last executing test programs: 2m33.012776619s ago: executing program 32 (id=1496): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 2m12.276234947s ago: executing program 33 (id=2119): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setaffinity(0x0, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) 1m59.412082035s ago: executing program 2 (id=2457): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) 1m59.397482716s ago: executing program 2 (id=2458): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000000380), 0xfe, 0x55b, &(0x7f0000001640)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x200002000001, 0x400000, 0x2b, 0x0, 0x0, 0x2401}) 1m59.316553573s ago: executing program 2 (id=2459): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008e88052086800095d8b6010203010902120001"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000002000010000000000000000000a8010000000000118000100050015000200000014000100ff020000000000007d8d77fd000000010500130001000000140002"], 0x90}}, 0x0) 1m57.564261302s ago: executing program 2 (id=2518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) uname(0x0) 1m57.545807303s ago: executing program 2 (id=2520): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fstat(r0, &(0x7f0000005ec0)) 1m57.492486538s ago: executing program 2 (id=2521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x60, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) 1m42.37427844s ago: executing program 34 (id=2521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x60, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) 1m41.279664248s ago: executing program 7 (id=2659): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m41.236900692s ago: executing program 7 (id=2687): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x400000, 0x10000002000003}) 1m41.167216548s ago: executing program 7 (id=2689): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlink(&(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 1m41.110285383s ago: executing program 7 (id=2692): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1m41.006673623s ago: executing program 7 (id=2695): setresuid(0x0, 0xee01, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', @random='\a\x00\x00 \x00'}) 1m40.781024433s ago: executing program 7 (id=2701): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") setresgid(0x0, 0xee01, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 1m40.780943913s ago: executing program 35 (id=2701): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") setresgid(0x0, 0xee01, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 1m13.532402117s ago: executing program 8 (id=3336): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1004110, &(0x7f0000000000), 0x1, 0x52c, &(0x7f0000000f40)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40106614, 0x0) 1m13.348179354s ago: executing program 8 (id=3340): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1000000, 0x3, 0x3}, 0x10) 1m13.28022035s ago: executing program 8 (id=3344): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') unshare(0x22020600) io_uring_enter(r0, 0x6df6, 0x0, 0xb, 0x0, 0x0) 1m13.254512122s ago: executing program 8 (id=3345): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESHEX=0x0, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 1m13.108149286s ago: executing program 8 (id=3350): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000840)={0x0, 0x0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f40)={r0, 0x0, 0x10}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) 1m13.05408913s ago: executing program 8 (id=3354): r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 1m12.978004077s ago: executing program 36 (id=3354): r0 = epoll_create1(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 53.321320378s ago: executing program 9 (id=3885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0xe21, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x34}}, 0x0) 53.286818941s ago: executing program 9 (id=3886): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write(r0, &(0x7f0000000000)='@', 0x1) 53.286739711s ago: executing program 9 (id=3887): unshare(0x2040400) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x98, 0x40402) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) 53.286284521s ago: executing program 9 (id=3888): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 53.166278672s ago: executing program 9 (id=3889): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x10000004}) 53.024496515s ago: executing program 9 (id=3890): r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x13) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 53.024415434s ago: executing program 37 (id=3890): r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x13) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 17.414629891s ago: executing program 6 (id=4759): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10004}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 17.382247465s ago: executing program 6 (id=4760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x3c}}, 0x0) 17.364517956s ago: executing program 6 (id=4761): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000004c0)='sys_enter\x00', r0}, 0x10) fchmod(0xffffffffffffffff, 0x8) 17.273808425s ago: executing program 6 (id=4762): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x508, &(0x7f0000000a00)="$eJzs3U9sI1cZAPBvJn/sbNMmhR4AFbqUwoJWayfeNqp6oT1VCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMjQNSD4g7Ege4cSkHpAIrUIPEwchje+v8cWJ2Y7uNfz9pNG/m2fO9t6OZN/tZmRfAxLoZEUcRMRsR70TEQmd/0lni9fbS+tzHD++vHT+8v5ZEs/n2P5KsvrUver7T8lTnmPmI+P6bET9MTgX9Y0T94HB7tVIp73V2FRvV3WL94PDOVnV1s7xZ3imVVpZXll69+0rpyvr6QvXXH81FxG9/8+UP/3D0rR+3mjXfqevtx1Vqd33mUZyW6Yj47jCCjcFUpz+zj/Plx/oSVymNiM9FxIvZ9b8QU9nZPOnkafr2CFsHAAxDs7kQzYXebQDgukuzHFiSFjq5gPlI00KhncN7Lm6klVq9cXujtr+z3s6VLcZMurFVKS91coWLMZNsbE2Xl7Nyd7tSLp3avhsRz0bET3Nz2XZhrVZZH+eDDwBMsKdOjf//zrXHfwDgmst/UsyNsx0AwOjkx90AAGDkjP8AMHmM/wAweYz/ADB5jP8AMHmM/wAwUb731lutpXncef/1+rsH+9u1d++sl+vbher+WmGttrdb2KzVNrN39lQvO16lVttdfjn23ys2yvVGsX5weK9a299p3Mve632vPDOSXgEAF3n2hQ/+nETE0Wtz2RI97/u/dKx+ftitA4YpHXcDgLGZGncDgLE5O9sXMCnk44GeKXof9OzOnymc9v5Ah0/NGwqfPre++AT5f+AzTf4fJtfj5f89y8N18P/m//2fAK6PZjMx5z8ATBjP80BySX3v7/9LzZ6NwX7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGtpPluStNCZC3w+0rRQiHg6IhZjJtnYqpSXIuKZiPhTbibX2l42DygAfMalf0s683/dWnhp/nTtbO4/uWwdET/6+ds/e2+10dhbjphN/vlof+P9zv5SvxiLvxtyJwCAC3TH6e443vXxw/tr3WWU7fnojfbkoq24x52lXTMd09k6n+Uabvwr6Wy3tZ5Xpq4g/tGDiPjCef1PstzIYmfm09PxW7GfHmn89ET8NKtrr1v/Fp+/grbApPngjYjZ18+7/tK4ma3Pv/7z2R3qyXXvf8dn7n/po/vfVJ/7381BY7z8+++c2dlcaNc9iPjSdMRx9+A9959u/KRP/JcGjP+X57/yYr+65i8ibsV5/U9OxCo2qrvF+sHhna3q6mZ5s7xTKq0sryy9eveVUjHLURe7meqz/v7a7Wf6xW/1/0af+PlL+v/1Afv/y/++84OvXhD/m187//w/d0H81pj4jQHjr+b717Xir/fp/2Xn//aA8T/86+H6gB8FAEagfnC4vVqplPeGXUiHHyIrJBFHI+hOu5D71U/eHFWsJyzMRf/PXFClMKmFcd+ZgGH75KIfd0sAAAAAAAAAAAAAAIB+RvHnROPuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wIAAP//DxPT1w==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb0) 17.21711694s ago: executing program 6 (id=4763): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) rt_sigpending(0x0, 0x0) 16.8725437s ago: executing program 6 (id=4764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r0, &(0x7f00000000c0), 0x1000000000000195) 16.851076322s ago: executing program 38 (id=4764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) writev(r0, &(0x7f00000000c0), 0x1000000000000195) 5.418708622s ago: executing program 0 (id=5045): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x0) r1 = memfd_create(&(0x7f0000002240)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89c\x96#03\x88\xb0\x90u\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7\xff\x01\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xad:Li\xae\xd4\xd3\x12hEt\xfao\xa35\xa1n\xb12\xa5\xbb\x96\v\x12\xe0H\x95\xb9\xeaWd\xdb\x1e\a\xd1\x85/\x89<\t\x0f#\xe5\xdb0\x8c6\xfb\xb9\xece\xf6\xc7\xeb\xd7P\xa2d\xc7\xec\x88\x8d\xa1e\xbf\xc2\x9bE\xe7\xf2\xec@\xe7\x92D;\xd5\aj\xae\xad\x03\x00\x00\x00\x00\x00\x00\x00\x97it<\xbd\x86\x83\xc4\x8dWw\xf2\x05\x9e\x82\xb0\xa9=\xc1\x8c\aub[\xf7 _P5U\xf09E\xc7V\a\xa5\x1a\xf7S\xeb\xf0\x9d\xb2\b\xcf\xb3\xb1\x88\xd5V\x0f\xe5@Xa\xd8\xcd\xc4\xc2B\xab%\xd5\xb3\x83e\xa7\xbb\xb8\x10F\xa1yn\x84\xd1*)9\x9b\x97\xdc\xfcRy\x8b\x8b\xb2\xf1\xb7\xfd\x88\xa5\xf2\xa0@,Y\xfeWED\x93\xd7/\xc032\xb5\xb9p\x11\xb1\x9d(\xd8N\xc4\a\x95j\x8e\x9e\xb3\xc1\x80e\xa8\x92/\xf47\xc0\x93\x17\x16\x94\xb6,$\xad\xd7\xb9\xe9\xf9\x9e\xcbK#\x81\n\v\xd4\x9e\xe4v\xa4\\\xdf(\xfe\xebU\xc0\x98H\x0ew\xb4\x9e\xce\x16`\x9b\xc54\x8c;\x99\xec\xe9\x11\xadJ\xb55\xb5\xb2\x01Uv\xeb\xa2\x03Rj\xf84Q\xfa\xb9u\xf8\x82\xd0>\xdc\xe4R6\x14q\xe0\xc1', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x69962253951682fe, 0xfffffffd, 0x18, "d4b2313cf4bee3e44b2bbed124ece060eb2494b925684214788cd7a5a31727364cfe0639cecf95dbb5b48e58b920a39a558d00", "e12d63539587ea80d964a35d5f9f7154e9c7657bec91bc069605b5937264867e32cfee0a619f32f319ce8361ebc954080cc232eb397bf5f600", "6435117e2194de8ef387a19a8f0257dfe7923bb2638b5bc85d2c857045524e35", [0x0, 0x574d]}) 5.363701397s ago: executing program 0 (id=5047): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.351490658s ago: executing program 0 (id=5048): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000000c0)={[{@noblock_validity}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodelalloc}, {@oldalloc}, {@barrier}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 5.188881133s ago: executing program 0 (id=5054): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20005ede) 5.154958176s ago: executing program 0 (id=5056): unshare(0x20000400) r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) ftruncate(r0, 0x5) finit_module(r0, 0x0, 0x6) 5.128847188s ago: executing program 0 (id=5059): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000031, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x4}) 2.365468187s ago: executing program 1 (id=5133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001c0001000000000000000000070000", @ANYRES32], 0x68}}, 0x0) 2.252114737s ago: executing program 1 (id=5136): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406d0494c200000000000109022400010000f1ee09040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0xa, "6d18"}, @global=@item_012={0x1, 0x1, 0x6, '\"'}, @local=@item_012={0x0, 0x2, 0x8}]}}, 0x0}, 0x0) 2.089001592s ago: executing program 4 (id=5141): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000003c0)={0x2, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) 2.061034954s ago: executing program 4 (id=5142): recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f00000007c0)=""/68, 0x44}], 0x2}, 0x7ff}], 0x1, 0x2000, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2.024445688s ago: executing program 4 (id=5144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000005e00010000000000000000000c", @ANYBLOB="cbd37422"], 0x1c}], 0x1}, 0x0) 1.9934561s ago: executing program 4 (id=5146): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000}) 1.970556433s ago: executing program 4 (id=5147): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x1b, &(0x7f0000010140)={{0x12, 0x1, 0x0, 0x1a, 0x20, 0xd3, 0x8, 0x46d, 0x8ad, 0x4503, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000400)=0x166) 1.832863225s ago: executing program 5 (id=5151): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="8ec1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd73", 0x2e}, {&(0x7f0000000640)="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", 0x253}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c", 0x58}], 0x3}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) 1.751244462s ago: executing program 5 (id=5154): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='attr/fscreate\x00') fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xd0, 0x18c, 0x148, 0xd0, 0x0, 0x1f8, 0x2a8, 0x2a8, 0xd0, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @remote, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'rose0\x00', 'geneve1\x00'}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 1.723157415s ago: executing program 5 (id=5155): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.463278768s ago: executing program 5 (id=5157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0x28a}]}) 1.353694428s ago: executing program 5 (id=5160): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.33800876s ago: executing program 5 (id=5161): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 318.726791ms ago: executing program 3 (id=5181): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close(r1) 211.469291ms ago: executing program 1 (id=5182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000480)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 211.398151ms ago: executing program 3 (id=5183): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) r1 = dup2(r0, r0) sendmsg$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="d80100000000000029000000360000001d3700000000000004019c0001000ae110e162606cfcc81fd6c4073a4fe59fb9bb68ae833560fbcda15227951e993aec22da73da88de9db9b743f9847ee59a7ccd23bdea30fa218e9d04146b5a9c9c1d7fa4c8ab1d4ff0f865ef23d0a197980249e120fbf67ad0267f0a601d1e0500000066108b1838b67d079cc4c36d18375808f7ca924865624586b7500d31a04c6162ef5d42a42ad74500000000000041fea5765920075662471ed0d2d8ba6f89ff770ecd82ef2dae91e1791f0a13cc3aca5dadbb6b7d929a2ed696ff3c1ee3120067619876a01a32a6794ec1f616dc0686c83aa6469c4e90ede3fe292f3ceab7b45307180000000104000800050000000000000004000000000000000502007f03b04b0aecfe53bd6ee99864b1e26074330c666bb5d66e6822ca3ac69cffab26d64907a01e5f6219f593a702761f736c1bb3abc05ff38332d11e76076943c5e6b106f78c434e415dc48f8e3c628d1657aa1a91876b11ad1b414caf8a70762c9e08a2cef2e84baa22aafbe0cee81293f39a2c2c3bb4d0eeab68e59ac8252941621147e063b8601621ff48168150594830a9e56faedbd84331a53dd87f1dcf451d288674d48df3094bfdbec495def36cd66671050200b60000001400000000000000290000003e000000000000000000000024000000000000002900000032000000fe8000"/525, @ANYRES32], 0x238}, 0x10) 185.886923ms ago: executing program 1 (id=5184): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x0, @val=0x80}, "1d"}}}}}}, 0x0) 177.961634ms ago: executing program 3 (id=5185): io_setup(0xfb, &(0x7f0000000140)=0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="13", 0xfffffdfc}]) 153.418136ms ago: executing program 1 (id=5186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 126.996978ms ago: executing program 3 (id=5187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 64.957544ms ago: executing program 3 (id=5188): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x50) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 64.471654ms ago: executing program 1 (id=5189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) 45.809886ms ago: executing program 4 (id=5190): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x8}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0) 0s ago: executing program 3 (id=5191): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000002140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) kernel console output (not intermixed with test programs): e too large, truncated to 1048576 [ 166.071941][ T2971] elecom 0003:056E:00FE.0065: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 166.238963][ T2971] usb 7-1: USB disconnect, device number 29 [ 166.269104][ T9625] loop0: detected capacity change from 0 to 256 [ 166.274627][ T298] usb 5-1: USB disconnect, device number 36 [ 166.275803][ T9625] exfat: Deprecated parameter 'namecase' [ 166.287251][ T9625] exfat: Deprecated parameter 'namecase' [ 166.304159][ T9625] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 166.356016][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 166.356033][ T28] audit: type=1400 audit(2000000384.280:8751): avc: denied { create } for pid=9628 comm="syz.0.4131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 166.419624][ T19] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.679627][ T316] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 166.699587][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 166.799541][ T298] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 166.832271][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.848509][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.863548][ T9665] loop4: detected capacity change from 0 to 512 [ 166.881683][ T9665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 166.891150][ T9665] ext4 filesystem being mounted at /784/mnt supports timestamps until 2038 (0x7fffffff) [ 166.923536][ T292] EXT4-fs (loop4): unmounting filesystem. [ 166.929566][ T316] usb 1-1: Using ep0 maxpacket: 8 [ 166.974690][ T9657] loop6: detected capacity change from 0 to 40427 [ 166.982286][ T9657] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 166.989440][ T9657] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 167.003573][ T19] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 167.009722][ T9657] F2FS-fs (loop6): heap/no_heap options were deprecated [ 167.021440][ T9657] F2FS-fs (loop6): invalid crc value [ 167.022287][ T19] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 167.034709][ T9673] loop4: detected capacity change from 0 to 1024 [ 167.041691][ T19] usb 4-1: Product: syz [ 167.043337][ T9673] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.045978][ T19] usb 4-1: Manufacturer: syz [ 167.057928][ T9657] F2FS-fs (loop6): Found nat_bits in checkpoint [ 167.061830][ T316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.078343][ T316] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 167.087415][ T19] usb 4-1: config 0 descriptor?? [ 167.092729][ T316] usb 1-1: config 1 has no interface number 1 [ 167.100313][ T9673] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 167.123176][ T292] EXT4-fs (loop4): unmounting filesystem. [ 167.124205][ T9657] F2FS-fs (loop6): Start checkpoint disabled! [ 167.144033][ T9657] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 167.154528][ T9657] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 167.164753][ T298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.182284][ T298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.203125][ T298] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.221247][ T298] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 167.234562][ T298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.245009][ T298] usb 6-1: config 0 descriptor?? [ 167.258173][ T1641] kworker/u4:5: attempt to access beyond end of device [ 167.258173][ T1641] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 167.274360][ T316] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.283865][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.292248][ T316] usb 1-1: Product: syz [ 167.296363][ T316] usb 1-1: Manufacturer: syz [ 167.319510][ T316] usb 1-1: SerialNumber: syz [ 167.396643][ T9683] loop4: detected capacity change from 0 to 40427 [ 167.412220][ T9683] F2FS-fs (loop4): fault_injection options not supported [ 167.420500][ T9683] F2FS-fs (loop4): invalid crc value [ 167.426950][ T9683] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.448994][ T28] audit: type=1400 audit(2000000385.370:8752): avc: denied { ioctl } for pid=9689 comm="syz.6.4158" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 167.507978][ T9683] F2FS-fs (loop4): Start checkpoint disabled! [ 167.513405][ T9696] loop6: detected capacity change from 0 to 1024 [ 167.514737][ T9683] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 167.524637][ T9696] EXT4-fs: Ignoring removed orlov option [ 167.533918][ T9696] EXT4-fs (loop6): Test dummy encryption mode enabled [ 167.546992][ T9696] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 167.570887][ T19] kovaplus 0003:1E7D:2D50.0066: item fetching failed at offset 5/7 [ 167.579359][ T43] kworker/u4:2: attempt to access beyond end of device [ 167.579359][ T43] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 167.582366][ T19] kovaplus 0003:1E7D:2D50.0066: parse failed [ 167.605800][ T19] kovaplus: probe of 0003:1E7D:2D50.0066 failed with error -22 [ 167.626024][ T4962] EXT4-fs (loop6): unmounting filesystem. [ 167.686917][ T9704] loop6: detected capacity change from 0 to 512 [ 167.693674][ T9704] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 167.707851][ T316] usb 1-1: USB disconnect, device number 37 [ 167.730858][ T298] acrux 0003:1A34:0802.0067: report_id 428543292 is invalid [ 167.738376][ T298] acrux 0003:1A34:0802.0067: item 0 4 1 8 parsing failed [ 167.745577][ T298] acrux 0003:1A34:0802.0067: parse failed [ 167.752833][ T298] acrux: probe of 0003:1A34:0802.0067 failed with error -22 [ 167.761411][ T9704] EXT4-fs (loop6): 1 truncate cleaned up [ 167.766958][ T9704] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 167.787927][ T9704] EXT4-fs warning (device loop6): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 167.807175][ T19] usb 4-1: USB disconnect, device number 6 [ 167.827309][ T4962] EXT4-fs (loop6): unmounting filesystem. [ 167.903310][ T9726] loop4: detected capacity change from 0 to 128 [ 167.910186][ T9726] EXT4-fs: Ignoring removed nobh option [ 167.917407][ T9726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 167.926388][ T9726] ext4 filesystem being mounted at /797/mnt supports timestamps until 2038 (0x7fffffff) [ 167.931234][ T298] usb 6-1: USB disconnect, device number 28 [ 167.955121][ T9729] netlink: 'syz.6.4175': attribute type 2 has an invalid length. [ 167.969301][ T292] EXT4-fs (loop4): unmounting filesystem. [ 168.011597][ T9737] loop4: detected capacity change from 0 to 256 [ 168.025097][ T9737] FAT-fs (loop4): Directory bread(block 64) failed [ 168.031784][ T9737] FAT-fs (loop4): Directory bread(block 65) failed [ 168.038651][ T9737] FAT-fs (loop4): Directory bread(block 66) failed [ 168.045801][ T9737] FAT-fs (loop4): Directory bread(block 67) failed [ 168.052429][ T9737] FAT-fs (loop4): Directory bread(block 68) failed [ 168.058815][ T9737] FAT-fs (loop4): Directory bread(block 69) failed [ 168.065517][ T9737] FAT-fs (loop4): Directory bread(block 70) failed [ 168.072011][ T9737] FAT-fs (loop4): Directory bread(block 71) failed [ 168.078577][ T9737] FAT-fs (loop4): Directory bread(block 72) failed [ 168.084978][ T9737] FAT-fs (loop4): Directory bread(block 73) failed [ 168.129121][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4180'. [ 168.249569][ T316] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 168.351606][ T9773] xt_hashlimit: size too large, truncated to 1048576 [ 168.499539][ T316] usb 7-1: Using ep0 maxpacket: 8 [ 168.549499][ T298] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 168.619578][ T316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.630461][ T28] audit: type=1326 audit(2000000386.550:8753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5237e719 code=0x7ffc0000 [ 168.660158][ T316] usb 7-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 168.665969][ T9784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.669201][ T316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.686196][ T28] audit: type=1326 audit(2000000386.550:8754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbc5237e719 code=0x7ffc0000 [ 168.692219][ T9784] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 168.727138][ T28] audit: type=1326 audit(2000000386.550:8755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5237e719 code=0x7ffc0000 [ 168.750728][ T316] usb 7-1: config 0 descriptor?? [ 168.758991][ T28] audit: type=1326 audit(2000000386.550:8756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fbc5237e719 code=0x7ffc0000 [ 168.782611][ T28] audit: type=1326 audit(2000000386.550:8757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.3.4200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5237e719 code=0x7ffc0000 [ 168.859519][ T298] usb 5-1: Using ep0 maxpacket: 32 [ 168.989602][ T298] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 169.001052][ T298] usb 5-1: config 4 has no interface number 0 [ 169.008754][ T298] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.021451][ T298] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.032062][ T298] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 169.041183][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.090193][ T298] hub 5-1:4.128: USB hub found [ 169.236086][ T9817] loop0: detected capacity change from 0 to 2048 [ 169.246884][ T9776] loop5: detected capacity change from 0 to 131072 [ 169.261589][ T316] wacom 0003:056A:0333.0068: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.6-1/input0 [ 169.272316][ T9776] F2FS-fs (loop5): Test dummy encryption mode enabled [ 169.292369][ T9776] F2FS-fs (loop5): invalid crc value [ 169.299657][ T298] hub 5-1:4.128: 2 ports detected [ 169.306033][ T9817] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 169.315604][ T298] hub 5-1:4.128: Using single TT (err -22) [ 169.330451][ T9776] F2FS-fs (loop5): Found nat_bits in checkpoint [ 169.346501][ T6696] EXT4-fs (loop0): unmounting filesystem. [ 169.425939][ T9776] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 169.453766][ T9843] loop3: detected capacity change from 0 to 8192 [ 169.469021][ T4470] usb 7-1: USB disconnect, device number 30 [ 169.469707][ T9843] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.669852][ T315] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 169.760238][ T298] usb 5-1: USB disconnect, device number 37 [ 169.780778][ T9870] netlink: 'syz.3.4240': attribute type 5 has an invalid length. [ 169.788430][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 170.009522][ T19] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 170.049567][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.069523][ T315] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 170.088519][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.100420][ T315] usb 1-1: config 0 descriptor?? [ 170.234471][ T9890] loop4: detected capacity change from 0 to 256 [ 170.262598][ T9890] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 170.343058][ T9880] loop3: detected capacity change from 0 to 40427 [ 170.366514][ T9880] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 170.375666][ T9880] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 170.385792][ T19] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.398953][ T19] usb 6-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 170.409372][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.415276][ T9912] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 170.419848][ T9880] F2FS-fs (loop3): Found nat_bits in checkpoint [ 170.434041][ T19] usb 6-1: config 0 descriptor?? [ 170.462869][ T9915] tipc: Enabled bearer , priority 10 [ 170.495579][ T28] audit: type=1326 audit(2000000388.420:8758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0217e719 code=0x7ffc0000 [ 170.521408][ T9880] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 170.534125][ T9880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 170.536247][ T28] audit: type=1326 audit(2000000388.420:8759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d0217e719 code=0x7ffc0000 [ 170.554737][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4263'. [ 170.577767][ T28] audit: type=1326 audit(2000000388.420:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9918 comm="syz.4.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d0217e719 code=0x7ffc0000 [ 170.610510][ T315] holtek 0003:1241:5015.0069: unknown main item tag 0x0 [ 170.617550][ T315] holtek 0003:1241:5015.0069: unbalanced collection at end of report description [ 170.629385][ T315] holtek 0003:1241:5015.0069: parse failed [ 170.635432][ T315] holtek: probe of 0003:1241:5015.0069 failed with error -22 [ 170.647984][ T9930] loop4: detected capacity change from 0 to 256 [ 170.672127][ T9932] loop4: detected capacity change from 0 to 128 [ 170.678627][ T9932] EXT4-fs: Ignoring removed i_version option [ 170.684747][ T9932] EXT4-fs: Ignoring removed orlov option [ 170.696217][ T9932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.705189][ T9932] ext4 filesystem being mounted at /816/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 170.747057][ T292] EXT4-fs (loop4): unmounting filesystem. [ 170.799549][ T316] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 170.813375][ T4995] usb 1-1: USB disconnect, device number 38 [ 170.891169][ T19] waltop 0003:172F:0502.006A: unknown main item tag 0x0 [ 170.899173][ T19] waltop 0003:172F:0502.006A: unknown main item tag 0x0 [ 170.913264][ T19] waltop 0003:172F:0502.006A: unknown main item tag 0x0 [ 170.923547][ T19] waltop 0003:172F:0502.006A: unknown main item tag 0x0 [ 170.934247][ T19] waltop 0003:172F:0502.006A: unknown main item tag 0x0 [ 170.952818][ T19] waltop 0003:172F:0502.006A: unknown main item tag 0x0 [ 170.965323][ T19] waltop 0003:172F:0502.006A: hidraw0: USB HID vff.fc Device [HID 172f:0502] on usb-dummy_hcd.5-1/input0 [ 170.994073][ T9958] loop4: detected capacity change from 0 to 512 [ 171.031734][ T9958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.041039][ T9958] ext4 filesystem being mounted at /822/file0 supports timestamps until 2038 (0x7fffffff) [ 171.062999][ T9958] EXT4-fs warning (device loop4): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 171.082018][ T292] EXT4-fs (loop4): unmounting filesystem. [ 171.093886][ T4995] usb 6-1: USB disconnect, device number 29 [ 171.119561][ T316] usb 7-1: not running at top speed; connect to a high speed hub [ 171.128663][ T9971] loop4: detected capacity change from 0 to 256 [ 171.135250][ T9971] exfat: Deprecated parameter 'utf8' [ 171.144284][ T9971] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 171.219520][ T316] usb 7-1: config 5 has an invalid interface number: 148 but max is 0 [ 171.227634][ T316] usb 7-1: config 5 has no interface number 0 [ 171.233903][ T316] usb 7-1: config 5 interface 148 altsetting 1 endpoint 0xC has an invalid bInterval 250, changing to 4 [ 171.245182][ T316] usb 7-1: config 5 interface 148 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 171.259528][ T316] usb 7-1: config 5 interface 148 has no altsetting 0 [ 171.388887][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 171.388907][ T28] audit: type=1326 audit(2000000389.310:8771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.0.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 171.430363][ T316] usb 7-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 171.440544][ T316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.448793][ T28] audit: type=1326 audit(2000000389.310:8772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.0.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 171.448957][ T316] usb 7-1: Product: syz [ 171.476477][ T316] usb 7-1: Manufacturer: syz [ 171.489073][ T316] usb 7-1: SerialNumber: syz [ 171.506948][ T28] audit: type=1326 audit(2000000389.310:8773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.0.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 171.546217][ T28] audit: type=1326 audit(2000000389.310:8774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.0.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 171.573449][ T28] audit: type=1326 audit(2000000389.310:8775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.0.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 171.582980][ T19] tipc: Node number set to 4278517761 [ 171.601003][ T28] audit: type=1326 audit(2000000389.310:8776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.0.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 171.633398][ T28] audit: type=1326 audit(2000000389.310:8777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.0.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 171.662001][ T28] audit: type=1326 audit(2000000389.310:8778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.0.4293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 171.809797][ T316] ipheth 7-1:5.148: Unable to find endpoints [ 171.817335][ T316] usb 7-1: USB disconnect, device number 31 [ 171.829567][ T4995] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 171.939541][ T19] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.069558][ T4995] usb 1-1: Using ep0 maxpacket: 32 [ 172.299718][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.311071][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.320959][ T19] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 172.330129][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.340851][ T19] usb 4-1: config 0 descriptor?? [ 172.349699][ T4995] usb 1-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice= d.2d [ 172.358918][ T4995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.367267][ T4995] usb 1-1: Product: syz [ 172.371510][ T4995] usb 1-1: Manufacturer: syz [ 172.376413][ T4995] usb 1-1: SerialNumber: syz [ 172.429509][ T316] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 172.639644][ T4995] aqc111: probe of 1-1:1.0 failed with error -22 [ 172.675420][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4315'. [ 173.792370][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.151328][ T19] magicmouse 0003:05AC:0269.006B: unknown main item tag 0x0 [ 174.158476][ T19] magicmouse 0003:05AC:0269.006B: unknown main item tag 0x0 [ 174.168425][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.178234][ T19] magicmouse 0003:05AC:0269.006B: unknown main item tag 0x0 [ 174.186175][ T316] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 174.195861][ T19] magicmouse 0003:05AC:0269.006B: unknown main item tag 0x0 [ 174.203629][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.215826][ T19] magicmouse 0003:05AC:0269.006B: unknown main item tag 0x0 [ 174.223890][ T19] magicmouse 0003:05AC:0269.006B: unknown main item tag 0x0 [ 174.232080][ T316] usb 5-1: config 0 descriptor?? [ 174.237670][ T19] magicmouse 0003:05AC:0269.006B: unknown main item tag 0x0 [ 174.271331][ T19] magicmouse 0003:05AC:0269.006B: hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 174.303765][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4324'. [ 174.313154][ T4995] usb 1-1: USB disconnect, device number 39 [ 174.355622][ T315] usb 4-1: USB disconnect, device number 7 [ 174.535237][T10087] loop6: detected capacity change from 0 to 256 [ 174.551280][T10087] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 174.699575][ T298] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 174.712366][ T316] elo 0003:04E7:0030.006C: unknown main item tag 0x4 [ 174.724049][ T316] elo 0003:04E7:0030.006C: item fetching failed at offset 3/7 [ 174.732285][ T316] elo 0003:04E7:0030.006C: parse failed [ 174.737767][ T316] elo: probe of 0003:04E7:0030.006C failed with error -22 [ 174.849550][ T4995] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 174.880447][T10103] loop3: detected capacity change from 0 to 512 [ 174.886796][T10103] EXT4-fs: Ignoring removed nobh option [ 174.892790][T10103] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.913314][ T315] usb 5-1: USB disconnect, device number 38 [ 174.925443][T10103] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 174.934287][T10103] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038 (0x7fffffff) [ 174.950564][ T298] usb 6-1: Using ep0 maxpacket: 16 [ 174.958697][ T28] audit: type=1400 audit(2000000392.880:8779): avc: denied { remount } for pid=10102 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 174.979263][T10103] devtmpfs: Too few inodes for current use [ 174.994521][ T9056] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 224: padding at end of block bitmap is not set [ 175.009705][ T9056] EXT4-fs (loop3): Remounting filesystem read-only [ 175.016039][ T9056] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 175.026873][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 175.032673][ T10] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 175.056017][T10101] loop0: detected capacity change from 0 to 40427 [ 175.065048][T10101] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 175.072914][T10101] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 175.082150][T10101] F2FS-fs (loop0): invalid crc value [ 175.088872][T10101] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 175.099412][ T4995] usb 7-1: Using ep0 maxpacket: 16 [ 175.103341][T10101] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 175.128992][T10101] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 175.136752][T10101] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.219560][ T4995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.238045][ T4995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.250621][ T4995] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.264223][ T4995] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.273360][ T4995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.281736][ T4995] usb 7-1: config 0 descriptor?? [ 175.289580][ T298] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 175.299377][ T298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.310161][ T298] usb 6-1: Product: syz [ 175.314290][ T298] usb 6-1: Manufacturer: syz [ 175.318710][ T298] usb 6-1: SerialNumber: syz [ 175.326592][ T298] r8152-cfgselector 6-1: config 0 descriptor?? [ 175.329536][ T316] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 175.579505][ T316] usb 4-1: Using ep0 maxpacket: 8 [ 175.599554][ T298] r8152-cfgselector 6-1: Unknown version 0x0000 [ 175.628122][T10134] loop4: detected capacity change from 0 to 40427 [ 175.635746][T10134] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 175.642683][T10134] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 175.651172][T10134] F2FS-fs (loop4): Image doesn't support compression [ 175.658488][T10134] F2FS-fs (loop4): invalid crc value [ 175.665650][T10134] F2FS-fs (loop4): Found nat_bits in checkpoint [ 175.699577][ T316] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 175.703513][T10134] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 175.707780][ T316] usb 4-1: config 179 has no interface number 0 [ 175.714747][T10134] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 175.720850][ T316] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 175.738977][ T316] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 175.750351][ T316] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 175.761763][ T316] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 175.761833][ T292] syz-executor: attempt to access beyond end of device [ 175.761833][ T292] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.774473][ T4995] microsoft 0003:045E:07DA.006D: unknown main item tag 0x0 [ 175.794072][ T316] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 175.807392][ T316] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 175.817763][ T4995] microsoft 0003:045E:07DA.006D: ignoring exceeding usage max [ 175.827287][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.855931][ T4995] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.006D/input/input80 [ 175.867464][T10108] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 175.869598][ T298] r8152-cfgselector 6-1: Unknown version 0x0000 [ 175.889188][ T298] r8152-cfgselector 6-1: USB disconnect, device number 30 [ 175.912122][T10140] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4359'. [ 176.059017][ T4995] microsoft 0003:045E:07DA.006D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 176.073889][ T4995] usb 7-1: USB disconnect, device number 32 [ 176.092639][T10108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.124235][T10108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.205333][ T315] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 176.260836][T10158] loop0: detected capacity change from 0 to 512 [ 176.287741][T10158] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.301214][T10158] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 176.310196][T10158] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 176.319394][T10158] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 176.327444][T10158] System zones: 0-2, 18-18, 34-34 [ 176.332948][T10158] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 176.350580][ T4995] usb 4-1: USB disconnect, device number 8 [ 176.361005][T10158] EXT4-fs (loop0): 1 truncate cleaned up [ 176.366821][T10158] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.375228][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 176.413137][ T6696] EXT4-fs (loop0): unmounting filesystem. [ 176.469559][ T315] usb 5-1: Using ep0 maxpacket: 8 [ 176.486091][T10177] loop0: detected capacity change from 0 to 16 [ 176.498434][T10177] erofs: (device loop0): mounted with root inode @ nid 36. [ 176.629624][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.640646][ T315] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 176.649968][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.658578][ T315] usb 5-1: config 0 descriptor?? [ 176.799533][ T19] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 176.861740][T10197] can0: slcan on ptm0. [ 176.909778][T10196] can0 (unregistered): slcan off ptm0. [ 176.970857][T10214] loop3: detected capacity change from 0 to 256 [ 177.001388][T10214] FAT-fs (loop3): Directory bread(block 64) failed [ 177.007909][T10214] FAT-fs (loop3): Directory bread(block 65) failed [ 177.014582][T10214] FAT-fs (loop3): Directory bread(block 66) failed [ 177.021237][T10214] FAT-fs (loop3): Directory bread(block 67) failed [ 177.027662][T10214] FAT-fs (loop3): Directory bread(block 68) failed [ 177.034643][T10214] FAT-fs (loop3): Directory bread(block 69) failed [ 177.041323][T10214] FAT-fs (loop3): Directory bread(block 70) failed [ 177.048002][T10214] FAT-fs (loop3): Directory bread(block 71) failed [ 177.054644][T10214] FAT-fs (loop3): Directory bread(block 72) failed [ 177.061320][T10214] FAT-fs (loop3): Directory bread(block 73) failed [ 177.082497][T10214] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 177.089986][T10214] FAT-fs (loop3): Filesystem has been set read-only [ 177.151133][ T315] waltop 0003:172F:0037.006E: collection stack underflow [ 177.158192][ T315] waltop 0003:172F:0037.006E: item 0 1 0 12 parsing failed [ 177.165975][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.167656][ T315] waltop: probe of 0003:172F:0037.006E failed with error -22 [ 177.183902][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.199343][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.212649][ T19] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 177.215837][T10237] loop3: detected capacity change from 0 to 512 [ 177.221729][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.222480][ T19] usb 1-1: config 0 descriptor?? [ 177.250323][T10237] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 177.258454][T10237] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 177.267474][T10237] System zones: 0-1, 15-15, 18-18, 34-34 [ 177.274367][T10237] EXT4-fs (loop3): orphan cleanup on readonly fs [ 177.281312][T10237] __quota_error: 6 callbacks suppressed [ 177.281327][T10237] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 177.296132][T10237] EXT4-fs warning (device loop3): ext4_enable_quotas:7022: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 177.311784][T10237] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 177.318681][T10237] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.4390: bad orphan inode 16 [ 177.329030][T10237] ext4_test_bit(bit=15, block=18) = 1 [ 177.334370][T10237] is_bad_inode(inode)=0 [ 177.338337][T10237] NEXT_ORPHAN(inode)=0 [ 177.342267][T10237] max_ino=32 [ 177.345284][T10237] i_nlink=2 [ 177.348442][T10237] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.363043][ T4995] usb 5-1: USB disconnect, device number 39 [ 177.380555][T10237] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 177.380580][ T28] audit: type=1400 audit(2000000395.310:8785): avc: denied { read } for pid=10236 comm="syz.3.4390" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 177.389688][T10237] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 177.449414][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 177.541027][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4401'. [ 179.141170][ T19] gt683r_led 0003:1770:FF00.006F: unknown main item tag 0x0 [ 179.148336][ T19] gt683r_led 0003:1770:FF00.006F: unknown main item tag 0x0 [ 179.159878][ T19] gt683r_led 0003:1770:FF00.006F: unknown main item tag 0x0 [ 179.170099][ T19] gt683r_led 0003:1770:FF00.006F: unknown main item tag 0x0 [ 179.177213][ T19] gt683r_led 0003:1770:FF00.006F: unknown main item tag 0x0 [ 179.191196][ T19] gt683r_led 0003:1770:FF00.006F: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 179.217417][ T28] audit: type=1400 audit(2000000397.140:8786): avc: denied { write } for pid=10267 comm="syz.6.4405" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.241850][ T19] usb 1-1: USB disconnect, device number 40 [ 179.282306][ T316] gt683r_led 0003:1770:FF00.006F: failed to send set report request: -19 [ 179.297200][ T316] gt683r_led 0003:1770:FF00.006F: failed to send set report request: -19 [ 179.427682][T10300] loop3: detected capacity change from 0 to 256 [ 179.589550][ T316] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 179.647631][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4433'. [ 179.789877][ T28] audit: type=1400 audit(2000000397.720:8787): avc: denied { view } for pid=10343 comm="syz.6.4440" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 179.791990][T10311] loop3: detected capacity change from 0 to 40427 [ 179.835207][ T19] kernel write not supported for file /vcs (pid: 19 comm: kworker/0:1) [ 179.877018][T10352] loop0: detected capacity change from 0 to 256 [ 179.897654][T10311] F2FS-fs (loop3): Found nat_bits in checkpoint [ 179.910765][ T28] audit: type=1326 audit(2000000397.840:8788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 179.959757][ T28] audit: type=1326 audit(2000000397.840:8789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 179.969628][ T316] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.005592][ T28] audit: type=1326 audit(2000000397.860:8790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 180.019500][ T316] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.032322][ T28] audit: type=1326 audit(2000000397.860:8791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 180.057224][ T316] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.079611][T10311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 180.079606][ T316] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 180.079642][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.134334][ T28] audit: type=1326 audit(2000000397.860:8792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10359 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f044a9b0805 code=0x7ffc0000 [ 180.173175][ T316] usb 5-1: config 0 descriptor?? [ 180.221528][ T28] audit: type=1326 audit(2000000397.860:8793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.0.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 180.225090][T10337] loop5: detected capacity change from 0 to 40427 [ 180.287393][T10337] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 180.304804][T10337] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 180.317552][T10337] F2FS-fs (loop5): invalid crc value [ 180.349161][T10337] F2FS-fs (loop5): Found nat_bits in checkpoint [ 180.382596][T10395] loop6: detected capacity change from 0 to 512 [ 180.440114][T10395] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 180.456224][T10337] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 180.465547][T10337] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 180.484440][T10395] ext4 filesystem being mounted at /480/bus supports timestamps until 2038 (0x7fffffff) [ 180.521174][ T3545] syz-executor: attempt to access beyond end of device [ 180.521174][ T3545] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 180.557320][ T4962] EXT4-fs (loop6): unmounting filesystem. [ 180.641054][ T316] uclogic 0003:28BD:0071.0070: interface is invalid, ignoring [ 180.688367][T10436] netlink: 'syz.6.4481': attribute type 2 has an invalid length. [ 180.697709][T10438] loop0: detected capacity change from 0 to 512 [ 180.711810][T10438] EXT4-fs: Invalid uid value -1 [ 180.735133][T10442] loop6: detected capacity change from 0 to 256 [ 180.821601][T10458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4489'. [ 180.831519][T10458] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4489'. [ 180.861588][T10460] loop0: detected capacity change from 0 to 128 [ 180.863173][ T19] usb 5-1: USB disconnect, device number 40 [ 180.939595][ T316] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 181.029581][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 181.074462][T10464] loop0: detected capacity change from 0 to 40427 [ 181.081726][T10464] F2FS-fs (loop0): heap/no_heap options were deprecated [ 181.096120][T10464] F2FS-fs (loop0): invalid crc value [ 181.102389][T10464] F2FS-fs (loop0): Found nat_bits in checkpoint [ 181.139014][T10464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 181.161164][ T6696] syz-executor: attempt to access beyond end of device [ 181.161164][ T6696] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.179641][ T316] usb 4-1: Using ep0 maxpacket: 8 [ 181.259545][ T315] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 181.299537][ T316] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 181.307726][ T316] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 181.322060][T10482] loop0: detected capacity change from 0 to 2048 [ 181.328753][ T316] usb 4-1: config 135 has no interface number 0 [ 181.335010][ T316] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.350955][T10482] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 181.370416][ T6696] EXT4-fs (loop0): unmounting filesystem. [ 181.405734][T10489] loop4: detected capacity change from 0 to 512 [ 181.419625][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.430663][ T24] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.439422][T10489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 181.450471][T10489] ext4 filesystem being mounted at /845/file0 supports timestamps until 2038 (0x7fffffff) [ 181.451456][ T24] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.471215][T10489] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.4503: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 181.494033][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 181.499602][ T316] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 181.507886][ T24] usb 6-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 181.511647][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.528300][ T316] usb 4-1: Product: syz [ 181.529108][ T292] EXT4-fs (loop4): unmounting filesystem. [ 181.532722][ T316] usb 4-1: Manufacturer: syz [ 181.542280][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.544589][ T316] usb 4-1: SerialNumber: syz [ 181.568701][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4508'. [ 181.582587][ T24] usb 6-1: config 0 descriptor?? [ 181.590135][ T316] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 181.596466][ T316] usb 4-1: No valid video chain found. [ 181.669629][ T315] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.690661][ T315] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.714733][T10523] loop0: detected capacity change from 0 to 512 [ 181.726451][T10525] netlink: 'syz.4.4519': attribute type 11 has an invalid length. [ 181.734381][T10525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4519'. [ 181.748095][T10523] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 181.757123][T10523] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038 (0x7fffffff) [ 181.779428][ T6696] EXT4-fs (loop0): unmounting filesystem. [ 181.789655][ T315] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.801763][ T315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.807601][ T4995] usb 4-1: USB disconnect, device number 9 [ 181.811062][ T315] usb 7-1: SerialNumber: syz [ 182.039541][ T316] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 182.060505][ T24] zeroplus 0003:0C12:0005.0071: unknown main item tag 0x0 [ 182.067523][ T24] zeroplus 0003:0C12:0005.0071: unknown main item tag 0x0 [ 182.075186][ T24] zeroplus 0003:0C12:0005.0071: unknown main item tag 0x0 [ 182.082146][ T24] zeroplus 0003:0C12:0005.0071: unknown main item tag 0x0 [ 182.090786][ T24] zeroplus 0003:0C12:0005.0071: unknown main item tag 0x0 [ 182.098302][ T24] zeroplus 0003:0C12:0005.0071: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.5-1/input0 [ 182.109734][ T24] zeroplus 0003:0C12:0005.0071: no inputs found [ 182.130274][ T315] usb 7-1: 0:2 : does not exist [ 182.134968][ T315] usb 7-1: unit 254 not found! [ 182.140270][ T315] usb 7-1: unit 128 not found! [ 182.147233][ T315] usb 7-1: USB disconnect, device number 33 [ 182.261765][ T4470] usb 6-1: USB disconnect, device number 31 [ 182.399813][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.403043][T10556] loop3: detected capacity change from 0 to 256 [ 182.410789][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.417021][T10556] exfat: Deprecated parameter 'namecase' [ 182.429861][ T316] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 182.441245][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.450661][ T316] usb 5-1: config 0 descriptor?? [ 182.475919][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 182.475935][ T28] audit: type=1400 audit(2000000400.400:8806): avc: denied { getopt } for pid=10558 comm="syz.3.4535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 182.889579][ T4470] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 182.942109][ T316] lenovo 0003:17EF:6062.0072: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 183.144906][ T311] usb 5-1: USB disconnect, device number 41 [ 183.159598][ T4470] usb 7-1: Using ep0 maxpacket: 32 [ 183.229518][ T316] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 183.309544][ T4470] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.320477][ T4470] usb 7-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 183.329301][ T4470] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.342158][ T4470] usb 7-1: config 0 descriptor?? [ 183.524619][T10588] loop3: detected capacity change from 0 to 128 [ 183.599602][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.619527][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.629256][ T316] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 183.666460][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.682782][ T316] usb 1-1: config 0 descriptor?? [ 183.753638][T10602] loop4: detected capacity change from 0 to 512 [ 183.794891][T10602] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.806385][T10610] syz.3.4558[10610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.806470][T10610] syz.3.4558[10610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.818237][T10602] ext4 filesystem being mounted at /857/file0 supports timestamps until 2038 (0x7fffffff) [ 183.860530][ T4470] elecom 0003:056E:00FC.0073: unknown main item tag 0xd [ 183.869924][T10602] EXT4-fs warning (device loop4): ext4_group_extend:1899: can't read last block, resize aborted [ 183.889363][ T4470] elecom 0003:056E:00FC.0073: unexpected long global item [ 183.910104][ T4470] elecom: probe of 0003:056E:00FC.0073 failed with error -22 [ 183.948680][ T292] EXT4-fs (loop4): unmounting filesystem. [ 184.067743][ T311] usb 7-1: USB disconnect, device number 34 [ 184.170460][ T316] appleir 0003:05AC:8243.0074: report_id 0 is invalid [ 184.177170][ T316] appleir 0003:05AC:8243.0074: item 0 0 1 8 parsing failed [ 184.199673][ T316] appleir 0003:05AC:8243.0074: parse failed [ 184.205791][ T316] appleir: probe of 0003:05AC:8243.0074 failed with error -22 [ 184.373679][ T24] usb 1-1: USB disconnect, device number 41 [ 184.429535][ T4470] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 184.456172][T10620] loop5: detected capacity change from 0 to 131072 [ 184.466328][T10620] F2FS-fs (loop5): Found nat_bits in checkpoint [ 184.508160][T10620] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 184.528319][T10620] F2FS-fs (loop5): lookup inode (7) has corrupted xattr [ 184.614695][T10646] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4574'. [ 184.637661][T10648] loop6: detected capacity change from 0 to 512 [ 184.670792][T10648] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 184.679783][T10648] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038 (0x7fffffff) [ 184.694019][T10648] EXT4-fs error (device loop6): ext4_empty_dir:3143: inode #12: block 32: comm syz.6.4575: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=106, size=2048 fake=1 [ 184.713193][T10648] EXT4-fs warning (device loop6): ext4_empty_dir:3145: inode #12: comm syz.6.4575: directory missing '.' [ 184.732419][ T4962] EXT4-fs (loop6): unmounting filesystem. [ 184.809557][ T4470] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.824096][ T4470] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 184.848068][ T4470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.866803][ T4470] usb 5-1: config 0 descriptor?? [ 185.071806][T10691] netlink: 'syz.0.4594': attribute type 10 has an invalid length. [ 185.090244][T10693] netlink: 'syz.5.4595': attribute type 1 has an invalid length. [ 185.114312][ T4470] usb 5-1: USB disconnect, device number 42 [ 185.125967][T10658] loop6: detected capacity change from 0 to 40427 [ 185.144843][T10658] F2FS-fs (loop6): fault_injection options not supported [ 185.152934][T10658] F2FS-fs (loop6): invalid crc value [ 185.159651][T10658] F2FS-fs (loop6): Found nat_bits in checkpoint [ 185.216497][ T28] audit: type=1400 audit(2000000403.140:8807): avc: denied { bind } for pid=10705 comm="syz.5.4600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 185.265003][T10658] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 185.297204][T10658] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 185.314740][ T28] audit: type=1400 audit(2000000403.240:8808): avc: denied { relabelto } for pid=10657 comm="syz.6.4579" name="file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 185.347862][ T4962] syz-executor: attempt to access beyond end of device [ 185.347862][ T4962] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.545116][T10751] loop6: detected capacity change from 0 to 512 [ 185.565847][ T28] audit: type=1326 audit(2000000403.490:8809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 185.578011][T10751] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 185.600713][ T28] audit: type=1326 audit(2000000403.490:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 185.602919][T10751] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038 (0x7fffffff) [ 185.647920][ T28] audit: type=1326 audit(2000000403.490:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 185.672020][T10751] EXT4-fs warning (device loop6): ext4_group_extend:1899: can't read last block, resize aborted [ 185.691111][ T28] audit: type=1326 audit(2000000403.490:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 185.715348][ T28] audit: type=1326 audit(2000000403.490:8813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f044a9756e7 code=0x7ffc0000 [ 185.739288][ T28] audit: type=1326 audit(2000000403.490:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f044a91a099 code=0x7ffc0000 [ 185.767195][ T28] audit: type=1326 audit(2000000403.490:8815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10754 comm="syz.0.4622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044a97e719 code=0x7ffc0000 [ 185.770675][T10765] loop0: detected capacity change from 0 to 512 [ 185.791167][ T4962] EXT4-fs (loop6): unmounting filesystem. [ 185.806445][T10765] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 185.834278][T10772] loop3: detected capacity change from 0 to 512 [ 185.840729][T10772] EXT4-fs: Ignoring removed bh option [ 185.846825][T10772] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 185.856776][T10765] EXT4-fs (loop0): 1 truncate cleaned up [ 185.862529][T10765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.885862][T10772] EXT4-fs (loop3): 1 truncate cleaned up [ 185.891500][T10772] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.902395][T10772] EXT4-fs warning (device loop3): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 185.918298][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 185.954757][ T6696] EXT4-fs (loop0): unmounting filesystem. [ 185.977965][T10792] loop5: detected capacity change from 0 to 1024 [ 186.059137][T10792] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 186.077057][T10808] tipc: Enabling of bearer rejected, failed to enable media [ 186.092739][T10792] EXT4-fs (loop5): unmounting filesystem. [ 186.150063][T10815] loop6: detected capacity change from 0 to 2048 [ 186.181491][T10815] loop6: p1 < > p3 p4 < > [ 186.194769][T10815] loop6: p3 start 4284289 is beyond EOD, truncated [ 186.252352][T10831] loop5: detected capacity change from 0 to 512 [ 186.291848][T10831] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 186.306580][T10831] ext4 filesystem being mounted at /728/bus supports timestamps until 2038 (0x7fffffff) [ 186.323516][T10842] loop3: detected capacity change from 0 to 512 [ 186.346115][T10842] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 186.357616][ T3545] EXT4-fs (loop5): unmounting filesystem. [ 186.375853][T10842] EXT4-fs (loop3): 1 truncate cleaned up [ 186.393091][T10842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.439400][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 186.455750][T10857] loop3: detected capacity change from 0 to 256 [ 186.465712][T10857] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d) [ 186.500250][T10862] loop5: detected capacity change from 0 to 256 [ 186.522338][T10862] FAT-fs (loop5): Directory bread(block 64) failed [ 186.528844][T10862] FAT-fs (loop5): Directory bread(block 65) failed [ 186.535392][T10862] FAT-fs (loop5): Directory bread(block 66) failed [ 186.542703][T10862] FAT-fs (loop5): Directory bread(block 67) failed [ 186.562995][T10862] FAT-fs (loop5): Directory bread(block 68) failed [ 186.569617][T10862] FAT-fs (loop5): Directory bread(block 69) failed [ 186.577147][T10862] FAT-fs (loop5): Directory bread(block 70) failed [ 186.583902][T10862] FAT-fs (loop5): Directory bread(block 71) failed [ 186.593752][T10862] FAT-fs (loop5): Directory bread(block 72) failed [ 186.600295][T10862] FAT-fs (loop5): Directory bread(block 73) failed [ 186.639545][ T316] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 186.669775][T10882] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4678'. [ 186.682488][T10884] loop4: detected capacity change from 0 to 512 [ 186.702837][T10884] EXT4-fs (loop4): orphan cleanup on readonly fs [ 186.709042][T10884] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.4679: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 186.727181][T10884] EXT4-fs error (device loop4): ext4_quota_enable:6981: comm syz.4.4679: Bad quota inode: 4, type: 1 [ 186.739281][T10884] EXT4-fs warning (device loop4): ext4_enable_quotas:7022: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.740839][T10889] netlink: 'syz.5.4681': attribute type 3 has an invalid length. [ 186.753767][T10884] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 186.761699][ T19] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 186.768280][T10884] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 186.799132][ T292] EXT4-fs (loop4): unmounting filesystem. [ 187.009576][ T316] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.020558][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 187.025458][ T316] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.035592][ T316] usb 7-1: config 0 interface 0 has no altsetting 0 [ 187.042744][ T316] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 187.052205][ T316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.061293][ T316] usb 7-1: config 0 descriptor?? [ 187.139611][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.150550][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.160110][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.172742][ T19] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.181545][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.190276][ T19] usb 1-1: config 0 descriptor?? [ 187.219568][ T4995] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 187.227068][ T311] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 187.469564][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 187.540809][ T316] elecom 0003:056E:00E6.0075: item fetching failed at offset 5/6 [ 187.549066][ T316] elecom: probe of 0003:056E:00E6.0075 failed with error -22 [ 187.589748][ T4995] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 187.598459][ T4995] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 187.608785][ T311] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 187.617909][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.627816][ T311] usb 5-1: config 0 has no interface number 0 [ 187.633704][ T4995] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.670477][ T19] microsoft 0003:045E:07DA.0076: unknown main item tag 0x0 [ 187.681628][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0076/input/input82 [ 187.694006][ T19] microsoft 0003:045E:07DA.0076: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 187.743005][ T19] usb 7-1: USB disconnect, device number 35 [ 187.799642][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 187.811690][ T4995] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.821441][ T4995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.829721][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.837769][ T311] usb 5-1: Product: syz [ 187.841819][ T4995] usb 4-1: Product: syz [ 187.845979][ T4995] usb 4-1: Manufacturer: syz [ 187.850663][ T311] usb 5-1: Manufacturer: syz [ 187.854997][ T4995] usb 4-1: SerialNumber: syz [ 187.859889][ T311] usb 5-1: SerialNumber: syz [ 187.865161][ T311] usb 5-1: config 0 descriptor?? [ 187.881864][ T4470] usb 1-1: USB disconnect, device number 42 [ 187.911061][ T311] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 187.917649][ T311] usb 5-1: No valid video chain found. [ 187.949556][ T315] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 188.113320][ T24] usb 5-1: USB disconnect, device number 43 [ 188.239492][ T315] usb 6-1: Using ep0 maxpacket: 16 [ 188.349689][ T4995] usb 4-1: 0:2 : does not exist [ 188.379587][ T315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.391187][ T315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.409831][ T315] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 188.421740][ T315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.431513][ T315] usb 6-1: config 0 descriptor?? [ 188.552346][ T4470] usb 4-1: USB disconnect, device number 10 [ 188.634921][T10928] tmpfs: Bad value for 'nr_inodes' [ 188.699590][ T24] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 188.717883][T10935] Invalid ELF section header size [ 188.755087][T10941] Zero length message leads to an empty skb [ 188.906705][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 188.906725][ T28] audit: type=1400 audit(2000000406.830:8826): avc: denied { write } for pid=10962 comm="syz.4.4715" name="stat" dev="proc" ino=4026532464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 188.936003][ T28] audit: type=1400 audit(2000000406.830:8827): avc: denied { add_name } for pid=10962 comm="syz.4.4715" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 188.944089][ T9099] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 188.964271][ T28] audit: type=1400 audit(2000000406.830:8828): avc: denied { create } for pid=10962 comm="syz.4.4715" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1 [ 188.964376][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 188.985357][ T28] audit: type=1400 audit(2000000406.830:8829): avc: denied { associate } for pid=10962 comm="syz.4.4715" name="file0" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 188.990428][ T315] hid-multitouch 0003:1FD2:6007.0077: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 189.031132][ T28] audit: type=1400 audit(2000000406.950:8830): avc: denied { nlmsg_read } for pid=10964 comm="syz.4.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.056937][ T28] audit: type=1400 audit(2000000406.950:8831): avc: denied { read } for pid=10964 comm="syz.4.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.169611][ T24] usb 7-1: config 5 has an invalid interface number: 162 but max is 0 [ 189.184933][ T4995] usb 6-1: USB disconnect, device number 32 [ 189.189115][ T24] usb 7-1: config 5 has no interface number 0 [ 189.204832][ T24] usb 7-1: config 5 interface 162 has no altsetting 0 [ 189.311892][T10977] loop4: detected capacity change from 0 to 40427 [ 189.319108][T10977] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 189.326045][T10977] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 189.335388][T10977] F2FS-fs (loop4): invalid crc value [ 189.351423][T10977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 189.389670][ T24] usb 7-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 189.398737][ T9099] usb 1-1: not running at top speed; connect to a high speed hub [ 189.409345][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.423761][ T24] usb 7-1: Product: syz [ 189.427816][ T24] usb 7-1: Manufacturer: syz [ 189.428001][T11002] loop3: detected capacity change from 0 to 512 [ 189.432562][ T24] usb 7-1: SerialNumber: syz [ 189.438548][T10977] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 189.449858][T10977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 189.476231][ T292] syz-executor: attempt to access beyond end of device [ 189.476231][ T292] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.501263][T11002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 189.514533][T11002] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038 (0x7fffffff) [ 189.519658][ T9099] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 189.533473][ T9099] usb 1-1: config 95 has no interface number 0 [ 189.539604][ T9099] usb 1-1: config 95 interface 1 has no altsetting 0 [ 189.563325][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 189.610187][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4736'. [ 189.677713][T11022] loop4: detected capacity change from 0 to 256 [ 189.693330][T11022] FAT-fs (loop4): Directory bread(block 64) failed [ 189.699951][T11022] FAT-fs (loop4): Directory bread(block 65) failed [ 189.706512][T11022] FAT-fs (loop4): Directory bread(block 66) failed [ 189.713879][T11022] FAT-fs (loop4): Directory bread(block 67) failed [ 189.720401][T11022] FAT-fs (loop4): Directory bread(block 68) failed [ 189.731065][T11022] FAT-fs (loop4): Directory bread(block 69) failed [ 189.744326][T11022] FAT-fs (loop4): Directory bread(block 70) failed [ 189.744492][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4742'. [ 189.750895][T11022] FAT-fs (loop4): Directory bread(block 71) failed [ 189.766392][T11022] FAT-fs (loop4): Directory bread(block 72) failed [ 189.777352][T11022] FAT-fs (loop4): Directory bread(block 73) failed [ 189.789868][ T24] usb-storage 7-1:5.162: USB Mass Storage device detected [ 189.802022][T11028] loop5: detected capacity change from 0 to 1024 [ 189.809350][T11028] EXT4-fs: Ignoring removed nobh option [ 189.819647][ T9099] usb 1-1: string descriptor 0 read error: -22 [ 189.826307][ T9099] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 189.835668][ T24] usb-storage 7-1:5.162: This device (04e6,0009,0200 S 4b P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.1.112-syzkaller-00003-gd3daafbfd2bf) [ 189.835668][ T24] Please send a copy of this message to and [ 189.840635][T11028] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.4744: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 189.866271][ T9099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.901628][T11028] EXT4-fs error (device loop5): ext4_orphan_get:1401: comm syz.5.4744: couldn't read orphan inode 11 (err -117) [ 189.910661][T11033] xt_hashlimit: size too large, truncated to 1048576 [ 189.915020][T11028] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 189.934174][ T24] usb 7-1: USB disconnect, device number 36 [ 189.959541][ T315] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 189.979771][T11028] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.4744: Invalid block bitmap block 0 in block_group 0 [ 190.009676][T11028] Quota error (device loop5): write_blk: dquota write failed [ 190.017350][T11028] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 190.027132][T11028] EXT4-fs error (device loop5): ext4_acquire_dquot:6787: comm syz.5.4744: Failed to acquire dquot type 0 [ 190.057177][ T3545] EXT4-fs (loop5): unmounting filesystem. [ 190.063140][ T43] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 190.072666][ T43] EXT4-fs error (device loop5): ext4_release_dquot:6810: comm kworker/u4:2: Failed to release dquot type 0 [ 190.209535][ T315] usb 4-1: Using ep0 maxpacket: 8 [ 190.349624][ T315] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 190.368104][ T315] usb 4-1: config 179 has no interface number 0 [ 190.385075][ T315] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 190.401822][ T315] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 190.414161][ T4470] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 190.422169][ T315] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.434351][ T315] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 190.445972][ T315] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 190.459132][ T315] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 190.468393][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.478163][ T9099] usb 1-1: USB disconnect, device number 43 [ 190.490728][T11020] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 190.515308][T11071] loop6: detected capacity change from 0 to 512 [ 190.531363][T11071] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 190.540379][T11071] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038 (0x7fffffff) [ 190.562146][ T4962] EXT4-fs error (device loop6): ext4_empty_dir:3164: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 190.580714][ T4962] EXT4-fs error (device loop6): ext4_empty_dir:3164: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 190.597808][ T4962] EXT4-fs error (device loop6): ext4_empty_dir:3164: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 190.614105][ T4962] EXT4-fs error (device loop6): ext4_empty_dir:3164: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 190.631282][ T4962] EXT4-fs error (device loop6): ext4_empty_dir:3164: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 190.639645][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 190.647853][ T4962] EXT4-fs error (device loop6): ext4_empty_dir:3164: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 190.671596][ T4962] EXT4-fs error (device loop6): ext4_empty_dir:3164: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 190.688561][ T4962] EXT4-fs error (device loop6): ext4_empty_dir:3164: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 190.707000][ T4962] EXT4-fs error (device loop6): ext4_empty_dir:3164: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 190.723770][ T4962] EXT4-fs error (device loop6): ext4_empty_dir:3164: inode #11: block 8: comm syz-executor: Attempting to read directory block (8) that is past i_size (16390) [ 190.819637][ T4470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.830909][ T4470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.833500][ T6324] EXT4-fs (loop6): unmounting filesystem. [ 190.840497][ T4470] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 190.855532][ T4470] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.864355][ T4470] usb 6-1: config 0 descriptor?? [ 190.869146][ T43] tipc: Disabling bearer [ 190.877399][ T43] tipc: Left network mode [ 190.916719][ T9099] usb 4-1: USB disconnect, device number 11 [ 190.929541][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 190.985221][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4769'. [ 191.092298][T11092] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.099162][T11092] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.106604][T11092] device bridge_slave_0 entered promiscuous mode [ 191.113729][T11092] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.120603][T11092] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.128040][T11092] device bridge_slave_1 entered promiscuous mode [ 191.179600][ T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=4b.d6 [ 191.183596][T11092] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.189018][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.195867][T11092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.195961][T11092] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.195979][T11092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.220239][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.234994][ T24] usb 5-1: Product: syz [ 191.239161][ T24] usb 5-1: Manufacturer: syz [ 191.239195][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.243876][ T24] usb 5-1: SerialNumber: syz [ 191.255015][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.260068][ T24] usb 5-1: config 0 descriptor?? [ 191.276839][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.285081][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.292211][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.300023][ T24] asix: probe of 5-1:0.0 failed with error -22 [ 191.300298][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.316113][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.323080][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.329593][ T315] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 191.330958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.350458][ T4470] holtek 0003:1241:5015.0078: unknown main item tag 0x0 [ 191.357242][ T4470] holtek 0003:1241:5015.0078: unknown main item tag 0x0 [ 191.365419][T11092] device veth0_vlan entered promiscuous mode [ 191.371378][ T4470] holtek 0003:1241:5015.0078: unknown main item tag 0x0 [ 191.378206][ T4470] holtek 0003:1241:5015.0078: unknown main item tag 0x0 [ 191.378488][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.385509][ T4470] holtek 0003:1241:5015.0078: unknown main item tag 0x0 [ 191.394057][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.403093][ T4470] holtek 0003:1241:5015.0078: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 191.408103][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.419597][ T4470] holtek 0003:1241:5015.0078: no inputs found [ 191.427689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.459918][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.484109][T11092] device veth1_macvtap entered promiscuous mode [ 191.494233][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.504441][ T4470] usb 5-1: USB disconnect, device number 44 [ 191.509047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.540986][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.577604][ T19] usb 6-1: USB disconnect, device number 33 [ 191.586363][ T43] device bridge_slave_1 left promiscuous mode [ 191.593691][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.599538][ T315] usb 1-1: Using ep0 maxpacket: 16 [ 191.609846][ T43] device bridge_slave_0 left promiscuous mode [ 191.616702][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.625289][ T43] device veth1_macvtap left promiscuous mode [ 191.631249][ T43] device veth0_vlan left promiscuous mode [ 191.692815][T11099] loop3: detected capacity change from 0 to 40427 [ 191.700204][T11099] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 191.707442][T11099] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 191.718852][T11099] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 191.739664][ T315] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 191.747718][ T315] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.749017][T11099] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 191.757941][ T315] usb 1-1: config 0 has no interface number 0 [ 191.764688][T11099] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 191.801623][ T1641] kworker/u4:5: attempt to access beyond end of device [ 191.801623][ T1641] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.900247][T11118] loop1: detected capacity change from 0 to 16 [ 191.931666][T11118] erofs: (device loop1): mounted with root inode @ nid 36. [ 191.939668][ T315] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 191.955624][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.955658][T11124] loop3: detected capacity change from 0 to 512 [ 191.963508][ T315] usb 1-1: Product: syz [ 191.973509][ T315] usb 1-1: Manufacturer: syz [ 191.974997][T11124] EXT4-fs: Ignoring removed orlov option [ 191.982110][ T315] usb 1-1: SerialNumber: syz [ 191.996685][ T315] usb 1-1: config 0 descriptor?? [ 191.998507][T11124] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 192.014740][T11124] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.026628][T11124] EXT4-fs (loop3): 1 orphan inode deleted [ 192.033728][T11124] EXT4-fs (loop3): 1 truncate cleaned up [ 192.039798][T11124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 192.052591][ T315] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 192.057245][T11124] EXT4-fs (loop3): Online resizing not supported with sparse_super2 [ 192.068288][ T315] usb 1-1: No valid video chain found. [ 192.081269][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 192.105571][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4788'. [ 192.133254][T11135] loop5: detected capacity change from 0 to 512 [ 192.141457][T11135] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.147503][T11137] loop3: detected capacity change from 0 to 256 [ 192.156123][T11135] EXT4-fs (loop5): 1 truncate cleaned up [ 192.163451][T11135] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 192.193092][ T3545] EXT4-fs (loop5): unmounting filesystem. [ 192.270711][ T298] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 192.283273][ T19] usb 1-1: USB disconnect, device number 44 [ 192.338228][T11159] syz.3.4800[11159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.338314][T11159] syz.3.4800[11159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.529509][ T298] usb 2-1: Using ep0 maxpacket: 32 [ 192.679590][ T298] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.686689][T11170] loop3: detected capacity change from 0 to 40427 [ 192.695600][ T298] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.711716][T11170] F2FS-fs (loop3): heap/no_heap options were deprecated [ 192.721048][T11170] F2FS-fs (loop3): invalid crc value [ 192.727086][T11170] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 192.727154][ T298] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 192.746376][T11170] F2FS-fs (loop3): Found nat_bits in checkpoint [ 192.761071][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.822784][T11170] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 192.840276][ T298] hub 2-1:4.0: USB hub found [ 192.862456][T11176] loop0: detected capacity change from 0 to 512 [ 192.898511][T11176] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a84ec028, mo2=0001] [ 192.927174][T11180] loop4: detected capacity change from 0 to 256 [ 192.933480][T11176] System zones: 0-2, 18-18, 34-34 [ 192.950075][T11176] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 192.969654][T11176] EXT4-fs error (device loop0): ext4_acquire_dquot:6787: comm syz.0.4808: Failed to acquire dquot type 0 [ 192.989780][T11176] EXT4-fs (loop0): Remounting filesystem read-only [ 193.000905][T11176] EXT4-fs (loop0): 1 orphan inode deleted [ 193.006455][T11176] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 193.023046][T11176] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038 (0x7fffffff) [ 193.041073][T11180] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 193.059594][ T298] hub 2-1:4.0: 2 ports detected [ 193.064308][ T298] usb 2-1: selecting invalid altsetting 1 [ 193.078214][T11186] loop3: detected capacity change from 0 to 256 [ 193.084812][ T298] hub 2-1:4.0: Using single TT (err -22) [ 193.107796][ T6696] EXT4-fs (loop0): unmounting filesystem. [ 193.129813][T11186] exfat: Deprecated parameter 'namecase' [ 193.151755][T11186] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 193.242971][T11199] loop3: detected capacity change from 0 to 128 [ 193.269523][ T298] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 193.275803][ T298] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 193.297691][T11199] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 193.309821][T11199] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038 (0x7fffffff) [ 193.329945][ T298] usb 2-1: USB disconnect, device number 11 [ 193.389273][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 193.821598][T11242] loop1: detected capacity change from 0 to 256 [ 194.048716][T11251] netlink: 'syz.1.4841': attribute type 29 has an invalid length. [ 194.274573][T11232] loop4: detected capacity change from 0 to 40427 [ 194.333795][T11232] F2FS-fs (loop4): Found nat_bits in checkpoint [ 194.489560][T11232] F2FS-fs (loop4): Start checkpoint disabled! [ 194.527570][T11232] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 194.628547][ T43] kworker/u4:2: attempt to access beyond end of device [ 194.628547][ T43] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 194.819986][T11257] loop1: detected capacity change from 0 to 40427 [ 194.869594][T11257] F2FS-fs (loop1): invalid crc value [ 194.913731][T11257] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.119255][T11257] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 195.320765][T11313] netlink: 'syz.5.4870': attribute type 5 has an invalid length. [ 195.423067][T11328] loop1: detected capacity change from 0 to 256 [ 195.435496][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 195.435517][ T28] audit: type=1326 audit(2000000413.360:8833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.5.4875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1c317e719 code=0x0 [ 195.510034][T11337] netlink: 'syz.3.4879': attribute type 3 has an invalid length. [ 195.524198][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4879'. [ 195.601005][T11347] loop1: detected capacity change from 0 to 256 [ 195.624631][T11347] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 195.712514][T11357] loop1: detected capacity change from 0 to 512 [ 195.738436][T11357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.747396][T11357] ext4 filesystem being mounted at /22/bus supports timestamps until 2038 (0x7fffffff) [ 195.763149][T11357] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4887: bg 0: block 128: padding at end of block bitmap is not set [ 195.816547][T11092] EXT4-fs (loop1): unmounting filesystem. [ 195.922947][T11375] loop1: detected capacity change from 0 to 512 [ 195.951550][T11377] netlink: 'syz.3.4896': attribute type 322 has an invalid length. [ 195.974194][T11375] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 195.987064][T11375] EXT4-fs (loop1): orphan cleanup on readonly fs [ 196.008907][T11375] EXT4-fs warning (device loop1): ext4_enable_quotas:7022: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 196.023881][T11375] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 196.031286][T11375] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4894: bg 0: block 40: padding at end of block bitmap is not set [ 196.046021][T11375] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 196.055845][T11375] EXT4-fs (loop1): 1 truncate cleaned up [ 196.061348][T11375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.082301][T11375] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.088788][T11375] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 196.099566][T11375] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring [ 196.108889][T11375] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 196.121860][T11092] EXT4-fs (loop1): unmounting filesystem. [ 196.173412][T11395] loop1: detected capacity change from 0 to 256 [ 196.192859][T11395] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 196.279571][ T4470] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 196.290753][ T28] audit: type=1400 audit(2000000414.220:8834): avc: denied { setopt } for pid=11410 comm="syz.1.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 196.348939][T11420] loop3: detected capacity change from 0 to 512 [ 196.377523][T11420] EXT4-fs error (device loop3): __ext4_iget:5057: inode #15: block 1803188595: comm syz.3.4916: invalid block [ 196.400833][T11430] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.407519][T11420] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.4916: couldn't read orphan inode 15 (err -117) [ 196.433473][T11420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.461409][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 196.469008][T11440] loop4: detected capacity change from 0 to 256 [ 196.469799][ T28] audit: type=1400 audit(2000000414.390:8835): avc: denied { mounton } for pid=11438 comm="syz.1.4925" path="/33/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 196.520124][T11440] exfat: Deprecated parameter 'utf8' [ 196.520735][T11443] loop1: detected capacity change from 0 to 256 [ 196.531930][T11443] FAT-fs (loop1): Unrecognized mount option "rinnt" or missing value [ 196.555972][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4928'. [ 196.576171][T11440] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 196.620762][T11454] loop5: detected capacity change from 0 to 128 [ 196.630631][T11454] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 196.639651][T11454] ext4 filesystem being mounted at /759/mnt supports timestamps until 2038 (0x7fffffff) [ 196.660712][T11459] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.670415][T11459] F2FS-fs (loop9): Unable to read 1th superblock [ 196.676632][T11459] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.685674][ T4470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.697131][T11459] F2FS-fs (loop9): Unable to read 2th superblock [ 196.703419][ T4470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 196.714361][ T4470] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 196.722383][T11460] loop3: detected capacity change from 0 to 1024 [ 196.738561][ T4470] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 196.742551][ T3545] EXT4-fs (loop5): unmounting filesystem. [ 196.747595][ T4470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.761544][ T4470] usb 1-1: config 0 descriptor?? [ 196.776608][T11466] loop4: detected capacity change from 0 to 128 [ 196.782920][T11384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.797686][T11460] EXT4-fs: Ignoring removed orlov option [ 196.811040][T11460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.831574][T11460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.844351][ T28] audit: type=1326 audit(2000000414.770:8836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.1.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3294b7e719 code=0x7ffc0000 [ 196.897383][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 196.914567][ T28] audit: type=1326 audit(2000000414.800:8837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.1.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3294b7e719 code=0x7ffc0000 [ 196.939568][ T28] audit: type=1326 audit(2000000414.800:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.1.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3294b7e719 code=0x7ffc0000 [ 196.994261][ T28] audit: type=1326 audit(2000000414.800:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.1.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3294b7e719 code=0x7ffc0000 [ 197.019017][ T28] audit: type=1326 audit(2000000414.800:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.1.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3294b7e719 code=0x7ffc0000 [ 197.050599][ T28] audit: type=1326 audit(2000000414.800:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.1.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f3294b7e719 code=0x7ffc0000 [ 197.074940][ T28] audit: type=1326 audit(2000000414.800:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.1.4941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3294b7e719 code=0x7ffc0000 [ 197.129558][ T315] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 197.240069][ T4470] aureal 0003:0755:2626.0079: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 197.250376][ T4470] aureal 0003:0755:2626.0079: unknown main item tag 0x6 [ 197.257247][ T4470] aureal 0003:0755:2626.0079: report_id 29495 is invalid [ 197.264112][ T4470] aureal 0003:0755:2626.0079: item 0 2 1 8 parsing failed [ 197.271251][ T4470] aureal: probe of 0003:0755:2626.0079 failed with error -22 [ 197.444692][ T4470] usb 1-1: USB disconnect, device number 45 [ 197.499559][ T315] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.509392][ T315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.515903][ T315] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 197.525325][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.534876][ T315] usb 5-1: config 0 descriptor?? [ 197.706824][T11495] loop3: detected capacity change from 0 to 1024 [ 197.728740][T11495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.775388][T11495] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 197.822223][T11495] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.4959: missing EA_INODE flag [ 197.853327][T11495] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4959: error while reading EA inode 11 err=-117 [ 197.868949][T11505] loop1: detected capacity change from 0 to 512 [ 197.900049][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 197.918254][T11493] loop5: detected capacity change from 0 to 40427 [ 197.928278][T11505] EXT4-fs error (device loop1): ext4_acquire_dquot:6787: comm syz.1.4953: Failed to acquire dquot type 0 [ 197.965733][T11515] netlink: 'syz.0.4956': attribute type 7 has an invalid length. [ 197.974446][T11505] EXT4-fs error (device loop1): ext4_acquire_dquot:6787: comm syz.1.4953: Failed to acquire dquot type 0 [ 197.985786][T11493] F2FS-fs (loop5): heap/no_heap options were deprecated [ 197.994431][T11493] F2FS-fs (loop5): invalid crc value [ 197.996167][T11505] EXT4-fs error (device loop1): ext4_acquire_dquot:6787: comm syz.1.4953: Failed to acquire dquot type 0 [ 198.001256][ T315] lenovo 0003:17EF:6067.007A: unknown main item tag 0x0 [ 198.014284][T11515] netlink: 'syz.0.4956': attribute type 8 has an invalid length. [ 198.018187][T11493] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 198.026007][T11505] EXT4-fs (loop1): 1 orphan inode deleted [ 198.033552][ T315] lenovo 0003:17EF:6067.007A: unknown main item tag 0x0 [ 198.039610][T11515] netlink: 'syz.0.4956': attribute type 15 has an invalid length. [ 198.046116][ T315] lenovo 0003:17EF:6067.007A: unknown main item tag 0x0 [ 198.054366][T11505] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 198.060792][ T315] lenovo 0003:17EF:6067.007A: unknown main item tag 0x0 [ 198.070829][T11493] F2FS-fs (loop5): Found nat_bits in checkpoint [ 198.076245][ T315] lenovo 0003:17EF:6067.007A: unknown main item tag 0x0 [ 198.091156][ T315] lenovo 0003:17EF:6067.007A: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.4-1/input0 [ 198.109762][T11505] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 198.151761][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4961'. [ 198.157574][T11505] EXT4-fs error (device loop1): ext4_acquire_dquot:6787: comm syz.1.4953: Failed to acquire dquot type 0 [ 198.178794][T11493] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 198.180637][T11505] EXT4-fs error (device loop1): ext4_lookup:1860: inode #2: comm syz.1.4953: deleted inode referenced: 16 [ 198.188882][T11524] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11524 comm=syz.0.4962 [ 198.222525][T11092] EXT4-fs (loop1): unmounting filesystem. [ 198.248105][ T315] usb 5-1: USB disconnect, device number 45 [ 198.259586][ T311] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 198.293581][T11530] futex_wake_op: syz.0.4966 tries to shift op by 144; fix this program [ 198.358642][T11538] loop5: detected capacity change from 0 to 16 [ 198.367915][T11538] erofs: (device loop5): mounted with root inode @ nid 36. [ 198.378715][T11538] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 198.387896][T11538] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 198.396968][T11538] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 198.406019][T11538] overlayfs: failed to get redirect (-117) [ 198.477517][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4974'. [ 198.509551][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 198.549648][ T298] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 198.599605][ T4470] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 198.629675][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 198.640404][ T311] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 198.651222][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.660806][ T311] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 198.670438][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 198.683204][ T311] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 198.692032][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.704191][ T311] usb 4-1: config 0 descriptor?? [ 198.849633][ T4470] usb 1-1: Using ep0 maxpacket: 16 [ 198.939589][ T298] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.953022][ T298] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 198.961665][ T311] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 198.962166][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.981868][ T298] usb 2-1: config 0 descriptor?? [ 198.999647][ T4470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.010732][ T4470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.021366][ T4470] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.034172][ T4470] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 199.043188][ T4470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.051818][ T4470] usb 1-1: config 0 descriptor?? [ 199.079568][ T19] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 199.439591][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.450471][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.460229][ T19] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 199.469281][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.470634][ T298] kye 0003:0458:0087.007B: unknown main item tag 0x0 [ 199.478338][ T19] usb 5-1: config 0 descriptor?? [ 199.484883][ T298] kye 0003:0458:0087.007B: unknown main item tag 0x0 [ 199.495968][ T298] kye 0003:0458:0087.007B: unknown main item tag 0x0 [ 199.502449][ T298] kye 0003:0458:0087.007B: unknown main item tag 0x0 [ 199.508954][ T298] kye 0003:0458:0087.007B: unknown main item tag 0x0 [ 199.515664][ T298] kye 0003:0458:0087.007B: unknown main item tag 0x0 [ 199.523093][ T4470] microsoft 0003:045E:07DA.007C: ignoring exceeding usage max [ 199.533010][ T298] kye 0003:0458:0087.007B: hidraw0: USB HID vff.fc Device [HID 0458:0087] on usb-dummy_hcd.1-1/input0 [ 199.545248][ T4470] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0 [ 199.553944][ T4470] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0 [ 199.561045][ T4470] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0 [ 199.568115][ T4470] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0 [ 199.575151][ T4470] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0 [ 199.582185][ T4470] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0 [ 199.590102][ T4470] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0 [ 199.597366][ T4470] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0 [ 199.605447][ T4470] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0 [ 199.613144][ T4470] microsoft 0003:045E:07DA.007C: unknown main item tag 0x0 [ 199.622975][ T4470] microsoft 0003:045E:07DA.007C: No inputs registered, leaving [ 199.630943][ T4470] microsoft 0003:045E:07DA.007C: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 199.642188][ T4470] microsoft 0003:045E:07DA.007C: no inputs found [ 199.648382][ T4470] microsoft 0003:045E:07DA.007C: could not initialize ff, continuing anyway [ 199.692996][ T6] usb 2-1: USB disconnect, device number 12 [ 199.733290][ T311] usb 1-1: USB disconnect, device number 46 [ 199.970275][ T19] logitech 0003:046D:C294.007D: unbalanced collection at end of report description [ 199.979957][ T19] logitech 0003:046D:C294.007D: parse failed [ 199.986646][ T19] logitech: probe of 0003:046D:C294.007D failed with error -22 [ 200.174633][ T19] usb 5-1: USB disconnect, device number 46 [ 200.215053][T11570] loop5: detected capacity change from 0 to 256 [ 200.224132][T11570] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 200.400886][T11592] loop1: detected capacity change from 0 to 1024 [ 200.432348][T11592] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 200.447103][T11603] syz.5.4997[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.447189][T11603] syz.5.4997[11603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.474123][T11092] EXT4-fs (loop1): unmounting filesystem. [ 200.488680][T11607] xt_hashlimit: size too large, truncated to 1048576 [ 200.536707][T11611] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5001'. [ 200.740589][ T298] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 200.811421][T11614] loop1: detected capacity change from 0 to 40427 [ 200.820331][T11624] loop4: detected capacity change from 0 to 128 [ 200.827600][T11614] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 200.837213][T11614] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 200.864054][T11614] F2FS-fs (loop1): Found nat_bits in checkpoint [ 200.917913][T11614] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 200.924828][T11614] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 201.002072][ T19] usb 4-1: USB disconnect, device number 12 [ 201.010324][ T19] usblp0: removed [ 201.015122][ T298] usb 1-1: Using ep0 maxpacket: 32 [ 201.129631][ T4470] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 201.149636][ T298] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.160664][ T298] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.183152][ T298] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 201.203168][ T298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.214100][T11662] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 201.260154][ T298] hub 1-1:4.0: USB hub found [ 201.299548][ T6] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 201.399529][ T4470] usb 5-1: Using ep0 maxpacket: 8 [ 201.519661][ T4470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.531011][ T4470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.539507][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 201.548069][ T4470] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 201.557421][ T4470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.565561][ T298] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 201.578686][ T4470] usb 5-1: config 0 descriptor?? [ 201.659593][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.680718][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 201.693679][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.704514][ T6] usb 6-1: config 0 descriptor?? [ 201.794261][T11690] loop1: detected capacity change from 0 to 128 [ 201.806185][T11690] FAT-fs (loop1): Directory bread(block 32) failed [ 201.814417][T11690] FAT-fs (loop1): Directory bread(block 33) failed [ 201.824370][T11690] FAT-fs (loop1): Directory bread(block 34) failed [ 201.832213][T11690] FAT-fs (loop1): Directory bread(block 35) failed [ 201.833467][T11692] loop3: detected capacity change from 0 to 128 [ 201.838622][T11690] FAT-fs (loop1): Directory bread(block 36) failed [ 201.851282][T11690] FAT-fs (loop1): Directory bread(block 37) failed [ 201.857753][T11690] FAT-fs (loop1): Directory bread(block 38) failed [ 201.860634][T11692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.864238][T11690] FAT-fs (loop1): Directory bread(block 39) failed [ 201.878737][T11690] FAT-fs (loop1): Directory bread(block 40) failed [ 201.878772][T11692] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038 (0x7fffffff) [ 201.885386][T11690] FAT-fs (loop1): Directory bread(block 41) failed [ 201.895100][ T298] usb 1-1: USB disconnect, device number 47 [ 201.920318][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 201.920334][ T28] audit: type=1400 audit(2000000419.850:8846): avc: denied { lock } for pid=11691 comm="syz.3.5036" path="/292/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 201.953172][ T4470] usbhid 5-1:0.0: can't add hid device: -71 [ 201.959054][ T4470] usbhid: probe of 5-1:0.0 failed with error -71 [ 201.968304][ T28] audit: type=1400 audit(2000000419.850:8847): avc: denied { link } for pid=11691 comm="syz.3.5036" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 201.980739][T11690] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 201.996270][ T4470] usb 5-1: USB disconnect, device number 47 [ 202.004126][T11690] FAT-fs (loop1): Filesystem has been set read-only [ 202.013995][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 202.045127][T11697] overlayfs: unrecognized mount option "r [ 202.045127][T11697] conntrack [ 202.045127][T11697] conntrack [ 202.045127][T11697] conntrack [ 202.045127][T11697] connlimit [ 202.045127][T11697] connbytes [ 202.045127][T11697] comment [ 202.045127][T11697] bpf [ 202.045127][T11697] bpf [ 202.045127][T11697] connmark [ 202.045127][T11697] mark [ 202.045127][T11697] icmp [ 202.045127][T11697] socket [ 202.045127][T11697] socket [ 202.045127][T11697] socket [ 202.045127][T11697] socket [ 202.045127][T11697] quota2 [ 202.045127][T11697] policy [ 202.045127][T11697] multiport [ 202.045127][T11697] length [ 202.045127][T11697] l2tp [ 202.045127][T11697] iprange [ 202.045127][T11697] ttl [ 202.045127][T11697] hashlimit [ 202.045127][T11697] hashlimit [ 202.045127][T11697] hashlimit [ 202.045127][T11697] esp [ 202.045127][T11697] ecn [ 202.045127][T11697] tos [ 202.045127][T11697] dscp [ 202.045127][T11697] udplite [ 202.045127][T11697] udp [ 202.045127][T11697] tcp [ 202.171469][ T6] apple 0003:05AC:0264.007E: unknown global tag 0xd [ 202.179619][ T6] apple 0003:05AC:0264.007E: item 0 4 1 13 parsing failed [ 202.189350][ T6] apple 0003:05AC:0264.007E: parse failed [ 202.197240][ T6] apple: probe of 0003:05AC:0264.007E failed with error -22 [ 202.219286][T11705] loop3: detected capacity change from 0 to 256 [ 202.231956][T11705] FAT-fs (loop3): Directory bread(block 64) failed [ 202.238843][T11705] FAT-fs (loop3): Directory bread(block 65) failed [ 202.245218][T11705] FAT-fs (loop3): Directory bread(block 66) failed [ 202.251808][T11705] FAT-fs (loop3): Directory bread(block 67) failed [ 202.260566][T11705] FAT-fs (loop3): Directory bread(block 68) failed [ 202.267156][T11705] FAT-fs (loop3): Directory bread(block 69) failed [ 202.273753][T11705] FAT-fs (loop3): Directory bread(block 70) failed [ 202.280952][T11705] FAT-fs (loop3): Directory bread(block 71) failed [ 202.287642][T11705] FAT-fs (loop3): Directory bread(block 72) failed [ 202.294188][T11705] FAT-fs (loop3): Directory bread(block 73) failed [ 202.316716][T11707] loop0: detected capacity change from 0 to 256 [ 202.330764][T11707] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 202.382994][ T6] usb 6-1: USB disconnect, device number 34 [ 202.443423][T11717] loop0: detected capacity change from 0 to 2048 [ 202.450474][T11717] EXT4-fs: Ignoring removed oldalloc option [ 202.502843][T11717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 202.505570][T11728] loop3: detected capacity change from 0 to 512 [ 202.540161][T11728] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 202.543154][T11717] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 202.563746][T11728] EXT4-fs (loop3): invalid journal inode [ 202.569341][T11728] EXT4-fs (loop3): can't get journal size [ 202.584030][T11728] EXT4-fs (loop3): 1 truncate cleaned up [ 202.589642][T11728] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 202.599150][ T6696] EXT4-fs (loop0): unmounting filesystem. [ 202.654633][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 202.660610][T11743] loop0: detected capacity change from 0 to 512 [ 202.964652][T11767] usb usb8: usbfs: process 11767 (syz.4.5067) did not claim interface 0 before use [ 202.980849][T11769] loop5: detected capacity change from 0 to 256 [ 203.016275][T11769] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 203.029925][T11771] tmpfs: Unknown parameter 'mp' [ 203.062914][T11769] FAT-fs (loop5): Filesystem has been set read-only [ 203.089838][T11769] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 203.106958][T11778] tun0: tun_chr_ioctl cmd 1074025677 [ 203.115368][T11778] tun0: linktype set to 1 [ 203.135633][T11769] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 203.146414][T11774] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 203.157847][T11774] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 203.168348][T11774] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 203.313795][T11794] loop5: detected capacity change from 0 to 256 [ 203.345347][T11794] FAT-fs (loop5): Directory bread(block 64) failed [ 203.361721][T11794] FAT-fs (loop5): Directory bread(block 65) failed [ 203.370196][T11794] FAT-fs (loop5): Directory bread(block 66) failed [ 203.377333][T11794] FAT-fs (loop5): Directory bread(block 67) failed [ 203.384622][T11794] FAT-fs (loop5): Directory bread(block 68) failed [ 203.391177][T11794] FAT-fs (loop5): Directory bread(block 69) failed [ 203.397620][T11794] FAT-fs (loop5): Directory bread(block 70) failed [ 203.404184][ T298] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 203.411911][T11794] FAT-fs (loop5): Directory bread(block 71) failed [ 203.418778][T11794] FAT-fs (loop5): Directory bread(block 72) failed [ 203.425640][T11794] FAT-fs (loop5): Directory bread(block 73) failed [ 203.466440][ T28] audit: type=1326 audit(2000000421.390:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11798 comm="syz.4.5080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d0217e719 code=0x0 [ 203.789549][ T298] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.804010][ T298] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.909576][ T298] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 203.921984][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 203.944795][ T298] usb 2-1: SerialNumber: syz [ 204.169626][T11832] Â: renamed from pim6reg1 [ 204.220510][ T298] usb 2-1: 0:2 : does not exist [ 204.227774][ T298] usb 2-1: unit 5 not found! [ 204.248147][ T298] usb 2-1: USB disconnect, device number 13 [ 204.375830][T11845] loop4: detected capacity change from 0 to 128 [ 204.409530][ T9099] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 204.502737][T11856] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.522414][ T28] audit: type=1400 audit(2000004517.454:8849): avc: denied { map } for pid=11857 comm="syz.3.5107" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 204.571284][T11860] netlink: 'syz.3.5108': attribute type 1 has an invalid length. [ 204.599183][T11862] loop4: detected capacity change from 0 to 256 [ 204.626395][T11862] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.646055][T11862] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 204.669521][ T9099] usb 6-1: Using ep0 maxpacket: 16 [ 204.747729][T11874] loop4: detected capacity change from 0 to 512 [ 204.778056][T11874] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.809613][ T9099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.830109][ T9099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.841047][ T9099] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.850327][T11874] EXT4-fs (loop4): 1 truncate cleaned up [ 204.855065][ T9099] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 204.868828][ T9099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.871682][T11874] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 204.883167][ T9099] usb 6-1: config 0 descriptor?? [ 204.991823][ T292] EXT4-fs (loop4): unmounting filesystem. [ 205.079970][T11898] netlink: 'syz.3.5125': attribute type 5 has an invalid length. [ 205.175207][ T28] audit: type=1400 audit(2000004518.104:8850): avc: denied { bind } for pid=11903 comm="syz.3.5127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.256325][T11908] loop4: detected capacity change from 0 to 512 [ 205.287418][T11908] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 205.331595][T11914] loop3: detected capacity change from 0 to 128 [ 205.363128][ T28] audit: type=1400 audit(2000004518.294:8851): avc: denied { watch_reads } for pid=11907 comm="syz.4.5129" path="/966/file1" dev="tmpfs" ino=4982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 205.441937][T11916] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5133'. [ 205.445167][T11918] loop4: detected capacity change from 0 to 1024 [ 205.454606][T11920] loop3: detected capacity change from 0 to 128 [ 205.459535][ T9099] usbhid 6-1:0.0: can't add hid device: -71 [ 205.478970][ T9099] usbhid: probe of 6-1:0.0 failed with error -71 [ 205.489055][T11918] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 205.497806][ T9099] usb 6-1: USB disconnect, device number 35 [ 205.500665][T11920] binfmt_misc: register: failed to install interpreter file ./file0 [ 205.548700][T11918] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 205.595261][ T292] EXT4-fs (loop4): unmounting filesystem. [ 205.632833][T11927] loop3: detected capacity change from 0 to 256 [ 205.639145][T11927] exfat: Deprecated parameter 'utf8' [ 205.652298][T11927] exfat: Deprecated parameter 'namecase' [ 205.660801][T11927] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1ef871c7, utbl_chksum : 0xe619d30d) [ 205.811752][ T315] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 205.970639][T11957] Invalid ELF section header overflow [ 205.990147][T11959] loop3: detected capacity change from 0 to 512 [ 206.010848][T11959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 206.030517][T11959] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038 (0x7fffffff) [ 206.070769][T11959] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #19: comm syz.3.5153: corrupted inode contents [ 206.083200][T11966] loop5: detected capacity change from 0 to 16 [ 206.093237][T11966] erofs: (device loop5): mounted with root inode @ nid 36. [ 206.100615][T11959] EXT4-fs error (device loop3): ext4_dirty_inode:6088: inode #19: comm syz.3.5153: mark_inode_dirty error [ 206.116685][T11959] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #19: comm syz.3.5153: corrupted inode contents [ 206.129065][T11966] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=86 [ 206.129706][T11959] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2953: inode #19: comm syz.3.5153: mark_inode_dirty error [ 206.137923][T11966] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=86 [ 206.158849][ T28] audit: type=1400 audit(2000004519.084:8852): avc: denied { execute } for pid=11965 comm="syz.5.5155" name="file1" dev="loop5" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 206.167094][T11959] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2956: inode #19: comm syz.3.5153: mark inode dirty (error -117) [ 206.181416][T11966] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=86 [ 206.202931][T11966] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=86 [ 206.211879][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.222408][T11959] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 206.223981][T11966] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=86 [ 206.233960][ T28] audit: type=1400 audit(2000004519.154:8853): avc: denied { execute_no_trans } for pid=11965 comm="syz.5.5155" path="/807/file0/file1" dev="loop5" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 206.244183][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.279673][ T315] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 206.298575][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.308215][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 206.328171][ T315] usb 2-1: config 0 descriptor?? [ 206.329640][ T311] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 206.571741][T11984] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5163'. [ 206.589513][ T311] usb 5-1: Using ep0 maxpacket: 8 [ 206.629895][ T28] audit: type=1400 audit(2000004519.564:8854): avc: denied { ioctl } for pid=11946 comm="syz.4.5147" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 206.670399][ T28] audit: type=1400 audit(2000004519.564:8855): avc: denied { read write } for pid=9056 comm="syz-executor" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 206.709558][ T311] usb 5-1: config 0 has no interfaces? [ 206.729585][ T9099] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 206.810676][ T315] logitech 0003:046D:C294.007F: unbalanced collection at end of report description [ 206.826000][ T315] logitech 0003:046D:C294.007F: parse failed [ 206.832582][ T315] logitech: probe of 0003:046D:C294.007F failed with error -22 [ 206.869635][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=08ad, bcdDevice=45.03 [ 206.878634][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.899509][ T311] usb 5-1: Product: syz [ 206.903500][ T311] usb 5-1: Manufacturer: syz [ 206.908062][ T311] usb 5-1: SerialNumber: syz [ 206.920143][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5173'. [ 206.930814][ T311] usb 5-1: config 0 descriptor?? [ 206.951025][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 206.951041][ T28] audit: type=1400 audit(2000004519.884:8880): avc: denied { create } for pid=12006 comm="syz.3.5174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.998406][ T28] audit: type=1400 audit(2000004519.914:8881): avc: denied { ioctl } for pid=12006 comm="syz.3.5174" path="socket:[57394]" dev="sockfs" ino=57394 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 207.041748][ T315] usb 2-1: USB disconnect, device number 14 [ 207.067387][ T28] audit: type=1400 audit(2000004519.984:8882): avc: denied { read } for pid=12010 comm="syz.3.5176" dev="nsfs" ino=4026532322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 207.089061][ T28] audit: type=1400 audit(2000004519.984:8883): avc: denied { open } for pid=12010 comm="syz.3.5176" path="net:[4026532322]" dev="nsfs" ino=4026532322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 207.116615][ T28] audit: type=1400 audit(2000004519.984:8884): avc: denied { create } for pid=12010 comm="syz.3.5176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.137473][ T9099] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.148359][ T9099] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.158123][ T9099] usb 6-1: config 0 interface 0 has no altsetting 0 [ 207.164896][ T28] audit: type=1400 audit(2000004519.994:8885): avc: denied { write } for pid=12010 comm="syz.3.5176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.185708][ T9099] usb 6-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 207.190486][ T19] usb 5-1: USB disconnect, device number 48 [ 207.194787][ T9099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.209979][ T9099] usb 6-1: config 0 descriptor?? [ 207.215255][ T28] audit: type=1400 audit(2000004519.994:8886): avc: denied { read } for pid=12010 comm="syz.3.5176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 207.239173][T12019] loop3: detected capacity change from 0 to 512 [ 207.245530][ T28] audit: type=1400 audit(2000004520.104:8887): avc: denied { create } for pid=12016 comm="syz.3.5179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.266890][ T28] audit: type=1400 audit(2000004520.114:8888): avc: denied { bind } for pid=12016 comm="syz.3.5179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.286489][ T28] audit: type=1400 audit(2000004520.194:8889): avc: denied { mounton } for pid=12018 comm="syz.3.5180" path="/358/file0" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 207.340274][T12019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 207.349281][T12019] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038 (0x7fffffff) [ 207.376720][T12019] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 207.391593][T12019] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 207.403764][T12019] EXT4-fs (loop3): This should not happen!! Data will be lost [ 207.403764][T12019] [ 207.413427][T12019] EXT4-fs (loop3): Total free blocks count 0 [ 207.419324][T12019] EXT4-fs (loop3): Free/Dirty block details [ 207.425266][T12019] EXT4-fs (loop3): free_blocks=65280 [ 207.431468][T12019] EXT4-fs (loop3): dirty_blocks=33 [ 207.436399][T12019] EXT4-fs (loop3): Block reservation details [ 207.442991][T12019] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 207.459147][ T9056] EXT4-fs (loop3): unmounting filesystem. [ 207.690841][ T9099] kye 0003:0458:4018.0080: unknown main item tag 0x0 [ 207.698976][ T9099] kye 0003:0458:4018.0080: unknown main item tag 0x0 [ 207.718971][ T9099] kye 0003:0458:4018.0080: unknown main item tag 0x0 [ 207.748294][ T9099] kye 0003:0458:4018.0080: unknown main item tag 0x0 [ 207.749609][T11745] ------------[ cut here ]------------ [ 207.760185][T11745] kernel BUG at fs/buffer.c:2714! [ 207.769664][ T9099] kye 0003:0458:4018.0080: unknown main item tag 0x0 [ 207.779606][T11745] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 207.785616][T11745] CPU: 0 PID: 11745 Comm: kmmpd-loop0 Tainted: G W 6.1.112-syzkaller-00003-gd3daafbfd2bf #0 [ 207.797041][T11745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 207.807109][T11745] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 207.812241][T11745] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 d0 e6 ff e9 b0 fe ff ff e8 6a 66 9f ff 0f 0b e8 63 66 9f ff <0f> 0b e8 5c 66 9f ff 0f 0b e8 55 66 9f ff 0f 0b e8 4e 66 9f ff 0f [ 207.831759][T11745] RSP: 0018:ffffc90005577c20 EFLAGS: 00010293 [ 207.837658][T11745] RAX: ffffffff81d63dad RBX: 0000000000000000 RCX: ffff888119771440 [ 207.845473][T11745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.853283][T11745] RBP: ffffc90005577c70 R08: ffffffff81d63980 R09: ffffed10234566be [ 207.861208][T11745] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 207.869090][T11745] R13: 1ffff110234566bd R14: ffff88811a2b35e8 R15: 0000000000003801 [ 207.877104][T11745] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 207.886496][T11745] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.893164][T11745] CR2: 00007fbc5250b338 CR3: 00000001179a6000 CR4: 00000000003506b0 [ 207.901876][T11745] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.909766][T11745] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.917662][T11745] Call Trace: [ 207.920793][T11745] [ 207.923578][T11745] ? __die_body+0x62/0xb0 [ 207.927992][T11745] ? die+0x88/0xb0 [ 207.932128][T11745] ? do_trap+0x103/0x330 [ 207.936201][T11745] ? submit_bh_wbc+0x4cd/0x4f0 [ 207.940804][T11745] ? handle_invalid_op+0x95/0xc0 [ 207.945619][T11745] ? submit_bh_wbc+0x4cd/0x4f0 [ 207.950176][T11745] ? exc_invalid_op+0x32/0x50 [ 207.954690][T11745] ? asm_exc_invalid_op+0x1b/0x20 [ 207.959550][T11745] ? submit_bh_wbc+0xa0/0x4f0 [ 207.964058][T11745] ? submit_bh_wbc+0x4cd/0x4f0 [ 207.968663][T11745] ? submit_bh_wbc+0x4cd/0x4f0 [ 207.973264][T11745] ? __kasan_check_read+0x11/0x20 [ 207.978121][T11745] submit_bh+0x1d/0x30 [ 207.982029][T11745] write_mmp_block_thawed+0x3a0/0x570 [ 207.987235][T11745] ? read_mmp_block+0x7d0/0x7d0 [ 207.991919][T11745] ? update_process_times+0x1b0/0x1b0 [ 207.997130][T11745] write_mmp_block+0x12b/0x2a0 [ 208.001731][T11745] kmmpd+0x40c/0xa10 [ 208.005472][T11745] ? write_mmp_block_thawed+0x570/0x570 [ 208.010846][T11745] ? __kthread_parkme+0x12d/0x180 [ 208.015706][T11745] kthread+0x26d/0x300 [ 208.019609][T11745] ? write_mmp_block_thawed+0x570/0x570 [ 208.024990][T11745] ? kthread_blkcg+0xd0/0xd0 [ 208.029687][T11745] ret_from_fork+0x1f/0x30 [ 208.033934][T11745] [ 208.036796][T11745] Modules linked in: [ 208.056968][ T9099] kye 0003:0458:4018.0080: hidraw0: USB HID v0.00 Device [HID 0458:4018] on usb-dummy_hcd.5-1/input0 [ 208.076258][T11745] ---[ end trace 0000000000000000 ]--- [ 208.082896][T11745] RIP: 0010:submit_bh_wbc+0x4cd/0x4f0 [ 208.088290][T11745] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 14 d0 e6 ff e9 b0 fe ff ff e8 6a 66 9f ff 0f 0b e8 63 66 9f ff <0f> 0b e8 5c 66 9f ff 0f 0b e8 55 66 9f ff 0f 0b e8 4e 66 9f ff 0f [ 208.103398][ T9099] usb 6-1: USB disconnect, device number 36 [ 208.109337][T11745] RSP: 0018:ffffc90005577c20 EFLAGS: 00010293 [ 208.119779][T11745] RAX: ffffffff81d63dad RBX: 0000000000000000 RCX: ffff888119771440 [ 208.127814][T11745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.136042][T11745] RBP: ffffc90005577c70 R08: ffffffff81d63980 R09: ffffed10234566be [ 208.144063][T11745] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 208.152061][T11745] R13: 1ffff110234566bd R14: ffff88811a2b35e8 R15: 0000000000003801 [ 208.160139][T11745] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 208.168921][T11745] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.175668][T11745] CR2: 00007f3294d09178 CR3: 0000000110504000 CR4: 00000000003506b0 [ 208.183609][T11745] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.191651][T11745] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 208.199611][T11745] Kernel panic - not syncing: Fatal exception [ 208.206476][T11745] Kernel Offset: disabled [ 208.210609][T11745] Rebooting in 86400 seconds..