last executing test programs: 28.564479537s ago: executing program 0 (id=255): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000800)={0x5c, 0x39, 0x4, 0x70bd25, 0x25dfdbfb, "", [@generic="364153ab7b3e8f8a5d2db9b4a640df4c7df0fdb5a0f15fa00381120ae5c8a37720c8670b4f784ec6b63d8c7c12303aa99dd983b26034135670641c5856", @nested={0xa, 0x115, 0x0, 0x1, [@generic="8692ba13fb0b"]}]}, 0x5c}], 0x1, 0x0, 0x0, 0x1}, 0x4040041) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 28.518728348s ago: executing program 0 (id=256): r0 = syz_socket_connect_nvme_tcp() close(r0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x4810) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) 28.467242739s ago: executing program 0 (id=257): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000180)={[{@test_dummy_encryption}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xdf, 0x475, &(0x7f0000000780)="$eJzs289vFFUcAPDvTLeAgGxFREGQKpo0/mhpQeVgYjSaeNDERA94rG0hyEINrYmQRqsxeDQk3o1HE/8CT56MejLxikcTQ0KUmIheXDO7M6VddssubNna/XySoe/NvHk/dubNvn2PCaBvDWf/JBHbI+JSRJTr0ZUJhut/rl1dmPr76sJUEtXqG78ntXR/XV2YquaK87bleY6kEeknSV5IDC7Pdu7c+VOTlcrM2Tw+Nn/63bG5c+efOnl68sTMiZkzE0ePHjk8/uwzE083qfWvFztq5ED+d+8Hs/v2vPLWxdemjl18+4evs/ru3l8/lLWjozzbMJw1/I/6Z9N47LFuF9Zj/1avtzMp9bo2tCvrGqW8c16KcgzE9YtXjpc/7mnlgDWVPbM3tz68WAU2sCR6XQOgN4ov+uz3b7HdoaHHunDlhfoPoKzd1/KtfqQUaZ5mcA3LH46IY4v/fJFt0TAPUW0ybwAAcLu+zcY/TzYb/6Wxe1m6Hfna0FBE3BMROyPi3ojYFRH3RdTS3h8RD3RY/nBD/MbxZ3r5lhrWpmz891y+trVy/FeM/mJoII/dXWv/YHL8ZGXmUP6ZjMTg5iw+3izzIouXfv6sVfnLx3/ZlpVfjAXzTC6X6hN0W4o905Pzk90alF75KGJvqVn7k6WVgCQi9kTE3s6y3lEETj7+1b5WiW7e/lV0YZ2p+mWRycJiNLS/kKy+Pjm2JSozh8aKu+JGP/504fVW5d9W+7sgu/5bV97/DSnKfybL12vnlg48324ZF375tOVvylL79/+S7P7flLxZW7PelO97f3J+/ux4xKbk1Vp8xf6J6+cW8SJ91v6Rg837/878nKz9D0ZEdhPvj4iHIuJAfu0ejohHIuLgKu3//sVH32l1bD1c/+mmz7+l+39o5fXvPDBw6rtvWpXf3vPvSC00ku+pPf9uonV1isdotufY3K1+bgAAAPB/kkbE9kjS0aVwmo6O1v8P/67YmlZm5+afOD773pnp+jsCQzGYFjNd5WXzoePJYp5jPT6RzxUXxw/n88afD9xVi49OzVame9x26HfbWvT/zG8Dva4dsOa8rwX9q7H/pz2qB3Dn+f6H/qX/Q/+6of97IEDfaNbdP2yIWwuAjaha7vgUE4SwYRjuQ//S/6F/6f/Ql27nvf61CpRWeXtfoMeBrRFRC0S6LuqzbgIH1lFvKnWhd/f4wQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAl/wUAAP//xgL2dQ==") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000340)=@v2={0x2, @aes128, 0x3, '\x00', @d}) 28.308459662s ago: executing program 0 (id=260): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000400, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x44f, &(0x7f0000000600)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3853008, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 28.054490137s ago: executing program 0 (id=262): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 27.893574171s ago: executing program 0 (id=264): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r2, 0x1, 0xfe, 0x6, @remote}, 0x14) syz_emit_ethernet(0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000004aa"], 0x0) 27.8934965s ago: executing program 32 (id=264): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r2, 0x1, 0xfe, 0x6, @remote}, 0x14) syz_emit_ethernet(0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000004aa"], 0x0) 25.679062643s ago: executing program 3 (id=297): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, &(0x7f0000000080)=@random={'user.', '\x11'}) 25.664767734s ago: executing program 3 (id=298): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 25.579918075s ago: executing program 3 (id=301): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc) 25.559453155s ago: executing program 3 (id=302): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") open(&(0x7f0000000080)='./bus\x00', 0x147c7c, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x14927e, 0xbb) fallocate(r0, 0x11, 0x0, 0x8800000) 25.473943927s ago: executing program 3 (id=305): bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 25.377500659s ago: executing program 3 (id=308): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0xa, "df72"}, @global=@item_012={0x1, 0x1, 0x1, "d6"}, @global=@item_012={0x1, 0x1, 0x12815d6a2943714, "1f"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) 25.377362409s ago: executing program 33 (id=308): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0xa, "df72"}, @global=@item_012={0x1, 0x1, 0x1, "d6"}, @global=@item_012={0x1, 0x1, 0x12815d6a2943714, "1f"}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) 17.930323263s ago: executing program 5 (id=474): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 17.916812144s ago: executing program 5 (id=475): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 17.145751068s ago: executing program 5 (id=481): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.588692338s ago: executing program 5 (id=516): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfc, 0x19c, &(0x7f0000000200)="$eJzs281qE1EYBuA3tdW2LtKFK3Ex4MZVaHsFFqkgBgSlCwVBsQ1IRwIWArqw2bnwJrwct3olLrsQRppp7Q+piNoMJM+zyQfnvMl3DiSZMzAvbr3Z3e7v9Z73vmSx1crc3arKQSsrmcuxYQCAaXJQVfleVVV1bZilz6mqqumOAIDL5v8fAGbPk6fPHm50u5uPi2IxKT8OtgZb9Ws9vtHL65TZyWra+ZHDC4QjdX3/QXdztRhZyady/yi/P9i6cja/lnZWxufX6nxxNr+Q5dP59bRzY3x+fWz+au7cPpXvpJ1vr9JPme0cZk/yH9aK4t6j7rn89dE8AAAAmAad4pex5/dO56LxOr/R+uP7A+fO1/O5Od/s2gFgVu29e7/7six33jZWJBn+Zs7X5brRyTVW/GX8eEub3Mx/K5by/995Ic2va3qK/txlf8RiklHR4I8SMBEn3/6mOwEAAAAAAAAAAAAAAC4yiUeXml4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPnZwAAAP//RL2Oaw==") r0 = syz_clone(0x24000400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_pidfd_open(r0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 14.174226655s ago: executing program 5 (id=519): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='}\\)\\\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 14.000337769s ago: executing program 5 (id=524): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 13.95546145s ago: executing program 34 (id=524): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 13.92727155s ago: executing program 1 (id=529): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 13.771196743s ago: executing program 1 (id=534): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10.805055001s ago: executing program 1 (id=593): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="00214717a7075eeb9d04712000bbd6e76880c25c498e", 0x16}], 0x1, 0xee, 0x1) 10.771745771s ago: executing program 1 (id=594): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 10.754486152s ago: executing program 1 (id=595): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 7.272640269s ago: executing program 7 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) getgid() 7.245373059s ago: executing program 7 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 7.20917252s ago: executing program 7 (id=625): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1502, &(0x7f0000002d40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file1\x00', 0x0) 7.071074333s ago: executing program 7 (id=627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x80, 0x15, 0x2fd, 0x0, 0x0, 0x2, 0x0}) 7.016178084s ago: executing program 7 (id=630): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) 4.821421977s ago: executing program 7 (id=666): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 2.931313603s ago: executing program 2 (id=676): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.931061713s ago: executing program 2 (id=708): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 1.927669083s ago: executing program 6 (id=709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) 1.908377263s ago: executing program 6 (id=710): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.842459805s ago: executing program 6 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000040)="d2cf4071ee038000007ad2e20539519ec6afbc0000", 0x15}, {&(0x7f0000002a00)="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", 0x22c}], 0x2}}], 0x1, 0x4040001) 1.782095445s ago: executing program 6 (id=712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.574450819s ago: executing program 6 (id=714): io_setup(0x4082, &(0x7f0000000380)=0x0) io_destroy(r0) io_setup(0x8, &(0x7f00000000c0)) syz_io_uring_setup(0x2f3c, &(0x7f0000000380)={0x0, 0x1fcb, 0x2}, &(0x7f0000000180), 0x0) io_pgetevents(r0, 0x3, 0x0, 0x0, 0x0, 0x0) 1.511944301s ago: executing program 2 (id=716): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x1, 0x40008004) 1.395825013s ago: executing program 6 (id=718): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) gettid() syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x41402) 404.843192ms ago: executing program 1 (id=719): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 404.745602ms ago: executing program 2 (id=720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) poll(0x0, 0x0, 0x0) 378.251333ms ago: executing program 2 (id=722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 323.984194ms ago: executing program 2 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) poll(0x0, 0x0, 0xffffffffffbffff8) 292.551384ms ago: executing program 4 (id=726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) time(0x0) 266.159595ms ago: executing program 4 (id=728): prlimit64(0x0, 0x9, &(0x7f0000002800)={0x8, 0x77}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 201.822276ms ago: executing program 4 (id=730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 77.609119ms ago: executing program 4 (id=731): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x50}}, 0x40000c0) 50.928369ms ago: executing program 4 (id=732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000002580)={@link_local, @random='\b\a\x00\x00\'f', @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "e98272", 0x44, 0x2f, 0x1, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x0, 0x1, 0x2, 0x2, 0x0, 0x3, 0x0, 0xb}, 0x1, {0x10001}}}, {0x8, 0x22eb, 0x2, {{0x6, 0x2, 0x4, 0x2, 0x0, 0x3, 0x7, 0xf}, 0x2, {0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x3}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 0s ago: executing program 4 (id=733): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) kernel console output (not intermixed with test programs): cated parameter 'namecase' [ 24.943475][ T414] exfat: Deprecated parameter 'namecase' [ 24.957879][ T414] exfat: Deprecated parameter 'utf8' [ 25.023011][ T414] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 25.285135][ T443] loop4: detected capacity change from 0 to 40427 [ 25.318459][ T443] F2FS-fs (loop4): fault_injection options not supported [ 25.332897][ T443] F2FS-fs (loop4): invalid crc value [ 25.343814][ T443] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.369712][ T462] sch_fq: defrate 4294967295 ignored. [ 25.396886][ T443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 25.448676][ T343] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 25.471715][ T443] attempt to access beyond end of device [ 25.471715][ T443] loop4: rw=2049, want=45104, limit=40427 [ 25.491216][ T285] attempt to access beyond end of device [ 25.491216][ T285] loop4: rw=2049, want=45112, limit=40427 [ 25.541321][ T475] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000003 [ 25.789055][ T497] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í0x0000000000000004 [ 25.817383][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 25.828826][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 25.856832][ T343] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 25.877320][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.900933][ T343] usb 4-1: config 0 descriptor?? [ 25.917446][ T449] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 25.989118][ T514] loop0: detected capacity change from 0 to 128 [ 26.040592][ T514] EXT4-fs (loop0): Ignoring removed nobh option [ 26.058937][ T514] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 26.092776][ T514] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 26.132432][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 26.132448][ T30] audit: type=1400 audit(1757695374.203:209): avc: denied { create } for pid=513 comm="syz.0.75" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 26.293629][ T30] audit: type=1400 audit(1757695374.363:210): avc: denied { connect } for pid=528 comm="syz.2.82" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.334860][ T30] audit: type=1400 audit(1757695374.363:211): avc: denied { write } for pid=528 comm="syz.2.82" laddr=fe80::a8aa:aaff:feaa:aa16 lport=60 faddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.361691][ T537] loop0: detected capacity change from 0 to 128 [ 26.369816][ T30] audit: type=1400 audit(1757695374.413:212): avc: denied { read write } for pid=532 comm="syz.2.83" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.386013][ T480] loop1: detected capacity change from 0 to 131072 [ 26.396018][ T343] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 26.400479][ T30] audit: type=1400 audit(1757695374.413:213): avc: denied { open } for pid=532 comm="syz.2.83" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.407568][ T343] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 26.430567][ T30] audit: type=1400 audit(1757695374.413:214): avc: denied { mount } for pid=532 comm="syz.2.83" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 26.438405][ T343] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 26.468557][ T343] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 26.476451][ T480] F2FS-fs (loop1): Test dummy encryption mode enabled [ 26.481533][ T30] audit: type=1400 audit(1757695374.543:215): avc: denied { module_request } for pid=478 comm="syz.1.60" kmod="crypto-hmac(sha512)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 26.485945][ T343] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 26.513705][ T480] F2FS-fs (loop1): invalid crc value [ 26.514772][ T537] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.533443][ T480] F2FS-fs (loop1): Found nat_bits in checkpoint [ 26.534965][ T537] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 26.580648][ T343] hid-generic 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 26.615065][ T30] audit: type=1400 audit(1757695374.683:216): avc: denied { ioctl } for pid=536 comm="syz.0.85" path="/14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop0" ino=13 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.660841][ T343] usb 4-1: USB disconnect, device number 2 [ 26.669915][ T480] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 26.734873][ T480] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 26.775203][ T30] audit: type=1326 audit(1757695374.843:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=550 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4d728ba9 code=0x7ffc0000 [ 26.799171][ T30] audit: type=1326 audit(1757695374.843:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=550 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4d728ba9 code=0x7ffc0000 [ 27.156238][ T565] loop0: detected capacity change from 0 to 40427 [ 27.173571][ T565] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 27.180333][ T565] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 27.209067][ T565] F2FS-fs (loop0): invalid crc value [ 27.238086][ T565] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 27.307365][ T397] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.315556][ T565] F2FS-fs (loop0): Failed to read root inode [ 27.420474][ T575] loop1: detected capacity change from 0 to 40427 [ 27.450164][ T575] F2FS-fs (loop1): fault_type options not supported [ 27.477686][ T575] F2FS-fs (loop1): fault_injection options not supported [ 27.505867][ T575] F2FS-fs (loop1): invalid crc value [ 27.528288][ T575] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.577826][ T575] F2FS-fs (loop1): Start checkpoint disabled! [ 27.584882][ T575] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 27.660239][ T575] attempt to access beyond end of device [ 27.660239][ T575] loop1: rw=2049, want=77960, limit=40427 [ 27.677650][ T397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.688728][ T397] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 27.698174][ T397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.732799][ T397] usb 5-1: config 0 descriptor?? [ 27.746736][ T332] attempt to access beyond end of device [ 27.746736][ T332] loop1: rw=1, want=77832, limit=40427 [ 27.778003][ T332] attempt to access beyond end of device [ 27.778003][ T332] loop1: rw=2049, want=40976, limit=40427 [ 27.815214][ T610] loop2: detected capacity change from 0 to 1024 [ 27.868351][ T610] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 27.899091][ T610] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 27.909051][ T610] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 28.012889][ T605] loop0: detected capacity change from 0 to 40427 [ 28.032067][ T605] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 28.041230][ T605] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 28.053094][ T605] F2FS-fs (loop0): invalid crc value [ 28.066428][ T605] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.106985][ T605] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 28.114310][ T605] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 28.160101][ T619] loop2: detected capacity change from 0 to 40427 [ 28.175178][ T628] loop3: detected capacity change from 0 to 512 [ 28.193092][ T283] attempt to access beyond end of device [ 28.193092][ T283] loop0: rw=2049, want=45104, limit=40427 [ 28.209326][ T619] F2FS-fs (loop2): fault_injection options not supported [ 28.222759][ T619] F2FS-fs (loop2): invalid crc value [ 28.238434][ T619] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.248465][ T397] dragonrise 0003:0079:0006.0002: item fetching failed at offset 4/5 [ 28.267442][ T397] dragonrise 0003:0079:0006.0002: parse failed [ 28.273668][ T397] dragonrise: probe of 0003:0079:0006.0002 failed with error -22 [ 28.283823][ T628] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 28.295498][ T628] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.299005][ T619] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.347682][ T628] SELinux: Context : is not valid (left unmapped). [ 28.401200][ T286] attempt to access beyond end of device [ 28.401200][ T286] loop2: rw=2049, want=45104, limit=40427 [ 28.422671][ T637] loop0: detected capacity change from 0 to 1024 [ 28.433144][ T637] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.454679][ T397] usb 5-1: USB disconnect, device number 2 [ 28.486033][ T637] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 28.542547][ T637] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 28.568874][ T637] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 28.597175][ T647] /dev/loop0: Can't open blockdev [ 28.600504][ T637] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.600504][ T637] [ 28.613921][ T637] EXT4-fs (loop0): Total free blocks count 0 [ 28.619223][ T649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.126'. [ 28.625964][ T637] EXT4-fs (loop0): Free/Dirty block details [ 28.645633][ T637] EXT4-fs (loop0): free_blocks=20480 [ 28.651508][ T637] EXT4-fs (loop0): dirty_blocks=96 [ 28.658037][ T637] EXT4-fs (loop0): Block reservation details [ 28.664230][ T637] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 28.696854][ T608] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 28.710031][ T608] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.710031][ T608] [ 29.014527][ T674] syz.1.137 (674) used greatest stack depth: 19744 bytes left [ 29.047472][ T397] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.047809][ T56] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 29.212720][ T688] loop4: detected capacity change from 0 to 128 [ 29.372983][ T711] loop1: detected capacity change from 0 to 1024 [ 29.399661][ T711] EXT4-fs (loop1): Ignoring removed nobh option [ 29.403407][ T714] loop4: detected capacity change from 0 to 256 [ 29.406260][ T711] EXT4-fs (loop1): Ignoring removed bh option [ 29.418730][ T711] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.418730][ T56] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.418769][ T56] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 29.431273][ T397] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 29.442431][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.455423][ T714] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.462219][ T56] usb 3-1: config 0 descriptor?? [ 29.477779][ T714] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 29.494547][ T397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.496254][ T714] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 29.515945][ T397] usb 1-1: config 0 descriptor?? [ 29.520917][ T711] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 29.732361][ T725] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 29.740712][ T725] SELinux: failed to load policy [ 29.978951][ T56] uclogic 0003:5543:0522.0003: unbalanced delimiter at end of report description [ 29.989430][ T56] uclogic 0003:5543:0522.0003: parse failed [ 29.995669][ T56] uclogic: probe of 0003:5543:0522.0003 failed with error -22 [ 30.241312][ T26] usb 3-1: USB disconnect, device number 2 [ 30.307313][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.443904][ T758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 30.560774][ T762] loop3: detected capacity change from 0 to 8192 [ 30.582002][ T762] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.599206][ T762] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 30.616748][ T762] FAT-fs (loop3): Filesystem has been set read-only [ 30.631938][ T282] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 30.667417][ T397] usb 1-1: Cannot set autoneg [ 30.675203][ T397] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 30.677395][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.705715][ T397] usb 1-1: USB disconnect, device number 2 [ 30.713716][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.724286][ T6] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 30.741132][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.761136][ T6] usb 2-1: config 0 descriptor?? [ 31.047365][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.077472][ T343] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 31.087382][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.190869][ T30] kauditd_printk_skb: 120 callbacks suppressed [ 31.190885][ T30] audit: type=1400 audit(1757695379.263:339): avc: denied { audit_write } for pid=779 comm="syz.0.183" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 31.218833][ T30] audit: type=1107 audit(1757695379.263:340): pid=779 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 31.238237][ T6] hkems 0003:2006:0118.0004: item fetching failed at offset 3/7 [ 31.246677][ T6] hkems 0003:2006:0118.0004: parse failed [ 31.252760][ T6] hkems: probe of 0003:2006:0118.0004 failed with error -22 [ 31.291924][ T788] syz.0.186 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.398430][ T30] audit: type=1400 audit(1757695379.473:341): avc: denied { mount } for pid=798 comm="syz.0.191" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 31.424964][ T30] audit: type=1400 audit(1757695379.493:342): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 31.447504][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.458959][ T343] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.468739][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.479009][ T343] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 31.488594][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.501864][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 31.511725][ T26] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.521065][ T39] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 31.530878][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.543780][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 31.555764][ T26] usb 4-1: config 0 descriptor?? [ 31.560966][ T343] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 31.561040][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 31.579964][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.588484][ T343] usb 3-1: SerialNumber: syz [ 31.588505][ T284] usb 2-1: USB disconnect, device number 2 [ 31.596900][ T343] usb 3-1: config 0 descriptor?? [ 31.737523][ T39] usb 5-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 31.746842][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.755212][ T39] usb 5-1: Product: syz [ 31.759862][ T39] usb 5-1: Manufacturer: syz [ 31.764590][ T39] usb 5-1: SerialNumber: syz [ 31.770244][ T39] usb 5-1: config 0 descriptor?? [ 32.018507][ T6] usb 5-1: USB disconnect, device number 3 [ 32.039040][ T26] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 32.043827][ T30] audit: type=1400 audit(1757695380.113:343): avc: denied { map } for pid=820 comm="syz.1.200" path="socket:[17753]" dev="sockfs" ino=17753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.047062][ T776] UDC core: couldn't find an available UDC or it's busy: -16 [ 32.070038][ T343] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.078977][ T776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 32.094343][ T26] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 32.117135][ T30] audit: type=1400 audit(1757695380.153:344): avc: denied { execmem } for pid=820 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.139403][ T824] loop1: detected capacity change from 0 to 128 [ 32.146882][ T30] audit: type=1400 audit(1757695380.153:345): avc: denied { read accept } for pid=820 comm="syz.1.200" path="socket:[17753]" dev="sockfs" ino=17753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.150949][ T26] usb 3-1: USB disconnect, device number 3 [ 32.243671][ T824] FAT-fs (loop1): bogus number of FAT sectors [ 32.252368][ T824] FAT-fs (loop1): Can't find a valid FAT filesystem [ 32.303795][ T826] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.457390][ T343] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.470290][ T343] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 32.479765][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.492458][ T343] usb 1-1: config 0 descriptor?? [ 32.558035][ T30] audit: type=1107 audit(1757695380.633:346): pid=831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 32.631884][ T30] audit: type=1400 audit(1757695380.703:347): avc: denied { remount } for pid=837 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.726961][ T30] audit: type=1400 audit(1757695380.793:348): avc: denied { create } for pid=847 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.979393][ T343] sony 0003:054C:024B.0006: hiddev97,hidraw1: USB HID v1.01 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0 [ 32.991240][ T343] sony 0003:054C:024B.0006: failed to claim input [ 33.047554][ T26] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 33.184633][ T397] usb 1-1: USB disconnect, device number 3 [ 33.407431][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.417600][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.577460][ T26] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.587323][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.595329][ T26] usb 5-1: Product: syz [ 33.599753][ T26] usb 5-1: Manufacturer: syz [ 33.604410][ T26] usb 5-1: SerialNumber: syz [ 33.879881][ T864] syz.3.219[864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.879937][ T864] syz.3.219[864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.919011][ T26] usb 5-1: 0:2 : does not exist [ 33.987055][ T26] usb 5-1: USB disconnect, device number 4 [ 34.011111][ T397] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.387453][ T397] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 34.396027][ T397] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 34.405323][ T397] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 34.415817][ T397] usb 1-1: config 220 has no interface number 2 [ 34.422231][ T397] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 34.435618][ T397] usb 1-1: config 220 interface 0 has no altsetting 0 [ 34.442573][ T397] usb 1-1: config 220 interface 76 has no altsetting 0 [ 34.449542][ T397] usb 1-1: config 220 interface 1 has no altsetting 0 [ 34.477332][ T343] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 34.617455][ T397] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 34.626631][ T397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.634853][ T397] usb 1-1: Product: syz [ 34.639274][ T397] usb 1-1: Manufacturer: syz [ 34.643896][ T397] usb 1-1: SerialNumber: syz [ 34.767432][ T343] usb 4-1: device firmware changed [ 34.772902][ T39] usb 4-1: USB disconnect, device number 3 [ 34.927581][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.007484][ T397] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 35.016919][ T397] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 35.023425][ T397] usb 1-1: No valid video chain found. [ 35.029012][ T397] usb 1-1: selecting invalid altsetting 0 [ 35.108726][ T397] usb 1-1: USB disconnect, device number 4 [ 35.297385][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.308541][ T39] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 35.317837][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.326481][ T39] usb 4-1: config 0 descriptor?? [ 35.442313][ T895] capability: warning: `syz.0.233' uses deprecated v2 capabilities in a way that may be insecure [ 35.469339][ T897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.234'. [ 35.478396][ T897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.485613][ T897] IPv6: NLM_F_CREATE should be set when creating new route [ 35.492884][ T897] IPv6: NLM_F_CREATE should be set when creating new route [ 35.517320][ T26] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 35.563169][ T904] KVM: debugfs: duplicate directory 904-4 [ 35.599679][ T908] loop0: detected capacity change from 0 to 2048 [ 35.726764][ T910] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 35.736376][ T910] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 35.788117][ T39] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 35.798290][ T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input6 [ 35.880200][ T39] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 35.892343][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 35.904604][ T26] usb 5-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00 [ 35.913827][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.922541][ T26] usb 5-1: config 0 descriptor?? [ 35.947364][ T888] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 36.196210][ T786] usb 4-1: USB disconnect, device number 4 [ 36.408582][ T26] wacom 0003:056A:010F.0008: unknown main item tag 0x0 [ 36.415678][ T26] wacom 0003:056A:010F.0008: unknown main item tag 0x0 [ 36.422858][ T26] wacom 0003:056A:010F.0008: unknown main item tag 0x0 [ 36.430006][ T26] wacom 0003:056A:010F.0008: unknown main item tag 0x0 [ 36.437197][ T26] wacom 0003:056A:010F.0008: unknown main item tag 0x0 [ 36.444971][ T26] wacom 0003:056A:010F.0008: hidraw0: USB HID v1.01 Device [HID 056a:010f] on usb-dummy_hcd.4-1/input0 [ 36.616329][ T56] usb 5-1: USB disconnect, device number 5 [ 37.070235][ T935] loop0: detected capacity change from 0 to 40427 [ 37.087359][ T343] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.129834][ T935] F2FS-fs (loop0): invalid crc value [ 37.147852][ T935] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.189847][ T935] F2FS-fs (loop0): Start checkpoint disabled! [ 37.196676][ T935] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 37.255315][ T332] attempt to access beyond end of device [ 37.255315][ T332] loop0: rw=2049, want=40976, limit=40427 [ 37.447327][ T343] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.467301][ T343] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 37.476282][ T343] usb 4-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 37.507293][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.517536][ T343] usb 4-1: config 0 descriptor?? [ 37.770217][ T929] netlink: 59 bytes leftover after parsing attributes in process `syz.3.246'. [ 37.801820][ T343] usb 4-1: USB disconnect, device number 5 [ 37.810325][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 37.810341][ T30] audit: type=1400 audit(1757695385.883:369): avc: denied { ioctl } for pid=947 comm="syz.0.254" path="socket:[17930]" dev="sockfs" ino=17930 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.889863][ T950] SELinux: failed to load policy [ 37.924509][ T30] audit: type=1400 audit(1757695385.993:370): avc: denied { nlmsg_read } for pid=951 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 37.964646][ T954] loop0: detected capacity change from 0 to 512 [ 38.024070][ T954] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.031561][ T954] EXT4-fs (loop0): Test dummy encryption mode enabled [ 38.041025][ T954] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 38.078005][ T954] EXT4-fs (loop0): shut down requested (1) [ 38.088984][ T30] audit: type=1400 audit(1757695386.163:371): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.112820][ T30] audit: type=1400 audit(1757695386.163:372): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.135580][ T30] audit: type=1400 audit(1757695386.163:373): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.157062][ T30] audit: type=1400 audit(1757695386.163:374): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.177857][ T30] audit: type=1400 audit(1757695386.163:375): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.191177][ T962] loop0: detected capacity change from 0 to 512 [ 38.205702][ T30] audit: type=1400 audit(1757695386.163:376): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.211295][ T962] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.229000][ T30] audit: type=1400 audit(1757695386.163:377): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.265179][ T962] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.276427][ T962] EXT4-fs (loop0): 1 truncate cleaned up [ 38.282183][ T962] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none. [ 38.307319][ T30] audit: type=1400 audit(1757695386.373:378): avc: denied { setattr } for pid=961 comm="syz.0.260" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.312826][ T962] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 38.366137][ T283] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 38.387086][ T283] EXT4-fs (loop0): Remounting filesystem read-only [ 38.617402][ T343] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 38.630169][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.637797][ T970] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.645662][ T970] device bridge_slave_0 entered promiscuous mode [ 38.655531][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.663011][ T970] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.670811][ T970] device bridge_slave_1 entered promiscuous mode [ 38.673608][ T975] loop3: detected capacity change from 0 to 256 [ 38.702355][ T975] FAT-fs (loop3): Directory bread(block 64) failed [ 38.709154][ T975] FAT-fs (loop3): Directory bread(block 65) failed [ 38.716133][ T975] FAT-fs (loop3): Directory bread(block 66) failed [ 38.723328][ T975] FAT-fs (loop3): Directory bread(block 67) failed [ 38.730507][ T975] FAT-fs (loop3): Directory bread(block 68) failed [ 38.737432][ T975] FAT-fs (loop3): Directory bread(block 69) failed [ 38.744081][ T975] FAT-fs (loop3): Directory bread(block 70) failed [ 38.750850][ T975] FAT-fs (loop3): Directory bread(block 71) failed [ 38.757728][ T975] FAT-fs (loop3): Directory bread(block 72) failed [ 38.764375][ T975] FAT-fs (loop3): Directory bread(block 73) failed [ 38.816481][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.823840][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.831424][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.838504][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.876031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.883993][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.887336][ T343] usb 5-1: Using ep0 maxpacket: 8 [ 38.896441][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.908932][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.917203][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.924399][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.937149][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.945521][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.952598][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.966983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.979274][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.994598][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.003893][ T332] device bridge_slave_1 left promiscuous mode [ 39.010212][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.018368][ T343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.018686][ T332] device bridge_slave_0 left promiscuous mode [ 39.028661][ T343] usb 5-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 39.035293][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.044164][ T343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.060503][ T332] device veth1_macvtap left promiscuous mode [ 39.063741][ T343] usb 5-1: config 0 descriptor?? [ 39.066747][ T332] device veth0_vlan left promiscuous mode [ 39.164172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.172481][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.180103][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.189137][ T970] device veth0_vlan entered promiscuous mode [ 39.200427][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.210423][ T970] device veth1_macvtap entered promiscuous mode [ 39.221343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.231938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.266083][ T988] loop5: detected capacity change from 0 to 2048 [ 39.316017][ T6] usb 5-1: USB disconnect, device number 6 [ 39.332042][ T988] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.343079][ T988] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.677335][ T786] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 39.763630][ T1000] loop3: detected capacity change from 0 to 512 [ 39.860008][ T1000] EXT4-fs (loop3): Ignoring removed oldalloc option [ 39.872286][ T1000] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.886734][ T1000] EXT4-fs (loop3): 1 truncate cleaned up [ 39.893047][ T1000] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 40.067366][ T786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 40.078810][ T786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.088740][ T786] usb 6-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 40.099237][ T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.108357][ T786] usb 6-1: config 0 descriptor?? [ 40.226463][ T26] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 40.234585][ T26] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.262584][ T1028] fido_id[1028]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.551033][ T1046] loop4: detected capacity change from 0 to 512 [ 40.578690][ T786] wacom 0003:056A:0029.000A: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 40.588949][ T786] wacom 0003:056A:0029.000A: hidraw0: USB HID v0.00 Device [HID 056a:0029] on usb-dummy_hcd.5-1/input0 [ 40.603294][ T786] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0029.000A/input/input10 [ 40.677975][ T1046] EXT4-fs warning (device loop4): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 40.704295][ T1046] EXT4-fs (loop4): mount failed [ 40.790127][ T56] usb 6-1: USB disconnect, device number 2 [ 40.867790][ T1066] netlink: 96 bytes leftover after parsing attributes in process `syz.4.300'. [ 40.880608][ T1068] loop3: detected capacity change from 0 to 2048 [ 40.908302][ T1068] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.092481][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.099983][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.107759][ T1081] device bridge_slave_0 entered promiscuous mode [ 41.114773][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.121901][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.129547][ T1081] device bridge_slave_1 entered promiscuous mode [ 41.180623][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.187696][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.194966][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.202037][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.225180][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.233191][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.241683][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.252628][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.260761][ T26] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 41.261010][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.275308][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.284335][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.292562][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.299640][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.328914][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.340050][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.348248][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.359381][ T1081] device veth0_vlan entered promiscuous mode [ 41.362914][ T1092] SELinux: security_context_str_to_sid(Eá…) failed for (dev ?, type ?) errno=-22 [ 41.377229][ T1092] SELinux: security_context_str_to_sid(Eá…) failed for (dev ramfs, type ramfs) errno=-22 [ 41.387736][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.401007][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.409758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.420196][ T1081] device veth1_macvtap entered promiscuous mode [ 41.434175][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.447682][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.462586][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.489065][ T332] device bridge_slave_1 left promiscuous mode [ 41.495253][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.503241][ T332] device bridge_slave_0 left promiscuous mode [ 41.511131][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.519570][ T332] device veth1_macvtap left promiscuous mode [ 41.525731][ T332] device veth0_vlan left promiscuous mode [ 41.627346][ T26] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.682235][ T1108] loop6: detected capacity change from 0 to 256 [ 41.712537][ T1108] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 41.717654][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.734316][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 41.742899][ T26] usb 5-1: SerialNumber: syz [ 41.752546][ T1108] exFAT-fs (loop6): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 41.764412][ T1108] exFAT-fs (loop6): Filesystem has been set read-only [ 41.797450][ T397] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 42.000134][ T1117] loop6: detected capacity change from 0 to 40427 [ 42.067904][ T1117] F2FS-fs (loop6): Wrong NAT boundary, start(2560) end(3840) blocks(1024) [ 42.076522][ T1117] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 42.086071][ T1117] F2FS-fs (loop6): invalid crc value [ 42.092663][ T1117] F2FS-fs (loop6): Found nat_bits in checkpoint [ 42.121346][ T1117] F2FS-fs (loop6): Start checkpoint disabled! [ 42.128648][ T1117] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 42.135863][ T1117] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 42.163608][ T1117] attempt to access beyond end of device [ 42.163608][ T1117] loop6: rw=2049, want=77960, limit=40427 [ 42.167964][ T397] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.185286][ T397] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 42.195838][ T397] usb 6-1: config 1 has no interface number 0 [ 42.202420][ T397] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.213704][ T397] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 42.223213][ T397] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 42.230562][ T45] attempt to access beyond end of device [ 42.230562][ T45] loop6: rw=1, want=77832, limit=40427 [ 42.248197][ T45] attempt to access beyond end of device [ 42.248197][ T45] loop6: rw=1, want=77960, limit=40427 [ 42.259660][ T45] attempt to access beyond end of device [ 42.259660][ T45] loop6: rw=2049, want=40976, limit=40427 [ 42.351346][ T1121] loop1: detected capacity change from 0 to 1024 [ 42.387378][ T397] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.400068][ T397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.408743][ T397] usb 6-1: Product: syz [ 42.412940][ T397] usb 6-1: Manufacturer: syz [ 42.417876][ T397] usb 6-1: SerialNumber: syz [ 42.431443][ T1121] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.445304][ T26] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 42.458124][ T1121] EXT4-fs warning (device loop1): ext4_rmdir:3243: inode #11: comm syz.1.323: empty directory 'file1' has too many links (111) [ 42.708248][ T1166] syz.6.336[1166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.708331][ T1166] syz.6.336[1166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.767239][ T1174] loop6: detected capacity change from 0 to 256 [ 42.848695][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 42.848711][ T30] audit: type=1326 audit(1757695390.923:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1167 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de9bcba9 code=0x7ffc0000 [ 42.853571][ T343] usb 5-1: USB disconnect, device number 7 [ 42.888985][ T30] audit: type=1326 audit(1757695390.923:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1167 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de9bcba9 code=0x7ffc0000 [ 42.913418][ T343] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 42.923423][ T30] audit: type=1400 audit(1757695390.923:479): avc: denied { execute } for pid=1176 comm="syz.6.340" path="/19/cpu.stat" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.923457][ T30] audit: type=1400 audit(1757695390.953:480): avc: denied { getopt } for pid=1176 comm="syz.6.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.053433][ T30] audit: type=1326 audit(1757695391.123:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1193 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de9bcba9 code=0x7ffc0000 [ 43.119464][ T30] audit: type=1326 audit(1757695391.153:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1193 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de9bcba9 code=0x7ffc0000 [ 43.194662][ T30] audit: type=1326 audit(1757695391.153:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1193 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f37de9bcba9 code=0x7ffc0000 [ 43.232477][ T1209] SELinux: failed to load policy [ 43.251749][ T30] audit: type=1326 audit(1757695391.153:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1193 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de9bcba9 code=0x7ffc0000 [ 43.315053][ T30] audit: type=1326 audit(1757695391.153:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1193 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37de9bcba9 code=0x7ffc0000 [ 43.357391][ T397] cdc_ncm 6-1:1.1: bind() failure [ 43.369787][ T397] usb 6-1: USB disconnect, device number 3 [ 43.423870][ T30] audit: type=1400 audit(1757695391.493:486): avc: denied { watch watch_reads } for pid=1233 comm="syz.4.358" path="/79/file1" dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.464348][ T1238] netlink: 'syz.2.359': attribute type 3 has an invalid length. [ 43.493540][ T1238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 43.567306][ T1254] loop2: detected capacity change from 0 to 128 [ 43.580090][ T1212] loop6: detected capacity change from 0 to 40427 [ 43.607498][ T1254] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.619701][ T1212] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 43.626343][ T1212] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 43.635651][ T1254] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.647832][ T1212] F2FS-fs (loop6): invalid crc value [ 43.668020][ T1212] F2FS-fs (loop6): Found nat_bits in checkpoint [ 43.724281][ T1212] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 43.740402][ T1212] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 43.774233][ T1275] loop2: detected capacity change from 0 to 512 [ 43.797457][ T343] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 43.813365][ T1263] attempt to access beyond end of device [ 43.813365][ T1263] loop6: rw=2049, want=45104, limit=40427 [ 43.836886][ T1275] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 43.851150][ T1275] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.884212][ T1275] EXT4-fs (loop2): shut down requested (1) [ 43.898666][ T1275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.914428][ T1275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.942775][ T1275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.952214][ T1275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 43.961348][ T1275] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=14 [ 44.157396][ T343] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.171653][ T343] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.183075][ T343] usb 5-1: config 0 interface 0 has no altsetting 0 [ 44.191005][ T343] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 44.200528][ T343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.212783][ T343] usb 5-1: config 0 descriptor?? [ 44.617299][ T397] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 44.688731][ T343] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 44.696200][ T343] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 44.717703][ T343] hid-steam 0003:28DE:1102.000B: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 44.738606][ T343] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 44.761665][ T343] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 44.773828][ T343] hid-steam 0003:28DE:1102.000C: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 44.847805][ T343] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' connected [ 44.857022][ T343] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.000B/input/input13 [ 44.939652][ T1246] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.000B/input/input14 [ 44.973349][ T786] usb 5-1: USB disconnect, device number 8 [ 45.009798][ T786] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' disconnected [ 45.018694][ T397] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 45.041839][ T397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.071816][ T397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.091839][ T397] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 45.197381][ T397] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 45.226795][ T397] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 45.242752][ T397] usb 7-1: Manufacturer: syz [ 45.260341][ T397] usb 7-1: config 0 descriptor?? [ 45.279851][ T1366] loop5: detected capacity change from 0 to 40427 [ 45.330755][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 45.331482][ T1366] F2FS-fs (loop5): invalid crc value [ 45.340833][ T1372] loop2: detected capacity change from 0 to 40427 [ 45.351198][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 45.359133][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.360120][ T1366] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 45.367117][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.387146][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.395324][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.403329][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.411797][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.412121][ T1366] F2FS-fs (loop5): Start checkpoint disabled! [ 45.420641][ T1366] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 45.426587][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.441712][ T1372] F2FS-fs (loop2): invalid crc value [ 45.447144][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.456088][ T1372] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.462477][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.479141][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.494771][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.511960][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.529504][ T1372] F2FS-fs (loop2): Start checkpoint disabled! [ 45.535839][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.544620][ T6] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 45.552501][ T1372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 45.561765][ T6] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 45.646037][ T1396] fido_id[1396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.672631][ T1372] attempt to access beyond end of device [ 45.672631][ T1372] loop2: rw=2049, want=45104, limit=40427 [ 45.721298][ T608] attempt to access beyond end of device [ 45.721298][ T608] loop2: rw=2049, want=40976, limit=40427 [ 45.738176][ T397] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 45.750963][ T1408] netlink: 92 bytes leftover after parsing attributes in process `syz.1.423'. [ 45.760777][ T397] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 45.779359][ T397] appleir 0003:05AC:8243.000E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 45.805746][ T1410] loop1: detected capacity change from 0 to 128 [ 45.820117][ T45] attempt to access beyond end of device [ 45.820117][ T45] loop5: rw=1, want=45104, limit=40427 [ 45.831644][ T45] attempt to access beyond end of device [ 45.831644][ T45] loop5: rw=2049, want=45112, limit=40427 [ 45.917642][ T1415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 45.948223][ T1415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 46.028467][ T397] usb 7-1: USB disconnect, device number 2 [ 46.224295][ T1454] loop4: detected capacity change from 0 to 1024 [ 46.245631][ T1454] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 46.259837][ T1454] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 46.346909][ T1464] loop4: detected capacity change from 0 to 512 [ 46.395956][ T1464] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.409762][ T1464] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.424465][ T1464] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.447: bg 0: block 248: padding at end of block bitmap is not set [ 46.439187][ T1464] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.447: Failed to acquire dquot type 1 [ 46.451227][ T1464] EXT4-fs (loop4): 1 truncate cleaned up [ 46.457086][ T1464] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.557974][ T1473] loop6: detected capacity change from 0 to 1024 [ 46.572739][ T1475] loop4: detected capacity change from 0 to 1024 [ 46.579374][ T343] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 46.592902][ T1473] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 46.592902][ T1473] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 46.592902][ T1473] [ 46.628467][ T1473] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 46.654294][ T1475] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 46.673010][ T1475] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.688209][ T1475] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.451: Freeing blocks not in datazone - block = 0, count = 16 [ 46.701934][ T1475] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 46.762524][ T1488] loop1: detected capacity change from 0 to 512 [ 46.778592][ T1490] bridge0: port 3(syz_tun) entered blocking state [ 46.785219][ T1490] bridge0: port 3(syz_tun) entered disabled state [ 46.793158][ T1490] device syz_tun entered promiscuous mode [ 46.799613][ T1490] bridge0: port 3(syz_tun) entered blocking state [ 46.806218][ T1490] bridge0: port 3(syz_tun) entered forwarding state [ 46.819110][ T1488] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,minixdf,acl,resuid=0x0000000000000000,noinit_itable,,errors=continue. Quota mode: writeback. [ 46.828181][ T343] usb 6-1: Using ep0 maxpacket: 16 [ 46.844471][ T1488] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.869753][ T1497] loop4: detected capacity change from 0 to 512 [ 46.917779][ T1497] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.936789][ T1497] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.967498][ T343] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.982192][ T343] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.147411][ T343] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.156597][ T343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.164794][ T343] usb 6-1: Product: syz [ 47.169029][ T56] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 47.176555][ T343] usb 6-1: Manufacturer: syz [ 47.181328][ T343] usb 6-1: SerialNumber: syz [ 47.227450][ T397] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 47.327330][ T691] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 47.347385][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 47.487431][ T343] usb 6-1: 0:2 : does not exist [ 47.494309][ T343] usb 6-1: USB disconnect, device number 4 [ 47.527483][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.539160][ T56] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 47.548318][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.557707][ T56] usb 7-1: config 0 descriptor?? [ 47.617402][ T397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 47.628430][ T397] usb 3-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.00 [ 47.637599][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.646299][ T397] usb 3-1: config 0 descriptor?? [ 47.667478][ T1507] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 47.687474][ T691] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.698062][ T691] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 47.698334][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.707585][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.734048][ T6] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 47.743547][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.752393][ T6] usb 2-1: config 0 descriptor?? [ 47.787435][ T691] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 47.796730][ T691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 47.804857][ T691] usb 5-1: SerialNumber: syz [ 47.811054][ T691] usb 5-1: config 0 descriptor?? [ 47.983555][ T1520] loop5: detected capacity change from 0 to 128 [ 48.012113][ T1520] EXT4-fs (loop5): Test dummy encryption mode enabled [ 48.020362][ T1520] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 48.036766][ T1520] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.038320][ T56] uclogic 0003:5543:0522.000F: unbalanced delimiter at end of report description [ 48.056689][ T56] uclogic 0003:5543:0522.000F: parse failed [ 48.062709][ T56] uclogic: probe of 0003:5543:0522.000F failed with error -22 [ 48.119279][ T397] wacom 0003:056A:010F.0010: unknown main item tag 0x0 [ 48.126752][ T397] wacom 0003:056A:010F.0010: unknown main item tag 0x0 [ 48.133997][ T397] wacom 0003:056A:010F.0010: unknown main item tag 0x0 [ 48.141225][ T397] wacom 0003:056A:010F.0010: unknown main item tag 0x0 [ 48.148681][ T397] wacom 0003:056A:010F.0010: unknown main item tag 0x0 [ 48.159554][ T397] wacom 0003:056A:010F.0010: hidraw0: USB HID v1.01 Device [HID 056a:010f] on usb-dummy_hcd.2-1/input0 [ 48.226448][ T1532] loop5: detected capacity change from 0 to 512 [ 48.238118][ T6] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 48.248392][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0011/input/input18 [ 48.260278][ T1513] UDC core: couldn't find an available UDC or it's busy: -16 [ 48.260505][ T56] usb 7-1: USB disconnect, device number 3 [ 48.268653][ T1513] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.275264][ T1532] EXT4-fs (loop5): Test dummy encryption mode enabled [ 48.291853][ T1532] EXT4-fs (loop5): Test dummy encryption mode enabled [ 48.299138][ T397] usb 5-1: USB disconnect, device number 9 [ 48.311440][ T1532] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 48.344843][ T6] keytouch 0003:0926:3333.0011: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 48.353859][ T26] usb 3-1: USB disconnect, device number 4 [ 48.369545][ T1532] EXT4-fs (loop5): shut down requested (1) [ 48.510189][ T1540] UHID_CREATE from different security context by process 67 (syz.5.475), this is not allowed. [ 48.510865][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.529038][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.536761][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.545316][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.553141][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.560717][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.568404][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.576279][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.584045][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.591715][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.599329][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.607135][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.615121][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.623044][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.630581][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.638464][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.645910][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.654181][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.658259][ T56] usb 2-1: USB disconnect, device number 3 [ 48.661780][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.675518][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.683245][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.691065][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.698632][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.706345][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.714348][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.722508][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.730412][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.738337][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.746695][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.754626][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.762833][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.770799][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.778512][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.786151][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.793920][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.801601][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.809088][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.816516][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.824603][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.832329][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.840365][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.847899][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.855711][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.863307][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.871034][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.878757][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.886355][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.894240][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.901974][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.909608][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.917210][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.924757][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.932389][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.940143][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.948002][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.955540][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.963292][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.971505][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.979057][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.986648][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 48.994550][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.002206][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.009873][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.017419][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.025154][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.032816][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.040468][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.048690][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.056534][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.064200][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.071659][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.079303][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.087305][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.095358][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.098565][ T1548] loop2: detected capacity change from 0 to 40427 [ 49.102969][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.102995][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.103017][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.103040][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.142640][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.152072][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.160642][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.169081][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.172896][ T1548] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 49.176788][ T397] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 49.194365][ T1548] F2FS-fs (loop2): invalid crc value [ 49.200409][ T397] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.03 Device [syz1] on syz1 [ 49.211122][ T1548] F2FS-fs (loop2): invalid crc value [ 49.215854][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 49.215879][ T30] audit: type=1326 audit(1757695397.283:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1543 comm="syz.6.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384a8bfba9 code=0x7ffc0000 [ 49.216457][ T1548] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 49.223103][ T30] audit: type=1326 audit(1757695397.293:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1543 comm="syz.6.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384a8bfba9 code=0x7ffc0000 [ 49.281721][ T30] audit: type=1326 audit(1757695397.353:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1543 comm="syz.6.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f384a8bfba9 code=0x7ffc0000 [ 49.307290][ T30] audit: type=1326 audit(1757695397.353:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1543 comm="syz.6.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384a8bfba9 code=0x7ffc0000 [ 49.345106][ T30] audit: type=1326 audit(1757695397.353:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1543 comm="syz.6.477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f384a8bfba9 code=0x7ffc0000 [ 49.398344][ T1559] fido_id[1559]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 49.485635][ T1563] Illegal XDP return value 4294967274, expect packet loss! [ 49.547346][ T56] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 49.665618][ T1569] loop4: detected capacity change from 0 to 128 [ 49.708717][ T1569] EXT4-fs (loop4): Test dummy encryption mode enabled [ 49.715933][ T1569] EXT4-fs (loop4): Test dummy encryption mode enabled [ 49.723337][ T1569] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 49.733907][ T1569] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 49.755231][ T1569] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.787355][ T397] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 49.817325][ T1572] loop4: detected capacity change from 0 to 1024 [ 49.817375][ T56] usb 6-1: Using ep0 maxpacket: 16 [ 49.830847][ T1572] EXT4-fs (loop4): Ignoring removed bh option [ 49.849264][ T1572] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,journal_ioprio=0x0000000000000000,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 49.883700][ T1572] overlayfs: missing 'lowerdir' [ 49.950325][ T30] audit: type=1400 audit(1757695398.023:580): avc: denied { read } for pid=1577 comm="syz.4.489" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.957439][ T56] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 49.974289][ T30] audit: type=1400 audit(1757695398.023:581): avc: denied { open } for pid=1577 comm="syz.4.489" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 49.988302][ T56] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.007534][ T30] audit: type=1400 audit(1757695398.023:582): avc: denied { ioctl } for pid=1577 comm="syz.4.489" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.025018][ T56] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.110895][ T1585] loop1: detected capacity change from 0 to 512 [ 50.161886][ T1585] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.164293][ T1587] loop4: detected capacity change from 0 to 1024 [ 50.187499][ T397] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 50.198148][ T397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 50.207471][ T56] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.210761][ T1587] EXT4-fs (loop4): Ignoring removed nobh option [ 50.232010][ T397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 50.243852][ T1587] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.245409][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.256488][ T397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.266148][ T1585] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 50.277877][ T397] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.299727][ T1587] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nojournal_checksum,nodelalloc,dioread_lock,data_err=ignore,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,grpquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 50.301680][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.337357][ T1585] Quota error (device loop1): write_blk: dquota write failed [ 50.344684][ T56] usb 6-1: Product: syz [ 50.347353][ T397] usb 3-1: config 0 descriptor?? [ 50.354441][ T56] usb 6-1: Manufacturer: syz [ 50.354462][ T56] usb 6-1: SerialNumber: syz [ 50.354648][ T1585] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 50.354865][ T1585] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.492: Failed to acquire dquot type 1 [ 50.366933][ T1587] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3871: comm syz.4.493: Allocating blocks 385-513 which overlap fs metadata [ 50.370755][ T1567] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 50.384887][ T1586] EXT4-fs (loop4): pa ffff88812f0d73f0: logic 16, phys. 129, len 24 [ 50.404797][ T1585] EXT4-fs (loop1): 1 truncate cleaned up [ 50.410367][ T1586] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 50.442391][ T1585] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,max_dir_size_kb=0x000000000181fffc,inlinecrypt,journal_ioprio=0x0000000000000007,discard,nobarrier,dioread_nolock,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 50.575557][ T1608] loop4: detected capacity change from 0 to 1024 [ 50.599706][ T1608] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.613296][ T1608] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.650220][ T1608] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 50.665872][ T1608] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 35 with error 28 [ 50.678553][ T1608] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.678553][ T1608] [ 50.689233][ T1608] EXT4-fs (loop4): Total free blocks count 0 [ 50.695282][ T1608] EXT4-fs (loop4): Free/Dirty block details [ 50.702083][ T1608] EXT4-fs (loop4): free_blocks=4293918720 [ 50.708447][ T1608] EXT4-fs (loop4): dirty_blocks=64 [ 50.713797][ T1608] EXT4-fs (loop4): Block reservation details [ 50.720142][ T1608] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 50.735515][ T608] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:5: lblock 40 mapped to illegal pblock 8 (length 8) [ 50.740648][ T1616] syz.6.504[1616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.750270][ T1616] syz.6.504[1616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.750648][ T608] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117 [ 50.786421][ T608] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.786421][ T608] [ 50.837420][ T56] usb 6-1: 0:2 : does not exist [ 50.868326][ T397] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 50.880556][ T397] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 50.925922][ T397] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 51.168073][ T343] usb 3-1: USB disconnect, device number 5 [ 51.187318][ T691] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 51.298734][ T56] usb 6-1: USB disconnect, device number 5 [ 51.302872][ T1632] loop6: detected capacity change from 0 to 131072 [ 51.315553][ T1632] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 51.324290][ T1632] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 51.335774][ T1632] F2FS-fs (loop6): invalid crc value [ 51.342917][ T1632] F2FS-fs (loop6): Found nat_bits in checkpoint [ 51.380738][ T1632] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 51.388064][ T1632] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 51.427290][ T691] usb 5-1: Using ep0 maxpacket: 16 [ 51.491208][ T1639] netlink: 'syz.1.513': attribute type 27 has an invalid length. [ 51.513969][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.521876][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.547401][ T691] usb 5-1: config 0 has no interfaces? [ 51.595518][ T1640] device veth0_vlan left promiscuous mode [ 51.602470][ T1640] device veth0_vlan entered promiscuous mode [ 51.612218][ T1640] device veth1_macvtap left promiscuous mode [ 51.619701][ T1640] device veth1_macvtap entered promiscuous mode [ 51.628270][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.636211][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.643806][ T691] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 51.653319][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.661639][ T691] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 51.670109][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.677162][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.691633][ T691] usb 5-1: Manufacturer: syz [ 51.708450][ T691] usb 5-1: config 0 descriptor?? [ 51.715952][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.719002][ T1642] loop2: detected capacity change from 0 to 256 [ 51.726680][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.739100][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.746289][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.758855][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.769018][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 51.785725][ T1642] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.785760][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.805124][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 51.813959][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.819613][ T1642] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 51.838116][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.846456][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.848952][ T1644] loop6: detected capacity change from 0 to 256 [ 51.861211][ T1648] loop5: detected capacity change from 0 to 128 [ 51.867999][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.883953][ T1642] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 51.891986][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.902006][ T1649] loop1: detected capacity change from 0 to 512 [ 51.911490][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.920964][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.928732][ T1644] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 51.933361][ T1648] FAT-fs (loop5): Directory bread(block 32) failed [ 51.948983][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.957729][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.963093][ T691] usb 5-1: USB disconnect, device number 10 [ 51.979081][ T1649] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #3: comm syz.1.515: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 51.987689][ T1648] FAT-fs (loop5): Directory bread(block 33) failed [ 52.004287][ T1648] FAT-fs (loop5): Directory bread(block 34) failed [ 52.011460][ T1648] FAT-fs (loop5): Directory bread(block 35) failed [ 52.019055][ T1644] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008) [ 52.025639][ T1648] FAT-fs (loop5): Directory bread(block 36) failed [ 52.029187][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.035473][ T1648] FAT-fs (loop5): Directory bread(block 37) failed [ 52.049522][ T1648] FAT-fs (loop5): Directory bread(block 38) failed [ 52.056292][ T1648] FAT-fs (loop5): Directory bread(block 39) failed [ 52.063063][ T1648] FAT-fs (loop5): Directory bread(block 40) failed [ 52.069685][ T1648] FAT-fs (loop5): Directory bread(block 41) failed [ 52.074403][ T1649] EXT4-fs error (device loop1): ext4_quota_enable:6411: comm syz.1.515: Bad quota inode: 3, type: 0 [ 52.093525][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.118802][ T1653] loop2: detected capacity change from 0 to 128 [ 52.129201][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.132665][ T1648] attempt to access beyond end of device [ 52.132665][ T1648] loop5: rw=0, want=4112, limit=128 [ 52.148182][ T1648] FAT-fs (loop5): Filesystem has been set read-only [ 52.148731][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.155279][ T1648] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 52.172151][ T1649] EXT4-fs warning (device loop1): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 52.194443][ T1649] EXT4-fs (loop1): mount failed [ 52.199560][ T1653] EXT4-fs (loop2): Ignoring removed nobh option [ 52.206821][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.216666][ T1653] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 52.226908][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.237706][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.245999][ T1653] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.246830][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.259236][ T970] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 52.265054][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.281664][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.294307][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.302988][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.311514][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.320999][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.503577][ T1676] loop1: detected capacity change from 0 to 512 [ 52.568248][ T1678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 52.593541][ T1676] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.703005][ T1681] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.717566][ T1681] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.735965][ T1681] device bridge_slave_0 entered promiscuous mode [ 52.744163][ T1695] loop6: detected capacity change from 0 to 128 [ 52.755600][ T1681] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.763516][ T1681] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.771563][ T1681] device bridge_slave_1 entered promiscuous mode [ 52.785714][ T1695] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.814504][ T1695] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.935669][ T1681] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.943033][ T1681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.950395][ T1681] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.957454][ T1681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.988539][ T1704] loop6: detected capacity change from 0 to 512 [ 52.997300][ T26] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 53.009195][ T608] device bridge_slave_1 left promiscuous mode [ 53.015632][ T608] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.025915][ T1704] EXT4-fs (loop6): Ignoring removed orlov option [ 53.038882][ T608] device bridge_slave_0 left promiscuous mode [ 53.046028][ T608] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.055663][ T608] device veth1_macvtap left promiscuous mode [ 53.063417][ T1704] EXT4-fs (loop6): mounted filesystem without journal. Opts: acl,nolazytime,orlov,i_version,lazytime,nodiscard,grpjquota=,block_validity,errors=remount-ro,. Quota mode: writeback. [ 53.081878][ T608] device veth0_vlan left promiscuous mode [ 53.102083][ T1704] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.147102][ T1704] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #2: comm syz.6.537: corrupted inode contents [ 53.172274][ T1704] EXT4-fs (loop6): Remounting filesystem read-only [ 53.192005][ T1704] EXT4-fs error (device loop6): ext4_dirty_inode:6071: inode #2: comm syz.6.537: mark_inode_dirty error [ 53.213479][ T1704] EXT4-fs (loop6): Remounting filesystem read-only [ 53.230288][ T1704] EXT4-fs error (device loop6): ext4_do_update_inode:5235: inode #2: comm syz.6.537: corrupted inode contents [ 53.242619][ T1704] EXT4-fs (loop6): Remounting filesystem read-only [ 53.249571][ T1704] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.537: mark_inode_dirty error [ 53.261591][ T1704] EXT4-fs (loop6): Remounting filesystem read-only [ 53.344679][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.356812][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.357344][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 53.384852][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.385236][ T26] usb 2-1: config 1 has no interface number 0 [ 53.415262][ T26] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.437330][ T26] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 53.448476][ T26] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 53.458412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.458608][ T26] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 53.477476][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.482823][ T26] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 53.487835][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.505814][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.517752][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.524941][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.566864][ T1718] syz.2.543[1718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.566954][ T1718] syz.2.543[1718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.599771][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.626860][ T1718] netlink: 'syz.2.543': attribute type 12 has an invalid length. [ 53.639914][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.648080][ T1725] syz.4.545[1725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.648153][ T1725] syz.4.545[1725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.649298][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.677445][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.695916][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.698182][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.713527][ T26] usb 2-1: Product: syz [ 53.719738][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.738097][ T1681] device veth0_vlan entered promiscuous mode [ 53.745026][ T26] usb 2-1: Manufacturer: syz [ 53.745088][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.754960][ T26] usb 2-1: SerialNumber: syz [ 53.759340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.775644][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.799723][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.807605][ T1693] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.816350][ T1681] device veth1_macvtap entered promiscuous mode [ 53.827981][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.843989][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.870413][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.897618][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.913332][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.925966][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.935085][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.054601][ T1693] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 54.108954][ T1761] loop2: detected capacity change from 0 to 512 [ 54.204785][ T1761] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.560: casefold flag without casefold feature [ 54.217346][ T343] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 54.225235][ T1761] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.560: couldn't read orphan inode 15 (err -117) [ 54.240590][ T1761] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 54.288945][ T1693] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 54.303241][ T1771] loop4: detected capacity change from 0 to 512 [ 54.349410][ T1771] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.361073][ T1771] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.392941][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 54.392959][ T30] audit: type=1400 audit(1891913132.459:612): avc: denied { rename } for pid=1769 comm="syz.4.564" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.397969][ T1771] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.4.564: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 54.399504][ T30] audit: type=1400 audit(1891913132.469:613): avc: denied { reparent } for pid=1769 comm="syz.4.564" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.457537][ T1771] EXT4-fs error (device loop4): ext4_get_first_dir_block:3608: inode #12: comm syz.4.564: directory missing '.' [ 54.466216][ T30] audit: type=1400 audit(1891913132.469:614): avc: denied { rename } for pid=1769 comm="syz.4.564" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.500180][ T30] audit: type=1400 audit(1891913132.469:615): avc: denied { reparent } for pid=1769 comm="syz.4.564" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.647572][ T343] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.669202][ T343] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.690322][ T30] audit: type=1404 audit(1891913132.759:616): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 54.706279][ T30] audit: type=1404 audit(1891913132.779:617): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 54.721685][ T30] audit: type=1400 audit(1891913132.789:618): avc: denied { ioctl } for pid=1745 comm="syz.6.554" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.721728][ T1693] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 54.762273][ T30] audit: type=1400 audit(1891913132.829:619): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.796028][ T1787] loop4: detected capacity change from 0 to 512 [ 54.806442][ T30] audit: type=1400 audit(1891913132.829:620): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.838024][ T26] cdc_ncm 2-1:1.1: bind() failure [ 54.848931][ T30] audit: type=1400 audit(1891913132.829:621): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.887948][ T343] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.890715][ T1787] EXT4-fs (loop4): Test dummy encryption mode enabled [ 54.904320][ T1787] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.905748][ T343] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.929345][ T1787] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.570: bad orphan inode 131083 [ 54.942225][ T1787] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 54.946255][ T343] usb 7-1: Product: syz [ 54.971493][ T343] usb 7-1: Manufacturer: syz [ 54.976342][ T343] usb 7-1: SerialNumber: syz [ 55.017967][ T343] cdc_mbim 7-1:1.0: skipping garbage [ 55.052612][ T1803] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 55.087395][ T750] usb 2-1: USB disconnect, device number 4 [ 55.126314][ T1809] xt_hashlimit: max too large, truncated to 1048576 [ 55.218793][ T1747] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 55.252941][ T1821] loop2: detected capacity change from 0 to 256 [ 55.278014][ T1821] exfat: Deprecated parameter 'utf8' [ 55.283635][ T1821] exfat: Deprecated parameter 'utf8' [ 55.289161][ T1821] exfat: Deprecated parameter 'namecase' [ 55.339502][ T1821] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 55.397318][ T786] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.427343][ T397] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 55.637436][ T786] usb 8-1: Using ep0 maxpacket: 16 [ 55.667333][ T397] usb 5-1: Using ep0 maxpacket: 8 [ 55.678314][ T608] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.757412][ T786] usb 8-1: config 0 interface 0 has no altsetting 0 [ 55.764480][ T786] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 55.773987][ T786] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.783291][ T786] usb 8-1: config 0 descriptor?? [ 55.788778][ T397] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 55.797434][ T397] usb 5-1: config 0 has no interface number 0 [ 55.797441][ T56] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 55.811270][ T397] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 55.822240][ T397] usb 5-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 55.833171][ T397] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.867622][ T1747] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 55.878428][ T343] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 55.886150][ T343] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, ee:0a:f0:19:f1:c0 [ 55.988249][ T140] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 56.008487][ T397] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 56.017827][ T397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.025824][ T397] usb 5-1: Product: syz [ 56.030259][ T397] usb 5-1: Manufacturer: syz [ 56.034970][ T397] usb 5-1: SerialNumber: syz [ 56.040226][ T397] usb 5-1: config 0 descriptor?? [ 56.057407][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 56.090343][ T343] usb 7-1: USB disconnect, device number 4 [ 56.096681][ T343] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 56.177395][ T56] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 56.188114][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.198514][ T56] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.283407][ T786] hid (null): global environment stack underflow [ 56.377426][ T56] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.386617][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.395018][ T56] usb 3-1: Product: syz [ 56.399235][ T56] usb 3-1: Manufacturer: syz [ 56.403859][ T56] usb 3-1: SerialNumber: syz [ 56.487088][ T786] usb 8-1: USB disconnect, device number 2 [ 56.721047][ T1898] loop6: detected capacity change from 0 to 128 [ 56.801110][ T1902] loop6: detected capacity change from 0 to 128 [ 56.887463][ T56] usb 3-1: 0:2 : does not exist [ 56.904363][ T1908] netlink: 20 bytes leftover after parsing attributes in process `syz.6.606'. [ 58.446378][ T750] usb 5-1: USB disconnect, device number 11 [ 58.519612][ T1917] loop4: detected capacity change from 0 to 512 [ 58.747258][ C0] sched: RT throttling activated [ 58.747328][ T333] Bluetooth: hci0: command 0x1003 tx timeout [ 58.758784][ T47] Bluetooth: hci0: sending frame failed (-49) [ 58.779283][ T1917] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.790568][ T1917] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.901404][ T1935] syz.7.619[1935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.901503][ T1935] syz.7.619[1935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.940158][ T1940] loop4: detected capacity change from 0 to 512 [ 58.958422][ T1938] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 58.976120][ T1716] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 58.986626][ T1716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.999298][ T1716] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 59.007696][ T1716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.016100][ T1716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.029112][ T1716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.038910][ T1716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.047630][ T1716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.058773][ T1940] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.620: inode #1: comm syz.4.620: iget: illegal inode # [ 59.077184][ T1940] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.620: error while reading EA inode 1 err=-117 [ 59.092195][ T1940] EXT4-fs (loop4): 1 orphan inode deleted [ 59.098275][ T1940] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.183318][ T1946] loop4: detected capacity change from 0 to 1024 [ 59.199221][ T1946] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 59.224012][ T1951] loop7: detected capacity change from 0 to 256 [ 59.228153][ T1946] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.244427][ T1946] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 59.244868][ T1954] syz.6.626[1954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.253829][ T1946] System zones: [ 59.262155][ T1954] syz.6.626[1954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.265978][ T1946] 0-1, 3-36 [ 59.287842][ T1946] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 59.308474][ T1951] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104f4, chksum : 0x5f17efa6, utbl_chksum : 0xe619d30d) [ 59.342277][ T1954] incfs: Options parsing error. -22 [ 59.348102][ T1954] incfs: mount failed -22 [ 59.368632][ T1956] process 'syz.6.629' launched './file0' with NULL argv: empty string added [ 59.433301][ T56] usb 3-1: USB disconnect, device number 6 [ 59.550369][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 59.550397][ T30] audit: type=1400 audit(1891913137.619:732): avc: denied { ioctl } for pid=1975 comm="syz.2.637" path="socket:[22383]" dev="sockfs" ino=22383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.550610][ T1976] netlink: 'syz.2.637': attribute type 12 has an invalid length. [ 59.590154][ T1976] netlink: 'syz.2.637': attribute type 29 has an invalid length. [ 59.598558][ T1976] netlink: 148 bytes leftover after parsing attributes in process `syz.2.637'. [ 59.609509][ T1976] netlink: 59 bytes leftover after parsing attributes in process `syz.2.637'. [ 59.618748][ T1976] Zero length message leads to an empty skb [ 59.647043][ T30] audit: type=1400 audit(1891913137.709:733): avc: denied { mount } for pid=1981 comm="syz.4.640" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.683757][ T1984] loop2: detected capacity change from 0 to 1024 [ 59.697304][ T691] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.716807][ T1986] loop6: detected capacity change from 0 to 512 [ 59.723359][ T1984] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 59.732393][ T1984] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.745306][ T1984] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 59.757424][ T1984] System zones: 0-1, 3-36 [ 59.761744][ T1986] EXT4-fs (loop6): Ignoring removed oldalloc option [ 59.776048][ T1986] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 59.785993][ T30] audit: type=1400 audit(1891913137.849:734): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.807455][ T1984] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 59.821940][ T30] audit: type=1400 audit(1891913137.849:735): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.854503][ T30] audit: type=1400 audit(1891913137.849:736): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.855614][ T1986] EXT4-fs (loop6): 1 truncate cleaned up [ 59.886479][ T30] audit: type=1400 audit(1891913137.949:737): avc: denied { mount } for pid=1980 comm="syz.2.639" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.907740][ T1986] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 59.932572][ T30] audit: type=1400 audit(1891913137.999:738): avc: denied { setattr } for pid=1980 comm="syz.2.639" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.964147][ T30] audit: type=1400 audit(1891913138.029:739): avc: denied { prog_load } for pid=1994 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.993505][ T30] audit: type=1400 audit(1891913138.029:740): avc: denied { bpf } for pid=1994 comm="syz.4.644" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.014239][ T30] audit: type=1400 audit(1891913138.029:741): avc: denied { perfmon } for pid=1994 comm="syz.4.644" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.147362][ T691] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 60.163715][ T691] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.175453][ T691] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.185966][ T691] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 60.277462][ T691] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 60.286617][ T691] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 60.294848][ T691] usb 8-1: Manufacturer: syz [ 60.300716][ T691] usb 8-1: config 0 descriptor?? [ 60.561769][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 60.570123][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.578667][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 60.604593][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.617551][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.636088][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.646172][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.664387][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.768430][ T691] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 60.781619][ T691] appleir 0003:05AC:8243.0015: No inputs registered, leaving [ 60.800697][ T691] appleir 0003:05AC:8243.0015: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 60.824461][ T691] Bluetooth: hci0: command 0x1001 tx timeout [ 60.842976][ T47] Bluetooth: hci0: sending frame failed (-49) [ 60.979893][ T2026] loop2: detected capacity change from 0 to 256 [ 61.002416][ T2026] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.013533][ T56] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 61.021336][ T2026] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 61.031985][ T2026] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 61.058258][ T343] usb 8-1: USB disconnect, device number 3 [ 61.160023][ T2032] loop2: detected capacity change from 0 to 1024 [ 61.209577][ T2032] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 61.223082][ T2032] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.255535][ T2032] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 1: comm syz.2.660: lblock 1 mapped to illegal pblock 1 (length 15) [ 61.257328][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 61.280785][ T2032] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 3: comm syz.2.660: lblock 3 mapped to illegal pblock 3 (length 13) [ 61.295777][ T2032] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 61.308777][ T2032] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.308777][ T2032] [ 61.328822][ T45] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 61.344898][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 48 with error 28 [ 61.357589][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.357589][ T45] [ 61.368218][ T45] EXT4-fs (loop2): Total free blocks count 0 [ 61.374541][ T45] EXT4-fs (loop2): Free/Dirty block details [ 61.380911][ T45] EXT4-fs (loop2): free_blocks=4293918720 [ 61.386754][ T45] EXT4-fs (loop2): dirty_blocks=64 [ 61.392160][ T45] EXT4-fs (loop2): Block reservation details [ 61.398405][ T45] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 61.417382][ T56] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.437482][ T56] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 61.451001][ T56] usb 5-1: config 0 interface 0 has no altsetting 0 [ 61.461065][ T56] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 61.476862][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.488151][ T56] usb 5-1: config 0 descriptor?? [ 61.611166][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 61.777325][ T397] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 61.968482][ T56] wacom 0003:056A:0094.0016: unknown main item tag 0x0 [ 61.977031][ T56] wacom 0003:056A:0094.0016: unknown main item tag 0x0 [ 61.984266][ T56] wacom 0003:056A:0094.0016: unknown main item tag 0x0 [ 61.991662][ T56] wacom 0003:056A:0094.0016: unknown main item tag 0x0 [ 61.999095][ T56] wacom 0003:056A:0094.0016: unknown main item tag 0x0 [ 62.006329][ T56] wacom 0003:056A:0094.0016: Using device in hidraw-only mode [ 62.016301][ T56] wacom 0003:056A:0094.0016: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 62.052683][ T2064] loop6: detected capacity change from 0 to 128 [ 62.157470][ T397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.169090][ T397] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.179443][ T397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.192679][ T397] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.194046][ T56] usb 5-1: USB disconnect, device number 12 [ 62.201825][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.216869][ T397] usb 3-1: config 0 descriptor?? [ 62.698302][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.705971][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.713587][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.721168][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.728702][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.736343][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.743814][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.751281][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.758732][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.766627][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.774168][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.781658][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.789191][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.796757][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.804473][ T397] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 62.812218][ T397] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 62.821862][ T397] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 62.887365][ T343] Bluetooth: hci0: command 0x1009 tx timeout [ 62.979041][ T786] usb 3-1: USB disconnect, device number 7 [ 63.687305][ T56] Bluetooth: hci1: command 0x1003 tx timeout [ 63.695608][ T851] Bluetooth: hci1: sending frame failed (-49) [ 63.877807][ T2096] loop6: detected capacity change from 0 to 512 [ 63.924636][ T2096] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.025786][ T2108] loop6: detected capacity change from 0 to 1024 [ 64.080004][ T2110] kvm [2109]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 64.090361][ T2110] kvm [2109]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 64.119121][ T2108] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 64.140927][ T2108] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.185616][ T2108] EXT4-fs error (device loop6): ext4_free_blocks:6218: comm syz.6.690: Freeing blocks not in datazone - block = 0, count = 16 [ 64.206123][ T2108] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 64.503678][ T2143] loop4: detected capacity change from 0 to 256 [ 64.511419][ T2145] loop2: detected capacity change from 0 to 512 [ 64.523354][ T2143] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.534509][ T2143] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 64.545719][ T2143] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d) [ 64.574473][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 64.574489][ T30] audit: type=1400 audit(1891913142.639:838): avc: denied { create } for pid=2142 comm="syz.4.707" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.602001][ T2145] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 64.612788][ T30] audit: type=1400 audit(1891913142.669:839): avc: denied { name_bind } for pid=2152 comm="syz.6.711" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.637711][ T2145] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.646961][ T30] audit: type=1400 audit(1891913142.669:840): avc: denied { node_bind } for pid=2152 comm="syz.6.711" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.672967][ T30] audit: type=1400 audit(1891913142.679:841): avc: denied { remove_name } for pid=2142 comm="syz.4.707" name="file1" dev="loop4" ino=1048669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.696123][ T30] audit: type=1400 audit(1891913142.679:842): avc: denied { rename } for pid=2142 comm="syz.4.707" name="file1" dev="loop4" ino=1048669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.699195][ T2145] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 64.718898][ T30] audit: type=1400 audit(1891913142.679:843): avc: denied { reparent } for pid=2142 comm="syz.4.707" name="file1" dev="loop4" ino=1048669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.756468][ T30] audit: type=1400 audit(1891913142.679:844): avc: denied { rmdir } for pid=2142 comm="syz.4.707" name="file0" dev="loop4" ino=1048668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.779632][ T30] audit: type=1400 audit(1891913142.829:845): avc: denied { create } for pid=2154 comm="syz.6.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.799322][ T30] audit: type=1400 audit(1891913142.829:846): avc: denied { setopt } for pid=2154 comm="syz.6.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.820722][ T2145] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 64.834543][ T2145] EXT4-fs (loop2): This should not happen!! Data will be lost [ 64.834543][ T2145] [ 64.844789][ T2145] EXT4-fs (loop2): Total free blocks count 0 [ 64.851162][ T2145] EXT4-fs (loop2): Free/Dirty block details [ 64.860167][ T2145] EXT4-fs (loop2): free_blocks=65280 [ 64.865553][ T2145] EXT4-fs (loop2): dirty_blocks=1 [ 64.870931][ T2145] EXT4-fs (loop2): Block reservation details [ 64.876993][ T2145] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 64.893833][ T30] audit: type=1400 audit(1891913142.959:847): avc: denied { read write } for pid=285 comm="syz-executor" name="loop4" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.035527][ T2176] loop4: detected capacity change from 0 to 1024 [ 65.082508][ T2176] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 65.297329][ T397] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 65.657337][ T397] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 65.668402][ T397] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.678438][ T397] usb 7-1: config 0 interface 0 has no altsetting 0 [ 65.685135][ T397] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 65.694850][ T397] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.708926][ T397] usb 7-1: config 0 descriptor?? [ 65.777295][ T691] Bluetooth: hci1: command 0x1001 tx timeout [ 65.783618][ T851] Bluetooth: hci1: sending frame failed (-49) [ 66.020694][ T2179] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 66.188965][ T397] hid-steam 0003:28DE:1102.0018: unknown main item tag 0x0 [ 66.201722][ T397] hid-steam 0003:28DE:1102.0018: unknown main item tag 0x0 [ 66.217648][ T397] hid-steam 0003:28DE:1102.0018: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 66.243037][ T397] hid-steam 0003:28DE:1102.0019: unknown main item tag 0x0 [ 66.257295][ T397] hid-steam 0003:28DE:1102.0019: unknown main item tag 0x0 [ 66.274886][ T397] hid-steam 0003:28DE:1102.0019: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 66.357311][ T397] hid-steam 0003:28DE:1102.0018: Steam Controller 'XXXXXXXXXX' connected [ 66.372165][ T397] input: Steam Controller as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28DE:1102.0018/input/input21 [ 66.388991][ T2173] input: Steam Controller as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28DE:1102.0018/input/input22 [ 66.413478][ T397] usb 7-1: USB disconnect, device number 5 [ 66.447631][ T397] hid-steam 0003:28DE:1102.0018: Steam Controller 'XXXXXXXXXX' disconnected [ 66.462008][ T398] ================================================================== [ 66.470225][ T398] BUG: KASAN: use-after-free in mutex_lock+0x88/0x1a0 [ 66.477009][ T398] Write of size 8 at addr ffff888128d28850 by task udevd/398 [ 66.484397][ T398] [ 66.486736][ T398] CPU: 1 PID: 398 Comm: udevd Not tainted syzkaller #0 [ 66.493602][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.503697][ T398] Call Trace: [ 66.506988][ T398] [ 66.509920][ T398] __dump_stack+0x21/0x30 [ 66.514293][ T398] dump_stack_lvl+0xee/0x150 [ 66.518931][ T398] ? show_regs_print_info+0x20/0x20 [ 66.524136][ T398] ? load_image+0x3a0/0x3a0 [ 66.528646][ T398] ? do_sys_openat2+0x14c/0x7b0 [ 66.533535][ T398] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.539618][ T398] print_address_description+0x7f/0x2c0 [ 66.545194][ T398] ? mutex_lock+0x88/0x1a0 [ 66.549616][ T398] kasan_report+0xf1/0x140 [ 66.554071][ T398] ? mutex_lock+0x88/0x1a0 [ 66.558604][ T398] kasan_check_range+0x280/0x290 [ 66.563552][ T398] __kasan_check_write+0x14/0x20 [ 66.568494][ T398] mutex_lock+0x88/0x1a0 [ 66.572738][ T398] ? wait_for_completion_killable_timeout+0x10/0x10 [ 66.579332][ T398] steam_input_open+0x91/0x160 [ 66.584105][ T398] ? steam_input_register+0xa70/0xa70 [ 66.589484][ T398] ? __kasan_check_write+0x14/0x20 [ 66.594600][ T398] ? mutex_lock_interruptible+0x95/0x1b0 [ 66.600262][ T398] input_open_device+0x16d/0x2f0 [ 66.605209][ T398] evdev_open+0x4b1/0x5c0 [ 66.609552][ T398] chrdev_open+0x597/0x670 [ 66.613974][ T398] ? cd_forget+0x170/0x170 [ 66.618395][ T398] ? fsnotify_perm+0x3e9/0x5b0 [ 66.623164][ T398] ? cd_forget+0x170/0x170 [ 66.627688][ T398] do_dentry_open+0x834/0x1010 [ 66.632607][ T398] vfs_open+0x73/0x80 [ 66.636599][ T398] path_openat+0x2646/0x2f10 [ 66.641196][ T398] ? slab_post_alloc_hook+0x4f/0x2b0 [ 66.646488][ T398] ? kmem_cache_alloc+0xf7/0x260 [ 66.651446][ T398] ? do_syscall_64+0x4c/0xa0 [ 66.656056][ T398] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.662134][ T398] ? do_filp_open+0x3e0/0x3e0 [ 66.666826][ T398] ? expand_files+0xde/0x8e0 [ 66.671426][ T398] do_filp_open+0x1b3/0x3e0 [ 66.676022][ T398] ? vfs_tmpfile+0x2d0/0x2d0 [ 66.680621][ T398] do_sys_openat2+0x14c/0x7b0 [ 66.685421][ T398] ? do_sys_open+0xe0/0xe0 [ 66.689843][ T398] ? bpf_trace_run1+0x1b0/0x1b0 [ 66.694703][ T398] ? ____fput+0x15/0x20 [ 66.698895][ T398] __x64_sys_openat+0x136/0x160 [ 66.703755][ T398] x64_sys_call+0x219/0x9a0 [ 66.708263][ T398] do_syscall_64+0x4c/0xa0 [ 66.712927][ T398] ? clear_bhb_loop+0x50/0xa0 [ 66.717615][ T398] ? clear_bhb_loop+0x50/0xa0 [ 66.722388][ T398] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.728316][ T398] RIP: 0033:0x7fd699c2e407 [ 66.732736][ T398] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 66.752454][ T398] RSP: 002b:00007ffdcb18db90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 66.760968][ T398] RAX: ffffffffffffffda RBX: 00007fd699b40880 RCX: 00007fd699c2e407 [ 66.769036][ T398] RDX: 0000000000080000 RSI: 000055d61a735170 RDI: ffffffffffffff9c [ 66.777302][ T398] RBP: 000055d61a725310 R08: 0000000000000000 R09: 0000000000000000 [ 66.785393][ T398] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d6026ad0c8 [ 66.793479][ T398] R13: 000055d6026ad0ce R14: 00007ffdcb18e190 R15: 000055d6026b3bcc [ 66.801664][ T398] [ 66.804752][ T398] [ 66.807078][ T398] Allocated by task 397: [ 66.811315][ T398] __kasan_kmalloc+0xda/0x110 [ 66.816271][ T398] __kmalloc_track_caller+0x13c/0x2c0 [ 66.821736][ T398] devm_kmalloc+0x50/0x150 [ 66.826152][ T398] steam_probe+0x129/0xb10 [ 66.830663][ T398] hid_device_probe+0x287/0x380 [ 66.835745][ T398] really_probe+0x285/0x970 [ 66.840250][ T398] __driver_probe_device+0x198/0x280 [ 66.845539][ T398] driver_probe_device+0x54/0x3e0 [ 66.850650][ T398] __device_attach_driver+0x2a6/0x460 [ 66.856022][ T398] bus_for_each_drv+0x175/0x200 [ 66.860994][ T398] __device_attach+0x2a2/0x400 [ 66.865875][ T398] device_initial_probe+0x1a/0x20 [ 66.870951][ T398] bus_probe_device+0xc0/0x1e0 [ 66.875846][ T398] device_add+0xb31/0xed0 [ 66.880277][ T398] hid_add_device+0x356/0x4b0 [ 66.884963][ T398] usbhid_probe+0xb2e/0xee0 [ 66.890074][ T398] usb_probe_interface+0x5ff/0xae0 [ 66.895215][ T398] really_probe+0x285/0x970 [ 66.899716][ T398] __driver_probe_device+0x198/0x280 [ 66.905092][ T398] driver_probe_device+0x54/0x3e0 [ 66.910126][ T398] __device_attach_driver+0x2a6/0x460 [ 66.915849][ T398] bus_for_each_drv+0x175/0x200 [ 66.920707][ T398] __device_attach+0x2a2/0x400 [ 66.925470][ T398] device_initial_probe+0x1a/0x20 [ 66.930592][ T398] bus_probe_device+0xc0/0x1e0 [ 66.935358][ T398] device_add+0xb31/0xed0 [ 66.939778][ T398] usb_set_configuration+0x19c2/0x1f10 [ 66.945250][ T398] usb_generic_driver_probe+0x91/0x150 [ 66.950800][ T398] usb_probe_device+0x148/0x260 [ 66.955651][ T398] really_probe+0x285/0x970 [ 66.960245][ T398] __driver_probe_device+0x198/0x280 [ 66.965544][ T398] driver_probe_device+0x54/0x3e0 [ 66.970570][ T398] __device_attach_driver+0x2a6/0x460 [ 66.975945][ T398] bus_for_each_drv+0x175/0x200 [ 66.980803][ T398] __device_attach+0x2a2/0x400 [ 66.985599][ T398] device_initial_probe+0x1a/0x20 [ 66.990620][ T398] bus_probe_device+0xc0/0x1e0 [ 66.995474][ T398] device_add+0xb31/0xed0 [ 66.999807][ T398] usb_new_device+0xd06/0x1620 [ 67.004593][ T398] hub_event+0x29c4/0x4480 [ 67.009097][ T398] process_one_work+0x6be/0xba0 [ 67.013950][ T398] worker_thread+0xa59/0x1200 [ 67.018632][ T398] kthread+0x411/0x500 [ 67.022702][ T398] ret_from_fork+0x1f/0x30 [ 67.027217][ T398] [ 67.029630][ T398] Freed by task 397: [ 67.033612][ T398] kasan_set_track+0x4a/0x70 [ 67.038220][ T398] kasan_set_free_info+0x23/0x40 [ 67.043205][ T398] ____kasan_slab_free+0x125/0x160 [ 67.048330][ T398] __kasan_slab_free+0x11/0x20 [ 67.053118][ T398] slab_free_freelist_hook+0xc2/0x190 [ 67.058703][ T398] kfree+0xc4/0x270 [ 67.062563][ T398] release_nodes+0xe8/0x220 [ 67.067086][ T398] devres_release_all+0x149/0x1b0 [ 67.072339][ T398] device_release_driver_internal+0x4d0/0x760 [ 67.078424][ T398] device_release_driver+0x19/0x20 [ 67.083536][ T398] bus_remove_device+0x2dd/0x340 [ 67.088488][ T398] device_del+0x696/0xe90 [ 67.092823][ T398] hid_destroy_device+0x6a/0x110 [ 67.097847][ T398] usbhid_disconnect+0x9f/0xc0 [ 67.102610][ T398] usb_unbind_interface+0x212/0x8c0 [ 67.107807][ T398] device_release_driver_internal+0x4c1/0x760 [ 67.114052][ T398] device_release_driver+0x19/0x20 [ 67.119168][ T398] bus_remove_device+0x2dd/0x340 [ 67.124111][ T398] device_del+0x696/0xe90 [ 67.128544][ T398] usb_disable_device+0x3a8/0x750 [ 67.133587][ T398] usb_disconnect+0x31e/0x850 [ 67.138357][ T398] hub_event+0x1a96/0x4480 [ 67.142773][ T398] process_one_work+0x6be/0xba0 [ 67.147646][ T398] worker_thread+0xd7b/0x1200 [ 67.152333][ T398] kthread+0x411/0x500 [ 67.156509][ T398] ret_from_fork+0x1f/0x30 [ 67.160938][ T398] [ 67.163446][ T398] The buggy address belongs to the object at ffff888128d28800 [ 67.163446][ T398] which belongs to the cache kmalloc-512 of size 512 [ 67.177671][ T398] The buggy address is located 80 bytes inside of [ 67.177671][ T398] 512-byte region [ffff888128d28800, ffff888128d28a00) [ 67.190958][ T398] The buggy address belongs to the page: [ 67.196634][ T398] page:ffffea0004a34a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128d28 [ 67.206885][ T398] head:ffffea0004a34a00 order:2 compound_mapcount:0 compound_pincount:0 [ 67.215343][ T398] flags: 0x4000000000010200(slab|head|zone=1) [ 67.221428][ T398] raw: 4000000000010200 ffffea0004a34800 0000000200000002 ffff888100042f00 [ 67.230016][ T398] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 67.238593][ T398] page dumped because: kasan: bad access detected [ 67.245174][ T398] page_owner tracks the page as allocated [ 67.251035][ T398] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 39, ts 23175197659, free_ts 0 [ 67.268733][ T398] post_alloc_hook+0x192/0x1b0 [ 67.273567][ T398] prep_new_page+0x1c/0x110 [ 67.278073][ T398] get_page_from_freelist+0x2cc5/0x2d50 [ 67.283650][ T398] __alloc_pages+0x18f/0x440 [ 67.288340][ T398] new_slab+0xa1/0x4d0 [ 67.292518][ T398] ___slab_alloc+0x381/0x810 [ 67.297216][ T398] __slab_alloc+0x49/0x90 [ 67.301659][ T398] __kmalloc_track_caller+0x169/0x2c0 [ 67.307042][ T398] __alloc_skb+0x21a/0x740 [ 67.311475][ T398] br_mdb_notify+0x473/0xb70 [ 67.316067][ T398] __br_multicast_add_group+0x606/0x9a0 [ 67.321877][ T398] br_multicast_rcv+0x34af/0x6770 [ 67.326939][ T398] br_handle_frame_finish+0x3d1/0x1200 [ 67.332422][ T398] br_handle_frame+0x8fc/0xf50 [ 67.337203][ T398] __netif_receive_skb_core+0xe49/0x2f10 [ 67.342857][ T398] __netif_receive_skb+0x72/0x280 [ 67.347894][ T398] page_owner free stack trace missing [ 67.353282][ T398] [ 67.355607][ T398] Memory state around the buggy address: [ 67.361330][ T398] ffff888128d28700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.369420][ T398] ffff888128d28780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 67.377492][ T398] >ffff888128d28800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.385558][ T398] ^ [ 67.392332][ T398] ffff888128d28880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.400392][ T398] ffff888128d28900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 67.408453][ T398] ================================================================== [ 67.416519][ T398] Disabling lock debugging due to kernel taint [ 67.493159][ T2206] fido_id[2206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 67.513692][ T398] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.527391][ T398] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.548840][ T398] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.563278][ T398] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.579311][ T398] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.659114][ T86] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.675625][ T86] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.686624][ T86] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.695901][ T86] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.704816][ T86] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.714184][ T86] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.723110][ T86] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.732441][ T86] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.741359][ T86] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.750713][ T86] hid 0003:28DE:1102.0018: No HID_FEATURE_REPORT submitted - nothing to read [ 67.847355][ T691] Bluetooth: hci1: command 0x1009 tx timeout