loop3): unmounting filesystem. [ 66.422448][ T2464] usb 3-1: config index 0 descriptor too short (expected 10220, got 36) [ 66.430813][ T2464] usb 3-1: config 121 has too many interfaces: 213, using maximum allowed: 32 [ 66.450854][ T2572] syz.1.883[2572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.450963][ T2572] syz.1.883[2572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.452519][ T2464] usb 3-1: config 121 has an invalid descriptor of length 36, skipping remainder of the config [ 66.488731][ T2464] usb 3-1: config 121 has 0 interfaces, different from the descriptor's value: 213 [ 66.505046][ T2464] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 66.517755][ T2464] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.657199][ T2592] ================================================================== [ 66.665094][ T2592] BUG: KASAN: use-after-free in dev_map_enqueue+0x40/0x340 [ 66.672118][ T2592] Read of size 8 at addr ffff88812efe6980 by task syz.1.892/2592 [ 66.679671][ T2592] [ 66.681850][ T2592] CPU: 0 PID: 2592 Comm: syz.1.892 Not tainted 6.1.112-syzkaller-00006-g96ad4e759ff4 #0 [ 66.691388][ T2592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.701296][ T2592] Call Trace: [ 66.704408][ T2592] [ 66.707191][ T2592] dump_stack_lvl+0x151/0x1b7 [ 66.711699][ T2592] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 66.716990][ T2592] ? _printk+0xd1/0x111 [ 66.720986][ T2592] ? __virt_addr_valid+0x242/0x2f0 [ 66.725940][ T2592] print_report+0x158/0x4e0 [ 66.730273][ T2592] ? __virt_addr_valid+0x242/0x2f0 [ 66.735220][ T2592] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 66.741295][ T2592] ? dev_map_enqueue+0x40/0x340 [ 66.745982][ T2592] kasan_report+0x13c/0x170 [ 66.750322][ T2592] ? dev_map_enqueue+0x40/0x340 [ 66.755017][ T2592] __asan_report_load8_noabort+0x14/0x20 [ 66.760477][ T2592] dev_map_enqueue+0x40/0x340 [ 66.764998][ T2592] xdp_do_redirect+0x5ed/0xc60 [ 66.769594][ T2592] tun_xdp_act+0xdb/0xc00 [ 66.773756][ T2592] ? __kasan_check_write+0x14/0x20 [ 66.778707][ T2592] ? finish_task_switch+0x207/0x7b0 [ 66.783743][ T2592] ? tun_flow_update+0x560/0x560 [ 66.788517][ T2592] ? copy_page_from_iter+0x23b/0x2b0 [ 66.793641][ T2592] tun_get_user+0xb35/0x3a90 [ 66.798066][ T2592] ? release_firmware_map_entry+0xaa/0x192 [ 66.803704][ T2592] ? tun_get_user+0x7e6/0x3a90 [ 66.808305][ T2592] ? tun_do_read+0x2000/0x2000 [ 66.812986][ T2592] ? ref_tracker_alloc+0x31d/0x450 [ 66.817942][ T2592] ? futex_wait_setup+0x330/0x330 [ 66.822796][ T2592] ? avc_policy_seqno+0x1b/0x70 [ 66.827490][ T2592] ? tun_get+0xe9/0x120 [ 66.831479][ T2592] tun_chr_write_iter+0x129/0x210 [ 66.836336][ T2592] vfs_write+0xaf6/0xed0 [ 66.840415][ T2592] ? file_end_write+0x1c0/0x1c0 [ 66.845102][ T2592] ? do_futex+0x55a/0x9a0 [ 66.849272][ T2592] ? __fget_files+0x2cb/0x330 [ 66.853809][ T2592] ? __fdget_pos+0x204/0x390 [ 66.858204][ T2592] ? ksys_write+0x77/0x2c0 [ 66.862462][ T2592] ksys_write+0x199/0x2c0 [ 66.866625][ T2592] ? __ia32_sys_read+0x90/0x90 [ 66.871223][ T2592] ? fpregs_restore_userregs+0x130/0x290 [ 66.876694][ T2592] __x64_sys_write+0x7b/0x90 [ 66.881121][ T2592] x64_sys_call+0x2f/0x9a0 [ 66.885373][ T2592] do_syscall_64+0x3b/0xb0 [ 66.889625][ T2592] ? clear_bhb_loop+0x55/0xb0 [ 66.894229][ T2592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.899952][ T2592] RIP: 0033:0x7f672df7d1ff [ 66.904207][ T2592] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 66.923654][ T2592] RSP: 002b:00007f672ecad000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 66.931906][ T2592] RAX: ffffffffffffffda RBX: 00007f672e135f80 RCX: 00007f672df7d1ff [ 66.939704][ T2592] RDX: 0000000000000066 RSI: 0000000020001580 RDI: 00000000000000c8 [ 66.947529][ T2592] RBP: 00007f672dff1616 R08: 0000000000000000 R09: 0000000000000000 [ 66.955344][ T2592] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000000 [ 66.963148][ T2592] R13: 0000000000000000 R14: 00007f672e135f80 R15: 00007ffdb1e9c658 [ 66.970963][ T2592] [ 66.973814][ T2592] [ 66.975985][ T2592] Allocated by task 290: [ 66.980062][ T2592] kasan_set_track+0x4b/0x70 [ 66.984492][ T2592] kasan_save_alloc_info+0x1f/0x30 [ 66.989438][ T2592] __kasan_kmalloc+0x9c/0xb0 [ 66.993864][ T2592] __kmalloc_node+0xb4/0x1e0 [ 66.998296][ T2592] kvmalloc_node+0x221/0x640 [ 67.002749][ T2592] alloc_fdtable+0x163/0x2a0 [ 67.007144][ T2592] dup_fd+0x5f5/0x960 [ 67.010965][ T2592] copy_files+0xe6/0x200 [ 67.015041][ T2592] copy_process+0x11e9/0x3530 [ 67.019560][ T2592] kernel_clone+0x229/0x890 [ 67.023893][ T2592] __x64_sys_clone+0x231/0x280 [ 67.028501][ T2592] x64_sys_call+0x1b0/0x9a0 [ 67.032843][ T2592] do_syscall_64+0x3b/0xb0 [ 67.037089][ T2592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.042818][ T2592] [ 67.044983][ T2592] Freed by task 2234: [ 67.048803][ T2592] kasan_set_track+0x4b/0x70 [ 67.053233][ T2592] kasan_save_free_info+0x2b/0x40 [ 67.058094][ T2592] ____kasan_slab_free+0x131/0x180 [ 67.063036][ T2592] __kasan_slab_free+0x11/0x20 [ 67.067651][ T2592] __kmem_cache_free+0x218/0x3b0 [ 67.072409][ T2592] kfree+0x7a/0xf0 [ 67.075979][ T2592] kvfree+0x35/0x40 [ 67.079623][ T2592] put_files_struct+0x2a8/0x320 [ 67.084309][ T2592] exit_files+0x80/0xa0 [ 67.088304][ T2592] do_exit+0xb9e/0x2b80 [ 67.092287][ T2592] do_group_exit+0x21a/0x2d0 [ 67.096713][ T2592] get_signal+0x169d/0x1820 [ 67.101051][ T2592] arch_do_signal_or_restart+0xb0/0x16f0 [ 67.106520][ T2592] exit_to_user_mode_loop+0x74/0xa0 [ 67.111554][ T2592] exit_to_user_mode_prepare+0x5a/0xa0 [ 67.116854][ T2592] syscall_exit_to_user_mode+0x26/0x130 [ 67.122233][ T2592] do_syscall_64+0x47/0xb0 [ 67.126482][ T2592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.132216][ T2592] [ 67.134382][ T2592] Last potentially related work creation: [ 67.139939][ T2592] kasan_save_stack+0x3b/0x60 [ 67.144451][ T2592] __kasan_record_aux_stack+0xb4/0xc0 [ 67.149656][ T2592] kasan_record_aux_stack_noalloc+0xb/0x10 [ 67.155301][ T2592] kvfree_call_rcu+0x9f/0x800 [ 67.159832][ T2592] kernfs_unlink_open_file+0x327/0x3d0 [ 67.165121][ T2592] kernfs_fop_release+0x253/0x310 [ 67.169980][ T2592] __fput+0x1e5/0x870 [ 67.173789][ T2592] ____fput+0x15/0x20 [ 67.177605][ T2592] task_work_run+0x24d/0x2e0 [ 67.182037][ T2592] exit_to_user_mode_loop+0x94/0xa0 [ 67.187066][ T2592] exit_to_user_mode_prepare+0x5a/0xa0 [ 67.192364][ T2592] syscall_exit_to_user_mode+0x26/0x130 [ 67.197882][ T2592] do_syscall_64+0x47/0xb0 [ 67.202124][ T2592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.207856][ T2592] [ 67.210020][ T2592] The buggy address belongs to the object at ffff88812efe6980 [ 67.210020][ T2592] which belongs to the cache kmalloc-96 of size 96 [ 67.223735][ T2592] The buggy address is located 0 bytes inside of [ 67.223735][ T2592] 96-byte region [ffff88812efe6980, ffff88812efe69e0) [ 67.236581][ T2592] [ 67.238750][ T2592] The buggy address belongs to the physical page: [ 67.245002][ T2592] page:ffffea0004bbf980 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812efe6900 pfn:0x12efe6 [ 67.256369][ T2592] flags: 0x4000000000000200(slab|zone=1) [ 67.261851][ T2592] raw: 4000000000000200 ffffea0004bbc148 ffffea00046da908 ffff888100042900 [ 67.270271][ T2592] raw: ffff88812efe6900 0000000000200013 00000001ffffffff 0000000000000000 [ 67.278677][ T2592] page dumped because: kasan: bad access detected [ 67.284936][ T2592] page_owner tracks the page as allocated [ 67.290481][ T2592] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 39, tgid 39 (kworker/1:1), ts 23243060385, free_ts 0 [ 67.308869][ T2592] post_alloc_hook+0x213/0x220 [ 67.313457][ T2592] prep_new_page+0x1b/0x110 [ 67.317796][ T2592] get_page_from_freelist+0x2980/0x2a10 [ 67.323176][ T2592] __alloc_pages+0x234/0x610 [ 67.327720][ T2592] alloc_slab_page+0x6c/0xf0 [ 67.332140][ T2592] new_slab+0x90/0x3e0 [ 67.336043][ T2592] ___slab_alloc+0x6f9/0xb80 [ 67.340466][ T2592] __slab_alloc+0x5d/0xa0 [ 67.344635][ T2592] __kmem_cache_alloc_node+0x1af/0x250 [ 67.349926][ T2592] kmalloc_trace+0x2a/0xa0 [ 67.354178][ T2592] dst_cow_metrics_generic+0x55/0x1c0 [ 67.359389][ T2592] icmp6_dst_alloc+0x363/0x510 [ 67.363989][ T2592] ndisc_send_skb+0x28b/0xdc0 [ 67.368510][ T2592] ndisc_send_rs+0x47d/0x5f0 [ 67.372929][ T2592] addrconf_dad_completed+0x8c4/0xdb0 [ 67.378302][ T2592] addrconf_dad_work+0xd95/0x16b0 [ 67.383160][ T2592] page_owner free stack trace missing [ 67.388365][ T2592] [ 67.390528][ T2592] Memory state around the buggy address: [ 67.396004][ T2592] ffff88812efe6880: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 67.403900][ T2592] ffff88812efe6900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 67.411809][ T2592] >ffff88812efe6980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 67.419692][ T2592] ^ [ 67.423602][ T2592] ffff88812efe6a00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 67.431499][ T2592] ffff88812efe6a80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 67.439524][ T2592] ================================================================== [ 67.447498][ T2592] Disabling lock debugging due to kernel taint [ 67.453496][ T2592] general protection fault, probably for non-canonical address 0xdffffc0000000044: 0000 [#1] PREEMPT SMP KASAN [ 67.464948][ T2592] KASAN: null-ptr-deref in range [0x0000000000000220-0x0000000000000227] [ 67.473191][ T2592] CPU: 0 PID: 2592 Comm: syz.1.892 Tainted: G B 6.1.112-syzkaller-00006-g96ad4e759ff4 #0 [ 67.484215][ T2592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.494108][ T2592] RIP: 0010:dev_map_enqueue+0x91/0x340 [ 67.499401][ T2592] Code: d0 00 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4f 65 25 00 bb 20 02 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 30 65 25 00 48 83 3b 00 0f 84 eb [ 67.518843][ T2592] RSP: 0018:ffffc9000d47f7a0 EFLAGS: 00010206 [ 67.524745][ T2592] RAX: 0000000000000044 RBX: 0000000000000220 RCX: ffffffff8197a881 [ 67.532556][ T2592] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88812efaaad0 [ 67.540365][ T2592] RBP: ffffc9000d47f7e0 R08: ffffffff8144a2c3 R09: fffffbfff0f6defd [ 67.548177][ T2592] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 67.555987][ T2592] R13: ffff88812efaaad0 R14: ffff88812efaaa00 R15: ffff88811a0c8000 [ 67.563802][ T2592] FS: 00007f672ecad6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 67.572577][ T2592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.578990][ T2592] CR2: 000000110c2b0324 CR3: 0000000139447000 CR4: 00000000003506b0 [ 67.586803][ T2592] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.594786][ T2592] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.602599][ T2592] Call Trace: [ 67.605722][ T2592] [ 67.608512][ T2592] ? __die_body+0x62/0xb0 [ 67.612666][ T2592] ? die_addr+0x9f/0xd0 [ 67.616659][ T2592] ? exc_general_protection+0x317/0x4c0 [ 67.622048][ T2592] ? asm_exc_general_protection+0x27/0x30 [ 67.627613][ T2592] ? add_taint+0x93/0xe0 [ 67.631763][ T2592] ? dev_map_enqueue+0x81/0x340 [ 67.636448][ T2592] ? dev_map_enqueue+0x91/0x340 [ 67.641151][ T2592] xdp_do_redirect+0x5ed/0xc60 [ 67.645743][ T2592] tun_xdp_act+0xdb/0xc00 [ 67.649903][ T2592] ? __kasan_check_write+0x14/0x20 [ 67.654846][ T2592] ? finish_task_switch+0x207/0x7b0 [ 67.659972][ T2592] ? tun_flow_update+0x560/0x560 [ 67.664743][ T2592] ? copy_page_from_iter+0x23b/0x2b0 [ 67.669872][ T2592] tun_get_user+0xb35/0x3a90 [ 67.674292][ T2592] ? release_firmware_map_entry+0xaa/0x192 [ 67.679937][ T2592] ? tun_get_user+0x7e6/0x3a90 [ 67.684532][ T2592] ? tun_do_read+0x2000/0x2000 [ 67.689135][ T2592] ? ref_tracker_alloc+0x31d/0x450 [ 67.694259][ T2592] ? futex_wait_setup+0x330/0x330 [ 67.699110][ T2592] ? avc_policy_seqno+0x1b/0x70 [ 67.703800][ T2592] ? tun_get+0xe9/0x120 [ 67.707793][ T2592] tun_chr_write_iter+0x129/0x210 [ 67.712652][ T2592] vfs_write+0xaf6/0xed0 [ 67.716735][ T2592] ? file_end_write+0x1c0/0x1c0 [ 67.721416][ T2592] ? do_futex+0x55a/0x9a0 [ 67.725584][ T2592] ? __fget_files+0x2cb/0x330 [ 67.730104][ T2592] ? __fdget_pos+0x204/0x390 [ 67.734526][ T2592] ? ksys_write+0x77/0x2c0 [ 67.738787][ T2592] ksys_write+0x199/0x2c0 [ 67.742944][ T2592] ? __ia32_sys_read+0x90/0x90 [ 67.747542][ T2592] ? fpregs_restore_userregs+0x130/0x290 [ 67.753011][ T2592] __x64_sys_write+0x7b/0x90 [ 67.757439][ T2592] x64_sys_call+0x2f/0x9a0 [ 67.761693][ T2592] do_syscall_64+0x3b/0xb0 [ 67.765945][ T2592] ? clear_bhb_loop+0x55/0xb0 [ 67.770456][ T2592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.776184][ T2592] RIP: 0033:0x7f672df7d1ff [ 67.780437][ T2592] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 67.799881][ T2592] RSP: 002b:00007f672ecad000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 67.808128][ T2592] RAX: ffffffffffffffda RBX: 00007f672e135f80 RCX: 00007f672df7d1ff [ 67.815933][ T2592] RDX: 0000000000000066 RSI: 0000000020001580 RDI: 00000000000000c8 [ 67.823748][ T2592] RBP: 00007f672dff1616 R08: 0000000000000000 R09: 0000000000000000 [ 67.831561][ T2592] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000000 [ 67.839372][ T2592] R13: 0000000000000000 R14: 00007f672e135f80 R15: 00007ffdb1e9c658 [ 67.847189][ T2592] [ 67.850049][ T2592] Modules linked in: [ 67.853823][ T2592] ---[ end trace 0000000000000000 ]--- [ 67.859086][ T2592] RIP: 0010:dev_map_enqueue+0x91/0x340 [ 67.864585][ T2592] Code: d0 00 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 4f 65 25 00 bb 20 02 00 00 49 03 5d 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 30 65 25 00 48 83 3b 00 0f 84 eb [ 67.884019][ T2592] RSP: 0018:ffffc9000d47f7a0 EFLAGS: 00010206 [ 67.889888][ T2592] RAX: 0000000000000044 RBX: 0000000000000220 RCX: ffffffff8197a881 [ 67.897739][ T2592] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88812efaaad0 [ 67.905542][ T2592] RBP: ffffc9000d47f7e0 R08: ffffffff8144a2c3 R09: fffffbfff0f6defd [ 67.913352][ T2592] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 67.921140][ T2592] R13: ffff88812efaaad0 R14: ffff88812efaaa00 R15: ffff88811a0c8000 [ 67.928996][ T2592] FS: 00007f672ecad6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 67.937745][ T2592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.937777][ T745] cdc_ncm 6-1:1.0: bind() failure [ 67.944168][ T2592] CR2: 000000110c2b0324 CR3: 0000000139447000 CR4: 00000000003506b0 [ 67.944191][ T2592] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.944204][ T2592] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.972460][ T2592] Kernel panic - not syncing: Fatal exception in interrupt [ 67.979813][ T2592] Kernel Offset: disabled [ 67.983954][ T2592] Rebooting in 86400 seconds..