last executing test programs: 2m38.246014149s ago: executing program 32 (id=339): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000900)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040), 0x8) 2m18.718174995s ago: executing program 33 (id=694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 2m16.509896878s ago: executing program 34 (id=723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="040052000600050001"], 0x24}}, 0x0) 1m25.335671373s ago: executing program 35 (id=1646): io_setup(0x7, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) close(r2) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1m24.370574848s ago: executing program 36 (id=1669): r0 = syz_io_uring_setup(0x6a30, &(0x7f0000002300)={0x0, 0xba42, 0x3c11}, &(0x7f00000021c0), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 1m19.14135363s ago: executing program 37 (id=1759): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000010}) 52.596548827s ago: executing program 38 (id=2358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}}, 0x0) 38.62091438s ago: executing program 8 (id=2667): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00'], 0x48) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 38.496280991s ago: executing program 1 (id=2668): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 38.480378721s ago: executing program 1 (id=2669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0xc1086201, 0x20002000) 38.467216921s ago: executing program 1 (id=2670): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBDIACR(r2, 0x4b4b, &(0x7f0000000000)) 38.448700652s ago: executing program 1 (id=2671): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1008000, &(0x7f0000000040), 0x1, 0x5db, &(0x7f0000000680)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000017c0)={0x2020}, 0xfffffe2c) 38.396141452s ago: executing program 1 (id=2672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x10, 0x0) 38.185095023s ago: executing program 1 (id=2677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20) poll(0x0, 0x0, 0x4) 38.154287253s ago: executing program 39 (id=2677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20) poll(0x0, 0x0, 0x4) 37.688251056s ago: executing program 8 (id=2684): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r0) userfaultfd(0x801) r1 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 36.774615251s ago: executing program 8 (id=2705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 36.760831712s ago: executing program 8 (id=2706): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@appraise_type}], 0x2c}, 0x84, 0x463, &(0x7f0000000b00)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdir(&(0x7f00000001c0)='./bus\x00', 0xc) 36.614274983s ago: executing program 8 (id=2707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x4000, 0xb2186ad7777fede9, 0x0) 36.577123293s ago: executing program 4 (id=2709): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0xfd32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 36.567228623s ago: executing program 4 (id=2710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 36.557517543s ago: executing program 4 (id=2711): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 36.466038933s ago: executing program 8 (id=2714): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 36.465763483s ago: executing program 40 (id=2714): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 35.639507648s ago: executing program 4 (id=2729): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1008000, &(0x7f0000000040), 0x1, 0x5db, &(0x7f0000000680)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000017c0)={0x2020}, 0xfffffe2c) 35.606637749s ago: executing program 4 (id=2730): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r2, 0x0, 0x3) 35.44202518s ago: executing program 4 (id=2731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 35.43692424s ago: executing program 41 (id=2731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 34.290360256s ago: executing program 5 (id=2739): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@stats}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r1, r0, 0x0, 0x100801700) 34.279220736s ago: executing program 5 (id=2740): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 33.993128708s ago: executing program 5 (id=2741): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x100000000) 32.855850485s ago: executing program 5 (id=2764): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@appraise_type}], 0x2c}, 0x84, 0x463, &(0x7f0000000b00)="$eJzs20tvG1UbAOB3JknT65e0X7n0AgQKouKSNKFAFywAgdQNEhIsyjKkaRWaNqgJEq0qGhAqS9RfACwR/AJWsKmAFYgtiC1CqlA3BBbIaOwZ103sYMdOnNbPIzk5xzPj876eOfaZOeMAetZI9ieJ2BkRP0fEUET0LV9hpPJv6calqb9uXJpKolR67Y8k2yz+vHFpqlg1yf/vyCuH04j0wyQO1Gl3/sLFM5Ozs9Pn8/rYwtm3x+YvXHxy5uzk6enT0+cmjh07+tT4s89MPN2RPHdlse5/b+7gvuNvXH1l6sTVN7/7Mot3Z768No+K4bbbHImR6nuy3CNtv/rmsqumnPR3MRBakvX1bHcNlPv/UPTFzZ03FC9/0NXggHVVKpVKgyu+pKojgMUScAdLotsRAN1RfNFn57/FYyPHH912/YXKCVCW91L+qCzpjzRfZ2DZ+W0njUTEicW/P8keUfc6BABAZ32djX+eqDf+S+PumvX+l88NDUfE7ojYExH/j4i9EXFXRHndeyLi3hbbH1lWXzn++XHbmhJrUjb+ey6f27p1/FeM/mK4L6I/zceAwzGQnJqZnT6SvyeHY2Awq4+v0sY3L/30caNlteO/7JG1X4wF8zh+7x+8dZuTkwuT7eRc6/r75WuAl1fmn1RnApKI2BcR+9fw+lsjYuaxzw82Wv7f+a+iA/NMpc8iHq3s/8VYln8hWX1+cmxrzE4fGSuOipW+/+HKq43abyv/Dsj2//a6x381/+Gkdr52vvU2rvzyUcNzmrUe/1uS18vlLflz704uLJwfj9iSLK58fuLmtkW9WD/L//Ch+v1/T8Q/n+bbHYiI7CC+LyLuj4gH8tgfjIiHIuLQKvl/++LDb9VUn28t//WV5X+ypf3feqHvzLWvGrXf3P4/ei3Kn7UVzXz+NRtgW28eAAAA3CbS8j3wSTpaLafp6GjlHv69sT2dnZtfePzU3DvnTlbulR+OgbS40jVUcz10PL82XNQnqvWZX4u2dpfvNNpWXj46NTe7XnPqQHN2NOj/md/6uh0dsO5amkdr9Is24Lbk95rQu/R/6F36P/Qu/R96V73+fzliqQuhABvM9z/0Lv0fepf+D72rXv//ogtxABuqnd/1r1bYc3y9XvlOK/RtjjBaLkS6KcJYWyHdHGFUCoMR0ezKl2OjAuv2JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBn/BsAAP//NYztXg==") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdir(&(0x7f00000001c0)='./bus\x00', 0xc) 32.803858955s ago: executing program 5 (id=2766): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_disconnect(r0) 32.654059396s ago: executing program 5 (id=2769): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f00000000c0)={[{@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@errors_continue}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@shortname_lower}]}, 0x4, 0x362, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 32.653830686s ago: executing program 42 (id=2769): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f00000000c0)={[{@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_lower}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@fat=@errors_continue}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@shortname_lower}]}, 0x4, 0x362, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 7.415905956s ago: executing program 7 (id=3273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x3, 0x0, 0xfffffffc, 0x0}) 7.374046527s ago: executing program 7 (id=3275): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xfd, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='./bus\x00') readlinkat(r0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000680)=""/206, 0xce) readlinkat(r0, &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)=""/163, 0xa3) 7.347458776s ago: executing program 7 (id=3276): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.571277737s ago: executing program 7 (id=3291): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x0) 5.428472448s ago: executing program 7 (id=3293): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 3.36558648s ago: executing program 7 (id=3301): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000100)={0x3, 0x200, 0x26}) 3.174465241s ago: executing program 6 (id=3307): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.132974042s ago: executing program 6 (id=3309): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000002380)='map_files\x00') getdents64(r1, &(0x7f00000035c0)=""/4084, 0xff4) 2.984987142s ago: executing program 6 (id=3315): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x48}}, 0x0) 2.984844002s ago: executing program 9 (id=3316): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000c80)=0xf4e) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) unshare(0x22020600) poll(&(0x7f0000000340)=[{r0}], 0x1, 0x4) 2.969717953s ago: executing program 6 (id=3317): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200010e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@test_dummy_encryption}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.893289753s ago: executing program 6 (id=3318): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') read$FUSE(r1, &(0x7f0000003680)={0x2020}, 0x2020) 2.750048954s ago: executing program 6 (id=3321): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) bind$tipc(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000002c0)={0x43}, 0x10) 2.740563704s ago: executing program 43 (id=3321): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) bind$tipc(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000002c0)={0x43}, 0x10) 2.667410915s ago: executing program 3 (id=3323): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x6, 0x3ff}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) 2.131286688s ago: executing program 3 (id=3334): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/92, 0x5c}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)=""/244, 0xf4}, {0x0}], 0x2}, 0x1}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2.059138708s ago: executing program 9 (id=3326): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x6b22) accept4$unix(r0, 0x0, 0x0, 0x0) 2.052724568s ago: executing program 3 (id=3327): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x48}}, 0x0) 2.027260329s ago: executing program 9 (id=3328): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.907317809s ago: executing program 9 (id=3329): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.907052019s ago: executing program 3 (id=3330): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 1.882583479s ago: executing program 0 (id=3331): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 1.851328479s ago: executing program 3 (id=3332): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) listen(r0, 0x0) 1.848350029s ago: executing program 0 (id=3333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008102"]) 1.75502251s ago: executing program 9 (id=3335): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.75483321s ago: executing program 3 (id=3336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1.74936276s ago: executing program 2 (id=3337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) 1.73477284s ago: executing program 2 (id=3338): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2482, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa0028000}) 1.72111167s ago: executing program 2 (id=3339): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x6b22) accept4$unix(r0, 0x0, 0x0, 0x0) 1.70489436s ago: executing program 2 (id=3340): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0xf2a, 0x0, 0x0, 0x0, 0xffffffff, 0x16, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875321a7d8dc0000b420a1a93c1240f45f419e0117d4fb2263d5fb1bdcac000000000009000000000000001a00", "90be8b1c511265006c7f306003d8a0f4bd00"}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0203100020fc80d53d103328", 0x6d, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) 149.75195ms ago: executing program 0 (id=3341): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 114.144389ms ago: executing program 0 (id=3342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) setitimer(0x0, 0x0, 0x0) 104.68995ms ago: executing program 0 (id=3343): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x8d) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000100)=0xffffffffffffffc4) 96.2494ms ago: executing program 0 (id=3344): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="000006"], 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 14.34674ms ago: executing program 9 (id=3345): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@local, @in=@remote, 0x4e24, 0x0, 0x4e23, 0x7, 0xb, 0x80, 0x475936ae23be308, 0x1}, {0x6, 0x4, 0x3ff, 0x358f, 0x1, 0x520, 0x7fffffffffffffff, 0x555}, {0x5, 0x1, 0x8d, 0x20}, 0xe, 0x6e6bb9, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3505, 0x0, 0x3, 0x4, 0x6a4, 0x5, 0x1}}, 0xe8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000100000002"]) 11.98797ms ago: executing program 2 (id=3346): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 0s ago: executing program 2 (id=3347): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): 87][ T2032] f2fs_is_valid_blkaddr+0x25/0x30 [ 110.207844][ T2032] f2fs_map_blocks+0xd22/0x4340 [ 110.212560][ T2032] ? f2fs_map_lock+0x260/0x260 [ 110.217238][ T2032] ? xa_load+0x1a1/0x210 [ 110.221306][ T2032] ? xas_find_conflict+0x8c0/0x8c0 [ 110.226252][ T2032] ? folio_unlock+0x5c/0x70 [ 110.230587][ T2032] f2fs_mpage_readpages+0xc65/0x20f0 [ 110.235711][ T2032] ? xas_load+0x39d/0x3b0 [ 110.239887][ T2032] ? dquot_release_reservation_block+0xa0/0xa0 [ 110.245865][ T2032] ? __this_cpu_preempt_check+0x13/0x20 [ 110.251327][ T2032] ? memcg_rstat_updated+0x4f/0x110 [ 110.256365][ T2032] f2fs_readahead+0xfd/0x250 [ 110.260785][ T2032] ? blk_start_plug+0x9c/0x130 [ 110.265390][ T2032] read_pages+0x1be/0xd40 [ 110.269642][ T2032] ? workingset_activation+0x430/0x430 [ 110.274939][ T2032] ? folio_add_lru+0x280/0x3f0 [ 110.279535][ T2032] ? page_cache_ra_unbounded+0x690/0x690 [ 110.284999][ T2032] ? filemap_add_folio+0x18f/0x200 [ 110.289971][ T2032] ? __filemap_add_folio+0xd10/0xd10 [ 110.295084][ T2032] page_cache_ra_unbounded+0x4c1/0x690 [ 110.300368][ T2032] ? readahead_gfp_mask+0x190/0x190 [ 110.305398][ T2032] ? __kernel_text_address+0xd/0x40 [ 110.310443][ T2032] ? unwind_get_return_address+0x4d/0x90 [ 110.315903][ T2032] page_cache_ra_order+0x987/0xc40 [ 110.320855][ T2032] ? do_page_cache_ra+0x110/0x110 [ 110.325707][ T2032] ? __stack_depot_save+0x36/0x480 [ 110.330666][ T2032] ? putname+0xfa/0x150 [ 110.334736][ T2032] ondemand_readahead+0x91a/0xee0 [ 110.339596][ T2032] ? kasan_set_track+0x4b/0x70 [ 110.344194][ T2032] ? kasan_save_free_info+0x2b/0x40 [ 110.349230][ T2032] ? ____kasan_slab_free+0x131/0x180 [ 110.354349][ T2032] ? do_syscall_64+0x3b/0xb0 [ 110.358778][ T2032] ? page_cache_sync_ra+0x450/0x450 [ 110.363811][ T2032] ? blk_cgroup_congested+0x132/0x150 [ 110.369019][ T2032] page_cache_sync_ra+0x3d6/0x450 [ 110.373881][ T2032] f2fs_readdir+0x599/0xc10 [ 110.378227][ T2032] ? f2fs_fill_dentries+0xd00/0xd00 [ 110.383253][ T2032] ? memcg_rstat_updated+0x4f/0x110 [ 110.388376][ T2032] ? security_file_permission+0x86/0xb0 [ 110.393753][ T2032] iterate_dir+0x265/0x600 [ 110.398109][ T2032] ? f2fs_fill_dentries+0xd00/0xd00 [ 110.403126][ T2032] __se_sys_getdents64+0x1c1/0x460 [ 110.408074][ T2032] ? __x64_sys_getdents64+0x90/0x90 [ 110.413108][ T2032] ? filldir+0x670/0x670 [ 110.417190][ T2032] ? __bpf_trace_sys_enter+0x62/0x70 [ 110.422312][ T2032] __x64_sys_getdents64+0x7b/0x90 [ 110.427166][ T2032] x64_sys_call+0x5ae/0x9a0 [ 110.431507][ T2032] do_syscall_64+0x3b/0xb0 [ 110.435757][ T2032] ? clear_bhb_loop+0x55/0xb0 [ 110.440882][ T2032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.446696][ T2032] RIP: 0033:0x7f05d57b08b3 [ 110.450951][ T2032] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 110.470478][ T2032] RSP: 002b:00007ffce6828c28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 110.478722][ T2032] RAX: ffffffffffffffda RBX: 000055556ae464e0 RCX: 00007f05d57b08b3 [ 110.486621][ T2032] RDX: 0000000000008000 RSI: 000055556ae464e0 RDI: 0000000000000005 [ 110.494432][ T2032] RBP: 000055556ae464b4 R08: 0000000000000000 R09: 0000000000000000 [ 110.503893][ T2032] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 110.511966][ T2032] R13: 0000000000000010 R14: 000055556ae464b0 R15: 00007ffce682aed0 [ 110.519870][ T2032] [ 110.528622][ T2032] syz-executor: attempt to access beyond end of device [ 110.528622][ T2032] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 110.563784][ T338] kworker/u4:4: attempt to access beyond end of device [ 110.563784][ T338] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 110.708108][ T28] audit: type=1400 audit(1731963193.380:613): avc: denied { ioctl } for pid=4400 comm="syz.2.1648" path="/242/file0" dev="tmpfs" ino=1299 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 110.767505][ T4406] xt_hashlimit: size too large, truncated to 1048576 [ 110.801245][ T19] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 110.822780][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.833538][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.871615][ T19] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 110.885335][ T19] usb 8-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 110.894273][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.920038][ T19] usb 8-1: config 0 descriptor?? [ 110.961420][ T4415] loop3: detected capacity change from 0 to 512 [ 110.990525][ T4415] EXT4-fs: Ignoring removed orlov option [ 111.012347][ T4415] EXT4-fs: Ignoring removed i_version option [ 111.021921][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.035617][ T4415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.042917][ T4408] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.050774][ T4408] device bridge_slave_0 entered promiscuous mode [ 111.057252][ T4415] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 111.065049][ T4415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 111.073452][ T4415] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.079696][ T4415] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 111.088954][ T4415] EXT4-fs warning (device loop3): ext4_enable_quotas:7022: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.089285][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.103367][ T4415] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 111.117249][ T4415] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1654: bg 0: block 40: padding at end of block bitmap is not set [ 111.131441][ T4415] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 111.140238][ T4415] EXT4-fs (loop3): 1 truncate cleaned up [ 111.143278][ T4423] loop2: detected capacity change from 0 to 1024 [ 111.148159][ T4415] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.158385][ T4408] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.168554][ T4408] device bridge_slave_1 entered promiscuous mode [ 111.192274][ T4415] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.1654: bad symlink. [ 111.196655][ T4423] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 111.212120][ T4423] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038 (0x7fffffff) [ 111.253546][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 111.285140][ T28] audit: type=1400 audit(1731963193.915:614): avc: denied { unmount } for pid=1673 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.318290][ T28] audit: type=1400 audit(1731963193.943:615): avc: denied { module_request } for pid=4408 comm="syz-executor" kmod="rtnl-link-virt_wifi" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 111.342213][ T711] device bridge_slave_1 left promiscuous mode [ 111.348333][ T28] audit: type=1400 audit(1731963193.943:616): avc: denied { bpf } for pid=4436 comm="syz.0.1662" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.369998][ T711] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.377755][ T711] device bridge_slave_0 left promiscuous mode [ 111.383819][ T711] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.393457][ T711] device veth1_macvtap left promiscuous mode [ 111.399424][ T711] device veth0_vlan left promiscuous mode [ 111.447211][ T19] kye 0003:0458:501A.002F: unbalanced delimiter at end of report description [ 111.463666][ T19] kye 0003:0458:501A.002F: parse failed [ 111.469114][ T19] kye: probe of 0003:0458:501A.002F failed with error -22 [ 111.512720][ T4408] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.519629][ T4408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.526710][ T4408] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.533511][ T4408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.559989][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.567476][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.575270][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.585734][ T1673] EXT4-fs (loop3): unmounting filesystem. [ 111.622032][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.630768][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.637655][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.647417][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.655760][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.662645][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.670193][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.670214][ T19] usb 8-1: USB disconnect, device number 12 [ 111.678131][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.707425][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.715986][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.736380][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.751787][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.761069][ T4408] device veth0_vlan entered promiscuous mode [ 111.767543][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.775155][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.790755][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.799044][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.810130][ T4408] device veth1_macvtap entered promiscuous mode [ 111.827477][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.839681][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.848979][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.876248][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.888612][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.893643][ T4463] loop2: detected capacity change from 0 to 256 [ 111.929985][ T4463] exfat: Deprecated parameter 'utf8' [ 111.934602][ T4467] loop8: detected capacity change from 0 to 2048 [ 111.935130][ T4463] exfat: Deprecated parameter 'utf8' [ 111.948042][ T4463] exfat: Deprecated parameter 'utf8' [ 111.964768][ T4467] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 111.976797][ T4463] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 112.045239][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 112.094326][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.104987][ T4461] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.112557][ T4461] device bridge_slave_0 entered promiscuous mode [ 112.122551][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.130019][ T4461] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.137662][ T4461] device bridge_slave_1 entered promiscuous mode [ 112.220981][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 112.220998][ T28] audit: type=1400 audit(1731963194.783:675): avc: denied { create } for pid=4491 comm="syz.0.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.263242][ T4493] SELinux: Context system_u:object_r:public_content_rw_t:s0 is not valid (left unmapped). [ 112.266454][ T4461] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.280020][ T4461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.287228][ T4461] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.294077][ T4461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.302535][ T28] audit: type=1400 audit(1731963194.810:676): avc: denied { relabelfrom } for pid=4491 comm="syz.0.1684" name="L2CAP" dev="sockfs" ino=39053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.326576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.337367][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.349559][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.362606][ T28] audit: type=1400 audit(1731963194.810:677): avc: denied { mac_admin } for pid=4491 comm="syz.0.1684" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.392458][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.412287][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.417084][ T28] audit: type=1400 audit(1731963194.838:678): avc: denied { relabelto } for pid=4491 comm="syz.0.1684" name="L2CAP" dev="sockfs" ino=39053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=bluetooth_socket permissive=1 trawcon="system_u:object_r:public_content_rw_t:s0" [ 112.419185][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.473690][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.488313][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.495214][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.505156][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.514274][ T28] audit: type=1400 audit(1731963195.041:679): avc: denied { mounton } for pid=4502 comm="syz.0.1688" path="/296/file0" dev="tmpfs" ino=1562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.538746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.550709][ T28] audit: type=1400 audit(1731963195.050:680): avc: denied { create } for pid=4505 comm="syz.7.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.575546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.583995][ T28] audit: type=1400 audit(1731963195.078:681): avc: denied { setopt } for pid=4505 comm="syz.7.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.609218][ T4461] device veth0_vlan entered promiscuous mode [ 112.621553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.629796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.642640][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.649984][ T28] audit: type=1400 audit(1731963195.106:682): avc: denied { bind } for pid=4505 comm="syz.7.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.689473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.697246][ T28] audit: type=1400 audit(1731963195.207:683): avc: denied { execute } for pid=4508 comm="syz.8.1691" path="/4/cpu.stat" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.730513][ T4461] device veth1_macvtap entered promiscuous mode [ 112.738515][ T28] audit: type=1400 audit(1731963195.207:684): avc: denied { create } for pid=4508 comm="syz.8.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.766165][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.797095][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.816205][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.893729][ T711] device bridge_slave_1 left promiscuous mode [ 112.899704][ T711] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.919742][ T711] device bridge_slave_0 left promiscuous mode [ 112.930547][ T711] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.950582][ T711] device veth1_macvtap left promiscuous mode [ 112.972675][ T711] device veth0_vlan left promiscuous mode [ 113.150441][ T4518] loop8: detected capacity change from 0 to 40427 [ 113.167859][ T4518] F2FS-fs (loop8): heap/no_heap options were deprecated [ 113.176084][ T4518] F2FS-fs (loop8): invalid crc value [ 113.182294][ T4518] F2FS-fs (loop8): Found nat_bits in checkpoint [ 113.243443][ T4518] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 113.260739][ T339] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 113.279911][ T4518] syz.8.1694: attempt to access beyond end of device [ 113.279911][ T4518] loop8: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 113.295541][ T4518] syz.8.1694: attempt to access beyond end of device [ 113.295541][ T4518] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.329714][ T4408] syz-executor: attempt to access beyond end of device [ 113.329714][ T4408] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 113.601910][ T4546] KVM: debugfs: duplicate directory 4546-4 [ 113.650663][ T339] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.665010][ T339] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.682816][ T339] usb 8-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 113.704360][ T339] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.717226][ T339] usb 8-1: config 0 descriptor?? [ 113.798194][ T4547] loop8: detected capacity change from 0 to 40427 [ 113.805931][ T4547] F2FS-fs (loop8): invalid crc value [ 113.819348][ T4547] F2FS-fs (loop8): Found nat_bits in checkpoint [ 113.861222][ T4547] F2FS-fs (loop8): Start checkpoint disabled! [ 113.868303][ T4547] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 113.942611][ T338] kworker/u4:4: attempt to access beyond end of device [ 113.942611][ T338] loop8: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 113.966442][ T338] kworker/u4:4: attempt to access beyond end of device [ 113.966442][ T338] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 113.990775][ T338] kworker/u4:4: attempt to access beyond end of device [ 113.990775][ T338] loop8: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 114.165518][ T4588] loop2: detected capacity change from 0 to 16 [ 114.173604][ T4588] erofs: (device loop2): mounted with root inode @ nid 36. [ 114.188080][ T4588] syz.2.1721[4588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.188160][ T4588] syz.2.1721[4588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.242739][ T339] sony 0003:054C:0268.0030: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.7-1/input0 [ 114.270633][ T339] sony 0003:054C:0268.0030: failed to claim input [ 114.300149][ T4594] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1724'. [ 114.314520][ T4596] syz.2.1725[4596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.314656][ T4596] syz.2.1725[4596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.339474][ T4598] netlink: 596 bytes leftover after parsing attributes in process `syz.9.1726'. [ 114.351303][ T4600] loop2: detected capacity change from 0 to 512 [ 114.380221][ T4600] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.386896][ T4600] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.400367][ T4600] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1727: bg 0: block 255: padding at end of block bitmap is not set [ 114.414907][ T4600] EXT4-fs (loop2): 1 truncate cleaned up [ 114.420878][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.448622][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 114.464681][ T339] usb 8-1: USB disconnect, device number 13 [ 114.517521][ T4612] loop2: detected capacity change from 0 to 2048 [ 114.530074][ T4612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.541836][ T4612] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 114.557758][ T4612] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 65536 with max blocks 1 with error 28 [ 114.570642][ T4612] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.570642][ T4612] [ 114.580439][ T4612] EXT4-fs (loop2): Total free blocks count 0 [ 114.586408][ T4612] EXT4-fs (loop2): Free/Dirty block details [ 114.592123][ T4612] EXT4-fs (loop2): free_blocks=2415919104 [ 114.598151][ T4612] EXT4-fs (loop2): dirty_blocks=16 [ 114.603083][ T4612] EXT4-fs (loop2): Block reservation details [ 114.609202][ T4612] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 114.623895][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 114.888634][ T4629] loop2: detected capacity change from 0 to 1024 [ 114.898490][ T4629] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.906842][ T4629] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038 (0x7fffffff) [ 114.933143][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 114.972367][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 115.153740][ T4652] input: syz1 as /devices/virtual/input/input23 [ 115.232400][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 115.362467][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.373412][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.383122][ T24] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 115.392171][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.404201][ T24] usb 10-1: config 0 descriptor?? [ 115.493612][ T4648] loop8: detected capacity change from 0 to 131072 [ 115.500469][ T4648] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 115.507070][ T4648] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 115.515684][ T4648] F2FS-fs (loop8): invalid crc value [ 115.522452][ T4648] F2FS-fs (loop8): Found nat_bits in checkpoint [ 115.557172][ T4648] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 115.564096][ T4648] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 115.778053][ T4662] loop7: detected capacity change from 0 to 40427 [ 115.795388][ T4662] F2FS-fs (loop7): fault_injection options not supported [ 115.803045][ T4662] F2FS-fs (loop7): invalid crc value [ 115.809703][ T4662] F2FS-fs (loop7): Found nat_bits in checkpoint [ 115.861135][ T4662] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 115.888780][ T2096] F2FS-fs (loop7): access invalid blkaddr:2816 [ 115.895370][ T2096] CPU: 1 PID: 2096 Comm: syz-executor Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 115.905168][ T2096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 115.915155][ T2096] Call Trace: [ 115.918267][ T2096] [ 115.921037][ T2096] dump_stack_lvl+0x151/0x1b7 [ 115.925552][ T2096] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 115.930849][ T2096] ? f2fs_get_next_page_offset+0x770/0x770 [ 115.936495][ T2096] dump_stack+0x15/0x1e [ 115.940486][ T2096] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 115.945872][ T2096] f2fs_is_valid_blkaddr+0x25/0x30 [ 115.950813][ T2096] f2fs_map_blocks+0xd22/0x4340 [ 115.955596][ T2096] ? f2fs_map_lock+0x260/0x260 [ 115.960186][ T2096] ? xa_load+0x1a1/0x210 [ 115.964263][ T2096] ? xas_find_conflict+0x8c0/0x8c0 [ 115.969305][ T2096] f2fs_mpage_readpages+0xc65/0x20f0 [ 115.974509][ T2096] ? xas_load+0x39d/0x3b0 [ 115.978673][ T2096] ? dquot_release_reservation_block+0xa0/0xa0 [ 115.984667][ T2096] ? __this_cpu_preempt_check+0x13/0x20 [ 115.990039][ T2096] ? memcg_rstat_updated+0x4f/0x110 [ 115.995085][ T2096] f2fs_readahead+0xfd/0x250 [ 115.999590][ T2096] ? blk_start_plug+0x9c/0x130 [ 116.004189][ T2096] read_pages+0x1be/0xd40 [ 116.008437][ T2096] ? workingset_activation+0x430/0x430 [ 116.013734][ T2096] ? folio_add_lru+0x280/0x3f0 [ 116.018331][ T2096] ? page_cache_ra_unbounded+0x690/0x690 [ 116.023797][ T2096] ? filemap_add_folio+0x18f/0x200 [ 116.028781][ T2096] ? __filemap_add_folio+0xd10/0xd10 [ 116.033872][ T2096] page_cache_ra_unbounded+0x4c1/0x690 [ 116.039251][ T2096] ? readahead_gfp_mask+0x190/0x190 [ 116.044282][ T2096] ? __kernel_text_address+0xd/0x40 [ 116.049422][ T2096] ? unwind_get_return_address+0x4d/0x90 [ 116.054880][ T2096] page_cache_ra_order+0x987/0xc40 [ 116.059834][ T2096] ? do_page_cache_ra+0x110/0x110 [ 116.064686][ T2096] ? __stack_depot_save+0x36/0x480 [ 116.069633][ T2096] ? putname+0xfa/0x150 [ 116.073808][ T2096] ondemand_readahead+0x91a/0xee0 [ 116.078659][ T2096] ? kasan_set_track+0x4b/0x70 [ 116.083261][ T2096] ? kasan_save_free_info+0x2b/0x40 [ 116.088381][ T2096] ? ____kasan_slab_free+0x131/0x180 [ 116.093505][ T2096] ? do_syscall_64+0x3b/0xb0 [ 116.097931][ T2096] ? page_cache_sync_ra+0x450/0x450 [ 116.102963][ T2096] ? blk_cgroup_congested+0x132/0x150 [ 116.108174][ T2096] page_cache_sync_ra+0x3d6/0x450 [ 116.113032][ T2096] f2fs_readdir+0x599/0xc10 [ 116.117376][ T2096] ? f2fs_fill_dentries+0xd00/0xd00 [ 116.122406][ T2096] ? memcg_rstat_updated+0x4f/0x110 [ 116.127789][ T2096] ? security_file_permission+0x86/0xb0 [ 116.133168][ T2096] iterate_dir+0x265/0x600 [ 116.137418][ T2096] ? f2fs_fill_dentries+0xd00/0xd00 [ 116.142474][ T2096] __se_sys_getdents64+0x1c1/0x460 [ 116.147403][ T2096] ? __x64_sys_getdents64+0x90/0x90 [ 116.152432][ T2096] ? filldir+0x670/0x670 [ 116.156516][ T2096] ? __bpf_trace_sys_enter+0x62/0x70 [ 116.161638][ T2096] __x64_sys_getdents64+0x7b/0x90 [ 116.166497][ T2096] x64_sys_call+0x5ae/0x9a0 [ 116.170833][ T2096] do_syscall_64+0x3b/0xb0 [ 116.175087][ T2096] ? clear_bhb_loop+0x55/0xb0 [ 116.179597][ T2096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.185327][ T2096] RIP: 0033:0x7f313a5b08b3 [ 116.189582][ T2096] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 116.209027][ T2096] RSP: 002b:00007fff0e36dc28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 116.217267][ T2096] RAX: ffffffffffffffda RBX: 0000555587d664e0 RCX: 00007f313a5b08b3 [ 116.225193][ T2096] RDX: 0000000000008000 RSI: 0000555587d664e0 RDI: 0000000000000005 [ 116.232979][ T2096] RBP: 0000555587d664b4 R08: 0000000000000000 R09: 0000000000000000 [ 116.240793][ T2096] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 116.248619][ T2096] R13: 0000000000000010 R14: 0000555587d664b0 R15: 00007fff0e36fed0 [ 116.256429][ T2096] [ 116.269835][ T2096] F2FS-fs (loop7): access invalid blkaddr:2816 [ 116.277856][ T2096] CPU: 0 PID: 2096 Comm: syz-executor Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 116.278413][ T24] kone 0003:1E7D:2CED.0031: collection stack underflow [ 116.287683][ T2096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 116.287700][ T2096] Call Trace: [ 116.287706][ T2096] [ 116.287715][ T2096] dump_stack_lvl+0x151/0x1b7 [ 116.287744][ T2096] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 116.287765][ T2096] ? f2fs_get_next_page_offset+0x770/0x770 [ 116.312382][ T24] kone 0003:1E7D:2CED.0031: item 0 1 0 12 parsing failed [ 116.314663][ T2096] dump_stack+0x15/0x1e [ 116.325664][ T24] kone 0003:1E7D:2CED.0031: parse failed [ 116.332452][ T2096] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 116.332485][ T2096] f2fs_is_valid_blkaddr+0x25/0x30 [ 116.332505][ T2096] f2fs_map_blocks+0xd22/0x4340 [ 116.341380][ T24] kone: probe of 0003:1E7D:2CED.0031 failed with error -22 [ 116.341937][ T2096] ? f2fs_map_lock+0x260/0x260 [ 116.368571][ T2096] ? xa_load+0x1a1/0x210 [ 116.372640][ T2096] ? xas_find_conflict+0x8c0/0x8c0 [ 116.377599][ T2096] ? folio_unlock+0x5c/0x70 [ 116.381934][ T2096] f2fs_mpage_readpages+0xc65/0x20f0 [ 116.387052][ T2096] ? xas_load+0x39d/0x3b0 [ 116.391215][ T2096] ? dquot_release_reservation_block+0xa0/0xa0 [ 116.397208][ T2096] ? __this_cpu_preempt_check+0x13/0x20 [ 116.402585][ T2096] ? memcg_rstat_updated+0x4f/0x110 [ 116.407628][ T2096] f2fs_readahead+0xfd/0x250 [ 116.412047][ T2096] ? blk_start_plug+0x9c/0x130 [ 116.416654][ T2096] read_pages+0x1be/0xd40 [ 116.420807][ T2096] ? workingset_activation+0x430/0x430 [ 116.426106][ T2096] ? folio_add_lru+0x280/0x3f0 [ 116.430714][ T2096] ? page_cache_ra_unbounded+0x690/0x690 [ 116.436169][ T2096] ? filemap_add_folio+0x18f/0x200 [ 116.441119][ T2096] ? __filemap_add_folio+0xd10/0xd10 [ 116.446242][ T2096] page_cache_ra_unbounded+0x4c1/0x690 [ 116.451538][ T2096] ? readahead_gfp_mask+0x190/0x190 [ 116.456574][ T2096] ? __kernel_text_address+0xd/0x40 [ 116.461613][ T2096] ? unwind_get_return_address+0x4d/0x90 [ 116.467158][ T2096] page_cache_ra_order+0x987/0xc40 [ 116.472103][ T2096] ? do_page_cache_ra+0x110/0x110 [ 116.476961][ T2096] ? __stack_depot_save+0x36/0x480 [ 116.481909][ T2096] ? putname+0xfa/0x150 [ 116.485998][ T2096] ondemand_readahead+0x91a/0xee0 [ 116.490850][ T2096] ? kasan_set_track+0x4b/0x70 [ 116.495448][ T2096] ? kasan_save_free_info+0x2b/0x40 [ 116.500481][ T2096] ? ____kasan_slab_free+0x131/0x180 [ 116.505601][ T2096] ? do_syscall_64+0x3b/0xb0 [ 116.510026][ T2096] ? page_cache_sync_ra+0x450/0x450 [ 116.515062][ T2096] ? blk_cgroup_congested+0x132/0x150 [ 116.520269][ T2096] page_cache_sync_ra+0x3d6/0x450 [ 116.525142][ T2096] f2fs_readdir+0x599/0xc10 [ 116.529475][ T2096] ? f2fs_fill_dentries+0xd00/0xd00 [ 116.534503][ T2096] ? memcg_rstat_updated+0x4f/0x110 [ 116.539547][ T2096] ? security_file_permission+0x86/0xb0 [ 116.544915][ T2096] iterate_dir+0x265/0x600 [ 116.549167][ T2096] ? f2fs_fill_dentries+0xd00/0xd00 [ 116.554205][ T2096] __se_sys_getdents64+0x1c1/0x460 [ 116.559154][ T2096] ? __x64_sys_getdents64+0x90/0x90 [ 116.564186][ T2096] ? filldir+0x670/0x670 [ 116.568269][ T2096] ? __bpf_trace_sys_enter+0x62/0x70 [ 116.573401][ T2096] __x64_sys_getdents64+0x7b/0x90 [ 116.578245][ T2096] x64_sys_call+0x5ae/0x9a0 [ 116.582582][ T2096] do_syscall_64+0x3b/0xb0 [ 116.586842][ T2096] ? clear_bhb_loop+0x55/0xb0 [ 116.591348][ T2096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.597083][ T2096] RIP: 0033:0x7f313a5b08b3 [ 116.601332][ T2096] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 116.620785][ T2096] RSP: 002b:00007fff0e36dc28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 116.629018][ T2096] RAX: ffffffffffffffda RBX: 0000555587d664e0 RCX: 00007f313a5b08b3 [ 116.636840][ T2096] RDX: 0000000000008000 RSI: 0000555587d664e0 RDI: 0000000000000005 [ 116.644725][ T2096] RBP: 0000555587d664b4 R08: 0000000000000000 R09: 0000000000000000 [ 116.652538][ T2096] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 116.660347][ T2096] R13: 0000000000000010 R14: 0000555587d664b0 R15: 00007fff0e36fed0 [ 116.668166][ T2096] [ 116.674641][ T2096] syz-executor: attempt to access beyond end of device [ 116.674641][ T2096] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 116.674681][ T224] usb 10-1: USB disconnect, device number 2 [ 116.711570][ T43] kworker/u4:2: attempt to access beyond end of device [ 116.711570][ T43] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 116.848740][ T4684] loop8: detected capacity change from 0 to 512 [ 116.855166][ T4684] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.876031][ T4684] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 116.885899][ T4684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 116.895075][ T4684] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz.8.1757: corrupted in-inode xattr [ 116.908214][ T4684] EXT4-fs error (device loop8): ext4_orphan_get:1401: comm syz.8.1757: couldn't read orphan inode 15 (err -117) [ 116.923361][ T4684] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 116.954263][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 117.130963][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.137847][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.145889][ T4704] device bridge_slave_0 entered promiscuous mode [ 117.155459][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.162640][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.170209][ T4704] device bridge_slave_1 entered promiscuous mode [ 117.225395][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.232393][ T4704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.239503][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.246253][ T4704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.278738][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.292379][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 117.292422][ T711] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.313597][ T711] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.329433][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.337754][ T711] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.344615][ T711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.353121][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.361378][ T711] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.368259][ T711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.383825][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.393303][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.414954][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.428880][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.447779][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.455754][ T711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.468990][ T4704] device veth0_vlan entered promiscuous mode [ 117.488077][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.505348][ T4704] device veth1_macvtap entered promiscuous mode [ 117.512983][ T338] device bridge_slave_1 left promiscuous mode [ 117.522181][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.537925][ T338] device bridge_slave_0 left promiscuous mode [ 117.544102][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.555868][ T338] device veth1_macvtap left promiscuous mode [ 117.561805][ T338] device veth0_vlan left promiscuous mode [ 117.648867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.670433][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.681640][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.703918][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.713548][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 117.713565][ T28] audit: type=1400 audit(1731963199.841:742): avc: denied { bind } for pid=4748 comm="syz.4.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.740719][ T24] usb 9-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 117.754550][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.759626][ T28] audit: type=1400 audit(1731963199.850:743): avc: denied { map } for pid=4748 comm="syz.4.1760" path="socket:[39899]" dev="sockfs" ino=39899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 117.786895][ T24] usb 9-1: config 0 descriptor?? [ 117.811117][ T28] audit: type=1400 audit(1731963199.850:744): avc: denied { setopt } for pid=4748 comm="syz.4.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.914829][ T28] audit: type=1400 audit(1731963200.035:745): avc: denied { create } for pid=4759 comm="syz.0.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.946302][ T28] audit: type=1400 audit(1731963200.053:746): avc: denied { getopt } for pid=4759 comm="syz.0.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.951983][ T39] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 117.967311][ T28] audit: type=1400 audit(1731963200.053:747): avc: denied { setopt } for pid=4759 comm="syz.0.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 118.015608][ T28] audit: type=1400 audit(1731963200.127:748): avc: denied { write } for pid=4763 comm="syz.4.1790" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 118.049276][ T19] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 118.164942][ T28] audit: type=1400 audit(1731963200.265:749): avc: denied { create } for pid=4779 comm="syz.0.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.193255][ T28] audit: type=1400 audit(1731963200.293:750): avc: denied { create } for pid=4781 comm="syz.0.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 118.213978][ T28] audit: type=1400 audit(1731963200.293:751): avc: denied { write } for pid=4781 comm="syz.0.1797" path="socket:[40566]" dev="sockfs" ino=40566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 118.310457][ T24] hid-rmi 0003:1532:011D.0032: item fetching failed at offset 3/7 [ 118.320144][ T19] usb 10-1: Using ep0 maxpacket: 16 [ 118.329277][ T24] hid-rmi 0003:1532:011D.0032: parse failed [ 118.337591][ T24] hid-rmi: probe of 0003:1532:011D.0032 failed with error -22 [ 118.374509][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.393820][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.413143][ T39] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 118.422190][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.434169][ T39] usb 3-1: config 0 descriptor?? [ 118.493543][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.504685][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.514521][ T19] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.527995][ T19] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.543707][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.553529][ T224] usb 9-1: USB disconnect, device number 2 [ 118.566180][ T19] usb 10-1: config 0 descriptor?? [ 118.949340][ T39] arvo 0003:1E7D:30D4.0033: global environment stack underflow [ 118.956712][ T39] arvo 0003:1E7D:30D4.0033: item 0 4 1 11 parsing failed [ 118.963982][ T39] arvo 0003:1E7D:30D4.0033: parse failed [ 118.969454][ T39] arvo: probe of 0003:1E7D:30D4.0033 failed with error -22 [ 119.080126][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.087247][ T19] microsoft 0003:045E:07DA.0034: ignoring exceeding usage max [ 119.096363][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.103517][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.110619][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.117713][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.124961][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.131979][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.139426][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.146630][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.153600][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.160713][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.176046][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.183111][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.194495][ T19] microsoft 0003:045E:07DA.0034: unknown main item tag 0x0 [ 119.203863][ T19] microsoft 0003:045E:07DA.0034: No inputs registered, leaving [ 119.211948][ T316] usb 3-1: USB disconnect, device number 18 [ 119.218958][ T19] microsoft 0003:045E:07DA.0034: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 119.233155][ T19] microsoft 0003:045E:07DA.0034: no inputs found [ 119.241670][ T19] microsoft 0003:045E:07DA.0034: could not initialize ff, continuing anyway [ 119.313115][ T39] usb 10-1: USB disconnect, device number 3 [ 119.409317][ T4807] loop4: detected capacity change from 0 to 40427 [ 119.416329][ T4807] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 119.424015][ T4807] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 119.433328][ T4807] F2FS-fs (loop4): invalid crc value [ 119.439942][ T4807] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.475512][ T4807] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 119.482462][ T4807] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.576237][ T4807] syz.4.1804: attempt to access beyond end of device [ 119.576237][ T4807] loop4: rw=2049, sector=77824, nr_sectors = 3824 limit=40427 [ 119.592608][ T4807] syz.4.1804: attempt to access beyond end of device [ 119.592608][ T4807] loop4: rw=2049, sector=81648, nr_sectors = 272 limit=40427 [ 119.609801][ T19] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 119.622250][ T4807] syz.4.1804: attempt to access beyond end of device [ 119.622250][ T4807] loop4: rw=2049, sector=49152, nr_sectors = 2056 limit=40427 [ 119.641208][ T4807] syz.4.1804: attempt to access beyond end of device [ 119.641208][ T4807] loop4: rw=2049, sector=51208, nr_sectors = 2040 limit=40427 [ 119.660041][ T4807] syz.4.1804: attempt to access beyond end of device [ 119.660041][ T4807] loop4: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 119.678383][ T4807] syz.4.1804: attempt to access beyond end of device [ 119.678383][ T4807] loop4: rw=2049, sector=59392, nr_sectors = 1640 limit=40427 [ 119.710907][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 119.720182][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 119.794762][ T4824] SELinux: Context system_u:object_r:dhcpc_var_run_t:s0 is not valid (left unmapped). [ 119.929289][ T4841] loop2: detected capacity change from 0 to 512 [ 119.936024][ T4841] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.948693][ T4841] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.1819: invalid indirect mapped block 4294967295 (level 0) [ 119.962847][ T4841] EXT4-fs (loop2): Remounting filesystem read-only [ 119.969322][ T4841] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.1819: invalid indirect mapped block 4294967295 (level 1) [ 119.983545][ T4841] EXT4-fs (loop2): 1 orphan inode deleted [ 119.989274][ T4841] EXT4-fs (loop2): 1 truncate cleaned up [ 119.995584][ T4841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.028208][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 120.046186][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.063478][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.063942][ T4849] loop2: detected capacity change from 0 to 512 [ 120.073283][ T19] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.092504][ T19] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.101434][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.110048][ T4849] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.121392][ T19] usb 9-1: config 0 descriptor?? [ 120.129888][ T4849] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 120.139908][ T4849] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 120.148290][ T4849] System zones: 1-12 [ 120.153020][ T4849] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1823: corrupted in-inode xattr [ 120.165190][ T4849] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1823: couldn't read orphan inode 15 (err -117) [ 120.177630][ T4849] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.206543][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 120.280183][ T4864] input: syz0 as /devices/virtual/input/input24 [ 120.286449][ T4864] input: failed to attach handler leds to device input24, error: -6 [ 120.313707][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.661343][ T19] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 120.668874][ T19] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 120.679797][ T19] plantronics 0003:047F:FFFF.0035: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 120.703802][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.714790][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.724327][ T39] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 120.733528][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.742310][ T39] usb 5-1: config 0 descriptor?? [ 120.953779][ T316] usb 9-1: USB disconnect, device number 3 [ 121.268484][ T39] arvo 0003:1E7D:30D4.0036: global environment stack underflow [ 121.275877][ T39] arvo 0003:1E7D:30D4.0036: item 0 4 1 11 parsing failed [ 121.283619][ T39] arvo 0003:1E7D:30D4.0036: parse failed [ 121.284094][ T4871] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 121.289188][ T39] arvo: probe of 0003:1E7D:30D4.0036 failed with error -22 [ 121.348081][ T4875] loop2: detected capacity change from 0 to 512 [ 121.356593][ T4875] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1835: dx entry: limit 1024 != root limit 124 [ 121.368567][ T4875] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1835: Corrupt directory, running e2fsck is recommended [ 121.382551][ T4875] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 121.390834][ T4875] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1835: corrupted in-inode xattr [ 121.402865][ T4875] EXT4-fs (loop2): Remounting filesystem read-only [ 121.409278][ T4875] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1835: couldn't read orphan inode 15 (err -117) [ 121.421292][ T4875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.438384][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 121.498322][ T4881] netlink: 536 bytes leftover after parsing attributes in process `syz.2.1837'. [ 121.502177][ T316] usb 5-1: USB disconnect, device number 5 [ 121.613400][ T4891] loop2: detected capacity change from 0 to 4096 [ 121.621966][ T4891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.638861][ T4890] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #15: comm syz.2.1843: corrupted inode contents [ 121.651024][ T4890] EXT4-fs error (device loop2): ext4_dirty_inode:6088: inode #15: comm syz.2.1843: mark_inode_dirty error [ 121.662420][ T4890] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #15: comm syz.2.1843: corrupted inode contents [ 121.674493][ T4890] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.1843: mark_inode_dirty error [ 121.686003][ T4890] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #15: comm syz.2.1843: corrupted inode contents [ 121.698591][ T4890] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.1843: mark_inode_dirty error [ 121.710308][ T4890] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #15: comm syz.2.1843: corrupted inode contents [ 121.723189][ T4890] EXT4-fs error (device loop2): ext4_truncate:4313: inode #15: comm syz.2.1843: mark_inode_dirty error [ 121.734858][ T4890] EXT4-fs error (device loop2): ext4_evict_inode:290: comm syz.2.1843: couldn't truncate inode 15 (err -117) [ 121.756038][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 121.768757][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.779359][ T4903] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 121.836534][ T4913] loop2: detected capacity change from 0 to 256 [ 121.853279][ T4913] FAT-fs (loop2): Directory bread(block 64) failed [ 121.859629][ T4913] FAT-fs (loop2): Directory bread(block 65) failed [ 121.867090][ T4913] FAT-fs (loop2): Directory bread(block 66) failed [ 121.873443][ T4913] FAT-fs (loop2): Directory bread(block 67) failed [ 121.880243][ T4913] FAT-fs (loop2): Directory bread(block 68) failed [ 121.886911][ T4913] FAT-fs (loop2): Directory bread(block 69) failed [ 121.893384][ T4913] FAT-fs (loop2): Directory bread(block 70) failed [ 121.900199][ T4913] FAT-fs (loop2): Directory bread(block 71) failed [ 121.913670][ T4913] FAT-fs (loop2): Directory bread(block 72) failed [ 121.924457][ T4913] FAT-fs (loop2): Directory bread(block 73) failed [ 121.992168][ T314] kworker/u4:3: attempt to access beyond end of device [ 121.992168][ T314] loop2: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 122.164281][ T4940] xt_hashlimit: size too large, truncated to 1048576 [ 122.267008][ T4951] loop8: detected capacity change from 0 to 512 [ 122.309936][ T4951] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 122.334839][ T4951] ext4 filesystem being mounted at /34/bus supports timestamps until 2038 (0x7fffffff) [ 122.353618][ T4959] loop2: detected capacity change from 0 to 512 [ 122.406097][ T4959] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1872: casefold flag without casefold feature [ 122.420486][ T4959] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1872: couldn't read orphan inode 15 (err -117) [ 122.432876][ T4959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.475929][ T4965] TCP: tcp_parse_options: Illegal window scaling value 112 > 14 received [ 122.485798][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 122.518010][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 122.575442][ T4979] loop8: detected capacity change from 0 to 512 [ 122.596616][ T4979] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 122.608370][ T4979] EXT4-fs (loop8): 1 truncate cleaned up [ 122.613921][ T4979] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 122.636452][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 122.802491][ T4982] loop8: detected capacity change from 0 to 40427 [ 122.827169][ T19] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 122.827869][ T4982] F2FS-fs (loop8): invalid crc value [ 122.841522][ T4982] F2FS-fs (loop8): Found nat_bits in checkpoint [ 122.891720][ T4982] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 122.910015][ T4408] syz-executor: attempt to access beyond end of device [ 122.910015][ T4408] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.992347][ T4994] loop8: detected capacity change from 0 to 512 [ 122.999108][ T4994] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 123.010498][ T4994] EXT4-fs (loop8): 1 truncate cleaned up [ 123.016045][ T4994] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 123.034690][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 123.062612][ T4999] loop8: detected capacity change from 0 to 512 [ 123.071083][ T4999] EXT4-fs (loop8): 1 truncate cleaned up [ 123.076615][ T4999] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 123.095532][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 123.108864][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 123.145719][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 123.145738][ T28] audit: type=1400 audit(1731963204.862:773): avc: denied { read write } for pid=5006 comm="syz.8.1890" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 123.153483][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.177962][ T28] audit: type=1400 audit(1731963204.862:774): avc: denied { open } for pid=5006 comm="syz.8.1890" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 123.184367][ T5007] loop8: detected capacity change from 0 to 1024 [ 123.212295][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.219937][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.227287][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.228733][ T5007] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 123.234706][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.250920][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.258237][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.265476][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.272731][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.283569][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.290727][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.297999][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.310905][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.318078][ T19] usb 3-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 123.327133][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.334344][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.341605][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.349993][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.357203][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.364686][ T19] usb 3-1: config 0 descriptor?? [ 123.369550][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.376665][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.383922][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.391116][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.398278][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.405543][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.413632][ T316] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 123.422362][ T316] hid-generic 0000:0000:0000.0037: hidraw0: HID vffffff.fe Device [syz0] on syz1 [ 123.444845][ T28] audit: type=1400 audit(1731963205.130:775): avc: denied { map } for pid=5009 comm="syz.8.1891" path="socket:[42425]" dev="sockfs" ino=42425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.467764][ T28] audit: type=1400 audit(1731963205.148:776): avc: denied { read accept } for pid=5009 comm="syz.8.1891" path="socket:[42425]" dev="sockfs" ino=42425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.476432][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1892'. [ 123.575124][ T28] audit: type=1400 audit(1731963205.268:777): avc: denied { load_policy } for pid=5024 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 123.575146][ T5025] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 123.575186][ T5025] SELinux: failed to load policy [ 123.643076][ T5030] incfs: Options parsing error. -22 [ 123.648152][ T5030] incfs: mount failed -22 [ 123.692829][ T28] audit: type=1400 audit(1731963205.360:778): avc: denied { mount } for pid=5038 comm="syz.0.1905" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 123.738693][ T28] audit: type=1400 audit(1731963205.407:779): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 123.758997][ T19] usbhid 3-1:0.0: can't add hid device: -71 [ 123.765027][ T19] usbhid: probe of 3-1:0.0 failed with error -71 [ 123.779017][ T19] usb 3-1: USB disconnect, device number 19 [ 123.827152][ T28] audit: type=1400 audit(1731963205.490:780): avc: denied { read } for pid=5052 comm="syz.8.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.950112][ T28] audit: type=1400 audit(1731963205.600:781): avc: denied { getopt } for pid=5061 comm="syz.8.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.980959][ T5064] loop8: detected capacity change from 0 to 1024 [ 123.987511][ T5064] EXT4-fs: Ignoring removed orlov option [ 123.993014][ T5064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.009692][ T5064] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 124.024405][ T28] audit: type=1400 audit(1731963205.674:782): avc: denied { execute } for pid=5063 comm="syz.8.1916" path="/54/file1/cpuacct.usage_percpu_user" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.056999][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 124.192285][ T3115] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 124.192300][ T3230] Bluetooth: hci0: command 0x1003 tx timeout [ 124.283079][ T5077] loop8: detected capacity change from 0 to 512 [ 124.325557][ T5077] ext2: Unknown parameter 'euid>00000000000000000000' [ 124.421004][ T5084] syz.8.1924[5084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.421088][ T5084] syz.8.1924[5084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.536707][ T5047] loop4: detected capacity change from 0 to 131072 [ 124.560019][ T5047] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 124.568070][ T5047] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.591538][ T5095] loop9: detected capacity change from 0 to 128 [ 124.630836][ T5047] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.720434][ T5047] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 124.734101][ T5047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 124.742159][ T5080] loop2: detected capacity change from 0 to 40427 [ 124.758573][ T5080] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 124.767742][ T5080] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 124.789376][ T5047] device sit0 entered promiscuous mode [ 124.796364][ T5047] netlink: 'syz.4.1908': attribute type 1 has an invalid length. [ 124.812339][ T5047] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1908'. [ 124.822097][ T5080] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.919803][ T5080] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 124.937664][ T5080] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 125.067201][ T5112] loop9: detected capacity change from 0 to 40427 [ 125.097924][ T5112] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 125.118927][ T5112] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 125.128281][ T5112] F2FS-fs (loop9): invalid crc value [ 125.160243][ T5112] F2FS-fs (loop9): Found nat_bits in checkpoint [ 125.220537][ T5112] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 125.225508][ T5125] loop2: detected capacity change from 0 to 1024 [ 125.227657][ T5112] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 125.256832][ T5125] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.268764][ T5125] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 125.278003][ T5125] EXT4-fs (loop2): unmounting filesystem. [ 125.328126][ T5112] syz.9.1934: attempt to access beyond end of device [ 125.328126][ T5112] loop9: rw=2049, sector=77824, nr_sectors = 2088 limit=40427 [ 125.368399][ T5112] syz.9.1934: attempt to access beyond end of device [ 125.368399][ T5112] loop9: rw=2049, sector=79912, nr_sectors = 2008 limit=40427 [ 125.393212][ T5112] syz.9.1934: attempt to access beyond end of device [ 125.393212][ T5112] loop9: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 125.416013][ T5112] syz.9.1934: attempt to access beyond end of device [ 125.416013][ T5112] loop9: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 125.442518][ T5112] syz.9.1934: attempt to access beyond end of device [ 125.442518][ T5112] loop9: rw=2049, sector=57344, nr_sectors = 2096 limit=40427 [ 125.449073][ T659] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 125.485145][ T314] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 125.494818][ T314] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 125.719963][ T659] usb 5-1: Using ep0 maxpacket: 32 [ 125.836977][ T5149] binder: 5148:5149 ioctl c0306201 20001a80 returned -14 [ 125.854622][ T659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.866121][ T659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.876145][ T659] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 125.885738][ T659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.895102][ T659] usb 5-1: config 0 descriptor?? [ 125.926443][ T5161] loop2: detected capacity change from 0 to 2048 [ 125.937646][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 125.942657][ T5161] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.964226][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 126.196645][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 126.326683][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.336877][ T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.347712][ T24] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.391676][ T19] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 126.404950][ T659] savu 0003:1E7D:2D5A.0038: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 126.543385][ T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.552445][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.560693][ T24] usb 10-1: Product: syz [ 126.564677][ T24] usb 10-1: Manufacturer: syz [ 126.569228][ T24] usb 10-1: SerialNumber: syz [ 126.684183][ T19] usb 3-1: Using ep0 maxpacket: 32 [ 126.695909][ T224] usb 5-1: USB disconnect, device number 6 [ 126.944242][ T19] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=40.72 [ 126.953157][ T19] usb 3-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 126.961437][ T19] usb 3-1: Product: syz [ 126.965442][ T19] usb 3-1: Manufacturer: syz [ 126.970679][ T19] usb 3-1: config 0 descriptor?? [ 127.052538][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 127.055077][ T3115] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.083406][ T5193] loop8: detected capacity change from 0 to 256 [ 127.247584][ T19] snd-usb-audio: probe of 3-1:0.0 failed with error -71 [ 127.255141][ T19] usb 3-1: USB disconnect, device number 20 [ 127.273660][ T5205] loop4: detected capacity change from 0 to 512 [ 127.292831][ T5205] EXT4-fs error (device loop4): ext4_acquire_dquot:6787: comm syz.4.1971: Failed to acquire dquot type 1 [ 127.304719][ T5205] EXT4-fs (loop4): 1 truncate cleaned up [ 127.310358][ T5205] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.319578][ T5205] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 127.333931][ T5205] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.1971: path /28/file0: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=2164260880, rec_len=231, size=4096 fake=0 [ 127.359645][ T4704] EXT4-fs (loop4): unmounting filesystem. [ 127.433113][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.440099][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.601409][ T5220] loop4: detected capacity change from 0 to 40427 [ 127.609195][ T5220] F2FS-fs (loop4): invalid crc value [ 127.615907][ T5220] F2FS-fs (loop4): Found nat_bits in checkpoint [ 127.651030][ T5220] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 127.800151][ T24] cdc_ncm 10-1:1.0: bind() failure [ 127.806553][ T24] usb 10-1: USB disconnect, device number 4 [ 128.026067][ T5236] netlink: 'syz.2.1983': attribute type 13 has an invalid length. [ 128.036404][ T5236] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 128.044147][ T5236] device gretap1 entered promiscuous mode [ 128.150997][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.164900][ T5255] loop2: detected capacity change from 0 to 1024 [ 128.171241][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.178464][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.186208][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.194733][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.202492][ T5255] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 128.211670][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.219656][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.226942][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.234546][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.241983][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.250213][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.258323][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.265752][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.273851][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.281413][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.289336][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.296851][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.304280][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.311811][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.319828][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.333277][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.340983][ T24] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 128.349488][ T24] hid-generic 0000:0000:0000.0039: hidraw0: HID vffffff.fe Device [syz0] on syz1 [ 128.434285][ T5280] loop2: detected capacity change from 0 to 1024 [ 128.531097][ T5296] loop2: detected capacity change from 0 to 512 [ 128.545407][ T5296] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.557312][ T5296] EXT4-fs (loop2): 1 truncate cleaned up [ 128.572321][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 128.572382][ T28] audit: type=1400 audit(1731963209.874:865): avc: denied { unmount } for pid=1759 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 128.598717][ T1759] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 128.948506][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.208539][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 129.381907][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.460522][ T5310] loop9: detected capacity change from 0 to 1024 [ 129.468588][ T24] usb 5-1: config 7 has an invalid interface number: 67 but max is 0 [ 129.476501][ T24] usb 5-1: config 7 has no interface number 0 [ 129.501364][ T5310] EXT4-fs: Ignoring removed nobh option [ 129.520327][ T5310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.591448][ T28] audit: type=1400 audit(1731963210.815:866): avc: denied { setattr } for pid=5309 comm="syz.9.2015" path="/42/file1" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.671249][ T5318] loop9: detected capacity change from 0 to 512 [ 129.687221][ T5318] EXT4-fs: Ignoring removed i_version option [ 129.726001][ T5318] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038 (0x7fffffff) [ 129.739442][ T28] audit: type=1400 audit(1731963210.954:867): avc: denied { create } for pid=5317 comm="syz.9.2018" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 129.743895][ T5318] EXT4-fs error (device loop9): ext4_add_entry:2484: inode #2: comm syz.9.2018: Directory hole found for htree leaf block 0 [ 129.750385][ T24] usb 5-1: string descriptor 0 read error: -22 [ 129.856200][ T24] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 129.865720][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.913535][ T28] audit: type=1400 audit(1731963211.111:868): avc: denied { validate_trans } for pid=5327 comm="syz.2.2022" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 129.940457][ T5290] loop8: detected capacity change from 0 to 262144 [ 129.957924][ T5290] F2FS-fs (loop8): invalid crc value [ 129.991009][ T5290] F2FS-fs (loop8): Found nat_bits in checkpoint [ 130.048977][ T28] audit: type=1400 audit(1731963211.231:869): avc: denied { read } for pid=5339 comm="syz.2.2026" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.054288][ T5290] F2FS-fs (loop8): Start checkpoint disabled! [ 130.080676][ T28] audit: type=1400 audit(1731963211.258:870): avc: denied { open } for pid=5339 comm="syz.2.2026" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.107844][ T5290] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 130.110203][ T28] audit: type=1400 audit(1731963211.258:871): avc: denied { ioctl } for pid=5339 comm="syz.2.2026" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 130.156646][ T19] usb 5-1: USB disconnect, device number 7 [ 130.186816][ T5343] loop2: detected capacity change from 0 to 256 [ 130.375619][ T5338] loop9: detected capacity change from 0 to 40427 [ 130.393247][ T5338] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 130.411299][ T5338] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 130.455713][ T5338] F2FS-fs (loop9): Found nat_bits in checkpoint [ 130.530629][ T5338] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 130.541152][ T5338] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 130.747784][ T28] audit: type=1400 audit(1731963211.886:872): avc: denied { ioctl } for pid=5369 comm="syz.4.2039" path="socket:[44281]" dev="sockfs" ino=44281 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 130.772731][ T19] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 130.871810][ T28] audit: type=1400 audit(1731963211.997:873): avc: denied { nlmsg_read } for pid=5377 comm="syz.8.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 130.976671][ T5394] loop9: detected capacity change from 0 to 256 [ 130.990757][ T28] audit: type=1400 audit(1731963212.107:874): avc: denied { connect } for pid=5399 comm="syz.8.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 130.990905][ T5394] exfat: Deprecated parameter 'utf8' [ 131.040305][ T5394] exfat: Deprecated parameter 'namecase' [ 131.049928][ T5394] exfat: Deprecated parameter 'namecase' [ 131.055944][ T5394] exfat: Deprecated parameter 'utf8' [ 131.069234][ T5394] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 131.180467][ T19] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 131.199758][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.212143][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.222927][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 131.237063][ T19] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 131.247173][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.259785][ T19] usb 3-1: config 0 descriptor?? [ 131.398928][ T5419] loop4: detected capacity change from 0 to 40427 [ 131.418166][ T5419] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.469365][ T5419] F2FS-fs (loop4): Start checkpoint disabled! [ 131.476229][ T5419] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 131.501556][ T5419] syz.4.2063: attempt to access beyond end of device [ 131.501556][ T5419] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 131.541959][ T338] kworker/u4:4: attempt to access beyond end of device [ 131.541959][ T338] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 131.706127][ T5436] loop4: detected capacity change from 0 to 256 [ 131.723290][ T5438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.739471][ T5436] exfat: Deprecated parameter 'utf8' [ 131.756010][ T5436] exfat: Deprecated parameter 'utf8' [ 131.771540][ T5440] tipc: Enabling of bearer rejected, media not registered [ 131.777425][ T19] thrustmaster 0003:044F:B653.003A: item fetching failed at offset 5/7 [ 131.782606][ T5436] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 131.790177][ T19] thrustmaster 0003:044F:B653.003A: parse failed [ 131.805656][ T19] thrustmaster: probe of 0003:044F:B653.003A failed with error -22 [ 132.009611][ T3001] usb 3-1: USB disconnect, device number 21 [ 132.140132][ T5478] loop4: detected capacity change from 0 to 512 [ 132.147006][ T5478] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.157168][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 132.167478][ T5478] EXT4-fs (loop4): 1 truncate cleaned up [ 132.173003][ T5478] EXT4-fs mount: 8 callbacks suppressed [ 132.173022][ T5478] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.200525][ T4704] EXT4-fs (loop4): unmounting filesystem. [ 132.346185][ T5490] loop4: detected capacity change from 0 to 1024 [ 132.395070][ T5488] loop9: detected capacity change from 0 to 40427 [ 132.405729][ T346] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.405829][ T5488] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 132.426902][ T5488] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 132.442759][ T5488] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 132.468634][ T5488] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 132.475600][ T5488] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 132.500126][ T4461] syz-executor: attempt to access beyond end of device [ 132.500126][ T4461] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.545569][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.556506][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.566168][ T24] usb 9-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 132.587800][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.605996][ T24] usb 9-1: config 0 descriptor?? [ 132.715772][ T5520] loop9: detected capacity change from 0 to 256 [ 132.940097][ T5520] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 132.950259][ T5520] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 132.960563][ T5520] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 132.994651][ T5532] netlink: 'syz.9.2108': attribute type 15 has an invalid length. [ 133.002404][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2108'. [ 133.131544][ T24] elo 0003:04E7:0030.003B: item fetching failed at offset 5/7 [ 133.152325][ T24] elo 0003:04E7:0030.003B: parse failed [ 133.157826][ T24] elo: probe of 0003:04E7:0030.003B failed with error -22 [ 133.277684][ T5554] input: syz1 as /devices/virtual/input/input25 [ 133.351208][ T19] usb 9-1: USB disconnect, device number 4 [ 133.381316][ T3001] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 133.416650][ T5570] loop9: detected capacity change from 0 to 512 [ 133.424005][ T5570] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 133.445711][ T5570] EXT4-fs (loop9): 1 truncate cleaned up [ 133.451192][ T5570] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 133.469685][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 133.631629][ T5587] loop4: detected capacity change from 0 to 512 [ 133.642285][ T5587] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.651114][ T5587] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038 (0x7fffffff) [ 133.664494][ T5587] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 133.679011][ T5587] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 133.691660][ T5587] EXT4-fs (loop4): This should not happen!! Data will be lost [ 133.691660][ T5587] [ 133.701163][ T5587] EXT4-fs (loop4): Total free blocks count 0 [ 133.707196][ T5587] EXT4-fs (loop4): Free/Dirty block details [ 133.712919][ T5587] EXT4-fs (loop4): free_blocks=65280 [ 133.718263][ T5587] EXT4-fs (loop4): dirty_blocks=23 [ 133.723228][ T5587] EXT4-fs (loop4): Block reservation details [ 133.729229][ T5587] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 133.735527][ T5591] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 133.802385][ T3001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 133.813804][ T3001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.997424][ T3001] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 134.006375][ T3001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.014211][ T3001] usb 3-1: Product: syz [ 134.018326][ T3001] usb 3-1: Manufacturer: syz [ 134.022791][ T3001] usb 3-1: SerialNumber: syz [ 134.027749][ T3001] usb 3-1: config 0 descriptor?? [ 134.074794][ T3001] snd-usb-audio: probe of 3-1:0.0 failed with error -90 [ 134.116467][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.248804][ T5621] loop9: detected capacity change from 0 to 512 [ 134.259507][ T5621] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 134.268367][ T5621] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038 (0x7fffffff) [ 134.284301][ T5621] EXT4-fs (loop9): shut down requested (0) [ 134.292035][ T5621] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 134.295391][ T316] usb 3-1: USB disconnect, device number 22 [ 134.314835][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 134.315075][ T5625] loop8: detected capacity change from 0 to 512 [ 134.327015][ T5625] EXT4-fs: Ignoring removed i_version option [ 134.332846][ T5625] EXT4-fs: Ignoring removed nobh option [ 134.338668][ T5625] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 134.358652][ T5625] EXT4-fs (loop8): 1 truncate cleaned up [ 134.364277][ T5625] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 134.376527][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 134.393918][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 134.393936][ T28] audit: type=1400 audit(1731963215.246:898): avc: denied { ioctl } for pid=5624 comm="syz.8.2145" path="/99/bus/file1" dev="loop8" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.431546][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 134.483589][ T28] audit: type=1400 audit(1731963215.320:899): avc: denied { append } for pid=5639 comm="syz.9.2153" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.518163][ T28] audit: type=1400 audit(1731963215.320:900): avc: denied { map } for pid=5639 comm="syz.9.2153" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.528261][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.567727][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.575419][ T5642] loop9: detected capacity change from 0 to 8192 [ 134.577740][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 134.592769][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.604704][ T5648] loop8: detected capacity change from 0 to 512 [ 134.611539][ T24] usb 5-1: config 0 descriptor?? [ 134.627305][ T5648] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 134.636188][ T5648] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038 (0x7fffffff) [ 134.646342][ T5642] loop9: p1 p3 p4 [ 134.650134][ T5642] loop9: p1 size 3523149824 extends beyond EOD, truncated [ 134.659039][ T5642] loop9: p3 start 4294901760 is beyond EOD, truncated [ 134.669685][ T5642] loop9: p4 size 50331648 extends beyond EOD, truncated [ 134.669859][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 134.685113][ T102] loop9: p1 p3 p4 [ 134.688740][ T102] loop9: p1 size 3523149824 extends beyond EOD, truncated [ 134.697211][ T102] loop9: p3 start 4294901760 is beyond EOD, truncated [ 134.703967][ T102] loop9: p4 size 50331648 extends beyond EOD, truncated [ 134.754519][ T5652] loop8: detected capacity change from 0 to 4096 [ 134.759332][ T346] udevd[346]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 134.771499][ T319] udevd[319]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 134.790268][ T5652] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 134.885567][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 134.957891][ T28] audit: type=1400 audit(1731963215.763:901): avc: denied { bind } for pid=5672 comm="syz.2.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.981148][ T28] audit: type=1400 audit(1731963215.763:902): avc: denied { setopt } for pid=5672 comm="syz.2.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.056568][ T28] audit: type=1400 audit(1731963215.855:903): avc: denied { sqpoll } for pid=5684 comm="syz.2.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 135.136761][ T24] kone 0003:1E7D:2CED.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 135.200189][ T19] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 135.275744][ T316] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 135.362440][ T24] kone 0003:1E7D:2CED.003C: couldn't init struct kone_device [ 135.369672][ T24] kone 0003:1E7D:2CED.003C: couldn't install mouse [ 135.376661][ T24] kone: probe of 0003:1E7D:2CED.003C failed with error -5 [ 135.385014][ T24] usb 5-1: USB disconnect, device number 8 [ 135.476388][ T28] audit: type=1400 audit(1731963216.243:904): avc: denied { wake_alarm } for pid=5691 comm="syz.0.2174" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.503246][ T19] usb 9-1: Using ep0 maxpacket: 16 [ 135.530119][ T28] audit: type=1400 audit(1731963216.298:905): avc: denied { set_context_mgr } for pid=5697 comm="syz.0.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 135.638427][ T5706] sock: sock_set_timeout: `syz.0.2181' (pid 5706) tries to set negative timeout [ 135.655310][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.666500][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.670145][ T5708] SELinux: failed to load policy [ 135.676263][ T19] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.695009][ T19] usb 9-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 135.704176][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.706933][ T28] audit: type=1400 audit(1731963216.455:906): avc: denied { read write } for pid=5709 comm="syz.0.2183" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 135.712622][ T316] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 96, changing to 10 [ 135.738508][ T28] audit: type=1400 audit(1731963216.492:907): avc: denied { open } for pid=5709 comm="syz.0.2183" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 135.772274][ T316] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 49873, setting to 1024 [ 135.783656][ T19] usb 9-1: config 0 descriptor?? [ 135.788505][ T316] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 135.934788][ T5721] binder: 5720:5721 ioctl c018620b 20000140 returned -14 [ 135.952647][ T5723] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 135.990864][ T316] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.002269][ T5729] loop4: detected capacity change from 0 to 256 [ 136.015456][ T316] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.025053][ T316] usb 10-1: Product: syz [ 136.029561][ T316] usb 10-1: Manufacturer: syz [ 136.034200][ T316] usb 10-1: SerialNumber: syz [ 136.040489][ T5729] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 136.093197][ T5734] random: crng reseeded on system resumption [ 136.227655][ T5749] loop2: detected capacity change from 0 to 256 [ 136.240315][ T5749] FAT-fs (loop2): Directory bread(block 64) failed [ 136.246689][ T5749] FAT-fs (loop2): Directory bread(block 65) failed [ 136.253552][ T5749] FAT-fs (loop2): Directory bread(block 66) failed [ 136.259970][ T5749] FAT-fs (loop2): Directory bread(block 67) failed [ 136.267017][ T5749] FAT-fs (loop2): Directory bread(block 68) failed [ 136.273677][ T5749] FAT-fs (loop2): Directory bread(block 69) failed [ 136.280093][ T5749] FAT-fs (loop2): Directory bread(block 70) failed [ 136.286698][ T5749] FAT-fs (loop2): Directory bread(block 71) failed [ 136.293077][ T5749] FAT-fs (loop2): Directory bread(block 72) failed [ 136.299465][ T5749] FAT-fs (loop2): Directory bread(block 73) failed [ 136.306363][ T19] kye 0003:0458:5015.003D: item fetching failed at offset 10/11 [ 136.319621][ T19] kye 0003:0458:5015.003D: parse failed [ 136.325018][ T19] kye: probe of 0003:0458:5015.003D failed with error -22 [ 136.343432][ T338] kworker/u4:4: attempt to access beyond end of device [ 136.343432][ T338] loop2: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 136.530630][ T24] usb 9-1: USB disconnect, device number 5 [ 137.258491][ T316] cdc_ncm 10-1:1.0: bind() failure [ 137.280487][ T316] cdc_ncm: probe of 10-1:1.1 failed with error -71 [ 137.312587][ T316] cdc_mbim: probe of 10-1:1.1 failed with error -71 [ 137.340529][ T5782] block device autoloading is deprecated and will be removed. [ 137.341443][ T316] usb 10-1: USB disconnect, device number 5 [ 137.442105][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'. [ 137.476230][ T5787] device syz_tun entered promiscuous mode [ 137.481788][ T5787] device macsec1 entered promiscuous mode [ 137.508460][ T5787] device syz_tun left promiscuous mode [ 137.644429][ T5764] loop2: detected capacity change from 0 to 131072 [ 137.668018][ T5764] F2FS-fs (loop2): invalid crc value [ 137.694979][ T5764] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.744291][ T5764] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 138.066111][ T5780] loop8: detected capacity change from 0 to 131072 [ 138.092299][ T5780] F2FS-fs (loop8): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 138.105069][ T5780] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 138.120231][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 138.135480][ T5780] F2FS-fs (loop8): invalid crc value [ 138.150978][ T5833] loop9: detected capacity change from 0 to 512 [ 138.157319][ T5833] EXT4-fs: Ignoring removed i_version option [ 138.185834][ T5780] F2FS-fs (loop8): Found nat_bits in checkpoint [ 138.203477][ T5833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 138.232477][ T5833] System zones: 1-12 [ 138.237483][ T5833] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2238: bg 0: block 131: padding at end of block bitmap is not set [ 138.269607][ T5836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5836 comm=syz.0.2239 [ 138.277379][ T5833] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 138.288186][ T5839] loop2: detected capacity change from 0 to 2048 [ 138.302391][ T5780] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 138.302482][ T5833] EXT4-fs (loop9): 1 truncate cleaned up [ 138.309735][ T5780] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 138.327035][ T5833] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 138.358969][ T5839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 138.373341][ T5780] F2FS-fs (loop8): sanity_check_inode: corrupted inode i_blocks i_ino=8 iblocks=0, run fsck to fix. [ 138.401956][ T5780] F2FS-fs (loop8): sanity_check_inode: corrupted inode i_blocks i_ino=8 iblocks=0, run fsck to fix. [ 138.414078][ T5820] loop4: detected capacity change from 0 to 40427 [ 138.426394][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 138.428497][ T5820] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 138.443502][ T5820] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.461124][ T5820] F2FS-fs (loop4): invalid crc value [ 138.466851][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 138.490415][ T5859] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.505149][ T5820] F2FS-fs (loop4): Found nat_bits in checkpoint [ 138.526113][ T5859] F2FS-fs (loop19): Unable to read 1th superblock [ 138.554300][ T5859] I/O error, dev loop19, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.578457][ T5859] F2FS-fs (loop19): Unable to read 2th superblock [ 138.586081][ T5865] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.598671][ T5820] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 138.606095][ T5865] F2FS-fs (loop19): Unable to read 1th superblock [ 138.613489][ T5820] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 138.631882][ T5865] I/O error, dev loop19, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 138.642887][ T5865] F2FS-fs (loop19): Unable to read 2th superblock [ 138.651996][ T5873] loop2: detected capacity change from 0 to 128 [ 138.677319][ T5876] loop9: detected capacity change from 0 to 512 [ 138.684075][ T5876] EXT4-fs: Ignoring removed oldalloc option [ 138.690939][ T5876] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.742076][ T5876] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 138.763398][ T5876] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038 (0x7fffffff) [ 138.813261][ T5886] loop8: detected capacity change from 0 to 2048 [ 138.823125][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 138.831917][ T5886] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 138.865439][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 138.901733][ T5820] syz.4.2233: attempt to access beyond end of device [ 138.901733][ T5820] loop4: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 138.922131][ T5820] syz.4.2233: attempt to access beyond end of device [ 138.922131][ T5820] loop4: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 138.943374][ T5820] syz.4.2233: attempt to access beyond end of device [ 138.943374][ T5820] loop4: rw=2049, sector=49152, nr_sectors = 2144 limit=40427 [ 138.970233][ T5820] syz.4.2233: attempt to access beyond end of device [ 138.970233][ T5820] loop4: rw=2049, sector=51296, nr_sectors = 1952 limit=40427 [ 138.987421][ T5897] loop8: detected capacity change from 0 to 512 [ 139.001043][ T5820] syz.4.2233: attempt to access beyond end of device [ 139.001043][ T5820] loop4: rw=2049, sector=57344, nr_sectors = 2200 limit=40427 [ 139.006342][ T5897] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 139.024700][ T5820] syz.4.2233: attempt to access beyond end of device [ 139.024700][ T5820] loop4: rw=2049, sector=59544, nr_sectors = 2336 limit=40427 [ 139.027169][ T5897] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038 (0x7fffffff) [ 139.047126][ T5820] syz.4.2233: attempt to access beyond end of device [ 139.047126][ T5820] loop4: rw=2049, sector=61880, nr_sectors = 2048 limit=40427 [ 139.069821][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 139.069889][ T5820] syz.4.2233: attempt to access beyond end of device [ 139.069889][ T5820] loop4: rw=2049, sector=63928, nr_sectors = 2048 limit=40427 [ 139.096068][ T5820] syz.4.2233: attempt to access beyond end of device [ 139.096068][ T5820] loop4: rw=2049, sector=65976, nr_sectors = 2056 limit=40427 [ 139.116865][ T5820] syz.4.2233: attempt to access beyond end of device [ 139.116865][ T5820] loop4: rw=2049, sector=68032, nr_sectors = 2056 limit=40427 [ 139.165084][ T5913] loop8: detected capacity change from 0 to 128 [ 139.173840][ T5913] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 139.182378][ T5913] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038 (0x7fffffff) [ 139.194776][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 139.204233][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 139.204991][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 139.295213][ T19] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 139.316907][ T39] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 139.481836][ T5926] device erspan1 entered promiscuous mode [ 139.512117][ T659] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 139.576977][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 139.707168][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.707440][ T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 139.727823][ T39] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.728565][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.750950][ T19] usb 10-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 139.759902][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.782955][ T19] usb 10-1: config 0 descriptor?? [ 139.817926][ T5948] loop4: detected capacity change from 0 to 40427 [ 139.824771][ T5948] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 139.832741][ T5948] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.841827][ T5948] F2FS-fs (loop4): invalid crc value [ 139.848573][ T5948] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.884778][ T5948] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.891840][ T5948] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.902005][ T659] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.913033][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.921892][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.930074][ T659] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.931822][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 139.939678][ T659] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.948875][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 139.961525][ T39] usb 3-1: Product: syz [ 139.973948][ T39] usb 3-1: Manufacturer: syz [ 139.978740][ T39] usb 3-1: SerialNumber: syz [ 139.983653][ T659] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 139.993213][ T659] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.001937][ T659] usb 9-1: config 0 descriptor?? [ 140.010532][ T5884] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 140.250162][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.259465][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.270371][ T39] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 140.278140][ T39] usb 3-1: USB disconnect, device number 23 [ 140.292674][ T19] elo 0003:04E7:0030.003E: item fetching failed at offset 5/7 [ 140.300200][ T19] elo 0003:04E7:0030.003E: parse failed [ 140.305945][ T19] elo: probe of 0003:04E7:0030.003E failed with error -22 [ 140.414345][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 140.414362][ T28] audit: type=1400 audit(1731963220.802:975): avc: denied { write } for pid=5963 comm="syz.0.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 140.520469][ T659] prodikeys 0003:041E:2801.003F: unexpected long global item [ 140.528163][ T659] prodikeys 0003:041E:2801.003F: hid parse failed [ 140.534928][ T659] prodikeys: probe of 0003:041E:2801.003F failed with error -22 [ 140.545385][ T19] usb 10-1: USB disconnect, device number 6 [ 140.551973][ T316] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.739322][ T224] usb 9-1: USB disconnect, device number 6 [ 140.953155][ T316] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 140.961176][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 140.972416][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 140.983606][ T316] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.996672][ T316] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.005536][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.014213][ T316] usb 5-1: config 0 descriptor?? [ 141.039639][ T5959] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 141.108291][ T28] audit: type=1400 audit(1731963221.448:976): avc: denied { watch } for pid=5974 comm="syz.0.2292" path="/409" dev="tmpfs" ino=2148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 141.158461][ T28] audit: type=1400 audit(1731963221.485:977): avc: denied { bind } for pid=5986 comm="syz.9.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.182320][ T224] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 141.204454][ T5995] syz.9.2302[5995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.204513][ T5995] syz.9.2302[5995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.236746][ T5999] loop9: detected capacity change from 0 to 128 [ 141.256029][ T5999] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 141.264544][ T5999] ext4 filesystem being mounted at /120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 141.301233][ T28] audit: type=1400 audit(1731963221.624:978): avc: denied { link } for pid=5998 comm="syz.9.2304" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 141.344677][ T28] audit: type=1326 audit(1731963221.624:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.8.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c217e719 code=0x7ffc0000 [ 141.345080][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 141.368712][ T28] audit: type=1326 audit(1731963221.624:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.8.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37c217e719 code=0x7ffc0000 [ 141.398518][ T28] audit: type=1326 audit(1731963221.624:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.8.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c217e719 code=0x7ffc0000 [ 141.423475][ T28] audit: type=1326 audit(1731963221.624:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.8.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37c217e719 code=0x7ffc0000 [ 141.447630][ T28] audit: type=1326 audit(1731963221.624:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.8.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c217e719 code=0x7ffc0000 [ 141.471339][ T28] audit: type=1326 audit(1731963221.624:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6002 comm="syz.8.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37c217e719 code=0x7ffc0000 [ 141.517178][ T316] plantronics 0003:047F:FFFF.0040: unknown main item tag 0xd [ 141.525946][ T316] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 141.539614][ T316] plantronics 0003:047F:FFFF.0040: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 141.635552][ T224] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 141.646875][ T224] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 141.658117][ T224] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 141.666973][ T224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.711370][ T5968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.809705][ T3001] usb 5-1: USB disconnect, device number 9 [ 141.884650][ T659] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 142.090474][ T39] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 142.144648][ T659] usb 9-1: Using ep0 maxpacket: 32 [ 142.198856][ T224] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 142.206365][ T224] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input27 [ 142.216678][ T224] usb 3-1: USB disconnect, device number 24 [ 142.274657][ T659] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 142.282755][ T659] usb 9-1: config 0 has no interface number 0 [ 142.372818][ T6049] loop4: detected capacity change from 0 to 512 [ 142.379418][ T6049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.390406][ T6049] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.2325: bad orphan inode 131083 [ 142.401127][ T6049] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.430977][ T4704] EXT4-fs (loop4): unmounting filesystem. [ 142.458937][ T659] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 142.467967][ T659] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.476427][ T659] usb 9-1: Product: syz [ 142.480830][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.491934][ T659] usb 9-1: Manufacturer: syz [ 142.496550][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.506547][ T659] usb 9-1: SerialNumber: syz [ 142.511638][ T659] usb 9-1: config 0 descriptor?? [ 142.516920][ T39] usb 10-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 142.528324][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.537256][ T39] usb 10-1: config 0 descriptor?? [ 142.567739][ T659] smsc95xx v2.0.0 [ 142.599437][ T6072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6072 comm=syz.0.2335 [ 142.762190][ T3001] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 143.044830][ T39] pantherlord 0003:0F30:0111.0041: item fetching failed at offset 6/7 [ 143.053017][ T39] pantherlord 0003:0F30:0111.0041: parse failed [ 143.059524][ T39] pantherlord: probe of 0003:0F30:0111.0041 failed with error -22 [ 143.112504][ T6101] loop2: detected capacity change from 0 to 512 [ 143.121272][ T6101] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.130001][ T6101] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038 (0x7fffffff) [ 143.143655][ T6101] EXT4-fs (loop2): shut down requested (2) [ 143.155361][ T1759] EXT4-fs (loop2): unmounting filesystem. [ 143.206438][ T3001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.217749][ T3001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.227516][ T3001] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.237267][ T3001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.260764][ T3001] usb 5-1: config 0 descriptor?? [ 143.265971][ T39] usb 10-1: USB disconnect, device number 7 [ 143.358230][ T6118] loop2: detected capacity change from 0 to 4096 [ 143.366803][ T6118] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.390010][ T3047] EXT4-fs (loop2): unmounting filesystem. [ 143.447258][ T43] tipc: Disabling bearer [ 143.452761][ T43] tipc: Left network mode [ 143.509820][ T659] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 143.577392][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.584253][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.591705][ T6121] device bridge_slave_0 entered promiscuous mode [ 143.600737][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.607689][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.614787][ T6121] device bridge_slave_1 entered promiscuous mode [ 143.667050][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.673914][ T6121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.681066][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.687939][ T6121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.712553][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.720134][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.727875][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.738025][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.746120][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.752984][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.760250][ T659] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 143.771074][ T659] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 143.778233][ T659] usb 9-1: USB disconnect, device number 7 [ 143.781333][ T3001] keytouch 0003:0926:3333.0042: fixing up Keytouch IEC report descriptor [ 143.794681][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.802939][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.803540][ T3001] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0042/input/input28 [ 143.809854][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.841926][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.849933][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.867172][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.884497][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.893439][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.901098][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.908911][ T3001] keytouch 0003:0926:3333.0042: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 143.924939][ T6121] device veth0_vlan entered promiscuous mode [ 143.925460][ T6132] kvm [6131]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xb9200080000 [ 143.940070][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.949926][ T6121] device veth1_macvtap entered promiscuous mode [ 143.960973][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.972598][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.998191][ T43] device bridge_slave_1 left promiscuous mode [ 144.004410][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.012013][ T659] usb 5-1: USB disconnect, device number 10 [ 144.018160][ T43] device bridge_slave_0 left promiscuous mode [ 144.024416][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.039795][ T43] device veth1_macvtap left promiscuous mode [ 144.045766][ T43] device veth0_vlan left promiscuous mode [ 144.205583][ T6142] loop9: detected capacity change from 0 to 256 [ 144.219180][ T6142] FAT-fs (loop9): Directory bread(block 64) failed [ 144.225710][ T6142] FAT-fs (loop9): Directory bread(block 65) failed [ 144.232075][ T6142] FAT-fs (loop9): Directory bread(block 66) failed [ 144.238568][ T6142] FAT-fs (loop9): Directory bread(block 67) failed [ 144.245292][ T6142] FAT-fs (loop9): Directory bread(block 68) failed [ 144.252041][ T6142] FAT-fs (loop9): Directory bread(block 69) failed [ 144.258462][ T6142] FAT-fs (loop9): Directory bread(block 70) failed [ 144.264701][ T6142] FAT-fs (loop9): Directory bread(block 71) failed [ 144.271176][ T6142] FAT-fs (loop9): Directory bread(block 72) failed [ 144.277593][ T6142] FAT-fs (loop9): Directory bread(block 73) failed [ 144.284042][ T39] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 144.574804][ T6156] loop4: detected capacity change from 0 to 256 [ 144.584599][ T6156] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 144.679880][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.690953][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.700530][ T39] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 144.709543][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.717905][ T39] usb 2-1: config 0 descriptor?? [ 144.929034][ T224] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.232364][ T224] usb 5-1: Using ep0 maxpacket: 16 [ 145.233846][ T39] hid-steam 0003:28DE:1142.0043: unknown main item tag 0x0 [ 145.244468][ T39] hid-steam 0003:28DE:1142.0043: item fetching failed at offset 2/5 [ 145.252399][ T39] hid-steam 0003:28DE:1142.0043: steam_probe:parse of hid interface failed [ 145.261195][ T39] hid-steam: probe of 0003:28DE:1142.0043 failed with error -22 [ 145.362448][ T224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.388400][ T6164] loop9: detected capacity change from 0 to 40427 [ 145.397804][ T6164] F2FS-fs (loop9): Found nat_bits in checkpoint [ 145.433278][ T6164] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 145.454981][ T39] usb 2-1: USB disconnect, device number 8 [ 145.455710][ T4461] bio_check_eod: 6 callbacks suppressed [ 145.455728][ T4461] syz-executor: attempt to access beyond end of device [ 145.455728][ T4461] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 145.524972][ T316] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 145.568617][ T224] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 145.577810][ T224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.585900][ T224] usb 5-1: Product: syz [ 145.590066][ T224] usb 5-1: Manufacturer: syz [ 145.594509][ T224] usb 5-1: SerialNumber: syz [ 145.599495][ T224] usb 5-1: config 0 descriptor?? [ 145.806620][ T316] usb 9-1: Using ep0 maxpacket: 8 [ 145.871633][ T659] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 145.947675][ T316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.962240][ T316] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.971994][ T316] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 145.980905][ T316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.989362][ T316] usb 9-1: config 0 descriptor?? [ 146.019294][ T6190] loop1: detected capacity change from 0 to 256 [ 146.028476][ T6190] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 146.074853][ T6194] loop1: detected capacity change from 0 to 512 [ 146.083296][ T6194] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2390: Invalid inode bitmap blk 4 in block_group 0 [ 146.095906][ T6194] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.107416][ T6194] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 146.126809][ T6121] EXT4-fs (loop1): unmounting filesystem. [ 146.185919][ T224] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 146.192211][ T224] usb 5-1: No valid video chain found. [ 146.198417][ T224] usb 5-1: USB disconnect, device number 11 [ 146.283483][ T659] usb 10-1: config 0 has an invalid interface number: 192 but max is 0 [ 146.291584][ T659] usb 10-1: config 0 has no interface number 0 [ 146.362334][ T6212] loop1: detected capacity change from 0 to 2048 [ 146.371509][ T6212] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 146.379968][ T6212] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 146.401477][ T6121] EXT4-fs (loop1): unmounting filesystem. [ 146.467796][ T659] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=a1.69 [ 146.476923][ T659] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.486032][ T659] usb 10-1: Product: syz [ 146.488164][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 146.488182][ T28] audit: type=1400 audit(1731963226.414:1130): avc: denied { read } for pid=6224 comm="syz.1.2402" path="socket:[47483]" dev="sockfs" ino=47483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.490275][ T659] usb 10-1: Manufacturer: syz [ 146.497311][ T316] kone 0003:1E7D:2CED.0044: collection stack underflow [ 146.520757][ T659] usb 10-1: SerialNumber: syz [ 146.525288][ T316] kone 0003:1E7D:2CED.0044: item 0 1 0 12 parsing failed [ 146.532036][ T659] usb 10-1: config 0 descriptor?? [ 146.536011][ T316] kone 0003:1E7D:2CED.0044: parse failed [ 146.553050][ T316] kone: probe of 0003:1E7D:2CED.0044 failed with error -22 [ 146.713549][ T28] audit: type=1326 audit(1731963226.617:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.4.2404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1038f7e719 code=0x0 [ 146.736559][ T659] usb 9-1: USB disconnect, device number 8 [ 146.800580][ T316] usb 10-1: USB disconnect, device number 8 [ 147.310084][ T6235] loop8: detected capacity change from 0 to 256 [ 147.316562][ T6235] exfat: Unknown parameter '0x000000000000000600000000000000000000' [ 147.363148][ T6237] loop9: detected capacity change from 0 to 512 [ 147.369886][ T6237] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.408348][ T6237] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 147.418060][ T6237] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038 (0x7fffffff) [ 147.440682][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 147.521003][ T28] audit: type=1400 audit(1731963227.365:1132): avc: denied { read } for pid=6260 comm="syz.9.2418" path="socket:[47539]" dev="sockfs" ino=47539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.587935][ T6268] loop8: detected capacity change from 0 to 512 [ 147.620820][ T6268] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 147.624997][ T6279] loop1: detected capacity change from 0 to 1024 [ 147.630055][ T6268] ext4 filesystem being mounted at /133/bus supports timestamps until 2038 (0x7fffffff) [ 147.646090][ T6279] EXT4-fs: Ignoring removed orlov option [ 147.652832][ T6279] EXT4-fs (loop1): Test dummy encryption mode enabled [ 147.668849][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 147.676188][ T6279] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 147.714432][ T6285] loop8: detected capacity change from 0 to 1024 [ 147.722287][ T6121] EXT4-fs (loop1): unmounting filesystem. [ 147.742853][ T6285] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 147.760329][ T6293] syz.1.2430[6293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.760412][ T6293] syz.1.2430[6293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.780680][ T6285] EXT4-fs (loop8): shut down requested (2) [ 147.832622][ T338] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 147.850710][ T28] audit: type=1400 audit(1731963227.660:1133): avc: denied { bind } for pid=6300 comm="syz.9.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.875731][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 147.928278][ T6317] loop8: detected capacity change from 0 to 512 [ 147.943094][ T6317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.952536][ T6317] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.984649][ T6317] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 147.996536][ T6329] loop4: detected capacity change from 0 to 2048 [ 148.001971][ T6317] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 148.019711][ T6329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 148.030330][ T6317] EXT4-fs (loop8): 1 truncate cleaned up [ 148.037096][ T6329] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 148.039924][ T6317] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 148.053721][ T6334] kvm: apic: phys broadcast and lowest prio [ 148.060834][ T6329] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 148.078075][ T6317] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 148.078347][ T28] audit: type=1400 audit(1731963227.863:1134): avc: denied { remount } for pid=6316 comm="syz.8.2444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 148.104572][ T6329] EXT4-fs (loop4): This should not happen!! Data will be lost [ 148.104572][ T6329] [ 148.114958][ T6329] EXT4-fs (loop4): Total free blocks count 0 [ 148.121297][ T6329] EXT4-fs (loop4): Free/Dirty block details [ 148.127521][ T6317] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 148.130255][ T6329] EXT4-fs (loop4): free_blocks=2415919104 [ 148.137701][ T6340] EXT4-fs error (device loop4): __ext4_remount:6435: comm syz.4.2448: Abort forced by user [ 148.139883][ T6329] EXT4-fs (loop4): dirty_blocks=16 [ 148.154528][ T6329] EXT4-fs (loop4): Block reservation details [ 148.160277][ T6329] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 148.166213][ T6317] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.2444: Logical block already allocated [ 148.166431][ T6340] EXT4-fs (loop4): Remounting filesystem read-only [ 148.184073][ T6317] EXT4-fs (loop8): Remounting filesystem read-only [ 148.196295][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 148.201145][ T3230] Bluetooth: hci0: command 0x1003 tx timeout [ 148.202344][ T3115] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.241063][ T6347] loop4: detected capacity change from 0 to 512 [ 148.262675][ T6347] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2456: inode #1: comm syz.4.2456: iget: illegal inode # [ 148.276758][ T6347] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2456: error while reading EA inode 1 err=-117 [ 148.289356][ T6347] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2456: inode #1: comm syz.4.2456: iget: illegal inode # [ 148.302726][ T6347] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2456: error while reading EA inode 1 err=-117 [ 148.315986][ T6347] EXT4-fs (loop4): 1 orphan inode deleted [ 148.330789][ T6347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 148.354729][ T6347] EXT4-fs (loop4): shut down requested (1) [ 148.378304][ T4704] EXT4-fs (loop4): unmounting filesystem. [ 148.592161][ T6363] loop4: detected capacity change from 0 to 40427 [ 148.599015][ T6363] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 148.612430][ T6363] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 148.621956][ T6363] F2FS-fs (loop4): invalid crc value [ 148.628575][ T6363] F2FS-fs (loop4): Found nat_bits in checkpoint [ 148.678541][ T6363] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 148.685574][ T6363] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 148.704675][ T4704] syz-executor: attempt to access beyond end of device [ 148.704675][ T4704] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.890434][ T6348] loop8: detected capacity change from 0 to 131072 [ 148.900007][ T6348] F2FS-fs (loop8): Found nat_bits in checkpoint [ 148.906232][ T316] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.939160][ T6348] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 149.151120][ T6381] hub 6-0:1.0: USB hub found [ 149.157423][ T6381] hub 6-0:1.0: 1 port detected [ 149.165222][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 149.295242][ T316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.334339][ T6388] loop9: detected capacity change from 0 to 40427 [ 149.341260][ T6388] F2FS-fs (loop9): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 149.348828][ T6388] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 149.357640][ T6388] F2FS-fs (loop9): invalid crc value [ 149.364349][ T6388] F2FS-fs (loop9): Found nat_bits in checkpoint [ 149.392807][ T19] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 149.410837][ T6388] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 149.418611][ T6388] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 149.435013][ T4461] syz-executor: attempt to access beyond end of device [ 149.435013][ T4461] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.461011][ T6401] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2475'. [ 149.479486][ T316] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 149.490794][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.505928][ T316] usb 2-1: Product: syz [ 149.510836][ T316] usb 2-1: Manufacturer: syz [ 149.515329][ T316] usb 2-1: SerialNumber: syz [ 149.522522][ T316] usb 2-1: config 0 descriptor?? [ 149.793650][ T19] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 149.794292][ T6424] syz.4.2484[6424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.803325][ T19] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 149.803381][ T6424] syz.4.2484[6424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.837736][ T28] audit: type=1400 audit(1731963229.506:1135): avc: denied { remount } for pid=6425 comm="syz.4.2485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 149.977993][ T19] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 149.986959][ T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.994913][ T19] usb 9-1: Product: syz [ 149.998885][ T19] usb 9-1: Manufacturer: syz [ 150.003333][ T19] usb 9-1: SerialNumber: syz [ 150.008364][ T19] usb 9-1: config 0 descriptor?? [ 150.032009][ T6379] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 150.039076][ T6379] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 150.086205][ T316] usb 2-1: Found UVC 0.00 device syz (045e:0721) [ 150.092411][ T316] usb 2-1: No valid video chain found. [ 150.098218][ T316] usb 2-1: USB disconnect, device number 9 [ 150.270308][ T339] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 150.279104][ T6379] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 150.286132][ T6379] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 150.485625][ T6436] loop9: detected capacity change from 0 to 256 [ 150.492003][ T6436] exfat: Deprecated parameter 'utf8' [ 150.497156][ T6436] exfat: Deprecated parameter 'utf8' [ 150.502292][ T6436] exfat: Deprecated parameter 'utf8' [ 150.510216][ T6436] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 150.538641][ T6438] binder: 6437:6438 ioctl c0306201 20000480 returned -14 [ 150.618597][ T6444] loop1: detected capacity change from 0 to 2048 [ 150.629430][ T6444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 150.637858][ T6444] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 150.654752][ T6121] EXT4-fs (loop1): unmounting filesystem. [ 150.736230][ T339] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 150.746301][ T339] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 150.755111][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.813650][ T339] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 150.855921][ T6454] loop1: detected capacity change from 0 to 256 [ 150.862202][ T6454] exfat: Deprecated parameter 'namecase' [ 150.871296][ T6454] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 150.885617][ T28] audit: type=1400 audit(1731963230.466:1136): avc: denied { write } for pid=6453 comm="syz.1.2497" path="/34/file0/file1" dev="loop1" ino=1048707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.909302][ T28] audit: type=1400 audit(1731963230.466:1137): avc: denied { execute } for pid=6453 comm="syz.1.2497" path="/34/file0/file1" dev="loop1" ino=1048707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.031625][ T39] usb 5-1: USB disconnect, device number 12 [ 151.256281][ T339] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.386303][ T19] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 151.396515][ T19] dm9601 9-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet, e0:5a:3b:32:80:80 [ 151.409264][ T19] usb 9-1: USB disconnect, device number 9 [ 151.415157][ T19] dm9601 9-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet [ 151.478601][ T6462] loop9: detected capacity change from 0 to 256 [ 151.527077][ T339] usb 2-1: Using ep0 maxpacket: 8 [ 151.665735][ T28] audit: type=1400 audit(1731963231.186:1138): avc: denied { ioctl } for pid=6483 comm="syz.9.2512" path="socket:[49064]" dev="sockfs" ino=49064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 151.700444][ T339] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.710718][ T339] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.724782][ T339] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.799397][ T19] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x4 [ 151.806905][ T19] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x2 [ 151.814451][ T19] hid-generic 0000:3000000:0000.0045: unknown main item tag 0x3 [ 151.822365][ T19] hid-generic 0000:3000000:0000.0045: hidraw0: HID v0.00 Device [sy] on syz0 [ 151.848866][ T6505] device wireguard0 entered promiscuous mode [ 151.866742][ T6507] loop8: detected capacity change from 0 to 2048 [ 151.897673][ T6507] Alternate GPT is invalid, using primary GPT. [ 151.903702][ T6507] loop8: p1 p2 p3 [ 151.938799][ T339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.947904][ T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.955821][ T339] usb 2-1: Product: syz [ 151.965085][ T339] usb 2-1: Manufacturer: syz [ 152.030731][ T339] usb 2-1: SerialNumber: syz [ 152.176101][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 152.176119][ T28] audit: type=1400 audit(1731963231.657:1140): avc: denied { watch_reads } for pid=6534 comm="syz.4.2535" path="/139" dev="tmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.380964][ T6543] loop4: detected capacity change from 0 to 512 [ 152.387635][ T6543] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.399357][ T6543] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2538: inode #255: comm syz.4.2538: iget: illegal inode # [ 152.413053][ T6543] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2538: error while reading EA inode 255 err=-117 [ 152.425727][ T6543] EXT4-fs (loop4): 1 truncate cleaned up [ 152.431286][ T19] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 152.431307][ T6543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 152.456144][ T4704] EXT4-fs (loop4): unmounting filesystem. [ 152.794509][ T224] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 152.827040][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 152.838193][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.847827][ T19] usb 10-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 152.856782][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.865240][ T19] usb 10-1: config 0 descriptor?? [ 153.009710][ T28] audit: type=1400 audit(1731963232.423:1141): avc: denied { create } for pid=6562 comm="syz.0.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 153.184563][ T224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.195362][ T224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.204944][ T224] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 153.213869][ T224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.222220][ T224] usb 5-1: config 0 descriptor?? [ 153.260454][ T339] cdc_ncm 2-1:1.0: bind() failure [ 153.269859][ T339] usb 2-1: USB disconnect, device number 10 [ 153.355963][ T6571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6571 comm=syz.8.2550 [ 153.369721][ T19] smartjoyplus 0003:0B43:0003.0046: unbalanced collection at end of report description [ 153.379767][ T19] smartjoyplus 0003:0B43:0003.0046: parse failed [ 153.386244][ T19] smartjoyplus: probe of 0003:0B43:0003.0046 failed with error -22 [ 153.607469][ T39] usb 10-1: USB disconnect, device number 9 [ 153.737682][ T224] petalynx 0003:18B1:0037.0047: collection stack underflow [ 153.745024][ T224] petalynx 0003:18B1:0037.0047: item 0 1 0 12 parsing failed [ 153.752581][ T224] petalynx 0003:18B1:0037.0047: parse failed [ 153.758453][ T224] petalynx: probe of 0003:18B1:0037.0047 failed with error -22 [ 153.921791][ T19] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 153.975854][ T224] usb 5-1: USB disconnect, device number 13 [ 154.170597][ T6590] SELinux: policydb version 0 does not match my version range 15-33 [ 154.178739][ T6590] SELinux: failed to load policy [ 154.183595][ T19] usb 9-1: Using ep0 maxpacket: 8 [ 154.289522][ T659] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 154.376702][ T6602] loop9: detected capacity change from 0 to 256 [ 154.385788][ T6602] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 154.483244][ T6609] loop9: detected capacity change from 0 to 512 [ 154.489503][ T19] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 154.491768][ T6609] EXT4-fs error (device loop9): ext4_orphan_get:1396: inode #15: comm syz.9.2568: casefold flag without casefold feature [ 154.498572][ T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.511295][ T6609] EXT4-fs error (device loop9): ext4_orphan_get:1401: comm syz.9.2568: couldn't read orphan inode 15 (err -117) [ 154.519127][ T19] usb 9-1: Product: syz [ 154.531039][ T6609] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 154.541935][ T19] usb 9-1: Manufacturer: syz [ 154.549708][ T19] usb 9-1: SerialNumber: syz [ 154.556092][ T19] usb 9-1: config 0 descriptor?? [ 154.563841][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 154.640548][ T6628] loop4: detected capacity change from 0 to 1024 [ 154.649470][ T6628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.671899][ T6631] loop9: detected capacity change from 0 to 256 [ 154.672268][ T4704] EXT4-fs (loop4): unmounting filesystem. [ 154.681076][ T6631] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 154.700887][ T28] audit: type=1400 audit(1731963233.983:1142): avc: denied { watch watch_reads } for pid=6630 comm="syz.9.2578" path="/213/file0" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.733839][ T659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.747016][ T659] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.753302][ T6637] loop9: detected capacity change from 0 to 512 [ 154.756637][ T659] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 154.756667][ T659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.757558][ T659] usb 2-1: config 0 descriptor?? [ 154.763820][ T6637] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 154.793004][ T6637] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 154.799327][ T6637] EXT4-fs (loop9): mount failed [ 154.823803][ T19] usb 9-1: USB disconnect, device number 10 [ 155.046226][ T6644] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2583'. [ 155.094790][ T6652] loop9: detected capacity change from 0 to 256 [ 155.107562][ T28] audit: type=1400 audit(1731963234.361:1143): avc: denied { mounton } for pid=6651 comm="syz.9.2587" path="/220/file0" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 155.109991][ T6652] incfs: ino conflict with backing FS 1 [ 155.153936][ T6654] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 155.204724][ T28] audit: type=1400 audit(1731963234.454:1144): avc: denied { read } for pid=6661 comm="syz.9.2592" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 155.257034][ T6664] syz.9.2593[6664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.257093][ T6664] syz.9.2593[6664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.269905][ T28] audit: type=1400 audit(1731963234.518:1145): avc: denied { read } for pid=6663 comm="syz.9.2593" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.304039][ T28] audit: type=1400 audit(1731963234.518:1146): avc: denied { open } for pid=6663 comm="syz.9.2593" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.328302][ T659] hid (null): bogus close delimiter [ 155.334389][ T28] audit: type=1400 audit(1731963234.518:1147): avc: denied { ioctl } for pid=6663 comm="syz.9.2593" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.370605][ T6668] loop9: detected capacity change from 0 to 1024 [ 155.377142][ T6668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.396247][ T6668] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 155.407908][ T28] audit: type=1400 audit(1731963234.648:1148): avc: denied { execute } for pid=6667 comm="syz.9.2595" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.431268][ T28] audit: type=1400 audit(1731963234.666:1149): avc: denied { execute_no_trans } for pid=6667 comm="syz.9.2595" path="/228/file1/file0/file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.465172][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 155.498378][ T6684] loop8: detected capacity change from 0 to 512 [ 155.525458][ T6684] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 155.533199][ T6684] System zones: 0-2, 18-18, 34-34 [ 155.538791][ T6684] EXT4-fs error (device loop8): ext4_acquire_dquot:6787: comm syz.8.2601: Failed to acquire dquot type 0 [ 155.549955][ T659] usb 2-1: string descriptor 0 read error: -22 [ 155.550189][ T6684] EXT4-fs (loop8): Remounting filesystem read-only [ 155.562466][ T6684] EXT4-fs (loop8): 1 orphan inode deleted [ 155.568094][ T6684] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 155.576945][ T6684] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038 (0x7fffffff) [ 155.604949][ T4408] EXT4-fs (loop8): unmounting filesystem. [ 155.775235][ T659] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0048/input/input30 [ 155.787895][ T659] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0048/input/input31 [ 155.800196][ T659] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0048/input/input32 [ 155.813551][ T659] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0048/input/input33 [ 155.826563][ T659] uclogic 0003:256C:006D.0048: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 155.863219][ T6704] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.870785][ T6704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.877841][ T6704] IPv6: NLM_F_CREATE should be set when creating new route [ 155.884841][ T6704] IPv6: NLM_F_CREATE should be set when creating new route [ 155.926632][ T24] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 155.993827][ T659] usb 2-1: USB disconnect, device number 11 [ 156.002292][ T6722] binder: 6721:6722 ioctl c0306201 200007c0 returned -14 [ 156.097941][ T6730] loop8: detected capacity change from 0 to 256 [ 156.106503][ T6730] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 156.116501][ T6730] FAT-fs (loop8): Filesystem has been set read-only [ 156.134006][ T39] kernel write not supported for file /vcsa1 (pid: 39 comm: kworker/1:1) [ 156.153701][ T6734] loop8: detected capacity change from 0 to 512 [ 156.160997][ T6734] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 156.168779][ T6734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=880fc018, mo2=0002] [ 156.177258][ T6734] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80) [ 156.186790][ T6734] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 156.197143][ T6734] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.2625: dx entry: limit 65535 != root limit 120 [ 156.209157][ T6734] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.2625: Corrupt directory, running e2fsck is recommended [ 156.347964][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.363918][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.377151][ T24] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.386442][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.395083][ T24] usb 10-1: config 0 descriptor?? [ 156.406164][ T6747] syz.8.2630[6747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.406243][ T6747] syz.8.2630[6747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.452394][ T6753] futex_wake_op: syz.8.2633 tries to shift op by 144; fix this program [ 156.511492][ T6758] loop8: detected capacity change from 0 to 128 [ 156.521948][ T6758] FAT-fs (loop8): Unrecognized mount option "/dev/ppp" or missing value [ 156.634162][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2640'. [ 156.767589][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 156.781685][ T6781] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2645'. [ 156.867871][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 156.873745][ T3115] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 156.911843][ T24] keytouch 0003:0926:3333.0049: fixing up Keytouch IEC report descriptor [ 156.926793][ T6792] incfs: Options parsing error. -22 [ 156.932631][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0049/input/input34 [ 156.940039][ T6792] incfs: mount failed -22 [ 157.033352][ T24] keytouch 0003:0926:3333.0049: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 157.042625][ T6804] loop8: detected capacity change from 0 to 1024 [ 157.057129][ T6804] EXT4-fs: Ignoring removed orlov option [ 157.062729][ T6804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.137539][ T24] usb 10-1: USB disconnect, device number 10 [ 157.279602][ T19] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 157.384940][ T6819] block device autoloading is deprecated and will be removed. [ 157.393067][ T6819] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 157.413335][ T6821] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2662'. [ 157.501557][ T6833] loop0: detected capacity change from 0 to 4096 [ 157.539576][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 157.637198][ T6843] loop1: detected capacity change from 0 to 1024 [ 157.666330][ T6121] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 168: padding at end of block bitmap is not set [ 157.669669][ T19] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 157.689701][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.698447][ T19] usb 5-1: config 0 descriptor?? [ 157.716719][ T6121] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 157.737933][ T6121] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 157.746234][ T6121] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 157.754151][ T6121] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 157.763381][ T6121] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 157.771376][ T6121] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 157.779273][ T6121] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 157.787158][ T6121] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 157.795048][ T6121] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 157.802902][ T6121] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 157.810884][ T6121] fscrypt (loop1, inode 12): Error -61 getting encryption context [ 157.983911][ T19] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 158.028368][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.035319][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.042524][ T6862] device bridge_slave_0 entered promiscuous mode [ 158.049447][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.056361][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.063601][ T6862] device bridge_slave_1 entered promiscuous mode [ 158.118460][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.125336][ T6862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.132425][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.139282][ T6862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.163757][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.171521][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.179289][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.188696][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.196864][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.203752][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.213567][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.221650][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.228531][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.242676][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.252496][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.268902][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.281994][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.289986][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.297605][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.305994][ T6862] device veth0_vlan entered promiscuous mode [ 158.319110][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.328571][ T6862] device veth1_macvtap entered promiscuous mode [ 158.334721][ T659] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 158.347533][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.361708][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.440086][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 158.440112][ T28] audit: type=1400 audit(1731963237.444:1155): avc: denied { module_load } for pid=6882 comm="syz.5.2688" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 158.440130][ T6883] Invalid ELF header magic: != ELF [ 158.493003][ T28] audit: type=1400 audit(1731963237.481:1156): avc: denied { name_bind } for pid=6884 comm="syz.5.2690" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 158.503616][ T6889] loop5: detected capacity change from 0 to 256 [ 158.523475][ T6889] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 158.562792][ T6891] loop0: detected capacity change from 0 to 8192 [ 158.570192][ T6891] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.591839][ T296] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 158.600169][ T296] FAT-fs (loop0): Filesystem has been set read-only [ 158.612191][ T659] usb 10-1: Using ep0 maxpacket: 16 [ 158.640628][ T6902] loop0: detected capacity change from 0 to 512 [ 158.648015][ T6902] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.659887][ T6902] EXT4-fs (loop0): 1 truncate cleaned up [ 158.689647][ T28] audit: type=1400 audit(1731963237.675:1157): avc: denied { mount } for pid=6908 comm="syz.0.2699" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.741163][ T28] audit: type=1326 audit(1731963237.712:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8297e719 code=0x7fc00000 [ 158.765647][ T28] audit: type=1400 audit(1731963237.749:1159): avc: denied { write } for pid=6916 comm="syz.0.2703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 158.796343][ T659] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.806537][ T659] usb 10-1: config 0 has no interfaces? [ 158.812431][ T659] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.821719][ T659] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.830202][ T659] usb 10-1: config 0 descriptor?? [ 158.915554][ T19] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 158.925516][ T19] asix: probe of 5-1:0.0 failed with error -71 [ 158.932359][ T19] usb 5-1: USB disconnect, device number 14 [ 159.102703][ T659] usb 10-1: USB disconnect, device number 11 [ 159.132726][ T43] device bridge_slave_1 left promiscuous mode [ 159.138780][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.146457][ T43] device bridge_slave_0 left promiscuous mode [ 159.152437][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.160321][ T43] device veth1_macvtap left promiscuous mode [ 159.166712][ T43] device veth0_vlan left promiscuous mode [ 159.322872][ T6923] loop8: detected capacity change from 0 to 512 [ 159.329603][ T6923] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.342837][ T6923] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 159.351009][ T6923] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2706: invalid indirect mapped block 2683928664 (level 1) [ 159.365319][ T6923] EXT4-fs (loop8): Remounting filesystem read-only [ 159.371924][ T6923] EXT4-fs (loop8): 1 truncate cleaned up [ 159.379654][ T6923] EXT4-fs error (device loop8): ext4_find_dest_de:2113: inode #2: block 13: comm syz.8.2706: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 159.399504][ T6923] EXT4-fs (loop8): Remounting filesystem read-only [ 159.410546][ T4408] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 159.431837][ T4408] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 159.444322][ T4408] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 159.473671][ T28] audit: type=1326 audit(1731963238.395:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.2694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab8291a099 code=0x7fc00000 [ 159.711714][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.718887][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.726138][ T6944] device bridge_slave_0 entered promiscuous mode [ 159.733326][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.740935][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.748204][ T6944] device bridge_slave_1 entered promiscuous mode [ 159.807864][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.814738][ T6944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.822044][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.828920][ T6944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.856075][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.863762][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.871435][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.883039][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.891291][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.898133][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.907304][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.915451][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.922296][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.923158][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 159.944846][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.953979][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.969321][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.981678][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.989797][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.997448][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.005044][ T316] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 160.013582][ T6944] device veth0_vlan entered promiscuous mode [ 160.028676][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.036767][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.045989][ T6944] device veth1_macvtap entered promiscuous mode [ 160.056124][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.063635][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.072562][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.082460][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.090810][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.184064][ T43] device bridge_slave_1 left promiscuous mode [ 160.190225][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.198081][ T43] device bridge_slave_0 left promiscuous mode [ 160.204164][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.211476][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 160.218203][ T43] device veth1_macvtap left promiscuous mode [ 160.224778][ T43] device veth0_vlan left promiscuous mode [ 160.310201][ T6968] loop6: detected capacity change from 0 to 2048 [ 160.325924][ T6968] ext4 filesystem being mounted at /7/bus supports timestamps until 2038 (0x7fffffff) [ 160.367550][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.378366][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.387946][ T24] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 160.399856][ T316] usb 10-1: config 0 has no interfaces? [ 160.400425][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.406300][ T316] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 160.414373][ T24] usb 6-1: config 0 descriptor?? [ 160.422343][ T316] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.436241][ T316] usb 10-1: config 0 descriptor?? [ 160.446457][ T6977] loop4: detected capacity change from 0 to 1024 [ 160.471144][ T4704] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 168: padding at end of block bitmap is not set [ 160.486186][ T4704] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 160.600815][ T6980] loop6: detected capacity change from 0 to 256 [ 160.609390][ T6980] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 160.710924][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.719260][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.728440][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.736846][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.745276][ T19] usb 10-1: USB disconnect, device number 12 [ 160.755058][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.761945][ T6984] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.769557][ T6984] device bridge_slave_0 entered promiscuous mode [ 160.776537][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.783540][ T6984] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.790966][ T6984] device bridge_slave_1 entered promiscuous mode [ 160.848554][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.855428][ T6984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.862527][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.869319][ T6984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.893049][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.900503][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.907885][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.917912][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.926246][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.933162][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.947431][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.955717][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.962565][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.970085][ T24] hid (null): report_id 0 is invalid [ 160.977243][ T24] lenovo 0003:17EF:60A3.004A: report_id 0 is invalid [ 160.983791][ T24] lenovo 0003:17EF:60A3.004A: item 0 1 1 8 parsing failed [ 160.991041][ T24] lenovo 0003:17EF:60A3.004A: hid_parse failed [ 160.991284][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 160.997127][ T24] lenovo: probe of 0003:17EF:60A3.004A failed with error -22 [ 161.014087][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.025374][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 161.038347][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 161.046584][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 161.054052][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 161.062630][ T6984] device veth0_vlan entered promiscuous mode [ 161.073497][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.083924][ T6984] device veth1_macvtap entered promiscuous mode [ 161.094131][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.104684][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.197281][ T659] usb 6-1: USB disconnect, device number 2 [ 161.289467][ T43] device bridge_slave_1 left promiscuous mode [ 161.295460][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.302986][ T43] device bridge_slave_0 left promiscuous mode [ 161.308986][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.353147][ T19] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 161.418149][ T316] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 161.743275][ T19] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 161.752016][ T19] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.762256][ T19] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 161.772377][ T19] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.808262][ T316] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 161.816480][ T316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 161.829116][ T316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 161.840392][ T316] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.855223][ T316] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.864245][ T316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.872840][ T316] usb 7-1: config 0 descriptor?? [ 161.895008][ T6990] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 161.955727][ T7005] loop5: detected capacity change from 0 to 40427 [ 161.959932][ T19] usb 10-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 161.962584][ T7005] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 161.971178][ T19] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.978461][ T7005] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 161.979791][ T7005] F2FS-fs (loop5): invalid crc value [ 161.986664][ T19] usb 10-1: Product: syz [ 161.997057][ T7005] F2FS-fs (loop5): Found nat_bits in checkpoint [ 161.999643][ T19] usb 10-1: Manufacturer: syz [ 162.014470][ T19] usb 10-1: SerialNumber: syz [ 162.039311][ T7005] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 162.046194][ T7005] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 162.173826][ T7025] loop3: detected capacity change from 0 to 8192 [ 162.181218][ T7025] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.211712][ T6984] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 162.220470][ T6984] FAT-fs (loop3): Filesystem has been set read-only [ 162.247632][ T7028] loop3: detected capacity change from 0 to 512 [ 162.254221][ T7028] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.265670][ T7028] EXT4-fs (loop3): 1 truncate cleaned up [ 162.296221][ T19] snd-usb-audio: probe of 10-1:1.0 failed with error -22 [ 162.320093][ T19] snd-usb-audio: probe of 10-1:1.1 failed with error -22 [ 162.336146][ T19] usb 10-1: USB disconnect, device number 13 [ 162.394326][ T316] plantronics 0003:047F:FFFF.004B: unknown main item tag 0xd [ 162.403039][ T316] plantronics 0003:047F:FFFF.004B: No inputs registered, leaving [ 162.419349][ T316] plantronics 0003:047F:FFFF.004B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 162.697048][ T24] usb 7-1: USB disconnect, device number 12 [ 162.915443][ T7055] loop3: detected capacity change from 0 to 512 [ 162.923237][ T7055] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2762: Invalid inode bitmap blk 4 in block_group 0 [ 162.938607][ T7055] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 163.178320][ T7061] loop5: detected capacity change from 0 to 512 [ 163.185319][ T7061] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 163.198721][ T7061] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 163.207317][ T7061] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2764: invalid indirect mapped block 2683928664 (level 1) [ 163.221647][ T7061] EXT4-fs (loop5): Remounting filesystem read-only [ 163.228858][ T7061] EXT4-fs (loop5): 1 truncate cleaned up [ 163.238417][ T7061] EXT4-fs error (device loop5): ext4_find_dest_de:2113: inode #2: block 13: comm syz.5.2764: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 163.259592][ T7061] EXT4-fs (loop5): Remounting filesystem read-only [ 163.272931][ T6862] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=92, inode=16, rec_len=16, size=1024 fake=0 [ 163.295126][ T6862] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 163.308584][ T6862] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 163.476689][ T339] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 163.505678][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.512581][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.519810][ T7072] device bridge_slave_0 entered promiscuous mode [ 163.526672][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.533596][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.540827][ T7072] device bridge_slave_1 entered promiscuous mode [ 163.598312][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.605164][ T7072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.612488][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.619343][ T7072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.646254][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.653876][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.661230][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.670679][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.678932][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.685814][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.695724][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.703958][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.710835][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.724864][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.734505][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.747968][ T339] usb 4-1: Using ep0 maxpacket: 8 [ 163.753029][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.769985][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.778434][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.786590][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.795377][ T7072] device veth0_vlan entered promiscuous mode [ 163.807486][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.820077][ T7072] device veth1_macvtap entered promiscuous mode [ 163.835749][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.847681][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.105088][ T339] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 164.114199][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.122135][ T339] usb 4-1: Product: syz [ 164.126146][ T339] usb 4-1: Manufacturer: syz [ 164.131096][ T339] usb 4-1: SerialNumber: syz [ 164.137936][ T339] usb 4-1: config 0 descriptor?? [ 164.170163][ T19] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 164.236486][ T7093] device erspan1 entered promiscuous mode [ 164.242694][ T43] device bridge_slave_1 left promiscuous mode [ 164.248830][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.256199][ T43] device bridge_slave_0 left promiscuous mode [ 164.262287][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.270662][ T43] device veth1_macvtap left promiscuous mode [ 164.276512][ T43] device veth0_vlan left promiscuous mode [ 164.403443][ T339] usb 4-1: USB disconnect, device number 23 [ 164.440887][ T316] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 164.560144][ T19] usb 8-1: config 0 has no interfaces? [ 164.565629][ T19] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 164.574766][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.583363][ T19] usb 8-1: config 0 descriptor?? [ 164.830999][ T316] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 164.839054][ T316] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 164.845141][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.850115][ T316] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 164.869537][ T316] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.869676][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.882386][ T316] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.898867][ T316] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.899402][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.907455][ T316] usb 10-1: config 0 descriptor?? [ 164.920656][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.931051][ T3001] usb 8-1: USB disconnect, device number 14 [ 164.939311][ T7091] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 165.239903][ T7113] loop3: detected capacity change from 0 to 40427 [ 165.246805][ T7113] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 165.254502][ T7113] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 165.263414][ T7113] F2FS-fs (loop3): invalid crc value [ 165.270123][ T7113] F2FS-fs (loop3): Found nat_bits in checkpoint [ 165.322543][ T7113] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 165.329710][ T7113] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.438882][ T316] plantronics 0003:047F:FFFF.004C: unknown main item tag 0xd [ 165.447837][ T316] plantronics 0003:047F:FFFF.004C: No inputs registered, leaving [ 165.456981][ T316] plantronics 0003:047F:FFFF.004C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 165.470115][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 165.741875][ T316] usb 10-1: USB disconnect, device number 14 [ 165.925345][ T24] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 165.934080][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.943952][ T24] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.952925][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.040077][ T7137] loop3: detected capacity change from 0 to 256 [ 166.141902][ T24] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 166.150835][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.156583][ T7141] loop3: detected capacity change from 0 to 512 [ 166.158830][ T24] usb 8-1: Product: syz [ 166.168784][ T24] usb 8-1: Manufacturer: syz [ 166.173164][ T24] usb 8-1: SerialNumber: syz [ 166.176554][ T7141] EXT4-fs mount: 22 callbacks suppressed [ 166.176576][ T7141] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 166.192370][ T7141] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 166.206266][ T7141] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.2798: corrupted inode contents [ 166.218167][ T7141] EXT4-fs error (device loop3): ext4_dirty_inode:6088: inode #2: comm syz.3.2798: mark_inode_dirty error [ 166.231096][ T7141] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.2798: corrupted inode contents [ 166.242892][ T7141] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.2798: mark_inode_dirty error [ 166.256893][ T28] audit: type=1400 audit(1731963244.653:1161): avc: denied { rename } for pid=7140 comm="syz.3.2798" name="bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 166.280329][ T6984] EXT4-fs (loop3): unmounting filesystem. [ 166.295407][ T7146] input: syz1 as /devices/virtual/input/input37 [ 166.328717][ T7156] syz.3.2804[7156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.328793][ T7156] syz.3.2804[7156] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.353471][ T28] audit: type=1400 audit(1731963244.745:1162): avc: denied { relabelfrom } for pid=7159 comm="syz.3.2806" name="PACKET" dev="sockfs" ino=52891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.353494][ T7160] SELinux: Context system_u:object_r:lastlog_t:s0 is not valid (left unmapped). [ 166.398660][ T28] audit: type=1400 audit(1731963244.745:1163): avc: denied { relabelto } for pid=7159 comm="syz.3.2806" name="PACKET" dev="sockfs" ino=52891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=packet_socket permissive=1 trawcon="system_u:object_r:lastlog_t:s0" [ 166.430264][ T7164] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 166.447262][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.456504][ T24] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 166.479459][ T24] snd-usb-audio: probe of 8-1:1.1 failed with error -22 [ 166.487213][ T24] usb 8-1: USB disconnect, device number 15 [ 166.510387][ T316] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 166.770243][ T316] usb 7-1: Using ep0 maxpacket: 8 [ 167.073664][ T316] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 167.082609][ T316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.090372][ T316] usb 7-1: Product: syz [ 167.094356][ T316] usb 7-1: Manufacturer: syz [ 167.098930][ T316] usb 7-1: SerialNumber: syz [ 167.103877][ T316] usb 7-1: config 0 descriptor?? [ 167.311995][ T3001] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 167.333630][ T24] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 167.368824][ T659] usb 7-1: USB disconnect, device number 13 [ 167.593621][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 167.702116][ T3001] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 167.710246][ T3001] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 167.721285][ T3001] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 167.732427][ T3001] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.734545][ T24] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 167.745379][ T3001] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.754240][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.763095][ T3001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.771731][ T24] usb 10-1: config 0 descriptor?? [ 167.779593][ T3001] usb 8-1: config 0 descriptor?? [ 167.799582][ T7174] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 168.059694][ T24] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 168.165262][ T28] audit: type=1400 audit(1731963246.416:1164): avc: denied { map } for pid=7189 comm="syz.6.2818" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 168.217977][ T7194] loop6: detected capacity change from 0 to 2048 [ 168.234799][ T7194] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 168.243114][ T7194] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 168.264102][ T6944] EXT4-fs (loop6): unmounting filesystem. [ 168.298630][ T3001] plantronics 0003:047F:FFFF.004D: unknown main item tag 0xd [ 168.307064][ T3001] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 168.315959][ T3001] plantronics 0003:047F:FFFF.004D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 168.601898][ T224] usb 8-1: USB disconnect, device number 16 [ 168.633754][ T3001] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 168.655373][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 168.657319][ T3115] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 168.936465][ T7226] loop0: detected capacity change from 0 to 512 [ 168.943583][ T7226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.958159][ T7231] loop3: detected capacity change from 0 to 256 [ 168.964780][ T7231] exfat: Deprecated parameter 'utf8' [ 168.966498][ T7226] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.969978][ T7231] exfat: Deprecated parameter 'namecase' [ 168.979015][ T7226] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038 (0x7fffffff) [ 168.986966][ T7231] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 168.994263][ T24] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 169.016606][ T24] asix: probe of 10-1:0.0 failed with error -71 [ 169.023844][ T3001] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.024415][ T24] usb 10-1: USB disconnect, device number 15 [ 169.042405][ T3001] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.052492][ T296] EXT4-fs (loop0): unmounting filesystem. [ 169.132137][ T3001] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.141107][ T3001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.149082][ T3001] usb 7-1: SerialNumber: syz [ 169.281450][ T7256] loop7: detected capacity change from 0 to 1024 [ 169.296624][ T7256] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 169.306982][ T7256] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 169.322064][ T7256] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 23 with max blocks 1 with error 28 [ 169.334339][ T7256] EXT4-fs (loop7): This should not happen!! Data will be lost [ 169.334339][ T7256] [ 169.343939][ T7256] EXT4-fs (loop7): Total free blocks count 0 [ 169.350170][ T7256] EXT4-fs (loop7): Free/Dirty block details [ 169.355900][ T7256] EXT4-fs (loop7): free_blocks=68451041280 [ 169.361597][ T7256] EXT4-fs (loop7): dirty_blocks=32 [ 169.362502][ T7259] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 169.371982][ T7256] EXT4-fs (loop7): Block reservation details [ 169.378828][ T7259] EXT4-fs (loop7): This should not happen!! Data will be lost [ 169.378828][ T7259] [ 169.413769][ T224] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 169.436618][ T3001] usb 7-1: 0:2 : does not exist [ 169.674391][ T224] usb 4-1: Using ep0 maxpacket: 16 [ 169.803877][ T224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.814731][ T224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.893360][ T3001] usb 7-1: USB disconnect, device number 14 [ 169.945186][ T224] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 169.954112][ T224] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 169.962433][ T224] usb 4-1: Product: syz [ 169.966449][ T224] usb 4-1: Manufacturer: syz [ 169.971668][ T224] usb 4-1: config 0 descriptor?? [ 170.299376][ T7288] loop9: detected capacity change from 0 to 40427 [ 170.308501][ T7288] F2FS-fs (loop9): Found nat_bits in checkpoint [ 170.343913][ T7288] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 170.358916][ T4461] syz-executor: attempt to access beyond end of device [ 170.358916][ T4461] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.476295][ T224] kovaplus 0003:1E7D:2D50.004E: item fetching failed at offset 5/7 [ 170.484603][ T224] kovaplus 0003:1E7D:2D50.004E: parse failed [ 170.490799][ T224] kovaplus: probe of 0003:1E7D:2D50.004E failed with error -22 [ 170.512501][ T7299] loop9: detected capacity change from 0 to 512 [ 170.532101][ T7299] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 170.540959][ T7299] ext4 filesystem being mounted at /267/bus supports timestamps until 2038 (0x7fffffff) [ 170.560264][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 170.696248][ T24] usb 4-1: USB disconnect, device number 24 [ 170.746436][ T659] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 171.093280][ T7312] loop7: detected capacity change from 0 to 40427 [ 171.099982][ T7312] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 171.107820][ T7312] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 171.116458][ T7312] F2FS-fs (loop7): invalid crc value [ 171.123413][ T7312] F2FS-fs (loop7): Found nat_bits in checkpoint [ 171.136465][ T659] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.147411][ T659] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.157009][ T659] usb 7-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 171.166010][ T659] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.168938][ T7312] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 171.175027][ T659] usb 7-1: config 0 descriptor?? [ 171.181321][ T7312] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 171.206194][ T7072] syz-executor: attempt to access beyond end of device [ 171.206194][ T7072] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.302472][ T7323] loop3: detected capacity change from 0 to 512 [ 171.311164][ T7323] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2874: inode #1: comm syz.3.2874: iget: illegal inode # [ 171.324881][ T7323] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2874: error while reading EA inode 1 err=-117 [ 171.337322][ T7323] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.2874: inode #1: comm syz.3.2874: iget: illegal inode # [ 171.350663][ T7323] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.2874: error while reading EA inode 1 err=-117 [ 171.363125][ T7323] EXT4-fs (loop3): 1 orphan inode deleted [ 171.368864][ T7323] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.381628][ T7328] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2875'. [ 171.384794][ T7323] EXT4-fs (loop3): shut down requested (1) [ 171.409896][ T6984] EXT4-fs (loop3): unmounting filesystem. [ 171.525812][ T7348] syz.9.2885[7348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.525915][ T7348] syz.9.2885[7348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.606513][ T7338] loop3: detected capacity change from 0 to 40427 [ 171.624790][ T7338] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 171.632249][ T7338] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 171.640950][ T7338] F2FS-fs (loop3): invalid crc value [ 171.647866][ T7338] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.683686][ T7338] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 171.690645][ T7338] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 171.700760][ T659] pantherlord 0003:0F30:0111.004F: item fetching failed at offset 6/7 [ 171.709041][ T659] pantherlord 0003:0F30:0111.004F: parse failed [ 171.715197][ T659] pantherlord: probe of 0003:0F30:0111.004F failed with error -22 [ 171.723113][ T6984] syz-executor: attempt to access beyond end of device [ 171.723113][ T6984] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.739960][ T7353] loop9: detected capacity change from 0 to 2048 [ 171.767113][ T7353] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 171.778678][ T7353] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.793862][ T7353] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 171.806134][ T7353] EXT4-fs (loop9): This should not happen!! Data will be lost [ 171.806134][ T7353] [ 171.815896][ T7353] EXT4-fs (loop9): Total free blocks count 0 [ 171.821859][ T7353] EXT4-fs (loop9): Free/Dirty block details [ 171.827660][ T7353] EXT4-fs (loop9): free_blocks=2415919104 [ 171.833844][ T7353] EXT4-fs (loop9): dirty_blocks=16 [ 171.838865][ T7353] EXT4-fs (loop9): Block reservation details [ 171.844727][ T7353] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 171.864782][ T7353] EXT4-fs error (device loop9): __ext4_remount:6435: comm syz.9.2896: Abort forced by user [ 171.874987][ T7353] EXT4-fs (loop9): Remounting filesystem read-only [ 171.903368][ T7361] loop9: detected capacity change from 0 to 1024 [ 171.912835][ T7361] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 171.923976][ T24] usb 7-1: USB disconnect, device number 15 [ 171.934009][ T7361] EXT4-fs (loop9): shut down requested (2) [ 171.954964][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 171.962899][ T338] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 172.240676][ T7367] loop3: detected capacity change from 0 to 512 [ 172.247083][ T7367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.253801][ T7367] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.262068][ T7367] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 172.270014][ T7367] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 172.278462][ T7367] EXT4-fs (loop3): 1 truncate cleaned up [ 172.283986][ T7367] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.304447][ T7367] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 172.312426][ T7367] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 172.320346][ T7367] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.2890: Logical block already allocated [ 172.331853][ T7367] EXT4-fs (loop3): Remounting filesystem read-only [ 172.344340][ T6984] EXT4-fs (loop3): unmounting filesystem. [ 172.416902][ T7370] loop7: detected capacity change from 0 to 40427 [ 172.423779][ T7370] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 172.431296][ T7370] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 172.440024][ T7370] F2FS-fs (loop7): invalid crc value [ 172.446760][ T7370] F2FS-fs (loop7): Found nat_bits in checkpoint [ 172.482642][ T7370] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 172.489513][ T7370] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 172.547300][ T7072] syz-executor: attempt to access beyond end of device [ 172.547300][ T7072] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.564079][ T7381] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2894'. [ 172.585490][ T7383] syz.6.2897[7383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.585575][ T7383] syz.6.2897[7383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.703995][ T7391] loop7: detected capacity change from 0 to 1024 [ 172.723466][ T7391] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 172.734523][ T7391] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 172.757682][ T7072] EXT4-fs (loop7): unmounting filesystem. [ 172.775528][ T7400] loop7: detected capacity change from 0 to 256 [ 172.781918][ T7400] exfat: Deprecated parameter 'namecase' [ 172.790314][ T7400] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 172.821612][ T7406] loop6: detected capacity change from 0 to 512 [ 172.827971][ T7406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.834402][ T7406] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.842604][ T7406] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 172.850693][ T7406] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 172.859298][ T7406] EXT4-fs (loop6): 1 truncate cleaned up [ 172.864835][ T7406] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 172.882964][ T7406] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 172.890617][ T7406] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 172.898251][ T7406] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.2906: Logical block already allocated [ 172.910107][ T7406] EXT4-fs (loop6): Remounting filesystem read-only [ 172.921996][ T6944] EXT4-fs (loop6): unmounting filesystem. [ 173.150418][ T7411] netlink: 277 bytes leftover after parsing attributes in process `syz.9.2907'. [ 173.152588][ T7410] loop7: detected capacity change from 0 to 512 [ 173.166943][ T7410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.173663][ T7410] EXT4-fs: Ignoring removed mblk_io_submit option [ 173.181861][ T7410] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 173.189939][ T7410] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 173.198421][ T7410] EXT4-fs (loop7): 1 truncate cleaned up [ 173.203964][ T7410] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 173.221343][ T7410] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 173.229366][ T7410] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 173.237168][ T7410] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.2917: Logical block already allocated [ 173.248693][ T7410] EXT4-fs (loop7): Remounting filesystem read-only [ 173.260242][ T7072] EXT4-fs (loop7): unmounting filesystem. [ 173.281460][ T28] audit: type=1326 audit(1731963251.132:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.7.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a77e719 code=0x7ffc0000 [ 173.304832][ T28] audit: type=1326 audit(1731963251.132:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.7.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a77e719 code=0x7ffc0000 [ 173.336433][ T28] audit: type=1326 audit(1731963251.142:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.7.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f299a77e719 code=0x7ffc0000 [ 173.361637][ T28] audit: type=1326 audit(1731963251.142:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.7.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a77e719 code=0x7ffc0000 [ 173.385389][ T28] audit: type=1326 audit(1731963251.142:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.7.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a77e719 code=0x7ffc0000 [ 173.409291][ T28] audit: type=1326 audit(1731963251.142:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.7.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f299a77e719 code=0x7ffc0000 [ 173.438709][ T28] audit: type=1326 audit(1731963251.142:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.7.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a77e719 code=0x7ffc0000 [ 173.464483][ T7432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2916'. [ 173.475317][ T28] audit: type=1326 audit(1731963251.142:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.7.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f299a77e719 code=0x7ffc0000 [ 173.481049][ T7435] loop9: detected capacity change from 0 to 256 [ 173.514878][ T7435] exfat: Deprecated parameter 'namecase' [ 173.517568][ T28] audit: type=1326 audit(1731963251.142:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7420 comm="syz.7.2911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f299a77e719 code=0x7ffc0000 [ 173.545816][ T7439] input: syz1 as /devices/virtual/input/input39 [ 173.554656][ T7435] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 173.593785][ T7448] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.656215][ T7455] loop0: detected capacity change from 0 to 512 [ 173.663328][ T7455] EXT4-fs (loop0): unsupported inode size: 143 [ 173.670996][ T7455] EXT4-fs (loop0): blocksize: 1024 [ 173.767980][ T7461] loop3: detected capacity change from 0 to 16 [ 173.776858][ T7461] erofs: (device loop3): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 173.834639][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 173.836349][ T7452] loop9: detected capacity change from 0 to 40427 [ 173.850230][ T7452] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 173.857992][ T7452] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 173.867115][ T7452] F2FS-fs (loop9): invalid crc value [ 173.873848][ T7452] F2FS-fs (loop9): Found nat_bits in checkpoint [ 173.909829][ T7452] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 173.916914][ T7452] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 174.023062][ T7452] syz.9.2926: attempt to access beyond end of device [ 174.023062][ T7452] loop9: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 174.046254][ T7452] syz.9.2926: attempt to access beyond end of device [ 174.046254][ T7452] loop9: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 174.060172][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 174.068155][ T7452] syz.9.2926: attempt to access beyond end of device [ 174.068155][ T7452] loop9: rw=2049, sector=57344, nr_sectors = 2064 limit=40427 [ 174.088635][ T7452] syz.9.2926: attempt to access beyond end of device [ 174.088635][ T7452] loop9: rw=2049, sector=59408, nr_sectors = 2048 limit=40427 [ 174.109150][ T7452] syz.9.2926: attempt to access beyond end of device [ 174.109150][ T7452] loop9: rw=2049, sector=61456, nr_sectors = 2048 limit=40427 [ 174.129993][ T7452] syz.9.2926: attempt to access beyond end of device [ 174.129993][ T7452] loop9: rw=2049, sector=63504, nr_sectors = 2112 limit=40427 [ 174.138991][ T7484] loop6: detected capacity change from 0 to 256 [ 174.150262][ T7484] exfat: Deprecated parameter 'utf8' [ 174.155431][ T7484] exfat: Deprecated parameter 'namecase' [ 174.161983][ T7484] exfat: Deprecated parameter 'utf8' [ 174.169873][ T7484] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 174.169978][ T339] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 174.233099][ T314] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 174.242389][ T314] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 174.321744][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 174.451766][ T24] usb 8-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 174.460838][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.469381][ T24] usb 8-1: config 0 descriptor?? [ 174.570907][ T339] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 174.580941][ T339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 174.590279][ T339] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.652088][ T7502] loop9: detected capacity change from 0 to 128 [ 174.658662][ T7502] FAT-fs (loop9): Unrecognized mount option "_odots" or missing value [ 174.692052][ T7502] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2947'. [ 174.765912][ T339] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.775278][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.783161][ T339] usb 4-1: Product: syz [ 174.792635][ T339] usb 4-1: Manufacturer: syz [ 174.797439][ T339] usb 4-1: SerialNumber: syz [ 174.842183][ T339] usb 4-1: selecting invalid altsetting 1 [ 174.994634][ T24] wacom 0003:056A:0318.0050: unknown main item tag 0x0 [ 175.001422][ T24] wacom 0003:056A:0318.0050: unknown main item tag 0x0 [ 175.010107][ T24] wacom 0003:056A:0318.0050: unknown main item tag 0x0 [ 175.017010][ T24] wacom 0003:056A:0318.0050: unknown main item tag 0x0 [ 175.023987][ T24] wacom 0003:056A:0318.0050: unknown main item tag 0x0 [ 175.032587][ T3001] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x4 [ 175.040200][ T3001] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x2 [ 175.047735][ T3001] hid-generic 0000:3000000:0000.0051: unknown main item tag 0x3 [ 175.055868][ T3001] hid-generic 0000:3000000:0000.0051: hidraw0: HID v0.00 Device [sy] on syz0 [ 175.088648][ T7532] loop6: detected capacity change from 0 to 256 [ 175.095144][ T7532] exfat: Deprecated parameter 'utf8' [ 175.100326][ T7532] exfat: Deprecated parameter 'utf8' [ 175.105632][ T7532] exfat: Deprecated parameter 'utf8' [ 175.113902][ T7532] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 175.211589][ T24] usb 8-1: USB disconnect, device number 17 [ 175.741710][ T7535] loop6: detected capacity change from 0 to 256 [ 175.795137][ T339] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 175.816734][ T339] usb 4-1: selecting invalid altsetting 1 [ 175.822394][ T339] cdc_ncm 4-1:1.0: bind() failure [ 175.828517][ T339] usb 4-1: USB disconnect, device number 25 [ 176.059288][ T7561] loop6: detected capacity change from 0 to 512 [ 176.066080][ T7561] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 176.077458][ T7561] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.2974: inode #255: comm syz.6.2974: iget: illegal inode # [ 176.090752][ T7561] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.2974: error while reading EA inode 255 err=-117 [ 176.103442][ T7561] EXT4-fs (loop6): 1 truncate cleaned up [ 176.108896][ T7561] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 176.128874][ T6944] EXT4-fs (loop6): unmounting filesystem. [ 176.345634][ T7569] loop3: detected capacity change from 0 to 256 [ 176.402205][ T7572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7572 comm=syz.6.2988 [ 176.499086][ T339] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x4 [ 176.506923][ T339] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x2 [ 176.510845][ T7584] loop6: detected capacity change from 0 to 4096 [ 176.515840][ T339] hid-generic 0000:3000000:0000.0052: unknown main item tag 0x3 [ 176.531293][ T7584] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 176.542776][ T7584] EXT4-fs (loop6): shut down requested (1) [ 176.543044][ T339] hid-generic 0000:3000000:0000.0052: hidraw0: HID v0.00 Device [sy] on syz0 [ 176.559277][ T6944] EXT4-fs (loop6): unmounting filesystem. [ 176.588680][ T7595] netlink: 'syz.3.2989': attribute type 3 has an invalid length. [ 176.730777][ T7622] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3001'. [ 176.743830][ T7624] input: syz0 as /devices/virtual/input/input45 [ 176.787727][ T7632] loop6: detected capacity change from 0 to 512 [ 176.794089][ T7632] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.800649][ T7632] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 176.814291][ T7632] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 176.822796][ T7632] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.3007: corrupted in-inode xattr [ 176.835321][ T7632] EXT4-fs error (device loop6): ext4_orphan_get:1401: comm syz.6.3007: couldn't read orphan inode 15 (err -117) [ 176.838276][ T7636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.854328][ T7632] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 176.875333][ T6944] EXT4-fs (loop6): unmounting filesystem. [ 176.875852][ T7636] bridge0: port 3(syz_tun) entered blocking state [ 176.887173][ T7636] bridge0: port 3(syz_tun) entered disabled state [ 176.895098][ T870] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 176.903537][ T7636] device syz_tun entered promiscuous mode [ 176.909208][ T7636] bridge0: port 3(syz_tun) entered blocking state [ 176.915494][ T7636] bridge0: port 3(syz_tun) entered forwarding state [ 176.973471][ T7656] loop3: detected capacity change from 0 to 256 [ 176.983021][ T7656] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 177.018437][ T7660] loop3: detected capacity change from 0 to 256 [ 177.030884][ T7660] FAT-fs (loop3): Directory bread(block 64) failed [ 177.037226][ T7660] FAT-fs (loop3): Directory bread(block 65) failed [ 177.043910][ T7660] FAT-fs (loop3): Directory bread(block 66) failed [ 177.050401][ T7660] FAT-fs (loop3): Directory bread(block 67) failed [ 177.057435][ T7660] FAT-fs (loop3): Directory bread(block 68) failed [ 177.063828][ T7660] FAT-fs (loop3): Directory bread(block 69) failed [ 177.070120][ T7660] FAT-fs (loop3): Directory bread(block 70) failed [ 177.076460][ T7660] FAT-fs (loop3): Directory bread(block 71) failed [ 177.082790][ T7660] FAT-fs (loop3): Directory bread(block 72) failed [ 177.089150][ T7660] FAT-fs (loop3): Directory bread(block 73) failed [ 177.122589][ T7662] loop3: detected capacity change from 0 to 1024 [ 177.140032][ T7662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 177.148565][ T7662] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038 (0x7fffffff) [ 177.165654][ T6984] EXT4-fs (loop3): unmounting filesystem. [ 177.171300][ T24] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 177.246679][ T39] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 177.256007][ T7673] SELinux: policydb version 0 does not match my version range 15-33 [ 177.264270][ T7673] SELinux: failed to load policy [ 177.355167][ T870] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 177.365335][ T870] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 177.374190][ T870] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.430842][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 177.560923][ T24] usb 8-1: config 0 has an invalid interface number: 219 but max is 0 [ 177.569025][ T24] usb 8-1: config 0 has no interface number 0 [ 177.574945][ T24] usb 8-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 177.585783][ T24] usb 8-1: config 0 interface 219 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 177.593418][ T870] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.596338][ T24] usb 8-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 177.605504][ T870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.615100][ T24] usb 8-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 177.623246][ T870] usb 10-1: Product: syz [ 177.636646][ T39] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 177.639877][ T870] usb 10-1: Manufacturer: syz [ 177.650275][ T39] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.654484][ T870] usb 10-1: SerialNumber: syz [ 177.663555][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.701942][ T870] usb 10-1: selecting invalid altsetting 1 [ 177.714392][ T39] snd-usb-audio: probe of 7-1:27.0 failed with error -2 [ 177.799184][ T24] usb 8-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 177.808058][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.816161][ T24] usb 8-1: Product: syz [ 177.820274][ T24] usb 8-1: Manufacturer: syz [ 177.824714][ T24] usb 8-1: SerialNumber: syz [ 177.829723][ T24] usb 8-1: config 0 descriptor?? [ 177.853380][ T7640] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 177.860385][ T7640] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 177.935238][ T39] usb 7-1: USB disconnect, device number 16 [ 178.101779][ T7683] loop0: detected capacity change from 0 to 256 [ 178.122921][ T7685] loop0: detected capacity change from 0 to 512 [ 178.131063][ T7685] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3031: Invalid inode bitmap blk 4 in block_group 0 [ 178.144399][ T7685] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.145331][ T24] usb 8-1: USB disconnect, device number 18 [ 178.156145][ T7685] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.3031: Invalid inode bitmap blk 4 in block_group 0 [ 178.171246][ T7685] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 178.185055][ T296] EXT4-fs (loop0): unmounting filesystem. [ 178.199997][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 178.200024][ T28] audit: type=1400 audit(1731963255.683:1207): avc: denied { ioctl } for pid=7687 comm="syz.0.3032" path="socket:[54952]" dev="sockfs" ino=54952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.633332][ T870] cdc_ncm 10-1:1.0: SET_NTB_FORMAT failed [ 178.655226][ T870] usb 10-1: selecting invalid altsetting 1 [ 178.661012][ T870] cdc_ncm 10-1:1.0: bind() failure [ 178.667948][ T870] usb 10-1: USB disconnect, device number 16 [ 178.727116][ T7716] loop7: detected capacity change from 0 to 16 [ 178.733700][ T7716] erofs: (device loop7): mounted with root inode @ nid 36. [ 178.757525][ T7718] loop7: detected capacity change from 0 to 512 [ 178.764556][ T7718] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 178.776510][ T7718] EXT4-fs (loop7): 1 truncate cleaned up [ 178.782128][ T7718] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 178.793359][ T7718] EXT4-fs error (device loop7): ext4_read_inline_dir:1593: inode #12: block 7: comm syz.7.3046: path /45/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=33488896, rec_len=0, size=80 fake=0 [ 178.795754][ T3001] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 178.829004][ T7072] EXT4-fs (loop7): unmounting filesystem. [ 178.940637][ T7724] loop7: detected capacity change from 0 to 256 [ 178.952289][ T7724] FAT-fs (loop7): Directory bread(block 64) failed [ 178.958985][ T7724] FAT-fs (loop7): Directory bread(block 65) failed [ 178.965510][ T7724] FAT-fs (loop7): Directory bread(block 66) failed [ 178.971935][ T7724] FAT-fs (loop7): Directory bread(block 67) failed [ 178.978356][ T7724] FAT-fs (loop7): Directory bread(block 68) failed [ 178.985164][ T7724] FAT-fs (loop7): Directory bread(block 69) failed [ 178.991604][ T7724] FAT-fs (loop7): Directory bread(block 70) failed [ 178.998019][ T7724] FAT-fs (loop7): Directory bread(block 71) failed [ 179.005683][ T7724] FAT-fs (loop7): Directory bread(block 72) failed [ 179.012212][ T7724] FAT-fs (loop7): Directory bread(block 73) failed [ 179.045481][ T7708] loop0: detected capacity change from 0 to 131072 [ 179.048740][ T7726] loop7: detected capacity change from 0 to 512 [ 179.052421][ T7708] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 179.067159][ T7708] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 179.075814][ T7708] F2FS-fs (loop0): invalid crc value [ 179.083366][ T7708] F2FS-fs (loop0): Found nat_bits in checkpoint [ 179.090345][ T7726] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 179.100179][ T7726] ext4 filesystem being mounted at /48/bus supports timestamps until 2038 (0x7fffffff) [ 179.119992][ T7072] EXT4-fs (loop7): unmounting filesystem. [ 179.129810][ T7708] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 179.137246][ T7708] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 179.137649][ T7734] loop7: detected capacity change from 0 to 256 [ 179.153709][ T7734] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 179.222832][ T7740] loop7: detected capacity change from 0 to 256 [ 179.229293][ T3001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.253107][ T7740] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 179.254921][ T3001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.296529][ T3001] usb 7-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 179.316129][ T7740] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 179.316162][ T3001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.348975][ T7740] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000006) [ 179.354892][ T3001] usb 7-1: config 0 descriptor?? [ 179.364242][ T7740] exFAT-fs (loop7): Filesystem has been set read-only [ 179.501617][ T7756] input: syz0 as /devices/virtual/input/input46 [ 179.510102][ T7738] loop3: detected capacity change from 0 to 40427 [ 179.518450][ T7738] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 179.526360][ T7738] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 179.560408][ T7738] F2FS-fs (loop3): Found nat_bits in checkpoint [ 179.579772][ T7770] loop0: detected capacity change from 0 to 512 [ 179.619123][ T7738] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 179.627870][ T7738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 179.629162][ T7779] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 179.642681][ T7770] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 179.656158][ T7770] ext4 filesystem being mounted at /500/bus supports timestamps until 2038 (0x7fffffff) [ 179.669753][ T7738] bio_check_eod: 9 callbacks suppressed [ 179.669773][ T7738] syz.3.3054: attempt to access beyond end of device [ 179.669773][ T7738] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 179.690637][ T7783] loop9: detected capacity change from 0 to 1024 [ 179.696844][ T28] audit: type=1400 audit(1731963257.059:1208): avc: denied { read } for pid=7769 comm="syz.0.3065" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 179.707963][ T7783] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 179.731978][ T296] EXT4-fs (loop0): unmounting filesystem. [ 179.769900][ T4461] EXT4-fs (loop9): unmounting filesystem. [ 179.835343][ T7799] syz.0.3078[7799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.835426][ T7799] syz.0.3078[7799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.901738][ T3001] a4tech 0003:09DA:022B.0053: unbalanced collection at end of report description [ 179.951084][ T3001] a4tech 0003:09DA:022B.0053: parse failed [ 179.957677][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3083'. [ 179.957882][ T3001] a4tech: probe of 0003:09DA:022B.0053 failed with error -22 [ 179.979683][ T7817] loop3: detected capacity change from 0 to 512 [ 180.004774][ T7817] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.3085: casefold flag without casefold feature [ 180.018380][ T7817] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.3085: couldn't read orphan inode 15 (err -117) [ 180.031514][ T7817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.047558][ T7828] loop7: detected capacity change from 0 to 512 [ 180.054818][ T7828] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 180.068844][ T6984] EXT4-fs (loop3): unmounting filesystem. [ 180.074676][ T7828] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 180.083376][ T7828] EXT4-fs (loop7): mount failed [ 180.103838][ T7834] loop3: detected capacity change from 0 to 1024 [ 180.110383][ T7834] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.143740][ T339] usb 7-1: USB disconnect, device number 17 [ 180.153258][ T7834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 180.178245][ T6984] EXT4-fs (loop3): unmounting filesystem. [ 180.194520][ T7849] loop3: detected capacity change from 0 to 1024 [ 180.202870][ T7849] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.236340][ T7853] loop0: detected capacity change from 0 to 256 [ 180.255093][ T6984] EXT4-fs (loop3): unmounting filesystem. [ 180.289423][ T7853] incfs: ino conflict with backing FS 1 [ 180.312840][ T7865] loop0: detected capacity change from 0 to 512 [ 180.321092][ T7865] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.3107: casefold flag without casefold feature [ 180.335021][ T7865] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.3107: couldn't read orphan inode 15 (err -117) [ 180.347010][ T7865] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 180.363329][ T296] EXT4-fs (loop0): unmounting filesystem. [ 180.472202][ T7890] binder: 7889:7890 ioctl c0306201 200007c0 returned -14 [ 180.620220][ T7908] loop7: detected capacity change from 0 to 256 [ 180.628884][ T7908] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 180.641578][ T7908] FAT-fs (loop7): Filesystem has been set read-only [ 180.666139][ T7912] loop9: detected capacity change from 0 to 2048 [ 180.675200][ T7915] loop7: detected capacity change from 0 to 512 [ 180.682739][ T28] audit: type=1400 audit(1731963257.972:1209): avc: denied { lock } for pid=7917 comm="syz.3.3141" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 180.725323][ T7912] Alternate GPT is invalid, using primary GPT. [ 180.732119][ T7921] loop6: detected capacity change from 0 to 512 [ 180.738813][ T7912] loop9: p1 p2 p3 [ 180.754247][ T7915] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 180.763149][ T7921] EXT4-fs error (device loop6): ext4_orphan_get:1396: inode #15: comm syz.6.3131: casefold flag without casefold feature [ 180.776184][ T7915] System zones: 0-2, 18-18, 34-34 [ 180.786851][ T7915] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 180.797225][ T7915] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 180.797279][ T7921] EXT4-fs error (device loop6): ext4_orphan_get:1401: comm syz.6.3131: couldn't read orphan inode 15 (err -117) [ 180.806448][ T7915] EXT4-fs error (device loop7): ext4_acquire_dquot:6787: comm syz.7.3129: Failed to acquire dquot type 0 [ 180.814718][ T7915] EXT4-fs (loop7): Remounting filesystem read-only [ 180.818451][ T7921] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 180.829337][ T7915] EXT4-fs (loop7): 1 orphan inode deleted [ 180.850039][ T7915] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 180.859097][ T7915] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038 (0x7fffffff) [ 180.869673][ T6944] EXT4-fs (loop6): unmounting filesystem. [ 180.893227][ T7932] loop6: detected capacity change from 0 to 1024 [ 180.902046][ T7932] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 180.916608][ T7072] EXT4-fs (loop7): unmounting filesystem. [ 180.925286][ T6944] EXT4-fs (loop6): unmounting filesystem. [ 180.951480][ T7939] loop0: detected capacity change from 0 to 512 [ 180.952359][ T7942] loop6: detected capacity change from 0 to 256 [ 180.976015][ T7942] incfs: ino conflict with backing FS 1 [ 180.992772][ T7939] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 181.001103][ T7939] System zones: 0-2, 18-18, 34-34 [ 181.007253][ T7939] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 181.017738][ T7939] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 181.027110][ T7939] EXT4-fs error (device loop0): ext4_acquire_dquot:6787: comm syz.0.3149: Failed to acquire dquot type 0 [ 181.040678][ T7939] EXT4-fs (loop0): Remounting filesystem read-only [ 181.047472][ T7939] EXT4-fs (loop0): 1 orphan inode deleted [ 181.053329][ T7939] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.062247][ T7939] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038 (0x7fffffff) [ 181.081643][ T339] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 181.103912][ T296] EXT4-fs (loop0): unmounting filesystem. [ 181.152480][ T7956] loop7: detected capacity change from 0 to 2048 [ 181.173473][ T7956] Alternate GPT is invalid, using primary GPT. [ 181.179676][ T7956] loop7: p1 p2 p3 [ 181.188736][ T3001] kernel write not supported for file /vcsa1 (pid: 3001 comm: kworker/0:5) [ 181.264522][ T7975] loop0: detected capacity change from 0 to 128 [ 181.271045][ T7975] FAT-fs (loop0): Unrecognized mount option "/dev/ppp" or missing value [ 181.287557][ T224] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 181.345593][ T7982] loop6: detected capacity change from 0 to 512 [ 181.364464][ T7982] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 181.372058][ T7982] System zones: 0-2, 18-18, 34-34 [ 181.378221][ T7982] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 181.388813][ T7982] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 181.398348][ T7982] EXT4-fs error (device loop6): ext4_acquire_dquot:6787: comm syz.6.3156: Failed to acquire dquot type 0 [ 181.409843][ T7982] EXT4-fs (loop6): Remounting filesystem read-only [ 181.416300][ T7982] EXT4-fs (loop6): 1 orphan inode deleted [ 181.421939][ T7982] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 181.430706][ T7982] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038 (0x7fffffff) [ 181.465886][ T6944] EXT4-fs (loop6): unmounting filesystem. [ 181.471709][ T339] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.482770][ T339] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.492425][ T339] usb 10-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 181.501468][ T339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.510073][ T339] usb 10-1: config 0 descriptor?? [ 181.611937][ T8001] loop6: detected capacity change from 0 to 2048 [ 181.618503][ T8003] loop7: detected capacity change from 0 to 1024 [ 181.625053][ T8003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.635902][ T8003] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 181.646170][ T8001] Alternate GPT is invalid, using primary GPT. [ 181.652219][ T8001] loop6: p1 p2 p3 [ 181.660192][ T7072] EXT4-fs (loop7): unmounting filesystem. [ 181.708917][ T8013] loop7: detected capacity change from 0 to 1024 [ 181.716510][ T8013] EXT4-fs: Ignoring removed orlov option [ 181.722032][ T8013] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.731754][ T224] usb 4-1: config 0 has no interfaces? [ 181.737058][ T224] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 181.746329][ T224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.756483][ T8013] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 181.765124][ T224] usb 4-1: config 0 descriptor?? [ 181.780857][ T7072] EXT4-fs (loop7): unmounting filesystem. [ 182.026653][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.035100][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.035984][ T339] a4tech 0003:09DA:022B.0054: unbalanced collection at end of report description [ 182.043671][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.051838][ T339] a4tech 0003:09DA:022B.0054: parse failed [ 182.065429][ T339] a4tech: probe of 0003:09DA:022B.0054 failed with error -22 [ 182.065507][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.084570][ T339] usb 4-1: USB disconnect, device number 26 [ 182.258441][ T39] usb 10-1: USB disconnect, device number 17 [ 182.685042][ T339] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 182.822643][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3174'. [ 182.824328][ T8021] loop9: detected capacity change from 0 to 512 [ 182.852138][ T8021] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 182.852994][ T8025] loop7: detected capacity change from 0 to 1024 [ 182.860094][ T8021] System zones: 0-2, 18-18, 34-34 [ 182.872126][ T8021] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 182.882467][ T8021] EXT4-fs error (device loop9): ext4_acquire_dquot:6787: comm syz.9.3173: Failed to acquire dquot type 0 [ 182.893936][ T8021] EXT4-fs (loop9): Remounting filesystem read-only [ 182.900420][ T8021] EXT4-fs (loop9): 1 orphan inode deleted [ 182.906624][ T8021] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038 (0x7fffffff) [ 183.129434][ T339] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 183.137992][ T339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.147967][ T339] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 183.156674][ T339] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.280948][ T224] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 183.345999][ T339] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 183.355020][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.362860][ T339] usb 4-1: Product: syz [ 183.366846][ T339] usb 4-1: Manufacturer: syz [ 183.371241][ T339] usb 4-1: SerialNumber: syz [ 183.660433][ T339] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 183.671005][ T224] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.681815][ T224] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.691364][ T224] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.695344][ T339] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 183.700330][ T224] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.709022][ T339] usb 4-1: USB disconnect, device number 27 [ 183.715633][ T224] usb 8-1: config 0 descriptor?? [ 184.202619][ T8063] loop3: detected capacity change from 0 to 256 [ 184.225105][ T8063] incfs: ino conflict with backing FS 1 [ 184.245770][ T224] keytouch 0003:0926:3333.0055: fixing up Keytouch IEC report descriptor [ 184.249351][ T8071] loop3: detected capacity change from 0 to 512 [ 184.258082][ T224] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0055/input/input47 [ 184.290533][ T8071] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 184.300809][ T8071] System zones: 0-2, 18-18, 34-34 [ 184.307261][ T8071] __quota_error: 1 callbacks suppressed [ 184.307278][ T8071] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 184.324173][ T8071] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 184.333433][ T8071] EXT4-fs error (device loop3): ext4_acquire_dquot:6787: comm syz.3.3191: Failed to acquire dquot type 0 [ 184.344670][ T8071] EXT4-fs (loop3): Remounting filesystem read-only [ 184.351069][ T8071] EXT4-fs (loop3): 1 orphan inode deleted [ 184.357882][ T8071] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038 (0x7fffffff) [ 184.358706][ T224] keytouch 0003:0926:3333.0055: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 184.396079][ T8089] input: syz1 as /devices/virtual/input/input48 [ 184.477071][ T339] usb 8-1: USB disconnect, device number 19 [ 184.547118][ T8104] loop3: detected capacity change from 0 to 512 [ 184.554555][ T8104] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.3209: casefold flag without casefold feature [ 184.567558][ T8104] EXT4-fs (loop3): get root inode failed [ 184.573245][ T8104] EXT4-fs (loop3): mount failed [ 184.689318][ T39] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 185.003510][ T339] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 185.043870][ T8137] SELinux: Context :yz1 is not valid (left unmapped). [ 185.050957][ T28] audit: type=1400 audit(1731963262.006:1210): avc: denied { relabelto } for pid=8136 comm="syz.7.3223" name="file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":yz1" [ 185.081146][ T28] audit: type=1400 audit(1731963262.034:1211): avc: denied { associate } for pid=8136 comm="syz.7.3223" name="file0" dev="tmpfs" ino=534 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":yz1" [ 185.107618][ T28] audit: type=1400 audit(1731963262.034:1212): avc: denied { unlink } for pid=7072 comm="syz-executor" name="file0" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":yz1" [ 185.133674][ T39] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 185.143846][ T39] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 185.371968][ T39] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 185.381049][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.388919][ T39] usb 7-1: Product: syz [ 185.392914][ T39] usb 7-1: Manufacturer: syz [ 185.397431][ T39] usb 7-1: SerialNumber: syz [ 185.402495][ T39] usb 7-1: config 0 descriptor?? [ 185.415208][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.426044][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.426108][ T8088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 185.435541][ T339] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 185.442830][ T8088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 185.451359][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.467300][ T339] usb 4-1: config 0 descriptor?? [ 185.685882][ T8088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 185.692958][ T8088] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 185.700023][ T659] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 186.001331][ T339] logitech-djreceiver 0003:046D:C71B.0056: unknown main item tag 0x0 [ 186.162777][ T659] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.173561][ T659] usb 8-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 186.182519][ T659] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.190442][ T39] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 186.198662][ T659] usb 8-1: config 0 descriptor?? [ 186.224115][ T224] usb 4-1: USB disconnect, device number 28 [ 186.411955][ T39] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 186.421271][ T39] usb 7-1: USB disconnect, device number 18 [ 186.715486][ T659] hid (null): report_id 0 is invalid [ 186.721478][ T659] kye 0003:0458:5015.0057: report_id 0 is invalid [ 186.727881][ T659] kye 0003:0458:5015.0057: item 0 0 1 8 parsing failed [ 186.735038][ T659] kye 0003:0458:5015.0057: parse failed [ 186.740461][ T659] kye: probe of 0003:0458:5015.0057 failed with error -22 [ 186.747989][ T8154] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 186.933183][ T39] usb 8-1: USB disconnect, device number 20 [ 186.963096][ T28] audit: type=1326 audit(1731963263.760:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.9.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabaa17e719 code=0x7fc00000 [ 187.094447][ T659] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 187.105828][ T8178] loop6: detected capacity change from 0 to 256 [ 187.114569][ T8178] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 187.130074][ T8178] exFAT-fs (loop6): error, invalid size(size(4096) > aligned(9223372036854777344) [ 187.130074][ T8178] [ 187.141676][ T8178] exFAT-fs (loop6): Filesystem has been set read-only [ 187.148935][ T8178] exFAT-fs (loop6): error, invalid size(size(4096) > aligned(9223372036854777344) [ 187.148935][ T8178] [ 187.191389][ T8184] loop6: detected capacity change from 0 to 512 [ 187.199781][ T8184] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.3243: bg 0: block 5: invalid block bitmap [ 187.212218][ T8184] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 187.221203][ T8184] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3243: invalid indirect mapped block 3 (level 2) [ 187.234540][ T8184] EXT4-fs (loop6): 1 orphan inode deleted [ 187.240316][ T8184] EXT4-fs (loop6): 1 truncate cleaned up [ 187.527854][ T659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.538934][ T659] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.548617][ T659] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 187.557595][ T659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.569339][ T659] usb 4-1: config 0 descriptor?? [ 187.695444][ T28] audit: type=1326 audit(1731963264.443:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.9.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabaa11a099 code=0x7fc00000 [ 187.760149][ T8214] loop7: detected capacity change from 0 to 256 [ 187.766560][ T8214] exfat: Deprecated parameter 'namecase' [ 187.772052][ T8214] exfat: Deprecated parameter 'utf8' [ 187.780174][ T8214] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 188.113332][ T659] keytouch 0003:0926:3333.0058: fixing up Keytouch IEC report descriptor [ 188.126978][ T659] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0058/input/input49 [ 188.223258][ T659] keytouch 0003:0926:3333.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 188.236991][ T8234] device batadv_slave_1 entered promiscuous mode [ 188.243686][ T8233] device batadv_slave_1 left promiscuous mode [ 188.259851][ T28] audit: type=1400 audit(1731963264.960:1215): avc: denied { write } for pid=8237 comm="syz.7.3265" path="socket:[58003]" dev="sockfs" ino=58003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 188.335518][ T224] usb 4-1: USB disconnect, device number 29 [ 188.552169][ T8251] loop7: detected capacity change from 0 to 512 [ 188.559176][ T8251] EXT4-fs: Ignoring removed bh option [ 188.564651][ T8251] ext4: Unknown parameter 'fowner<00000000000000000000' [ 188.677287][ T8261] loop7: detected capacity change from 0 to 128 [ 188.683638][ T8261] EXT4-fs: Ignoring removed nobh option [ 188.691719][ T8261] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038 (0x7fffffff) [ 188.705167][ T28] audit: type=1400 audit(1731963265.375:1216): avc: denied { read } for pid=8259 comm="syz.7.3275" name="bus" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 188.842252][ T8270] loop0: detected capacity change from 0 to 512 [ 188.849031][ T8270] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 188.859696][ T8270] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 188.867520][ T8270] System zones: 1-12 [ 188.872024][ T8273] netlink: 512 bytes leftover after parsing attributes in process `syz.9.3279'. [ 188.880989][ T8270] EXT4-fs (loop0): 1 truncate cleaned up [ 188.922674][ T8279] xt_hashlimit: size too large, truncated to 1048576 [ 188.936697][ T8281] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 188.949804][ T8281] SELinux: failed to load policy [ 189.158513][ T28] audit: type=1326 audit(1731963265.791:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8235 comm="syz.6.3264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744e17e719 code=0x7fc00000 [ 190.660829][ T8307] loop7: detected capacity change from 0 to 1024 [ 190.667672][ T8307] EXT4-fs: Ignoring removed bh option [ 190.673493][ T8307] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.685300][ T28] audit: type=1400 audit(1731963267.203:1218): avc: denied { append } for pid=8312 comm="syz.9.3297" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 190.716478][ T8307] EXT4-fs (loop7): shut down requested (1) [ 190.940491][ T3001] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 190.951317][ T339] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 191.059676][ T659] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 191.330583][ T3001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.341404][ T3001] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.350377][ T3001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.358720][ T3001] usb 4-1: config 0 descriptor?? [ 191.395627][ T339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.406555][ T339] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.416118][ T339] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.425134][ T339] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.433578][ T339] usb 7-1: config 0 descriptor?? [ 191.460576][ T659] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 191.472295][ T659] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 191.486375][ T659] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 191.495313][ T659] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.525643][ T8319] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 191.883963][ T3001] keytouch 0003:0926:3333.0059: fixing up Keytouch IEC report descriptor [ 191.893599][ T3001] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0059/input/input51 [ 191.937774][ T339] keytouch 0003:0926:3333.005A: fixing up Keytouch IEC report descriptor [ 191.947108][ T339] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.005A/input/input52 [ 191.982178][ T3001] keytouch 0003:0926:3333.0059: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 192.023969][ T659] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 192.032168][ T659] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input50 [ 192.058879][ T339] keytouch 0003:0926:3333.005A: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 192.071917][ T659] usb 10-1: USB disconnect, device number 18 [ 192.158656][ T339] usb 7-1: USB disconnect, device number 19 [ 192.686171][ T339] usb 4-1: USB disconnect, device number 30 [ 192.802899][ T28] audit: type=1400 audit(1731963269.150:1219): avc: denied { bind } for pid=8333 comm="syz.0.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.824907][ T28] audit: type=1400 audit(1731963269.150:1220): avc: denied { listen } for pid=8333 comm="syz.0.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.853138][ T28] audit: type=1400 audit(1731963269.150:1221): avc: denied { accept } for pid=8333 comm="syz.0.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.009816][ T659] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 193.113027][ T8359] loop6: detected capacity change from 0 to 512 [ 193.120185][ T8359] EXT4-fs (loop6): Test dummy encryption mode enabled [ 193.126907][ T8359] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 193.138765][ T8359] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #17: comm syz.6.3317: corrupted in-inode xattr [ 193.150954][ T8359] EXT4-fs error (device loop6): ext4_orphan_get:1401: comm syz.6.3317: couldn't read orphan inode 17 (err -117) [ 193.166626][ T8359] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 193.181100][ T6944] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 193.196569][ T6944] EXT4-fs error (device loop6): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 17 [ 193.208305][ T6944] EXT4-fs error (device loop6): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 17 [ 193.410712][ T659] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 193.422315][ T659] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.444834][ T659] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.465015][ T659] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 193.518826][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.527858][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.535373][ T8370] device bridge_slave_0 entered promiscuous mode [ 193.544785][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.551778][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.559185][ T8370] device bridge_slave_1 entered promiscuous mode [ 193.573218][ T659] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 193.582165][ T659] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 193.590076][ T659] usb 8-1: Manufacturer: syz [ 193.601672][ T659] usb 8-1: config 0 descriptor?? [ 193.657192][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.664095][ T8370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.671202][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.678240][ T8370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.695585][ T8346] loop0: detected capacity change from 0 to 131072 [ 193.705394][ T8346] F2FS-fs (loop0): Found nat_bits in checkpoint [ 193.711507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.719260][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.726516][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.748297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.756418][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.760776][ T8346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 193.763431][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.778466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.786587][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.793544][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.800852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.808746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.829687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.842918][ T8370] device veth0_vlan entered promiscuous mode [ 193.851776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.860966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.870418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.887907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.896591][ T8370] device veth1_macvtap entered promiscuous mode [ 193.907438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.918304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.975115][ T10] device bridge_slave_1 left promiscuous mode [ 193.981074][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.988768][ T10] device bridge_slave_0 left promiscuous mode [ 193.994857][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.024634][ T10] device veth1_macvtap left promiscuous mode [ 194.036046][ T10] device veth0_vlan left promiscuous mode [ 194.138019][ T659] appleir 0003:05AC:8243.005B: unknown main item tag 0x0 [ 194.145101][ T659] appleir 0003:05AC:8243.005B: No inputs registered, leaving [ 194.180661][ T659] appleir 0003:05AC:8243.005B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 194.193246][ T8399] loop9: detected capacity change from 0 to 512 [ 194.207339][ T8401] input: syz1 as /devices/virtual/input/input53 [ 194.235149][ T8399] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038 (0x7fffffff) [ 194.259996][ T8399] EXT4-fs error (device loop9): ext4_do_update_inode:5226: inode #2: comm syz.9.3329: corrupted inode contents [ 194.272184][ T8399] EXT4-fs error (device loop9): ext4_dirty_inode:6088: inode #2: comm syz.9.3329: mark_inode_dirty error [ 194.285479][ T8399] EXT4-fs error (device loop9): ext4_do_update_inode:5226: inode #2: comm syz.9.3329: corrupted inode contents [ 194.298097][ T8399] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #2: comm syz.9.3329: mark_inode_dirty error [ 196.082454][ T8437] loop2: detected capacity change from 0 to 512 [ 196.103422][ T8437] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 196.115725][ T8437] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.3347: corrupted inode contents [ 196.127652][ T8437] EXT4-fs error (device loop2): ext4_dirty_inode:6088: inode #2: comm syz.2.3347: mark_inode_dirty error [ 196.139037][ T8437] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.3347: corrupted inode contents [ 196.151898][ T8437] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3347: mark_inode_dirty error [ 196.812803][ T659] usb 8-1: USB disconnect, device number 21