last executing test programs: 1m4.390192483s ago: executing program 0 (id=10): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000012c0)="3f030e0033e6120306001e0089e9aa", 0xf, 0x20004881, &(0x7f0000001280)={0x11, 0x0, r2, 0x1, 0x1, 0x6, @remote}, 0x14) 1m4.349875103s ago: executing program 0 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000070000000000010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) syslog(0x4, &(0x7f00000002c0)=""/232, 0xe8) 1m4.244594952s ago: executing program 0 (id=17): r0 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x84c5cf593bbb8c18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x30, 0x5, {0x5, 0xf, "0bb3ba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m2.558900608s ago: executing program 0 (id=44): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 1m2.466413358s ago: executing program 0 (id=45): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 1m2.292780737s ago: executing program 0 (id=46): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1m2.278239177s ago: executing program 32 (id=46): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 35.542409916s ago: executing program 1 (id=852): socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x62040200) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 35.449191786s ago: executing program 1 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000200)=r1}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 35.425253575s ago: executing program 1 (id=856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 35.343063545s ago: executing program 1 (id=858): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 35.247313595s ago: executing program 1 (id=864): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r0}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 35.028920354s ago: executing program 1 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 34.960313234s ago: executing program 33 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.340932319s ago: executing program 2 (id=1613): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0xfffffffc, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 3.299558379s ago: executing program 2 (id=1614): syz_io_uring_setup(0x1eae, &(0x7f0000000480)={0x0, 0x100000, 0x2}, &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x51) 2.754097087s ago: executing program 3 (id=1623): unshare(0x2040400) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xb) copy_file_range(r1, &(0x7f0000000080), r0, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) 2.707235597s ago: executing program 3 (id=1625): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@discard_unit_segment}, {@jqfmt_vfsold}, {@disable_ext_identify}, {@compress_cache}, {@inline_xattr}, {@noinline_dentry}, {@prjjquota={'prjjquota', 0x3d, '\x00\x00\x00\x00\x00\x00\x00\xdd\xff\x00\x89\xc5\xa8+\xc9X\x15\xa0\n\xebU\xd4K\x96'}}, {@nogc_merge}, {@checkpoint_diasble}, {@test_dummy_encryption_v1}, {}, {@background_gc_on}, {@lfs_mode}, {@noinline_dentry}]}, 0xfd, 0x5529, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) write$binfmt_elf64(r0, &(0x7f00000083c0)=ANY=[], 0x194) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x100) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 2.077666326s ago: executing program 3 (id=1640): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\x98\x94\x8e|:\xae,.\x14w\x80\x1c1+\x11\xbc\x9c\xd4h|\xce\x9b.\xb9\x9e\"\xa2\x80\x8a\xe5\x8b\xfdV\xf6=\x7f\x00\"\xabY@>9\xb6q\xcb\rM\xafi\x9c\xb8\xec\v\xc8\xa1K\bl6\xd7\x97\xaeG\x01\x02P\xdd\xce\xd5\x8c\x11\x02\xc2'}]}, 0x56) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 1.926274036s ago: executing program 4 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) llistxattr(0x0, 0x0, 0x0) 1.871059985s ago: executing program 4 (id=1643): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000a00)={'system_u:object_r:netlabel_mgmt_exec_t:s0', 0x20, 'system_u\x00'}, 0x33) 1.838098915s ago: executing program 4 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) nanosleep(0x0, 0x0) 1.837718405s ago: executing program 4 (id=1646): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=[@increfs, @decrefs], 0x0, 0x0, 0x0}) 1.828835675s ago: executing program 3 (id=1647): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xa}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000002900000036"], 0x30}}], 0x1, 0x0) 1.790988865s ago: executing program 3 (id=1648): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x3, 0x100, 0xfff, 0x5, 0x21185045, 0x1}) 1.790568005s ago: executing program 4 (id=1649): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 1.584300604s ago: executing program 2 (id=1654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) lremovexattr(0x0, 0x0) 1.556291354s ago: executing program 4 (id=1656): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 1.548154715s ago: executing program 2 (id=1657): timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") 1.411602044s ago: executing program 2 (id=1665): timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.230719013s ago: executing program 5 (id=1671): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 1.138541143s ago: executing program 5 (id=1674): writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x101c08a, &(0x7f0000000900)={[{@shortname_winnt}, {@utf8}, {@fat=@nfs}, {@uni_xlate}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@numtail}, {@uni_xlate}, {@rodir}, {@fat=@check_strict}, {@utf8no}, {@utf8no}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@numtail}, {@fat=@nfs}, {@uni_xlateno}]}, 0x6, 0x2b8, &(0x7f0000000640)="$eJzs3U9rK1UYB+B30mQSdZEsXInggC5cXW7v1k2K3AtiV16yUBdabAvSBKGFgn8wduXWjQsXfgJB8IO48RsIbgV3ViiMzGSmSdqYJtJUvH2eTd+eOb+Zd6aHdrro6Ycvj472szg8++LX6HSSaPSjH+dJ9KIRta9iTv+bAAD+z87zPP7IJ9bJJRHR2VxbAMAGrfbzvzktf7qTtgCADXr67ntv7+zuPn4nyzrxZPT16aD4zb74ODm+cxgfxzAO4mF04yKifFFoRfm2UJRP8jwfN7NCL14bjU8HRXL0wc/V+Xd+jyjz29GNXjl0+bZR5t/afbydTczkx0Ufz1fX7xf5R9GNFy/Dc/lHC/IxSOP1V2f6fxDd+OWj+CSGsV82Mc1/uZ1lb+bf/vn5+0V7RT4Znw7a5bypfOuOvzQAAAAAAAAAAAAAAAAAAAAAADzDHlR757Sj3L+nGKr239m6KD5pRVbrze/PM8kn9Ylm9wfK83ycx/f1/joPsyzLq4nTfDNeas5uLAgAAAAAAAAAAAAAAAAAAAD318mnnx3tDYcHx7dS1LsBNCPir6cR//Y8/ZmRV2L55HZ1zb3hsFGV83OasyOxVc9JIpa2UdzELT2Wm4rnrvVcFT/8uO4JOzfPaS2+1m0W9eo62ksWP8N21COdapF8l0ZM56Sx4rXSfzqUxzrLL114qLv2vacvlMV4yZxIljX2xm+TJ1eNJFfvIi2f6sJ4qypm4lfWxkrrOTqT+PXvFYndOgAAAAAAAAAAAAAAAAAAYKOmf/274ODZ0mgjb2+sLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4U9P//79GMa7CK0xO4/jkP75FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7oG/AwAA//83x1yS") socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 1.080670933s ago: executing program 5 (id=1676): timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") 971.657293ms ago: executing program 5 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 863.928953ms ago: executing program 5 (id=1683): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") 641.641442ms ago: executing program 5 (id=1685): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) capset(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 536.746491ms ago: executing program 2 (id=1686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 435.394922ms ago: executing program 6 (id=1687): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 271.077441ms ago: executing program 6 (id=1688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) 221.731681ms ago: executing program 6 (id=1689): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d709cefa10a0028bd00", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 221.380531ms ago: executing program 6 (id=1690): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0x14) 221.091611ms ago: executing program 6 (id=1691): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x7f, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000400)=""/27, 0x1b}, 0x7}], 0x1, 0x60000023, 0x0) 201.633851ms ago: executing program 6 (id=1692): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=1693): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) execveat$binfmt(0xffffffffffffffff, r0, &(0x7f00000002c0)={[&(0x7f0000000100)='.,!-@\xcd$\x81\x00']}, &(0x7f00000003c0)={[&(0x7f0000000400)='+\x00', &(0x7f0000000340)='\x01$@\x00']}, 0x1000) kernel console output (not intermixed with test programs): descriptor, different from the interface descriptor's value: 2 [ 51.548270][ T24] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0 [ 51.557590][ T405] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.559362][ T24] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0 [ 51.569131][ T405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.576991][ T24] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0 [ 51.585825][ T405] usb 3-1: Product: syz [ 51.594769][ T24] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0 [ 51.601003][ T405] usb 3-1: Manufacturer: syz [ 51.609836][ T24] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0 [ 51.615892][ T405] usb 3-1: SerialNumber: syz [ 51.645496][ T24] logitech-hidpp-device 0003:046D:C086.000A: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 51.665931][ T1589] loop1: detected capacity change from 0 to 1024 [ 51.687002][ T1589] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 51.708030][ T1589] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 51.726218][ T1589] EXT4-fs (loop1): invalid journal inode [ 51.732218][ T1589] EXT4-fs (loop1): can't get journal size [ 51.741325][ T1589] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.553: blocks 2-2 from inode overlap system zone [ 51.755149][ T1589] EXT4-fs (loop1): failed to initialize system zone (-117) [ 51.762951][ T1589] EXT4-fs (loop1): mount failed [ 51.780257][ T321] usb 4-1: USB disconnect, device number 5 [ 51.829167][ T1598] loop4: detected capacity change from 0 to 512 [ 51.862710][ T1598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.871719][ T1598] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.886542][ T1598] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #2: comm syz.4.556: corrupted inode contents [ 51.899188][ T1598] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #2: comm syz.4.556: mark_inode_dirty error [ 51.912114][ T1598] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #2: comm syz.4.556: corrupted inode contents [ 51.924483][ T1598] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.556: mark_inode_dirty error [ 51.938192][ T1598] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #2: comm syz.4.556: corrupted inode contents [ 51.950594][ T1598] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #2: comm syz.4.556: mark_inode_dirty error [ 51.964112][ T1598] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #2: comm syz.4.556: corrupted inode contents [ 51.983483][ T1598] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #2: comm syz.4.556: corrupted inode contents [ 52.003890][ T1598] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.556: mark_inode_dirty error [ 52.019053][ T1598] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 52.039029][ T299] EXT4-fs (loop4): unmounting filesystem. [ 52.049790][ T1616] syz.1.564[1616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.049925][ T1616] syz.1.564[1616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.183496][ T1634] input: syz0 as /devices/virtual/input/input5 [ 52.227901][ T1640] loop4: detected capacity change from 0 to 512 [ 52.263134][ T1640] EXT4-fs (loop4): Test dummy encryption mode enabled [ 52.266255][ T1646] loop1: detected capacity change from 0 to 256 [ 52.270448][ T1640] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.297502][ T1640] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.301239][ T1646] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 52.328648][ T1640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 52.340859][ T1640] System zones: 1-12 [ 52.347799][ T1640] EXT4-fs (loop4): 1 truncate cleaned up [ 52.353869][ T1640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.418095][ T1660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 52.427375][ T1660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 52.433561][ T299] EXT4-fs (loop4): unmounting filesystem. [ 52.436601][ T1660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 52.451647][ T405] cdc_ncm 3-1:1.1: bind() failure [ 52.461644][ T1660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 52.599313][ T1682] loop3: detected capacity change from 0 to 256 [ 52.611273][ T1682] exfat: Deprecated parameter 'namecase' [ 52.639923][ T1682] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 52.707420][ T19] usb 3-1: USB disconnect, device number 7 [ 52.777019][ T1698] syz.1.600[1698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.777100][ T1698] syz.1.600[1698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.918496][ T1700] loop3: detected capacity change from 0 to 40427 [ 52.937153][ T1700] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 52.944254][ T1700] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 52.954725][ T1700] F2FS-fs (loop3): heap/no_heap options were deprecated [ 52.963003][ T1700] F2FS-fs (loop3): invalid crc value [ 52.975663][ T1700] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.003133][ T1714] loop4: detected capacity change from 0 to 512 [ 53.010053][ T1714] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.027963][ T1700] F2FS-fs (loop3): Start checkpoint disabled! [ 53.035952][ T1700] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 53.037173][ T1714] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.606: iget: bad extended attribute block 19 [ 53.044451][ T1700] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 53.057457][ T1714] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.606: couldn't read orphan inode 15 (err -117) [ 53.076837][ T1714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 53.109563][ T299] EXT4-fs (loop4): unmounting filesystem. [ 53.150440][ T8] kworker/u4:0: attempt to access beyond end of device [ 53.150440][ T8] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 53.325171][ T1741] loop4: detected capacity change from 0 to 256 [ 53.559662][ T405] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 53.595640][ T1786] bridge: RTM_DELNEIGH with unconfigured vlan 1792 on bridge0 [ 53.609761][ T334] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 53.658527][ T1796] binder: 1795:1796 ioctl c0306201 200003c0 returned -22 [ 53.682831][ T1800] loop4: detected capacity change from 0 to 16 [ 53.690865][ T1800] erofs: (device loop4): mounted with root inode @ nid 36. [ 53.700593][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 53.712537][ T1800] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 53.739651][ T40] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 53.760876][ T405] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.771128][ T405] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.781540][ T405] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 53.795701][ T405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 53.809559][ T405] usb 6-1: SerialNumber: syz [ 53.810879][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.825571][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.841456][ T334] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 53.850677][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.859282][ T334] usb 3-1: config 0 descriptor?? [ 53.931370][ T40] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x62, skipping [ 53.942534][ T40] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 53.953850][ T40] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.962838][ T40] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.970707][ T40] usb 4-1: Product: syz [ 53.975105][ T40] usb 4-1: Manufacturer: syz [ 53.979722][ T40] usb 4-1: SerialNumber: syz [ 54.026995][ T405] usb 6-1: 0:2 : does not exist [ 54.035651][ T405] usb 6-1: USB disconnect, device number 6 [ 54.272669][ T334] logitech-hidpp-device 0003:046D:C086.000B: unknown main item tag 0x0 [ 54.280925][ T334] logitech-hidpp-device 0003:046D:C086.000B: unknown main item tag 0x0 [ 54.289044][ T334] logitech-hidpp-device 0003:046D:C086.000B: unknown main item tag 0x0 [ 54.297261][ T334] logitech-hidpp-device 0003:046D:C086.000B: unknown main item tag 0x0 [ 54.305288][ T334] logitech-hidpp-device 0003:046D:C086.000B: unknown main item tag 0x0 [ 54.314284][ T334] logitech-hidpp-device 0003:046D:C086.000B: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.2-1/input0 [ 54.476936][ T24] usb 3-1: USB disconnect, device number 8 [ 54.625469][ T1836] loop1: detected capacity change from 0 to 512 [ 54.637248][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 54.637265][ T28] audit: type=1400 audit(2000000000.720:379): avc: denied { mounton } for pid=1835 comm="syz.1.662" path="/134/bus" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.671370][ T1836] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.683306][ T1836] EXT4-fs (loop1): 1 truncate cleaned up [ 54.689247][ T1836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 54.699799][ T1836] EXT4-fs (loop1): unmounting filesystem. [ 54.785339][ T28] audit: type=1400 audit(2000000000.870:380): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 55.006039][ T40] cdc_ncm 4-1:1.0: bind() failure [ 55.016910][ T40] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 55.035354][ T40] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 55.054000][ T40] usb 4-1: USB disconnect, device number 6 [ 55.097852][ T1880] loop2: detected capacity change from 0 to 256 [ 55.113047][ T1877] syz.4.680 (1877) used greatest stack depth: 21008 bytes left [ 55.123073][ T1880] exfat: Deprecated parameter 'namecase' [ 55.138162][ T1880] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 55.151548][ T1884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 55.166088][ T1884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'. [ 55.190853][ T1891] loop5: detected capacity change from 0 to 16 [ 55.203171][ T1891] erofs: (device loop5): mounted with root inode @ nid 36. [ 55.216958][ T1891] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 55.226571][ T1891] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 55.237762][ T1891] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 55.247375][ T1891] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 55.255827][ T1891] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 55.265553][ T1891] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 55.275116][ T1891] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 55.298992][ T1891] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 55.309291][ T28] audit: type=1400 audit(2000000001.390:381): avc: denied { bind } for pid=1898 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.318912][ T1891] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 55.333053][ T28] audit: type=1400 audit(2000000001.390:382): avc: denied { name_bind } for pid=1898 comm="syz.1.692" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 55.358969][ T28] audit: type=1400 audit(2000000001.390:383): avc: denied { node_bind } for pid=1898 comm="syz.1.692" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 55.366394][ T1891] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 55.391898][ T28] audit: type=1400 audit(2000000001.390:384): avc: denied { setopt } for pid=1898 comm="syz.1.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.470611][ T1904] kvm: MWAIT instruction emulated as NOP! [ 55.474186][ T1910] loop2: detected capacity change from 0 to 1024 [ 55.488556][ T1910] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 55.498248][ T1910] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.506768][ T1910] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.696: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 55.537129][ T1910] EXT4-fs (loop2): Remounting filesystem read-only [ 55.544544][ T1910] EXT4-fs error (device loop2): ext4_quota_enable:6982: comm syz.2.696: Bad quota inode: 3, type: 0 [ 55.555493][ T1910] EXT4-fs (loop2): Remounting filesystem read-only [ 55.562070][ T1910] EXT4-fs warning (device loop2): ext4_enable_quotas:7023: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 55.563066][ T28] audit: type=1400 audit(2000000001.650:385): avc: denied { map } for pid=1914 comm="syz.3.699" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.576906][ T1910] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 55.607818][ T1910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 55.608374][ T1919] serio: Serial port ptm0 [ 55.649992][ T301] EXT4-fs (loop2): unmounting filesystem. [ 55.668306][ T28] audit: type=1400 audit(2000000001.750:386): avc: denied { connect } for pid=1924 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.740382][ T28] audit: type=1400 audit(2000000001.750:387): avc: denied { write } for pid=1924 comm="syz.4.702" path="socket:[22907]" dev="sockfs" ino=22907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.938187][ T1963] loop1: detected capacity change from 0 to 256 [ 55.987861][ T1969] loop3: detected capacity change from 0 to 1024 [ 56.030226][ T28] audit: type=1400 audit(2000000002.120:388): avc: denied { setopt } for pid=1975 comm="syz.4.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.060516][ T1969] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.073572][ T1980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.727'. [ 56.108206][ T1969] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.146812][ T298] EXT4-fs (loop3): unmounting filesystem. [ 56.160164][ T1993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=1993 comm=syz.4.730 [ 56.221067][ T19] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 56.393193][ T2028] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 56.402852][ T2028] FAT-fs (loop5): unable to read boot sector [ 56.429729][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 56.438475][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.451331][ T2034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 56.455157][ T2035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.750'. [ 56.470244][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.471082][ T2035] tipc: Started in network mode [ 56.485910][ T2035] tipc: Node identity 7, cluster identity 5 [ 56.490038][ T19] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 56.497752][ T2035] tipc: Node number set to 7 [ 56.503833][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.520973][ T19] usb 6-1: config 0 descriptor?? [ 56.886801][ T2064] futex_wake_op: syz.4.762 tries to shift op by 36; fix this program [ 56.932720][ T19] hid-led 0003:1294:1320.000C: unknown main item tag 0x0 [ 56.948386][ T19] hid-led 0003:1294:1320.000C: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.5-1/input0 [ 56.961226][ T19] hid-led 0003:1294:1320.000C: Riso Kagaku Webmail Notifier initialized [ 57.131976][ T321] usb 6-1: USB disconnect, device number 7 [ 57.139289][ T405] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 57.154335][ T405] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 57.163136][ T405] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 57.244154][ T2104] syz.4.780[2104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.244215][ T2104] syz.4.780[2104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.326997][ T19] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 57.521986][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 57.533259][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.543445][ T19] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 57.552776][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.565270][ T19] usb 3-1: config 0 descriptor?? [ 57.715240][ T2112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.783'. [ 57.839368][ T2132] incfs: Options parsing error. -22 [ 57.844497][ T2132] incfs: mount failed -22 [ 57.968630][ T19] sony 0003:054C:0268.000D: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 57.989723][ T19] sony 0003:054C:0268.000D: failed to claim input [ 58.081563][ T2154] netlink: 'syz.3.804': attribute type 322 has an invalid length. [ 58.171174][ T19] usb 3-1: USB disconnect, device number 9 [ 58.368353][ T2188] syz.1.819[2188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.368431][ T2188] syz.1.819[2188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.712843][ T2130] loop4: detected capacity change from 0 to 131072 [ 58.776026][ T2130] F2FS-fs (loop4): Found nat_bits in checkpoint [ 58.905492][ T2232] loop5: detected capacity change from 0 to 128 [ 58.918610][ T2130] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 58.945059][ T2232] FAT-fs (loop5): Unrecognized mount option "shüoˆ‰¢ò=ªlower" or missing value [ 59.104005][ T40] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 59.308731][ T40] usb 3-1: Using ep0 maxpacket: 32 [ 59.314867][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.346290][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.385940][ T40] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 59.404503][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.428300][ T40] usb 3-1: config 0 descriptor?? [ 59.527883][ T2253] xt_hashlimit: size too large, truncated to 1048576 [ 59.548022][ T2257] loop5: detected capacity change from 0 to 512 [ 59.577928][ T2257] EXT4-fs (loop5): unsupported inode size: 143 [ 59.593656][ T2257] EXT4-fs (loop5): blocksize: 1024 [ 59.828183][ T40] savu 0003:1E7D:2D5A.000E: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 60.100221][ T40] usb 3-1: USB disconnect, device number 10 [ 60.421668][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 60.421688][ T28] audit: type=1400 audit(2000000006.610:395): avc: denied { create } for pid=2265 comm="syz.1.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 60.489068][ T28] audit: type=1400 audit(2000000006.610:396): avc: denied { write } for pid=2265 comm="syz.1.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 60.533338][ T28] audit: type=1400 audit(2000000006.610:397): avc: denied { nlmsg_read } for pid=2265 comm="syz.1.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 60.573644][ T2277] loop1: detected capacity change from 0 to 256 [ 60.649512][ T297] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 60.700213][ T297] FAT-fs (loop1): Filesystem has been set read-only [ 60.729156][ T297] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 60.995777][ T2314] netlink: 'syz.2.876': attribute type 12 has an invalid length. [ 61.018650][ T2314] netlink: 'syz.2.876': attribute type 29 has an invalid length. [ 61.033487][ T2314] netlink: 148 bytes leftover after parsing attributes in process `syz.2.876'. [ 61.055037][ T2314] netlink: 'syz.2.876': attribute type 2 has an invalid length. [ 61.078336][ T2314] netlink: 43 bytes leftover after parsing attributes in process `syz.2.876'. [ 61.314014][ T28] audit: type=1400 audit(2000000007.522:398): avc: denied { mounton } for pid=2316 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 62.910115][ C0] sched: RT throttling activated [ 62.919524][ T2326] loop3: detected capacity change from 0 to 512 [ 62.948924][ T2326] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.986372][ T2326] EXT4-fs (loop3): 1 orphan inode deleted [ 62.992865][ T2326] EXT4-fs (loop3): 1 truncate cleaned up [ 62.999843][ T2326] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.012843][ T2326] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #12: block 7: comm syz.3.880: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 63.042767][ T2326] EXT4-fs (loop3): Remounting filesystem read-only [ 63.078014][ T8] tipc: Left network mode [ 63.098710][ T2316] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.105639][ T2316] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.141813][ T2316] device bridge_slave_0 entered promiscuous mode [ 63.148545][ T298] EXT4-fs (loop3): unmounting filesystem. [ 63.148920][ T2316] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.161048][ T2316] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.168809][ T2316] device bridge_slave_1 entered promiscuous mode [ 63.328592][ T2336] loop2: detected capacity change from 0 to 40427 [ 63.338829][ T2316] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.345723][ T2316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.352848][ T2316] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.359709][ T2316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.383214][ T2336] F2FS-fs (loop2): fault_injection options not supported [ 63.401414][ T2336] F2FS-fs (loop2): invalid crc value [ 63.422533][ T2336] F2FS-fs (loop2): Found nat_bits in checkpoint [ 63.445450][ T2354] loop4: detected capacity change from 0 to 2048 [ 63.481328][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.490933][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.513988][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.521513][ T2354] loop4: p2 p3 p7 [ 63.529973][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.564006][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.573023][ T102] loop4: p2 p3 p7 [ 63.592255][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.599157][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.610109][ T2336] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.649181][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.657673][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.664581][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.685960][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.706244][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.717249][ T301] syz-executor: attempt to access beyond end of device [ 63.717249][ T301] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.754114][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.765465][ T2378] loop4: detected capacity change from 0 to 256 [ 63.775571][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.800237][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.822890][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.840976][ T8] device bridge_slave_1 left promiscuous mode [ 63.847019][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.864667][ T8] device bridge_slave_0 left promiscuous mode [ 63.879160][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.897450][ T8] device veth1_macvtap left promiscuous mode [ 63.916594][ T8] device veth0_vlan left promiscuous mode [ 63.962836][ T2374] loop5: detected capacity change from 0 to 40427 [ 63.973618][ T2374] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(0) root(83886083) [ 63.999087][ T2374] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 64.005112][ T2386] loop4: detected capacity change from 0 to 512 [ 64.011957][ T2374] F2FS-fs (loop5): invalid crc value [ 64.039786][ T2386] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.058830][ T2374] F2FS-fs (loop5): Found nat_bits in checkpoint [ 64.076534][ T2386] EXT4-fs (loop4): 1 orphan inode deleted [ 64.092526][ T2386] EXT4-fs (loop4): 1 truncate cleaned up [ 64.092853][ T2316] device veth0_vlan entered promiscuous mode [ 64.098229][ T2386] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.114168][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.123025][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.133194][ T2316] device veth1_macvtap entered promiscuous mode [ 64.144602][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.159815][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.162823][ T2386] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.903: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 64.170306][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.195120][ T2374] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 64.195499][ T2386] EXT4-fs (loop4): Remounting filesystem read-only [ 64.207212][ T2374] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 64.218101][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.226189][ T321] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 64.226576][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.262674][ T28] audit: type=1400 audit(2000000266.521:399): avc: denied { mounton } for pid=2316 comm="syz-executor" path="/root/syzkaller.OoAwKS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.323264][ T299] EXT4-fs (loop4): unmounting filesystem. [ 64.340484][ T2374] syz.5.898: attempt to access beyond end of device [ 64.340484][ T2374] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.368127][ T28] audit: type=1400 audit(2000000266.621:400): avc: denied { write } for pid=2403 comm="syz.2.908" name="usbmon9" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 64.392903][ T436] syz-executor: attempt to access beyond end of device [ 64.392903][ T436] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 64.418650][ T2409] netlink: 'syz.6.910': attribute type 4 has an invalid length. [ 64.428628][ T321] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.438802][ T2409] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.910'. [ 64.452886][ T321] usb 4-1: config 0 has no interfaces? [ 64.459760][ T321] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 64.496554][ T321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.514731][ T321] usb 4-1: Product: syz [ 64.518890][ T321] usb 4-1: Manufacturer: syz [ 64.531586][ T321] usb 4-1: SerialNumber: syz [ 64.537132][ T321] usb 4-1: config 0 descriptor?? [ 64.624607][ T28] audit: type=1400 audit(2000000266.881:401): avc: denied { ioctl } for pid=2418 comm="syz.4.914" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 64.729335][ T302] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 64.776400][ T28] audit: type=1326 audit(2000000267.031:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6036585d29 code=0x7ffc0000 [ 64.810717][ T2420] loop5: detected capacity change from 0 to 2048 [ 64.819678][ T28] audit: type=1326 audit(2000000267.031:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6036585d29 code=0x7ffc0000 [ 64.820925][ T2427] loop4: detected capacity change from 0 to 8192 [ 64.850136][ T28] audit: type=1326 audit(2000000267.031:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2426 comm="syz.4.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6036585d63 code=0x7ffc0000 [ 64.857334][ T321] usb 4-1: USB disconnect, device number 7 [ 64.884391][ T2420] loop5: p2 p3 p7 [ 64.919028][ T302] usb 3-1: Using ep0 maxpacket: 32 [ 64.925171][ T302] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 64.933186][ T302] usb 3-1: config 0 has no interface number 0 [ 64.940474][ T2427] loop4: p2 p3 p4 [ 64.944673][ T2427] loop4: p2 start 452985600 is beyond EOD, truncated [ 64.951387][ T2427] loop4: p3 size 33554432 extends beyond EOD, truncated [ 64.962917][ T2427] loop4: p4 start 8388607 is beyond EOD, truncated [ 64.963167][ T302] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 64.981031][ T2431] loop5: detected capacity change from 0 to 512 [ 64.987358][ T302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.995471][ T102] loop4: p2 p3 p4 [ 64.995514][ T302] usb 3-1: Product: syz [ 64.999322][ T102] loop4: p2 start 452985600 is beyond EOD, [ 65.003240][ T2431] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.003509][ T302] usb 3-1: Manufacturer: syz [ 65.008912][ T102] truncated [ 65.019637][ T302] usb 3-1: SerialNumber: syz [ 65.024302][ T102] loop4: p3 size 33554432 extends beyond EOD, [ 65.027247][ T302] usb 3-1: config 0 descriptor?? [ 65.032747][ T2431] EXT4-fs (loop5): 1 orphan inode deleted [ 65.037229][ T102] truncated [ 65.041793][ T2431] EXT4-fs (loop5): 1 truncate cleaned up [ 65.047861][ T302] smsc95xx v2.0.0 [ 65.049881][ T2431] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 65.056085][ T102] loop4: p4 start 8388607 is beyond EOD, truncated [ 65.072358][ T2431] EXT4-fs error (device loop5): ext4_search_dir:1549: inode #12: block 7: comm syz.5.918: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 65.098377][ T2431] EXT4-fs (loop5): Remounting filesystem read-only [ 65.109026][ T40] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.117415][ T436] EXT4-fs (loop5): unmounting filesystem. [ 65.310209][ T40] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.322912][ T40] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 637, setting to 64 [ 65.334097][ T40] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 65.345212][ T40] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.354141][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.361965][ T40] usb 7-1: Product: syz [ 65.365991][ T40] usb 7-1: Manufacturer: syz [ 65.370434][ T40] usb 7-1: SerialNumber: syz [ 65.468989][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 65.576929][ T2441] loop4: detected capacity change from 0 to 40427 [ 65.590259][ T2441] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(0) root(83886083) [ 65.598904][ T2441] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 65.613465][ T2441] F2FS-fs (loop4): invalid crc value [ 65.620376][ T2441] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.669009][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 65.670026][ T2441] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 65.675295][ T24] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.682991][ T2441] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.709079][ T24] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 65.729035][ T24] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 65.747545][ T2441] syz.4.923: attempt to access beyond end of device [ 65.747545][ T2441] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.752097][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 65.774646][ T24] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 65.783966][ T299] syz-executor: attempt to access beyond end of device [ 65.783966][ T299] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 65.784357][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.807199][ T24] usb 6-1: config 0 descriptor?? [ 66.052405][ T302] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 66.064667][ T302] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 66.074392][ T302] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 66.085630][ T302] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 66.094286][ T302] usb 3-1: USB disconnect, device number 11 [ 66.216440][ T24] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 66.239056][ T448] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 66.248149][ T24] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 66.256437][ T24] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 66.277169][ T24] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 66.291809][ T24] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 66.301052][ T24] hid-thrustmaster 0003:044F:B65D.000F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 66.385793][ T40] cdc_ncm 7-1:1.0: bind() failure [ 66.392503][ T40] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 66.401259][ T40] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 66.409881][ T40] usb 7-1: USB disconnect, device number 2 [ 66.417560][ T24] hid-thrustmaster 0003:044F:B65D.000F: setup data couldn't be sent [ 66.432054][ C1] hid-thrustmaster 0003:044F:B65D.000F: URB to get model id failed with error -71 [ 66.441593][ T448] usb 5-1: Using ep0 maxpacket: 32 [ 66.447908][ T448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.460909][ T24] usb 6-1: USB disconnect, device number 8 [ 66.472195][ T448] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.484042][ T448] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 66.495029][ T448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.504062][ T448] usb 5-1: config 0 descriptor?? [ 66.515047][ T2454] loop3: detected capacity change from 0 to 40427 [ 66.534358][ T2454] F2FS-fs (loop3): fault_injection options not supported [ 66.542745][ T2454] F2FS-fs (loop3): invalid crc value [ 66.549456][ T2454] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.597809][ T2454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 66.641444][ T298] syz-executor: attempt to access beyond end of device [ 66.641444][ T298] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.789658][ T2465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2465 comm=syz.2.928 [ 66.864809][ T2470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.930'. [ 66.922280][ T448] savu 0003:1E7D:2D5A.0010: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 66.941272][ T2475] xt_hashlimit: size too large, truncated to 1048576 [ 66.994859][ T2479] loop6: detected capacity change from 0 to 256 [ 67.025984][ T2479] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 67.084348][ T2483] loop3: detected capacity change from 0 to 1024 [ 67.129192][ T2483] EXT4-fs (loop3): filesystem is read-only [ 67.138562][ T2483] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 67.155560][ T2483] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (50428!=20869) [ 67.172963][ T2483] EXT4-fs error (device loop3): __ext4_fill_super:5387: inode #2: comm syz.3.934: iget: bad extra_isize 65535 (inode size 1024) [ 67.198151][ T448] usb 5-1: USB disconnect, device number 5 [ 67.239843][ T2483] EXT4-fs (loop3): get root inode failed [ 67.256019][ T2483] EXT4-fs (loop3): mount failed [ 67.599016][ T405] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 67.677572][ T2497] loop6: detected capacity change from 0 to 131072 [ 67.688194][ T2497] F2FS-fs (loop6): Found nat_bits in checkpoint [ 67.743718][ T2504] loop4: detected capacity change from 0 to 128 [ 67.754422][ T2497] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 67.762390][ T2504] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 67.771701][ T2504] ext4 filesystem being mounted at /242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.804048][ T405] usb 4-1: Using ep0 maxpacket: 16 [ 67.818288][ T405] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 67.831933][ T405] usb 4-1: config 0 has no interface number 0 [ 67.838833][ T405] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 67.850175][ T405] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 67.860500][ T405] usb 4-1: config 0 interface 41 has no altsetting 0 [ 67.891030][ T405] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 67.901755][ T405] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.909921][ T405] usb 4-1: Product: syz [ 67.915801][ T405] usb 4-1: Manufacturer: syz [ 67.922790][ T405] usb 4-1: SerialNumber: syz [ 67.929014][ T405] usb 4-1: config 0 descriptor?? [ 67.934224][ T2495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.942010][ T2495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.976134][ T299] EXT4-fs (loop4): unmounting filesystem. [ 68.089744][ T2520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 68.105694][ T2520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 68.120331][ T2520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 68.130418][ T2520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 68.140335][ T2520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 68.149783][ T2520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 68.159450][ T2520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 68.168447][ T2520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 68.178418][ T2520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 68.193125][ T2520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 68.287851][ T2495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 68.340089][ T2495] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 68.563291][ T2531] loop6: detected capacity change from 0 to 40427 [ 68.573603][ T2531] F2FS-fs (loop6): Found nat_bits in checkpoint [ 68.632297][ T2531] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 68.649005][ T321] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 68.678745][ T2316] syz-executor: attempt to access beyond end of device [ 68.678745][ T2316] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 68.686239][ T2539] loop2: detected capacity change from 0 to 128 [ 68.709076][ T40] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.720616][ T2539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.731512][ T2539] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.829144][ T321] usb 6-1: Using ep0 maxpacket: 32 [ 68.836287][ T321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.848011][ T321] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.866853][ T301] EXT4-fs (loop2): unmounting filesystem. [ 68.873506][ T321] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 68.888772][ T321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.908856][ T321] usb 6-1: config 0 descriptor?? [ 68.915122][ T40] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.929091][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 68.929108][ T28] audit: type=1400 audit(2000000271.191:423): avc: denied { relabelto } for pid=2544 comm="syz.2.959" name="NETLINK" dev="sockfs" ino=26055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 68.966603][ T40] usb 5-1: config 0 has no interfaces? [ 68.977858][ T40] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 68.991678][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.000528][ T40] usb 5-1: Product: syz [ 69.005202][ T40] usb 5-1: Manufacturer: syz [ 69.010138][ T40] usb 5-1: SerialNumber: syz [ 69.015639][ T40] usb 5-1: config 0 descriptor?? [ 69.165345][ T405] CoreChips: probe of 4-1:0.41 failed with error -71 [ 69.176613][ T405] usb 4-1: USB disconnect, device number 8 [ 69.229624][ T2560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 69.280593][ T6] usb 5-1: USB disconnect, device number 6 [ 69.324901][ T321] savu 0003:1E7D:2D5A.0011: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 69.444448][ T2572] input: syz1 as /devices/virtual/input/input6 [ 69.478397][ T2568] loop2: detected capacity change from 0 to 40427 [ 69.512477][ T2568] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.564999][ T2568] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.566901][ T2581] loop6: detected capacity change from 0 to 2048 [ 69.600879][ T40] usb 6-1: USB disconnect, device number 9 [ 69.614335][ T301] syz-executor: attempt to access beyond end of device [ 69.614335][ T301] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 69.631028][ T2581] Alternate GPT is invalid, using primary GPT. [ 69.637425][ T2581] loop6: p1 p2 p3 [ 69.701513][ T390] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.725711][ T323] udevd[323]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 69.727233][ T390] udevd[390]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 69.747776][ T2586] devpts: called with bogus options [ 69.752571][ T1430] udevd[1430]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 70.049044][ T24] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 70.149374][ T28] audit: type=1326 audit(2000000272.411:424): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2624 comm="syz.5.993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70f6385d29 code=0x0 [ 70.240766][ T24] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 70.248997][ T24] usb 4-1: config 0 has no interface number 0 [ 70.254956][ T24] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 70.267233][ T24] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 70.276143][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.284958][ T448] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.293090][ T24] usb 4-1: Product: syz [ 70.297545][ T24] usb 4-1: Manufacturer: syz [ 70.302387][ T24] usb 4-1: SerialNumber: syz [ 70.308457][ T24] usb 4-1: config 0 descriptor?? [ 70.313807][ T2590] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.321649][ T24] usb-storage 4-1:0.20: USB Mass Storage device detected [ 70.329986][ T24] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 70.489407][ T448] usb 7-1: Using ep0 maxpacket: 16 [ 70.497991][ T448] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 70.507032][ T448] usb 7-1: config 0 has no interface number 0 [ 70.513123][ T448] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 70.524261][ T448] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 70.534346][ T448] usb 7-1: config 0 interface 41 has no altsetting 0 [ 70.534956][ T2590] loop3: detected capacity change from 0 to 512 [ 70.542441][ T448] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 70.556187][ T448] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.563971][ T448] usb 7-1: Product: syz [ 70.564429][ T2590] EXT4-fs: quotafile must be on filesystem root [ 70.568872][ T448] usb 7-1: Manufacturer: syz [ 70.579334][ T448] usb 7-1: SerialNumber: syz [ 70.585505][ T448] usb 7-1: config 0 descriptor?? [ 70.591428][ T2612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 70.598893][ T2612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 70.659762][ T24] scsi host1: usb-storage 4-1:0.20 [ 70.808226][ T2612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 70.821741][ T2612] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 70.863393][ T6] usb 4-1: USB disconnect, device number 9 [ 70.993586][ T2632] loop4: detected capacity change from 0 to 256 [ 71.005666][ T2632] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 71.027987][ T2632] exFAT-fs (loop4): hint_cluster is invalid (17) [ 71.194441][ T2650] loop5: detected capacity change from 0 to 512 [ 71.211465][ T2650] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1002: casefold flag without casefold feature [ 71.224967][ T2650] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1002: couldn't read orphan inode 15 (err -117) [ 71.237237][ T2650] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 71.250616][ T28] audit: type=1400 audit(2000000273.511:425): avc: denied { mounton } for pid=2649 comm="syz.5.1002" path="/181/file0/file0" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.276827][ T436] EXT4-fs (loop5): unmounting filesystem. [ 71.339094][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 71.530825][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.542980][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 637, setting to 64 [ 71.554109][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.566457][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.575406][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.585269][ T24] usb 5-1: Product: syz [ 71.594089][ T24] usb 5-1: Manufacturer: syz [ 71.603183][ T24] usb 5-1: SerialNumber: syz [ 71.637647][ T448] CoreChips: probe of 7-1:0.41 failed with error -71 [ 71.645610][ T448] usb 7-1: USB disconnect, device number 3 [ 71.669163][ T40] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 71.859065][ T40] usb 4-1: Using ep0 maxpacket: 32 [ 71.865220][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.876579][ T40] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.890824][ T40] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 71.905149][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.917799][ T40] usb 4-1: config 0 descriptor?? [ 72.168885][ T28] audit: type=1326 audit(2000000274.421:426): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.6.1006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ca8b85d29 code=0x0 [ 72.339157][ T40] savu 0003:1E7D:2D5A.0012: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 72.360638][ T2681] loop5: detected capacity change from 0 to 512 [ 72.367788][ T2681] EXT4-fs: Ignoring removed orlov option [ 72.379632][ T2681] EXT4-fs: Ignoring removed i_version option [ 72.394184][ T2681] EXT4-fs (loop5): 1 truncate cleaned up [ 72.400863][ T2681] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 72.413754][ T2681] EXT4-fs (loop5): shut down requested (2) [ 72.420309][ T2686] loop2: detected capacity change from 0 to 256 [ 72.436059][ T2686] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 72.449549][ T436] EXT4-fs (loop5): unmounting filesystem. [ 72.529997][ T2694] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.620448][ T40] usb 4-1: USB disconnect, device number 10 [ 72.626933][ T24] cdc_ncm 5-1:1.0: bind() failure [ 72.633815][ T24] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 72.654276][ T24] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 72.667461][ T24] usb 5-1: USB disconnect, device number 7 [ 72.737084][ T2711] loop2: detected capacity change from 0 to 512 [ 72.780918][ T2711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.790270][ T2711] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.814117][ T301] EXT4-fs (loop2): unmounting filesystem. [ 72.924823][ T28] audit: type=1400 audit(2000000275.181:427): avc: denied { bind } for pid=2724 comm="syz.2.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.076827][ T2745] loop2: detected capacity change from 0 to 512 [ 73.084834][ T2745] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.096596][ T28] audit: type=1400 audit(2000000275.341:428): avc: denied { remount } for pid=2746 comm="syz.6.1042" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 73.121338][ T2745] EXT4-fs (loop2): 1 truncate cleaned up [ 73.163568][ T2745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.199784][ T2745] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.2.1044: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 73.229041][ T2745] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 73.283058][ T301] EXT4-fs (loop2): unmounting filesystem. [ 73.316360][ T28] audit: type=1400 audit(2000000275.571:429): avc: denied { mount } for pid=2767 comm="syz.5.1053" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.415749][ T28] audit: type=1400 audit(2000000275.621:430): avc: denied { unmount } for pid=436 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 73.562929][ T2763] loop3: detected capacity change from 0 to 40427 [ 73.605415][ T2763] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(0) root(83886083) [ 73.614344][ T2763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 73.653678][ T2763] F2FS-fs (loop3): fault_injection options not supported [ 73.662291][ T2763] F2FS-fs (loop3): heap/no_heap options were deprecated [ 73.669920][ T2799] syz.5.1066[2799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.669999][ T2799] syz.5.1066[2799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.682855][ T2763] F2FS-fs (loop3): Image doesn't support compression [ 73.709305][ T2763] F2FS-fs (loop3): invalid crc value [ 73.749788][ T2763] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.894030][ T2808] loop5: detected capacity change from 0 to 8192 [ 73.919541][ T2763] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 73.939337][ T2763] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.994038][ T2819] loop6: detected capacity change from 0 to 8192 [ 74.002827][ T2802] syz.4.1067 (2802) used greatest stack depth: 20528 bytes left [ 74.029572][ T2819] loop6: p1 p2 p4 [ 74.043657][ T2819] loop6: p2 size 2147483648 extends beyond EOD, truncated [ 74.054782][ T2819] loop6: p4 start 50689 is beyond EOD, truncated [ 74.069740][ T298] syz-executor: attempt to access beyond end of device [ 74.069740][ T298] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.070292][ T2826] loop4: detected capacity change from 0 to 512 [ 74.134175][ T2826] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1075: casefold flag without casefold feature [ 74.161451][ T2823] loop2: detected capacity change from 0 to 8192 [ 74.162296][ T2831] syz.6.1078[2831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.168154][ T2831] syz.6.1078[2831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.181487][ T2826] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1075: couldn't read orphan inode 15 (err -117) [ 74.222925][ T2826] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.291696][ T390] udevd[390]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 74.305243][ T323] udevd[323]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 74.325459][ T2838] 9pnet_fd: p9_fd_create_unix (2838): problem connecting socket: ./file0: -111 [ 74.329234][ T28] audit: type=1400 audit(2000000276.581:431): avc: denied { mounton } for pid=2835 comm="syz.2.1080" path="/188/file0" dev="tmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 74.357910][ T299] EXT4-fs (loop4): unmounting filesystem. [ 74.393328][ T2841] loop3: detected capacity change from 0 to 256 [ 74.412920][ T2841] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 74.488270][ T2857] loop3: detected capacity change from 0 to 512 [ 74.495474][ T2857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.508613][ T2857] EXT4-fs (loop3): 1 truncate cleaned up [ 74.516372][ T2857] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.529750][ T2857] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.1099: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 74.552216][ T2857] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 74.569756][ T298] EXT4-fs (loop3): unmounting filesystem. [ 74.593742][ T2860] loop2: detected capacity change from 0 to 8192 [ 74.629935][ T2860] loop2: p1 p2 p4 [ 74.634671][ T2860] loop2: p2 size 2147483648 extends beyond EOD, truncated [ 74.643078][ T2860] loop2: p4 start 50689 is beyond EOD, truncated [ 74.707885][ T2870] loop2: detected capacity change from 0 to 512 [ 74.709454][ T323] udevd[323]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 74.724756][ T2870] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 74.728897][ T390] udevd[390]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 74.749256][ T40] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 74.768555][ T2870] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1094: iget: bad extended attribute block 19 [ 74.784262][ T2870] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1094: couldn't read orphan inode 15 (err -117) [ 74.798504][ T2870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.839680][ T301] EXT4-fs (loop2): unmounting filesystem. [ 74.940074][ T40] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 74.951427][ T40] usb 5-1: config 0 has no interface number 0 [ 74.962961][ T40] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 74.984791][ T40] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 74.998270][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.012330][ T40] usb 5-1: Product: syz [ 75.018690][ T40] usb 5-1: Manufacturer: syz [ 75.026532][ T40] usb 5-1: SerialNumber: syz [ 75.043579][ T40] usb 5-1: config 0 descriptor?? [ 75.049520][ T2853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 75.059294][ T40] usb-storage 5-1:0.20: USB Mass Storage device detected [ 75.067659][ T2884] loop5: detected capacity change from 0 to 40427 [ 75.075082][ T2884] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 75.082359][ T2884] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 75.087491][ T40] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 75.091118][ T2884] F2FS-fs (loop5): heap/no_heap options were deprecated [ 75.105913][ T2884] F2FS-fs (loop5): invalid crc value [ 75.129038][ T2884] F2FS-fs (loop5): Found nat_bits in checkpoint [ 75.133884][ T2896] loop6: detected capacity change from 0 to 256 [ 75.151459][ T2896] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 75.193801][ T2884] F2FS-fs (loop5): Start checkpoint disabled! [ 75.201393][ T2884] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 75.208550][ T2884] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 75.271123][ T2853] loop4: detected capacity change from 0 to 512 [ 75.277473][ T2853] EXT4-fs: quotafile must be on filesystem root [ 75.328190][ T40] scsi host1: usb-storage 5-1:0.20 [ 75.328739][ T417] kworker/u4:6: attempt to access beyond end of device [ 75.328739][ T417] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 75.438769][ T2914] loop3: detected capacity change from 0 to 512 [ 75.445783][ T2914] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.463381][ T2914] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1110: iget: bad extended attribute block 19 [ 75.476380][ T2914] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1110: couldn't read orphan inode 15 (err -117) [ 75.488486][ T2914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.522724][ T298] EXT4-fs (loop3): unmounting filesystem. [ 75.540126][ T6] usb 5-1: USB disconnect, device number 8 [ 75.638324][ T2930] loop5: detected capacity change from 0 to 512 [ 75.659447][ T28] audit: type=1400 audit(2000000277.911:432): avc: denied { write } for pid=2929 comm="syz.6.1116" path="socket:[27352]" dev="sockfs" ino=27352 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.713583][ T2930] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 75.724212][ T2930] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.783979][ T436] EXT4-fs (loop5): unmounting filesystem. [ 75.825740][ T2946] net_ratelimit: 3320 callbacks suppressed [ 75.825759][ T2946] sock: sock_set_timeout: `syz.3.1124' (pid 2946) tries to set negative timeout [ 76.177696][ T28] audit: type=1400 audit(2000000278.431:433): avc: denied { setattr } for pid=2982 comm="syz.4.1140" name="maps" dev="proc" ino=27442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 76.305390][ T28] audit: type=1400 audit(2000000278.561:434): avc: denied { nlmsg_write } for pid=2998 comm="syz.6.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 76.327431][ T6] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 76.409984][ T3011] futex_wake_op: syz.4.1153 tries to shift op by -1; fix this program [ 76.432803][ T3013] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 76.530990][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.541572][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.551491][ T6] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.560378][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.568149][ T6] usb 3-1: SerialNumber: syz [ 76.569244][ T451] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 76.649004][ T40] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.738561][ T3038] tipc: Started in network mode [ 76.743519][ T3038] tipc: Node identity ac14142f, cluster identity 4711 [ 76.750405][ T3038] tipc: New replicast peer: 0.0.0.0 [ 76.755915][ T3038] tipc: Enabled bearer , priority 10 [ 76.763474][ T451] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.773511][ T451] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 76.773574][ T3038] tipc: New replicast peer: 100.1.1.1 [ 76.783513][ T451] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.799059][ T451] usb 6-1: config 0 descriptor?? [ 76.811914][ T6] usb 3-1: 0:2 : does not exist [ 76.825537][ T6] usb 3-1: USB disconnect, device number 12 [ 76.840257][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.840269][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.869916][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.882033][ T40] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 76.891969][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.901477][ T40] usb 7-1: config 0 descriptor?? [ 77.136993][ T40] usbhid 7-1:0.0: can't add hid device: -71 [ 77.143543][ T40] usbhid: probe of 7-1:0.0 failed with error -71 [ 77.153850][ T40] usb 7-1: USB disconnect, device number 4 [ 77.211035][ T451] lg-g15 0003:046D:C222.0013: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 77.391563][ T3061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3061 comm=syz.2.1177 [ 77.409146][ T448] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 77.421028][ T19] usb 6-1: USB disconnect, device number 10 [ 77.468057][ T28] audit: type=1400 audit(2000000279.721:435): avc: denied { read write } for pid=3067 comm="syz.2.1180" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.502945][ T28] audit: type=1400 audit(2000000279.721:436): avc: denied { open } for pid=3067 comm="syz.2.1180" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.533260][ T28] audit: type=1400 audit(2000000279.721:437): avc: denied { ioctl } for pid=3067 comm="syz.2.1180" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 77.600391][ T448] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.620870][ T448] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.629924][ T448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.637844][ T448] usb 5-1: Product: syz [ 77.642450][ T448] usb 5-1: Manufacturer: syz [ 77.646890][ T448] usb 5-1: SerialNumber: syz [ 77.750241][ T451] tipc: Node number set to 2886997039 [ 77.767892][ T28] audit: type=1400 audit(2000000280.021:438): avc: denied { connect } for pid=3093 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.872991][ T3104] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1198'. [ 77.919140][ T829] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.070694][ T3121] loop5: detected capacity change from 0 to 512 [ 78.111105][ T3121] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 78.120396][ T3121] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.135537][ T3121] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.1205: corrupted inode contents [ 78.147942][ T3121] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #2: comm syz.5.1205: mark_inode_dirty error [ 78.162907][ T3121] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.1205: corrupted inode contents [ 78.177492][ T3121] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.1205: mark_inode_dirty error [ 78.192295][ T3132] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.1205: corrupted inode contents [ 78.210602][ T3132] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #2: comm syz.5.1205: mark_inode_dirty error [ 78.222342][ T3132] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.1205: corrupted inode contents [ 78.237086][ T3121] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #2: comm syz.5.1205: corrupted inode contents [ 78.249455][ T3121] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.1205: mark_inode_dirty error [ 78.260779][ T3121] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 78.283238][ T436] EXT4-fs (loop5): unmounting filesystem. [ 78.625912][ T3143] loop5: detected capacity change from 0 to 512 [ 78.661397][ T448] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 78.669172][ T3143] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.675623][ T3149] loop2: detected capacity change from 0 to 16 [ 78.681809][ T448] cdc_ncm 5-1:1.0: bind() failure [ 78.694775][ T3149] erofs: (device loop2): mounted with root inode @ nid 36. [ 78.706723][ T448] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 78.714083][ T448] cdc_ncm 5-1:1.1: bind() failure [ 78.725792][ T47] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 78.738056][ T3149] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 78.738403][ T3143] EXT4-fs (loop5): 1 truncate cleaned up [ 78.764068][ T3143] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 78.774861][ T3143] EXT4-fs (loop5): unmounting filesystem. [ 78.782097][ T448] usb 5-1: USB disconnect, device number 9 [ 78.831482][ T3157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 78.853090][ T3157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 78.862996][ T3157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 78.877209][ T3157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 78.917086][ T3164] loop2: detected capacity change from 0 to 512 [ 78.951024][ T3164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.951106][ T3164] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.964624][ T3164] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.1223: corrupted inode contents [ 78.983494][ T3164] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #2: comm syz.2.1223: mark_inode_dirty error [ 78.995139][ T3164] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.1223: corrupted inode contents [ 78.995301][ T3164] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1223: mark_inode_dirty error [ 79.002327][ T3164] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.1223: corrupted inode contents [ 79.030978][ T3164] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #2: comm syz.2.1223: mark_inode_dirty error [ 79.042827][ T3164] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.1223: corrupted inode contents [ 79.048882][ T3164] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.1223: corrupted inode contents [ 79.067521][ T3164] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.1223: mark_inode_dirty error [ 79.067675][ T3164] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 79.089127][ T301] EXT4-fs (loop2): unmounting filesystem. [ 79.183593][ T451] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 79.251653][ T3182] input: syz0 as /devices/virtual/input/input9 [ 79.380243][ T451] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.380278][ T451] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.381100][ T451] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 79.408211][ T451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 79.408237][ T451] usb 4-1: SerialNumber: syz [ 79.569037][ T448] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.611788][ T451] usb 4-1: 0:2 : does not exist [ 79.616281][ T451] usb 4-1: USB disconnect, device number 11 [ 79.750107][ T448] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.750150][ T448] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.750182][ T448] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 79.750207][ T448] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.750982][ T448] usb 7-1: config 0 descriptor?? [ 79.840551][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.859146][ T19] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 80.007497][ T3218] loop5: detected capacity change from 0 to 512 [ 80.014676][ T3218] EXT4-fs (loop5): Test dummy encryption mode enabled [ 80.021525][ T3218] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 80.032286][ T3218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 80.040186][ T3218] System zones: 1-12 [ 80.045281][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.045365][ T3218] EXT4-fs (loop5): 1 truncate cleaned up [ 80.058302][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.061793][ T3218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 80.071068][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.093219][ T19] usb 3-1: Product: syz [ 80.097233][ T19] usb 3-1: Manufacturer: syz [ 80.101939][ T19] usb 3-1: SerialNumber: syz [ 80.135353][ T436] EXT4-fs (loop5): unmounting filesystem. [ 80.173333][ T3225] netlink: 'syz.3.1250': attribute type 4 has an invalid length. [ 80.204433][ T448] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 80.218527][ T448] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 80.240525][ T448] hid-led 0003:0FC5:B080.0014: unknown main item tag 0x0 [ 80.255120][ T3237] xt_TCPMSS: Only works on TCP SYN packets [ 80.435000][ T28] audit: type=1400 audit(2000000282.691:439): avc: denied { watch watch_reads } for pid=3265 comm="syz.3.1269" path="/213/file1" dev="tmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.580686][ T3279] xt_TCPMSS: Only works on TCP SYN packets [ 80.609046][ T405] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 80.694552][ T3293] loop3: detected capacity change from 0 to 256 [ 80.704421][ T3293] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 80.740830][ T28] audit: type=1400 audit(2000000283.001:440): avc: denied { shutdown } for pid=3294 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.791575][ T3301] netlink: 'syz.3.1285': attribute type 4 has an invalid length. [ 80.799370][ T3301] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1285'. [ 80.800214][ T405] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.831397][ T448] usb 7-1: USB disconnect, device number 5 [ 80.844132][ T405] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.853903][ T405] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.864424][ T405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.873241][ T405] usb 6-1: SerialNumber: syz [ 80.963507][ T3303] loop4: detected capacity change from 0 to 40427 [ 80.970574][ T3303] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 80.978203][ T3303] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 80.987285][ T3303] F2FS-fs (loop4): invalid crc value [ 80.993988][ T3303] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.036281][ T3303] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 81.043268][ T3303] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.095833][ T405] usb 6-1: 0:2 : does not exist [ 81.115839][ T405] usb 6-1: USB disconnect, device number 11 [ 81.122803][ T19] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 81.149210][ T19] cdc_ncm 3-1:1.0: bind() failure [ 81.155420][ T19] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 81.163984][ T19] cdc_ncm 3-1:1.1: bind() failure [ 81.173122][ T19] usb 3-1: USB disconnect, device number 13 [ 81.242837][ T28] audit: type=1400 audit(2000000283.501:441): avc: denied { remount } for pid=3302 comm="syz.4.1287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.657184][ T3347] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1305'. [ 81.692756][ T3353] loop5: detected capacity change from 0 to 1024 [ 81.713587][ T3353] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.725348][ T3355] mmap: syz.2.1308 (3355): VmData 29036544 exceed data ulimit 3626. Update limits or use boot option ignore_rlimit_data. [ 81.745282][ T28] audit: type=1400 audit(2000000284.001:442): avc: denied { create } for pid=3359 comm="syz.6.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 81.762523][ T3353] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 81.780654][ T28] audit: type=1400 audit(2000000284.041:443): avc: denied { map } for pid=3351 comm="syz.5.1307" path="/244/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.819680][ T28] audit: type=1400 audit(2000000284.061:444): avc: denied { execute } for pid=3351 comm="syz.5.1307" path="/244/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.847392][ T436] EXT4-fs (loop5): unmounting filesystem. [ 81.921958][ T3377] syz.2.1316[3377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.922016][ T3377] syz.2.1316[3377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.972790][ T3382] loop2: detected capacity change from 0 to 512 [ 82.010722][ T3382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.019783][ T3382] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.033180][ T3382] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.1318: corrupted inode contents [ 82.045133][ T3382] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #2: comm syz.2.1318: mark_inode_dirty error [ 82.056658][ T3382] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #2: comm syz.2.1318: corrupted inode contents [ 82.068781][ T3382] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.1318: mark_inode_dirty error [ 82.087147][ T301] EXT4-fs (loop2): unmounting filesystem. [ 82.159020][ T448] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 82.169032][ T19] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 82.228424][ T3402] loop3: detected capacity change from 0 to 512 [ 82.240146][ T3402] EXT4-fs: Ignoring removed i_version option [ 82.248308][ T3402] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.261570][ T3402] EXT4-fs (loop3): 1 truncate cleaned up [ 82.266883][ T3407] loop4: detected capacity change from 0 to 256 [ 82.267043][ T3402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 82.287459][ T3407] FAT-fs (loop4): Directory bread(block 64) failed [ 82.294077][ T3407] FAT-fs (loop4): Directory bread(block 65) failed [ 82.300903][ T3407] FAT-fs (loop4): Directory bread(block 66) failed [ 82.307336][ T3407] FAT-fs (loop4): Directory bread(block 67) failed [ 82.308184][ T298] EXT4-fs (loop3): unmounting filesystem. [ 82.313659][ T3407] FAT-fs (loop4): Directory bread(block 68) failed [ 82.325605][ T3407] FAT-fs (loop4): Directory bread(block 69) failed [ 82.342780][ T3407] FAT-fs (loop4): Directory bread(block 70) failed [ 82.349873][ T3407] FAT-fs (loop4): Directory bread(block 71) failed [ 82.356430][ T3407] FAT-fs (loop4): Directory bread(block 72) failed [ 82.360103][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.363421][ T3407] FAT-fs (loop4): Directory bread(block 73) failed [ 82.378094][ T19] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.385811][ T448] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.398516][ T448] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.402051][ T19] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.431362][ T448] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.436510][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.449066][ T448] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.457024][ T448] usb 7-1: SerialNumber: syz [ 82.458239][ T19] usb 6-1: SerialNumber: syz [ 82.515666][ T413] kworker/u4:4: attempt to access beyond end of device [ 82.515666][ T413] loop4: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 82.681999][ T19] usb 6-1: 0:2 : does not exist [ 82.689441][ T448] usb 7-1: 0:2 : does not exist [ 82.690584][ T19] usb 6-1: USB disconnect, device number 12 [ 82.715654][ T448] usb 7-1: USB disconnect, device number 6 [ 82.733924][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 82.780381][ T3443] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1347'. [ 82.910067][ T390] udevd[390]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.039275][ T40] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 83.219096][ T40] usb 3-1: Using ep0 maxpacket: 32 [ 83.225641][ T40] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 83.237766][ T40] usb 3-1: config 0 has no interface number 0 [ 83.245807][ T40] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 83.255614][ T40] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.263562][ T40] usb 3-1: Product: syz [ 83.267711][ T40] usb 3-1: Manufacturer: syz [ 83.272164][ T40] usb 3-1: SerialNumber: syz [ 83.278202][ T40] usb 3-1: config 0 descriptor?? [ 83.284708][ T40] smsc95xx v2.0.0 [ 83.359538][ T3472] syz.5.1359[3472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.359624][ T3472] syz.5.1359[3472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.392537][ T3475] loop6: detected capacity change from 0 to 512 [ 83.433297][ T3475] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 83.445161][ T3475] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.458417][ T3475] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.1360: corrupted inode contents [ 83.467667][ T3486] netlink: 'syz.4.1364': attribute type 4 has an invalid length. [ 83.471067][ T3475] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #2: comm syz.6.1360: mark_inode_dirty error [ 83.477771][ T3486] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1364'. [ 83.491404][ T3475] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.1360: corrupted inode contents [ 83.510007][ T3475] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.1360: mark_inode_dirty error [ 83.543211][ T2316] EXT4-fs (loop6): unmounting filesystem. [ 83.630289][ T3507] overlayfs: invalid origin (0000) [ 83.699013][ T40] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 83.710056][ T40] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 83.751836][ T28] audit: type=1400 audit(2000000286.011:445): avc: denied { setattr } for pid=3516 comm="syz.6.1378" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.824103][ T3513] loop4: detected capacity change from 0 to 40427 [ 83.837323][ T3513] F2FS-fs (loop4): fault_injection options not supported [ 83.845862][ T3513] F2FS-fs (loop4): invalid crc value [ 83.854978][ T3523] loop6: detected capacity change from 0 to 1024 [ 83.858758][ T3513] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.875087][ T3523] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 83.906424][ T3523] EXT4-fs error (device loop6): ext4_get_inode_usage:834: inode #2: comm syz.6.1381: corrupted in-inode xattr [ 83.916884][ T3513] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.918383][ T3523] EXT4-fs (loop6): Remounting filesystem read-only [ 83.932959][ T3523] EXT4-fs error (device loop6): ext4_xattr_ibody_get:603: inode #2: comm syz.6.1381: corrupted in-inode xattr [ 83.944871][ T3523] EXT4-fs (loop6): Remounting filesystem read-only [ 83.955903][ T299] syz-executor: attempt to access beyond end of device [ 83.955903][ T299] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.959641][ T2316] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2739: inode #2: comm syz-executor: corrupted in-inode xattr [ 83.982517][ T2316] EXT4-fs (loop6): Remounting filesystem read-only [ 83.988862][ T2316] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 84.006980][ T2316] EXT4-fs (loop6): unmounting filesystem. [ 84.070925][ T28] audit: type=1400 audit(2000000286.331:446): avc: denied { relabelfrom } for pid=3532 comm="syz.6.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.096772][ T28] audit: type=1400 audit(2000000286.351:447): avc: denied { relabelto } for pid=3532 comm="syz.6.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.129094][ T19] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 84.129895][ T40] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 84.152727][ T40] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 84.161364][ T40] usb 3-1: USB disconnect, device number 14 [ 84.279856][ T3555] loop4: detected capacity change from 0 to 256 [ 84.300465][ T3555] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x809ea061, utbl_chksum : 0x7319d30d) [ 84.319021][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 84.330200][ T19] usb 4-1: config 0 has no interfaces? [ 84.346393][ T19] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=76.8e [ 84.355993][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.364071][ T19] usb 4-1: Product: syz [ 84.379305][ T19] usb 4-1: Manufacturer: syz [ 84.383752][ T19] usb 4-1: SerialNumber: syz [ 84.398661][ T19] usb 4-1: config 0 descriptor?? [ 84.481391][ T3577] loop6: detected capacity change from 0 to 128 [ 84.496890][ T3577] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 84.510314][ T3577] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.548619][ T28] audit: type=1400 audit(2000000286.801:448): avc: denied { setattr } for pid=3576 comm="syz.6.1405" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 84.570952][ T451] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 84.571926][ T2316] EXT4-fs (loop6): unmounting filesystem. [ 84.636602][ T3592] loop6: detected capacity change from 0 to 512 [ 84.656036][ T3592] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.668395][ T3592] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 84.681086][ T3592] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 84.689989][ T3592] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 84.698049][ T3592] System zones: 0-2, 18-18, 34-34 [ 84.703885][ T3592] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 84.735956][ T3592] EXT4-fs (loop6): 1 truncate cleaned up [ 84.742583][ T3592] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 84.760037][ T451] usb 6-1: config 0 has no interfaces? [ 84.767188][ T451] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.777037][ T451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.792425][ T451] usb 6-1: Product: syz [ 84.796788][ T451] usb 6-1: Manufacturer: syz [ 84.801578][ T451] usb 6-1: SerialNumber: syz [ 84.802380][ T2316] EXT4-fs (loop6): unmounting filesystem. [ 84.807001][ T451] usb 6-1: config 0 descriptor?? [ 85.029401][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1431'. [ 85.071376][ T451] usb 6-1: USB disconnect, device number 13 [ 85.134733][ T405] usb 4-1: USB disconnect, device number 12 [ 85.149776][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1436'. [ 85.163470][ T3646] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 85.197620][ T3648] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.210916][ T3650] loop3: detected capacity change from 0 to 128 [ 85.234427][ T3650] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 85.249273][ T3650] ext4 filesystem being mounted at /256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.355997][ T298] EXT4-fs (loop3): unmounting filesystem. [ 85.390623][ T3666] syz.4.1446[3666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.390719][ T3666] syz.4.1446[3666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.430137][ T3670] overlayfs: missing 'lowerdir' [ 85.534252][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 85.534270][ T28] audit: type=1400 audit(2000000287.791:458): avc: denied { mount } for pid=3682 comm="syz.4.1454" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.581053][ T28] audit: type=1400 audit(2000000287.841:459): avc: denied { setopt } for pid=3686 comm="syz.2.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.630457][ T3691] loop6: detected capacity change from 0 to 512 [ 85.639771][ T3690] device wg2 entered promiscuous mode [ 85.656189][ T28] audit: type=1400 audit(2000000287.861:460): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.718868][ T3691] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1457: casefold flag without casefold feature [ 85.727910][ T3662] loop3: detected capacity change from 0 to 40427 [ 85.738273][ T3662] F2FS-fs (loop3): fault_type options not supported [ 85.752990][ T3662] F2FS-fs (loop3): invalid crc value [ 85.758808][ T3691] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1457: couldn't read orphan inode 15 (err -117) [ 85.772521][ T3691] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 85.788086][ T3662] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.815227][ T2316] EXT4-fs (loop6): unmounting filesystem. [ 85.898141][ T3718] loop2: detected capacity change from 0 to 1024 [ 85.926148][ T3662] F2FS-fs (loop3): Start checkpoint disabled! [ 85.930523][ T3718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.964239][ T3662] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 86.016006][ T3718] EXT4-fs error (device loop2): ext4_get_inode_usage:834: inode #2: comm syz.2.1467: corrupted in-inode xattr [ 86.028030][ T3662] syz.3.1442: attempt to access beyond end of device [ 86.028030][ T3662] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.067311][ T417] kworker/u4:6: attempt to access beyond end of device [ 86.067311][ T417] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 86.078174][ T3718] EXT4-fs (loop2): Remounting filesystem read-only [ 86.087985][ T3730] EXT4-fs error (device loop2): ext4_xattr_ibody_get:603: inode #2: comm syz.2.1467: corrupted in-inode xattr [ 86.138998][ T3730] EXT4-fs (loop2): Remounting filesystem read-only [ 86.188339][ T301] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2739: inode #2: comm syz-executor: corrupted in-inode xattr [ 86.215622][ T301] EXT4-fs (loop2): Remounting filesystem read-only [ 86.248830][ T301] EXT4-fs (loop2): unmounting filesystem. [ 86.427494][ T3765] random: crng reseeded on system resumption [ 86.433465][ T28] audit: type=1400 audit(2000000288.681:461): avc: denied { write } for pid=3764 comm="syz.3.1489" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.433532][ T28] audit: type=1400 audit(2000000288.681:462): avc: denied { open } for pid=3764 comm="syz.3.1489" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.658037][ T3786] loop3: detected capacity change from 0 to 2048 [ 86.679838][ T3786] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.739682][ T298] EXT4-fs (loop3): unmounting filesystem. [ 86.838376][ T3781] loop5: detected capacity change from 0 to 40427 [ 86.893152][ T3781] F2FS-fs (loop5): Found nat_bits in checkpoint [ 86.913434][ T3784] loop2: detected capacity change from 0 to 40427 [ 86.949908][ T3784] F2FS-fs (loop2): invalid crc value [ 86.969766][ T3784] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.017947][ T3784] F2FS-fs (loop2): Start checkpoint disabled! [ 87.038593][ T3784] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 87.046135][ T3781] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 87.090872][ T3781] syz.5.1495: attempt to access beyond end of device [ 87.090872][ T3781] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 87.101027][ T3789] loop3: detected capacity change from 0 to 40427 [ 87.123970][ T3789] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 87.136756][ T28] audit: type=1400 audit(2000000289.391:463): avc: denied { write } for pid=3783 comm="syz.2.1496" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.144676][ T3789] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 87.168524][ T436] syz-executor: attempt to access beyond end of device [ 87.168524][ T436] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 87.170925][ T28] audit: type=1400 audit(2000000289.391:464): avc: denied { add_name } for pid=3783 comm="syz.2.1496" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.224364][ T3789] F2FS-fs (loop3): Found nat_bits in checkpoint [ 87.237288][ T3797] loop4: detected capacity change from 0 to 40427 [ 87.252796][ T417] kworker/u4:6: attempt to access beyond end of device [ 87.252796][ T417] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 87.256361][ T3797] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 87.276870][ T28] audit: type=1400 audit(2000000289.391:465): avc: denied { reparent } for pid=3783 comm="syz.2.1496" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.300470][ T3797] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 87.322232][ T28] audit: type=1400 audit(2000000289.391:466): avc: denied { remove_name } for pid=3783 comm="syz.2.1496" name="file2" dev="loop2" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 87.346808][ T28] audit: type=1400 audit(2000000289.391:467): avc: denied { rename } for pid=3783 comm="syz.2.1496" name="file2" dev="loop2" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.357047][ T3789] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 87.375480][ T3789] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 87.400882][ T3797] F2FS-fs (loop4): invalid crc value [ 87.424911][ T3807] loop6: detected capacity change from 0 to 512 [ 87.452538][ T3797] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 87.480763][ T3807] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 234 vs 220 free clusters [ 87.507697][ T3807] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1503: inode #1: comm syz.6.1503: iget: illegal inode # [ 87.529369][ T3807] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1503: error while reading EA inode 1 err=-117 [ 87.541657][ T3797] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 87.548713][ T3797] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 87.553680][ T3807] EXT4-fs (loop6): 1 orphan inode deleted [ 87.561618][ T3807] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 87.856894][ T3832] loop4: detected capacity change from 0 to 512 [ 87.875669][ T3832] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 87.889057][ T451] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 88.069018][ T451] usb 7-1: Using ep0 maxpacket: 8 [ 88.078532][ T451] usb 7-1: config 135 has an invalid interface number: 230 but max is 0 [ 88.097696][ T451] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 88.118519][ T451] usb 7-1: config 135 has no interface number 0 [ 88.128252][ T451] usb 7-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 88.148992][ T451] usb 7-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 88.176834][ T451] usb 7-1: config 135 interface 230 has no altsetting 0 [ 88.195743][ T451] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 88.227888][ T451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.246584][ T451] usb 7-1: Product: syz [ 88.251170][ T451] usb 7-1: Manufacturer: syz [ 88.255767][ T451] usb 7-1: SerialNumber: syz [ 88.371070][ T3851] loop5: detected capacity change from 0 to 40427 [ 88.379468][ T3851] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 88.393039][ T3851] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 88.401732][ T3851] F2FS-fs (loop5): invalid crc value [ 88.408715][ T3851] F2FS-fs (loop5): Found nat_bits in checkpoint [ 88.418413][ T3859] loop4: detected capacity change from 0 to 40427 [ 88.444377][ T3859] F2FS-fs (loop4): Image doesn't support compression [ 88.451927][ T3859] F2FS-fs (loop4): invalid crc value [ 88.458375][ T3859] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 88.465244][ T3851] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 88.478726][ T451] usb 7-1: Found UVC 0.00 device syz (18ec:3288) [ 88.485217][ T3851] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 88.489029][ T19] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 88.492764][ T451] usb 7-1: No valid video chain found. [ 88.521906][ T3859] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.552044][ T3859] syz.4.1521: attempt to access beyond end of device [ 88.552044][ T3859] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 88.566943][ T436] syz-executor: attempt to access beyond end of device [ 88.566943][ T436] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 88.571291][ T3859] syz.4.1521: attempt to access beyond end of device [ 88.571291][ T3859] loop4: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 88.617532][ T299] syz-executor: attempt to access beyond end of device [ 88.617532][ T299] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 88.689630][ T451] usb 7-1: USB disconnect, device number 7 [ 88.690153][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.716689][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.728587][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.741966][ T19] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.757578][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.769553][ T19] usb 3-1: config 0 descriptor?? [ 88.821738][ T3885] loop4: detected capacity change from 0 to 512 [ 88.828206][ T3885] EXT4-fs: Ignoring removed orlov option [ 88.836401][ T3885] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1528: casefold flag without casefold feature [ 88.849342][ T3885] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1528: couldn't read orphan inode 15 (err -117) [ 88.861316][ T3885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.884817][ T299] EXT4-fs (loop4): unmounting filesystem. [ 89.079034][ T321] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 89.143956][ T3919] loop4: detected capacity change from 0 to 4096 [ 89.151496][ T3919] EXT4-fs (loop4): unsupported descriptor size 1344 [ 89.189990][ T19] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 89.200020][ T19] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 89.260181][ T321] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xC1, skipping [ 89.272324][ T321] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.281518][ T321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.282306][ T2316] EXT4-fs (loop6): unmounting filesystem. [ 89.289555][ T321] usb 6-1: Product: syz [ 89.301448][ T321] usb 6-1: Manufacturer: syz [ 89.308536][ T321] usb 6-1: SerialNumber: syz [ 89.316760][ T3927] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1549'. [ 89.464034][ T451] usb 3-1: USB disconnect, device number 15 [ 89.489123][ T6] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 89.668994][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 89.675297][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.686437][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.696025][ T6] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 89.705047][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.713822][ T6] usb 4-1: config 0 descriptor?? [ 90.017709][ T3946] loop2: detected capacity change from 0 to 2048 [ 90.042701][ T3946] Alternate GPT is invalid, using primary GPT. [ 90.051966][ T3946] loop2: p2 p3 p7 [ 90.055831][ T3950] netlink: 'syz.4.1559': attribute type 1 has an invalid length. [ 90.067486][ T102] Alternate GPT is invalid, using primary GPT. [ 90.073959][ T102] loop2: p2 p3 p7 [ 90.111892][ T1094] udevd[1094]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 90.130861][ T6] savu 0003:1E7D:2D5A.0016: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 90.136560][ T1430] udevd[1430]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 90.153824][ T1094] udevd[1094]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 90.154105][ T374] udevd[374]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 90.329812][ T321] cdc_ncm 6-1:1.0: bind() failure [ 90.339646][ T321] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 90.346322][ T321] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 90.359538][ T321] usb 6-1: USB disconnect, device number 14 [ 90.392324][ T451] usb 4-1: USB disconnect, device number 13 [ 90.476729][ T3977] loop6: detected capacity change from 0 to 40427 [ 90.490180][ T3977] F2FS-fs (loop6): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 90.502092][ T3977] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 90.512902][ T3977] F2FS-fs (loop6): Found nat_bits in checkpoint [ 90.554357][ T3977] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 90.561297][ T3977] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 90.589506][ T3977] syz.6.1571: attempt to access beyond end of device [ 90.589506][ T3977] loop6: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 90.610160][ T2316] syz-executor: attempt to access beyond end of device [ 90.610160][ T2316] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.786995][ T3997] loop6: detected capacity change from 0 to 128 [ 90.801594][ T3997] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 90.810202][ T3997] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.868835][ T2316] EXT4-fs (loop6): unmounting filesystem. [ 90.901927][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 90.901942][ T28] audit: type=1400 audit(2000000293.161:477): avc: denied { sqpoll } for pid=4002 comm="syz.5.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.951789][ T4008] loop6: detected capacity change from 0 to 512 [ 91.008299][ T4020] loop2: detected capacity change from 0 to 1024 [ 91.031672][ T4020] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 91.041275][ T4020] EXT4-fs (loop2): orphan cleanup on readonly fs [ 91.111627][ T4020] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 91.124162][ T4008] EXT4-fs (loop6): 1 orphan inode deleted [ 91.135336][ T4008] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 91.139310][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.150812][ T10] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 91.159360][ T4008] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.164760][ T10] EXT4-fs error (device loop6): ext4_release_dquot:6811: comm kworker/u4:1: Failed to release dquot type 1 [ 91.193121][ T4020] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #3: comm syz.2.1585: mark_inode_dirty error [ 91.214492][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.222139][ T2316] EXT4-fs (loop6): unmounting filesystem. [ 91.225722][ T4020] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1585: Invalid block bitmap block 3 in block_group 0 [ 91.254271][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.279444][ T4020] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 91.309090][ T4049] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1589'. [ 91.313229][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.328249][ T4049] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1589'. [ 91.328673][ T4020] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #3: comm syz.2.1585: mark_inode_dirty error [ 91.350217][ T4049] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1589'. [ 91.369988][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.391325][ T4020] Quota error (device loop2): write_blk: dquota write failed [ 91.408333][ T4020] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 1: comm syz.2.1585: lblock 6 mapped to illegal pblock 1 (length 1) [ 91.427264][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.434179][ T4020] Quota error (device loop2): write_blk: dquota write failed [ 91.441533][ T4020] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 91.455457][ T4020] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 48: comm syz.2.1585: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.469585][ T28] audit: type=1326 audit(2000000293.721:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f603657cce7 code=0x7ffc0000 [ 91.473778][ T4053] loop4: detected capacity change from 0 to 512 [ 91.509029][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.513017][ T28] audit: type=1326 audit(2000000293.721:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6036521f29 code=0x7ffc0000 [ 91.525189][ T4020] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 91.572056][ T4053] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1593: inode #1: comm syz.4.1593: iget: illegal inode # [ 91.578245][ T28] audit: type=1326 audit(2000000293.721:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.4.1593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f603657cce7 code=0x7ffc0000 [ 91.609499][ T4053] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1593: error while reading EA inode 1 err=-117 [ 91.609907][ T4020] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.1585: Failed to acquire dquot type 0 [ 91.634485][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.641000][ T4020] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 49: comm syz.2.1585: lblock 1 mapped to illegal pblock 49 (length 1) [ 91.655766][ T4053] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1593: inode #1: comm syz.4.1593: iget: illegal inode # [ 91.655864][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.675340][ T4020] Quota error (device loop2): do_insert_tree: Can't read tree quota block 1 [ 91.684142][ T4020] EXT4-fs error (device loop2): ext4_acquire_dquot:6788: comm syz.2.1585: Failed to acquire dquot type 0 [ 91.695959][ T4053] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1593: error while reading EA inode 1 err=-117 [ 91.696849][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.714647][ T4020] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 91.724534][ T4053] EXT4-fs (loop4): 1 orphan inode deleted [ 91.729179][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.730583][ T4053] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.736424][ T4020] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #15: comm syz.2.1585: mark_inode_dirty error [ 91.777511][ T4020] EXT4-fs (loop2): Remounting filesystem read-only [ 91.801324][ T299] EXT4-fs (loop4): unmounting filesystem. [ 91.801589][ T4020] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 91.846994][ T4020] EXT4-fs (loop2): 1 orphan inode deleted [ 91.854453][ T4020] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.889762][ T4041] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.937808][ T4055] loop6: detected capacity change from 0 to 40427 [ 91.958042][ T4020] syz.2.1585 (4020) used greatest stack depth: 19656 bytes left [ 91.969255][ T4055] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 91.986207][ T4055] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 92.006820][ T301] EXT4-fs (loop2): unmounting filesystem. [ 92.013673][ T4055] F2FS-fs (loop6): invalid crc value [ 92.049164][ T4055] F2FS-fs (loop6): Found nat_bits in checkpoint [ 92.154285][ T4055] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 92.161427][ T4055] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 92.281157][ T4085] loop5: detected capacity change from 0 to 40427 [ 92.295648][ T4085] F2FS-fs (loop5): Image doesn't support compression [ 92.307084][ T4085] F2FS-fs (loop5): invalid crc value [ 92.313757][ T4085] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 92.361677][ T4098] loop3: detected capacity change from 0 to 2048 [ 92.367948][ T4085] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 92.401868][ T4098] Alternate GPT is invalid, using primary GPT. [ 92.418545][ T4098] loop3: p2 p3 p7 [ 92.436515][ T4103] netlink: 'syz.2.1610': attribute type 4 has an invalid length. [ 92.444520][ T4103] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1610'. [ 92.454347][ T4085] syz.5.1604: attempt to access beyond end of device [ 92.454347][ T4085] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 92.483131][ T4085] syz.5.1604: attempt to access beyond end of device [ 92.483131][ T4085] loop5: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 92.532700][ T436] syz-executor: attempt to access beyond end of device [ 92.532700][ T436] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 92.562999][ T4108] tipc: Enabling of bearer rejected, failed to enable media [ 92.605097][ T4110] loop3: detected capacity change from 0 to 512 [ 92.674472][ T4110] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.753074][ T4110] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.1611: corrupted inode contents [ 92.824198][ T4110] EXT4-fs error (device loop3): ext4_dirty_inode:6091: inode #2: comm syz.3.1611: mark_inode_dirty error [ 92.898471][ T4110] EXT4-fs error (device loop3): ext4_do_update_inode:5226: inode #2: comm syz.3.1611: corrupted inode contents [ 92.917787][ T40] kernel write not supported for file /input/event2 (pid: 40 comm: kworker/1:1) [ 92.928742][ T4110] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1611: mark_inode_dirty error [ 93.037652][ T4124] loop6: detected capacity change from 0 to 4096 [ 93.514250][ T4142] loop3: detected capacity change from 0 to 40427 [ 93.532776][ T4142] F2FS-fs (loop3): Image doesn't support compression [ 93.553524][ T4142] F2FS-fs (loop3): invalid crc value [ 93.593811][ T4142] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 93.651464][ T4174] loop6: detected capacity change from 0 to 512 [ 93.682147][ T4174] EXT4-fs: Ignoring removed i_version option [ 93.689822][ T4174] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 93.699657][ T4142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.732051][ T4142] syz.3.1625: attempt to access beyond end of device [ 93.732051][ T4142] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 93.746830][ T4174] EXT4-fs (loop6): 1 truncate cleaned up [ 93.750495][ T4142] syz.3.1625: attempt to access beyond end of device [ 93.750495][ T4142] loop3: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 93.816314][ T298] syz-executor: attempt to access beyond end of device [ 93.816314][ T298] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 93.919246][ T2956] Bluetooth: hci0: command 0x1003 tx timeout [ 93.925197][ T829] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.932905][ T4065] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 94.146253][ T4201] loop6: detected capacity change from 0 to 128 [ 94.163048][ T4201] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.195371][ T4201] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.247229][ T4041] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.379032][ T6] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 94.453685][ T4228] loop2: detected capacity change from 0 to 4096 [ 94.493382][ T4233] loop6: detected capacity change from 0 to 1024 [ 94.500361][ T4233] EXT4-fs: Ignoring removed orlov option [ 94.505923][ T4233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.560489][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.572853][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.584854][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.587271][ T4248] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1670'. [ 94.599374][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.608521][ T4248] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1670'. [ 94.616402][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.625844][ T451] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 94.640938][ T6] usb 4-1: config 0 descriptor?? [ 94.676240][ T4250] loop5: detected capacity change from 0 to 1024 [ 94.701213][ T4250] EXT4-fs error (device loop5): ext4_get_inode_usage:834: inode #2: comm syz.5.1671: corrupted in-inode xattr [ 94.714378][ T4250] EXT4-fs (loop5): Remounting filesystem read-only [ 94.722262][ T4250] EXT4-fs error (device loop5): ext4_xattr_ibody_get:603: inode #2: comm syz.5.1671: corrupted in-inode xattr [ 94.734752][ T4250] EXT4-fs (loop5): Remounting filesystem read-only [ 94.749968][ T436] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2739: inode #2: comm syz-executor: corrupted in-inode xattr [ 94.762496][ T436] EXT4-fs (loop5): Remounting filesystem read-only [ 94.785948][ T4257] loop5: detected capacity change from 0 to 256 [ 94.830708][ T451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.841698][ T451] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.850927][ T451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.859686][ T451] usb 5-1: config 0 descriptor?? [ 94.898033][ T4264] loop5: detected capacity change from 0 to 4096 [ 95.042201][ T4276] loop5: detected capacity change from 0 to 512 [ 95.054935][ T6] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 95.065756][ T6] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 95.073724][ T451] usbhid 5-1:0.0: can't add hid device: -71 [ 95.075724][ T4276] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1683: inode #1: comm syz.5.1683: iget: illegal inode # [ 95.079966][ T451] usbhid: probe of 5-1:0.0 failed with error -71 [ 95.092672][ T6] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 95.106481][ T4276] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1683: error while reading EA inode 1 err=-117 [ 95.118676][ T6] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 95.119379][ T4276] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1683: inode #1: comm syz.5.1683: iget: illegal inode # [ 95.126247][ T6] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 95.146049][ T6] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 95.150041][ T451] usb 5-1: USB disconnect, device number 10 [ 95.153512][ T6] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 95.166485][ T6] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 95.173725][ T6] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 95.179311][ T4276] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1683: error while reading EA inode 1 err=-117 [ 95.181390][ T6] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 95.205489][ T4276] EXT4-fs (loop5): 1 orphan inode deleted [ 95.211387][ T6] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 95.324937][ T4278] loop6: detected capacity change from 0 to 40427 [ 95.332297][ T4278] F2FS-fs (loop6): Image doesn't support compression [ 95.339801][ T4278] F2FS-fs (loop6): invalid crc value [ 95.346566][ T4278] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 95.380453][ T4278] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 95.383661][ T6] usb 4-1: USB disconnect, device number 14 [ 95.407029][ T4278] syz.6.1684: attempt to access beyond end of device [ 95.407029][ T4278] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 95.428526][ T4278] syz.6.1684: attempt to access beyond end of device [ 95.428526][ T4278] loop6: rw=2049, sector=77824, nr_sectors = 848 limit=40427 [ 95.458761][ T2316] syz-executor: attempt to access beyond end of device [ 95.458761][ T2316] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 95.549004][ T40] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 95.699086][ T451] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 95.750326][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 95.768990][ T40] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 95.778670][ T40] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 95.793817][ T40] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 95.810369][ T40] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 95.828999][ T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.836819][ T40] usb 6-1: Product: syz [ 95.849020][ T40] usb 6-1: Manufacturer: syz [ 95.853445][ T40] usb 6-1: SerialNumber: syz [ 95.872931][ T40] usb 6-1: config 0 descriptor?? [ 95.880276][ T40] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 95.913906][ T451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.925325][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 95.925342][ T28] audit: type=1326 audit(2000000298.235:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.3.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db0585d29 code=0x7ffc0000 [ 95.989006][ T451] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.998168][ T451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.006009][ C1] ================================================================== [ 96.006025][ C1] BUG: KASAN: use-after-free in __run_timers+0x34a/0xa10 [ 96.006077][ C1] Write of size 8 at addr ffff888113034a00 by task kworker/1:5/451 [ 96.006093][ C1] [ 96.006099][ C1] CPU: 1 PID: 451 Comm: kworker/1:5 Not tainted 6.1.118-syzkaller-00021-gd12538e9da37 #0 [ 96.006120][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 96.006136][ C1] Workqueue: usb_hub_wq hub_event [ 96.006167][ C1] Call Trace: [ 96.006180][ C1] [ 96.006188][ C1] dump_stack_lvl+0x151/0x1b7 [ 96.006216][ C1] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 96.006241][ C1] ? _printk+0xd1/0x111 [ 96.006260][ C1] ? __virt_addr_valid+0x242/0x2f0 [ 96.006292][ C1] print_report+0x158/0x4e0 [ 96.006321][ C1] ? __virt_addr_valid+0x242/0x2f0 [ 96.006353][ C1] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 96.006375][ C1] ? __run_timers+0x34a/0xa10 [ 96.006403][ C1] kasan_report+0x13c/0x170 [ 96.006432][ C1] ? __run_timers+0x34a/0xa10 [ 96.006462][ C1] __asan_report_store8_noabort+0x17/0x20 [ 96.006484][ C1] __run_timers+0x34a/0xa10 [ 96.006516][ C1] ? calc_index+0x270/0x270 [ 96.006545][ C1] ? sched_clock+0x9/0x10 [ 96.006574][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 96.006599][ C1] run_timer_softirq+0x69/0xf0 [ 96.006627][ C1] handle_softirqs+0x1db/0x650 [ 96.006653][ C1] ? irqtime_account_irq+0xdc/0x260 [ 96.006686][ C1] __irq_exit_rcu+0x52/0xf0 [ 96.006708][ C1] irq_exit_rcu+0x9/0x10 [ 96.006731][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 96.006758][ C1] [ 96.006765][ C1] [ 96.006771][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 96.006799][ C1] RIP: 0010:console_emit_next_record+0x8b6/0xad0 [ 96.006835][ C1] Code: 48 81 e6 00 02 00 00 31 ff e8 f6 0e 1a 00 49 81 e7 00 02 00 00 75 07 e8 a8 0a 1a 00 eb 06 e8 a1 0a 1a 00 fb 44 0f b6 64 24 1f <48> c7 84 24 80 00 00 00 0e 36 e0 45 4b c7 44 35 00 00 00 00 00 4b [ 96.006854][ C1] RSP: 0018:ffffc9001236f0e0 EFLAGS: 00000287 [ 96.006872][ C1] RAX: ffffffff815b7b9f RBX: 0000000000000000 RCX: 0000000000100000 [ 96.006888][ C1] RDX: ffffc9000e871000 RSI: 00000000000100dd RDI: 00000000000100de [ 96.006903][ C1] RBP: ffffc9001236f2f0 R08: ffffffff815b7b8a R09: 0000000000000003 [ 96.006918][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000001 [ 96.006934][ C1] R13: dffffc0000000000 R14: 1ffff9200246de2c R15: 0000000000000200 [ 96.006952][ C1] ? console_emit_next_record+0x89a/0xad0 [ 96.006978][ C1] ? console_emit_next_record+0x8af/0xad0 [ 96.007010][ C1] ? info_print_prefix+0x300/0x300 [ 96.007036][ C1] ? prb_final_commit+0x6f/0x90 [ 96.007063][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 96.007092][ C1] console_unlock+0x2c7/0x710 [ 96.007113][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 96.007140][ C1] ? vprintk_emit+0x450/0x450 [ 96.007161][ C1] ? console_trylock+0x233/0x2e0 [ 96.007184][ C1] ? resume_console+0x50/0x50 [ 96.007208][ C1] ? snprintf+0xd6/0x120 [ 96.007230][ C1] vprintk_emit+0x147/0x450 [ 96.007253][ C1] ? printk_sprint+0x430/0x430 [ 96.007275][ C1] ? debug_smp_processor_id+0x17/0x20 [ 96.007306][ C1] dev_vprintk_emit+0x337/0x3dc [ 96.007330][ C1] ? _dev_info+0x165/0x165 [ 96.007350][ C1] ? usb_get_configuration+0x493b/0x4c00 [ 96.007377][ C1] ? usb_get_configuration+0x493b/0x4c00 [ 96.007401][ C1] ? kfree+0x7a/0xf0 [ 96.007428][ C1] dev_printk_emit+0xd9/0x118 [ 96.007453][ C1] ? dev_vprintk_emit+0x3dc/0x3dc [ 96.007480][ C1] __dev_printk+0x17d/0x1b0 [ 96.007510][ C1] _dev_info+0x11e/0x165 [ 96.007533][ C1] ? entropy_timer+0x105/0x105 [ 96.007555][ C1] ? usb_detect_static_quirks+0x3ec/0x430 [ 96.007576][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 96.007600][ C1] usb_new_device+0x7de/0x1820 [ 96.007622][ C1] ? kfree+0x7a/0xf0 [ 96.007649][ C1] ? usb_disconnect+0x890/0x890 [ 96.007676][ C1] hub_event+0x2db1/0x4830 [ 96.007714][ C1] ? led_work+0x590/0x590 [ 96.007740][ C1] ? __kasan_check_write+0x14/0x20 [ 96.007758][ C1] ? mutex_unlock+0xb2/0x260 [ 96.007790][ C1] ? __kasan_check_write+0x14/0x20 [ 96.007815][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 96.007846][ C1] ? __kasan_check_read+0x11/0x20 [ 96.007866][ C1] ? read_word_at_a_time+0x12/0x20 [ 96.007887][ C1] ? strscpy+0x9c/0x260 [ 96.007908][ C1] process_one_work+0x73d/0xcb0 [ 96.007943][ C1] worker_thread+0xd71/0x1260 [ 96.007980][ C1] kthread+0x26d/0x300 [ 96.008003][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 96.008033][ C1] ? kthread_blkcg+0xd0/0xd0 [ 96.008058][ C1] ret_from_fork+0x1f/0x30 [ 96.008088][ C1] [ 96.008095][ C1] [ 96.008099][ C1] Allocated by task 4065: [ 96.008110][ C1] kasan_set_track+0x4b/0x70 [ 96.008138][ C1] kasan_save_alloc_info+0x1f/0x30 [ 96.008158][ C1] __kasan_kmalloc+0x9c/0xb0 [ 96.008187][ C1] __kmalloc+0xb4/0x1e0 [ 96.008212][ C1] hci_alloc_dev_priv+0x27/0x1c00 [ 96.008237][ C1] hci_uart_tty_ioctl+0x401/0xa70 [ 96.008260][ C1] tty_ioctl+0x903/0xc50 [ 96.008287][ C1] __se_sys_ioctl+0x114/0x190 [ 96.008315][ C1] __x64_sys_ioctl+0x7b/0x90 [ 96.008341][ C1] x64_sys_call+0x98/0x9a0 [ 96.008362][ C1] do_syscall_64+0x3b/0xb0 [ 96.008384][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.008410][ C1] [ 96.008414][ C1] Freed by task 4065: [ 96.008423][ C1] kasan_set_track+0x4b/0x70 [ 96.008450][ C1] kasan_save_free_info+0x2b/0x40 [ 96.008468][ C1] ____kasan_slab_free+0x131/0x180 [ 96.008494][ C1] __kasan_slab_free+0x11/0x20 [ 96.008522][ C1] __kmem_cache_free+0x21d/0x410 [ 96.008543][ C1] kfree+0x7a/0xf0 [ 96.008566][ C1] hci_release_dev+0x14d3/0x1640 [ 96.008590][ C1] bt_host_release+0x83/0xa0 [ 96.008616][ C1] device_release+0x95/0x1c0 [ 96.008645][ C1] kobject_put+0x178/0x260 [ 96.008664][ C1] put_device+0x1f/0x30 [ 96.008687][ C1] hci_dev_cmd+0x2be/0x9b0 [ 96.008706][ C1] hci_sock_ioctl+0x415/0x7f0 [ 96.008731][ C1] sock_do_ioctl+0x152/0x450 [ 96.008751][ C1] sock_ioctl+0x455/0x740 [ 96.008768][ C1] __se_sys_ioctl+0x114/0x190 [ 96.008795][ C1] __x64_sys_ioctl+0x7b/0x90 [ 96.008827][ C1] x64_sys_call+0x98/0x9a0 [ 96.008849][ C1] do_syscall_64+0x3b/0xb0 [ 96.008871][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.008895][ C1] [ 96.008900][ C1] Last potentially related work creation: [ 96.008906][ C1] kasan_save_stack+0x3b/0x60 [ 96.008935][ C1] __kasan_record_aux_stack+0xb4/0xc0 [ 96.008951][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 96.008970][ C1] insert_work+0x56/0x310 [ 96.008995][ C1] __queue_work+0x9b6/0xd70 [ 96.009018][ C1] queue_work_on+0x105/0x170 [ 96.009040][ C1] __hci_cmd_sync_sk+0xc2a/0xf70 [ 96.009067][ C1] hci_cmd_sync_status+0x52/0x130 [ 96.009093][ C1] hci_dev_cmd+0x39e/0x9b0 [ 96.009113][ C1] hci_sock_ioctl+0x415/0x7f0 [ 96.009139][ C1] sock_do_ioctl+0x152/0x450 [ 96.009158][ C1] sock_ioctl+0x455/0x740 [ 96.009176][ C1] __se_sys_ioctl+0x114/0x190 [ 96.009202][ C1] __x64_sys_ioctl+0x7b/0x90 [ 96.009228][ C1] x64_sys_call+0x98/0x9a0 [ 96.009249][ C1] do_syscall_64+0x3b/0xb0 [ 96.009271][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.009297][ C1] [ 96.009302][ C1] Second to last potentially related work creation: [ 96.009308][ C1] kasan_save_stack+0x3b/0x60 [ 96.009334][ C1] __kasan_record_aux_stack+0xb4/0xc0 [ 96.009352][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 96.009372][ C1] insert_work+0x56/0x310 [ 96.009397][ C1] __queue_work+0x9b6/0xd70 [ 96.009420][ C1] queue_work_on+0x105/0x170 [ 96.009442][ C1] hci_cmd_timeout+0x199/0x200 [ 96.009466][ C1] process_one_work+0x73d/0xcb0 [ 96.009493][ C1] worker_thread+0xa60/0x1260 [ 96.009520][ C1] kthread+0x26d/0x300 [ 96.009541][ C1] ret_from_fork+0x1f/0x30 [ 96.009562][ C1] [ 96.009566][ C1] The buggy address belongs to the object at ffff888113034000 [ 96.009566][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 96.009584][ C1] The buggy address is located 2560 bytes inside of [ 96.009584][ C1] 8192-byte region [ffff888113034000, ffff888113036000) [ 96.009607][ C1] [ 96.009611][ C1] The buggy address belongs to the physical page: [ 96.009619][ C1] page:ffffea00044c0c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113030 [ 96.009654][ C1] head:ffffea00044c0c00 order:3 compound_mapcount:0 compound_pincount:0 [ 96.009671][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 96.009704][ C1] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 96.009724][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 96.009734][ C1] page dumped because: kasan: bad access detected [ 96.009749][ C1] page_owner tracks the page as allocated [ 96.009755][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4053, tgid 4052 (syz.4.1593), ts 91562100298, free_ts 91501557784 [ 96.009796][ C1] post_alloc_hook+0x213/0x220 [ 96.009855][ C1] prep_new_page+0x1b/0x110 [ 96.009875][ C1] get_page_from_freelist+0x2f41/0x2fc0 [ 96.009898][ C1] __alloc_pages+0x234/0x610 [ 96.009917][ C1] alloc_slab_page+0x6c/0xf0 [ 96.009940][ C1] new_slab+0x90/0x3e0 [ 96.009961][ C1] ___slab_alloc+0x6f9/0xb80 [ 96.009980][ C1] __slab_alloc+0x5d/0xa0 [ 96.009999][ C1] __kmem_cache_alloc_node+0x207/0x2a0 [ 96.010020][ C1] __kmalloc+0xa3/0x1e0 [ 96.010042][ C1] mb_cache_create+0x171/0x620 [ 96.010061][ C1] ext4_xattr_create_cache+0x13/0x20 [ 96.010080][ C1] ext4_fill_super+0x6543/0x8460 [ 96.010108][ C1] get_tree_bdev+0x440/0x680 [ 96.010129][ C1] ext4_get_tree+0x1c/0x20 [ 96.010153][ C1] vfs_get_tree+0x88/0x290 [ 96.010176][ C1] page last free stack trace: [ 96.010182][ C1] free_unref_page_prepare+0x83d/0x850 [ 96.010202][ C1] free_unref_page+0xb2/0x5c0 [ 96.010221][ C1] __free_pages+0x61/0xf0 [ 96.010239][ C1] __free_slab+0xce/0x1a0 [ 96.010261][ C1] __unfreeze_partials+0x165/0x1a0 [ 96.010285][ C1] put_cpu_partial+0xa9/0x100 [ 96.010305][ C1] __slab_free+0x1c8/0x280 [ 96.010325][ C1] ___cache_free+0xc6/0xd0 [ 96.010344][ C1] qlist_free_all+0xc5/0x140 [ 96.010363][ C1] kasan_quarantine_reduce+0x15a/0x180 [ 96.010383][ C1] __kasan_slab_alloc+0x24/0x80 [ 96.010410][ C1] slab_post_alloc_hook+0x53/0x2c0 [ 96.010431][ C1] __kmem_cache_alloc_node+0x193/0x2a0 [ 96.010453][ C1] kmalloc_trace+0x2a/0xa0 [ 96.010477][ C1] io_sq_offload_create+0x26b/0xfd3 [ 96.010497][ C1] io_uring_create+0x5f7/0xe02 [ 96.010516][ C1] [ 96.010520][ C1] Memory state around the buggy address: [ 96.010531][ C1] ffff888113034900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.010545][ C1] ffff888113034980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.010559][ C1] >ffff888113034a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.010570][ C1] ^ [ 96.010579][ C1] ffff888113034a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.010593][ C1] ffff888113034b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.010604][ C1] ================================================================== [ 96.010611][ C1] Disabling lock debugging due to kernel taint [ 96.010670][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 96.010692][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 96.010707][ C1] CPU: 1 PID: 451 Comm: kworker/1:5 Tainted: G B 6.1.118-syzkaller-00021-gd12538e9da37 #0 [ 96.010732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 96.010746][ C1] Workqueue: usb_hub_wq hub_event [ 96.010776][ C1] RIP: 0010:__queue_work+0x4f1/0xd70 [ 96.010803][ C1] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 e3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 60 e1 71 00 49 8b 3e e8 98 dc d6 [ 96.010829][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 96.010847][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881192fd100 [ 96.010863][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 96.010878][ C1] RBP: ffffc900001b0d00 R08: ffffffff814b186b R09: 0000000000000007 [ 96.010894][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881130349c8 [ 96.010911][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881130349e0 [ 96.010927][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 96.010946][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.010961][ C1] CR2: 0000000000000000 CR3: 0000000135aa5000 CR4: 00000000003506a0 [ 96.010980][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.010993][ C1] DR3: 0000000000000074 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 96.011007][ C1] Call Trace: [ 96.011013][ C1] [ 96.011021][ C1] ? __die_body+0x62/0xb0 [ 96.011044][ C1] ? die_addr+0x9f/0xd0 [ 96.011066][ C1] ? exc_general_protection+0x317/0x4c0 [ 96.011098][ C1] ? asm_exc_general_protection+0x27/0x30 [ 96.011129][ C1] ? __queue_work+0x28b/0xd70 [ 96.011155][ C1] ? __queue_work+0x4f1/0xd70 [ 96.011189][ C1] ? __queue_work+0x29c/0xd70 [ 96.011217][ C1] delayed_work_timer_fn+0x61/0x80 [ 96.011243][ C1] ? queue_work_node+0x1d0/0x1d0 [ 96.011268][ C1] call_timer_fn+0x3b/0x2d0 [ 96.011298][ C1] ? queue_work_node+0x1d0/0x1d0 [ 96.011323][ C1] __run_timers+0x756/0xa10 [ 96.011356][ C1] ? calc_index+0x270/0x270 [ 96.011386][ C1] ? sched_clock+0x9/0x10 [ 96.011416][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 96.011441][ C1] run_timer_softirq+0x69/0xf0 [ 96.011470][ C1] handle_softirqs+0x1db/0x650 [ 96.011496][ C1] ? irqtime_account_irq+0xdc/0x260 [ 96.011529][ C1] __irq_exit_rcu+0x52/0xf0 [ 96.011554][ C1] irq_exit_rcu+0x9/0x10 [ 96.011577][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 96.011606][ C1] [ 96.011613][ C1] [ 96.011619][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 96.011649][ C1] RIP: 0010:console_emit_next_record+0x8b6/0xad0 [ 96.011679][ C1] Code: 48 81 e6 00 02 00 00 31 ff e8 f6 0e 1a 00 49 81 e7 00 02 00 00 75 07 e8 a8 0a 1a 00 eb 06 e8 a1 0a 1a 00 fb 44 0f b6 64 24 1f <48> c7 84 24 80 00 00 00 0e 36 e0 45 4b c7 44 35 00 00 00 00 00 4b [ 96.011697][ C1] RSP: 0018:ffffc9001236f0e0 EFLAGS: 00000287 [ 96.011716][ C1] RAX: ffffffff815b7b9f RBX: 0000000000000000 RCX: 0000000000100000 [ 96.011730][ C1] RDX: ffffc9000e871000 RSI: 00000000000100dd RDI: 00000000000100de [ 96.011746][ C1] RBP: ffffc9001236f2f0 R08: ffffffff815b7b8a R09: 0000000000000003 [ 96.011761][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000001 [ 96.011776][ C1] R13: dffffc0000000000 R14: 1ffff9200246de2c R15: 0000000000000200 [ 96.011794][ C1] ? console_emit_next_record+0x89a/0xad0 [ 96.011826][ C1] ? console_emit_next_record+0x8af/0xad0 [ 96.011858][ C1] ? info_print_prefix+0x300/0x300 [ 96.011885][ C1] ? prb_final_commit+0x6f/0x90 [ 96.011914][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 96.011943][ C1] console_unlock+0x2c7/0x710 [ 96.011966][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 96.011993][ C1] ? vprintk_emit+0x450/0x450 [ 96.012014][ C1] ? console_trylock+0x233/0x2e0 [ 96.012039][ C1] ? resume_console+0x50/0x50 [ 96.012064][ C1] ? snprintf+0xd6/0x120 [ 96.012087][ C1] vprintk_emit+0x147/0x450 [ 96.012111][ C1] ? printk_sprint+0x430/0x430 [ 96.012133][ C1] ? debug_smp_processor_id+0x17/0x20 [ 96.012164][ C1] dev_vprintk_emit+0x337/0x3dc [ 96.012189][ C1] ? _dev_info+0x165/0x165 [ 96.012210][ C1] ? usb_get_configuration+0x493b/0x4c00 [ 96.012237][ C1] ? usb_get_configuration+0x493b/0x4c00 [ 96.012261][ C1] ? kfree+0x7a/0xf0 [ 96.012289][ C1] dev_printk_emit+0xd9/0x118 [ 96.012314][ C1] ? dev_vprintk_emit+0x3dc/0x3dc [ 96.012341][ C1] __dev_printk+0x17d/0x1b0 [ 96.012371][ C1] _dev_info+0x11e/0x165 [ 96.012395][ C1] ? entropy_timer+0x105/0x105 [ 96.012418][ C1] ? usb_detect_static_quirks+0x3ec/0x430 [ 96.012440][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 96.012466][ C1] usb_new_device+0x7de/0x1820 [ 96.012491][ C1] ? kfree+0x7a/0xf0 [ 96.012521][ C1] ? usb_disconnect+0x890/0x890 [ 96.012550][ C1] hub_event+0x2db1/0x4830 [ 96.012590][ C1] ? led_work+0x590/0x590 [ 96.012617][ C1] ? __kasan_check_write+0x14/0x20 [ 96.012637][ C1] ? mutex_unlock+0xb2/0x260 [ 96.012670][ C1] ? __kasan_check_write+0x14/0x20 [ 96.012690][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 96.012715][ C1] ? __kasan_check_read+0x11/0x20 [ 96.012733][ C1] ? read_word_at_a_time+0x12/0x20 [ 96.012755][ C1] ? strscpy+0x9c/0x260 [ 96.012775][ C1] process_one_work+0x73d/0xcb0 [ 96.012815][ C1] worker_thread+0xd71/0x1260 [ 96.012852][ C1] kthread+0x26d/0x300 [ 96.012874][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 96.012903][ C1] ? kthread_blkcg+0xd0/0xd0 [ 96.012928][ C1] ret_from_fork+0x1f/0x30 [ 96.012954][ C1] [ 96.012962][ C1] Modules linked in: [ 96.012973][ C1] ---[ end trace 0000000000000000 ]--- [ 96.012982][ C1] RIP: 0010:__queue_work+0x4f1/0xd70 [ 96.013008][ C1] Code: 39 03 0f 84 40 01 00 00 e8 8c 6b 2a 00 4c 89 e7 e8 e4 e3 d6 03 49 bd 00 00 00 00 00 fc ff df 4c 8b 65 d0 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 60 e1 71 00 49 8b 3e e8 98 dc d6 [ 96.013026][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 96.013044][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881192fd100 [ 96.013059][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 96.013073][ C1] RBP: ffffc900001b0d00 R08: ffffffff814b186b R09: 0000000000000007 [ 96.013089][ C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881130349c8 [ 96.013105][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881130349e0 [ 96.013121][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 96.013140][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.013155][ C1] CR2: 0000000000000000 CR3: 0000000135aa5000 CR4: 00000000003506a0 [ 96.013173][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.013186][ C1] DR3: 0000000000000074 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 96.013202][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 96.013476][ C1] Kernel Offset: disabled [ 97.774222][ C1] Rebooting in 86400 seconds..